[Mon Nov 10 23:12:28.207974 2025] [proxy_fcgi:error] [pid 34820:tid 34826] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:28.326669 2025] [proxy_fcgi:error] [pid 34820:tid 34827] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:28.686408 2025] [proxy_fcgi:error] [pid 34820:tid 34842] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:28.921998 2025] [proxy_fcgi:error] [pid 34820:tid 34824] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:29.114582 2025] [proxy_fcgi:error] [pid 34820:tid 34836] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:29.281099 2025] [proxy_fcgi:error] [pid 34820:tid 34846] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:29.585104 2025] [proxy_fcgi:error] [pid 34820:tid 34833] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:29.900106 2025] [proxy_fcgi:error] [pid 34820:tid 34843] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:30.735736 2025] [proxy_fcgi:error] [pid 34820:tid 34840] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:30.868887 2025] [proxy_fcgi:error] [pid 34820:tid 34832] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:31.419270 2025] [proxy_fcgi:error] [pid 34820:tid 34836] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:36.892095 2025] [proxy_fcgi:error] [pid 34820:tid 34842] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:37.341195 2025] [proxy_fcgi:error] [pid 34820:tid 34839] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:37.797055 2025] [proxy_fcgi:error] [pid 34820:tid 34830] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:38.057279 2025] [proxy_fcgi:error] [pid 34820:tid 34836] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:38.450082 2025] [proxy_fcgi:error] [pid 34820:tid 34831] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:38.751848 2025] [proxy_fcgi:error] [pid 34820:tid 34823] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:39.092971 2025] [proxy_fcgi:error] [pid 34820:tid 34826] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:39.298410 2025] [proxy_fcgi:error] [pid 34820:tid 34827] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:39.840872 2025] [proxy_fcgi:error] [pid 34820:tid 34838] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:40.891430 2025] [proxy_fcgi:error] [pid 34820:tid 34822] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Mon Nov 10 23:12:41.154441 2025] [proxy_fcgi:error] [pid 34820:tid 34840] [client 48.210.12.166:47417] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:20.527978 2025] [proxy_fcgi:error] [pid 53355:tid 53375] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:20.633202 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:20.732167 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:20.879433 2025] [proxy_fcgi:error] [pid 53355:tid 53367] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:21.001543 2025] [proxy_fcgi:error] [pid 53355:tid 53378] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:21.123476 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:22.909378 2025] [proxy_fcgi:error] [pid 53355:tid 53363] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:23.020050 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:23.157482 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:23.272977 2025] [proxy_fcgi:error] [pid 53355:tid 53364] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:23.394664 2025] [proxy_fcgi:error] [pid 53355:tid 53377] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:23.505267 2025] [proxy_fcgi:error] [pid 53355:tid 53380] [client 194.5.82.100:39453] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:23.605493 2025] [:error] [pid 53355:tid 53371] [client 194.5.82.100:39453] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRKS24B5X5A3rMc4_nDKbQAAAA0"]
[Tue Nov 11 09:35:23.804811 2025] [proxy_fcgi:error] [pid 59670:tid 59697] [client 194.5.82.56:37693] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:23.916515 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 194.5.82.56:37693] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:24.039410 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 194.5.82.56:37693] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:24.152022 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 194.5.82.56:37693] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:24.254459 2025] [proxy_fcgi:error] [pid 59670:tid 59696] [client 194.5.82.56:37693] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:24.362022 2025] [:error] [pid 59670:tid 59686] [client 194.5.82.56:37693] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aRKS3Kk2Cnts0y-hpfphNwAAAI0"]
[Tue Nov 11 09:35:24.552998 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:24.658094 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:24.862398 2025] [proxy_fcgi:error] [pid 53414:tid 53419] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:24.980878 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:25.079608 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:25.197005 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:25.302549 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:25.401905 2025] [proxy_fcgi:error] [pid 53414:tid 53428] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:25.527792 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:26.091407 2025] [proxy_fcgi:error] [pid 53414:tid 53416] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:26.317901 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:26.437340 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:26.550097 2025] [proxy_fcgi:error] [pid 53414:tid 53436] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:26.650094 2025] [proxy_fcgi:error] [pid 53414:tid 53419] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:26.756712 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:26.854415 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:27.064526 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:27.175270 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 194.5.82.78:40797] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:27.393617 2025] [:error] [pid 53414:tid 53434] [client 194.5.82.78:40797] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRKS3ws6pHd_Z5oc1ef91QAAARI"]
[Tue Nov 11 09:35:27.610273 2025] [proxy_fcgi:error] [pid 53356:tid 53385] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:27.815414 2025] [proxy_fcgi:error] [pid 53356:tid 53407] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:27.922596 2025] [proxy_fcgi:error] [pid 53356:tid 53401] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:28.045567 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:28.153671 2025] [proxy_fcgi:error] [pid 53356:tid 53399] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:28.309031 2025] [proxy_fcgi:error] [pid 53356:tid 53402] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:28.407728 2025] [proxy_fcgi:error] [pid 53356:tid 53389] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:28.853831 2025] [proxy_fcgi:error] [pid 53356:tid 53396] [client 194.5.82.79:62065] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:28.949120 2025] [:error] [pid 53356:tid 53409] [client 194.5.82.79:62065] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRKS4Okdmt0kzjVcUN800wAAAFg"]
[Tue Nov 11 09:35:29.156763 2025] [proxy_fcgi:error] [pid 53449:tid 53456] [client 194.5.82.78:42367] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:29.274583 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 194.5.82.78:42367] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:29.377377 2025] [proxy_fcgi:error] [pid 53449:tid 53462] [client 194.5.82.78:42367] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:29.508395 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 194.5.82.78:42367] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:29.619681 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 194.5.82.78:42367] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:29.719545 2025] [:error] [pid 53449:tid 53474] [client 194.5.82.78:42367] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aRKS4dpz08j5NoUSzp-tqAAAAVQ"]
[Tue Nov 11 09:35:30.102734 2025] [proxy_fcgi:error] [pid 53356:tid 53386] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:30.234593 2025] [proxy_fcgi:error] [pid 53356:tid 53388] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:30.334630 2025] [proxy_fcgi:error] [pid 53356:tid 53398] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:30.453592 2025] [proxy_fcgi:error] [pid 53356:tid 53394] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:30.567920 2025] [proxy_fcgi:error] [pid 53356:tid 53393] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:30.963120 2025] [proxy_fcgi:error] [pid 53356:tid 53390] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:31.152977 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:31.274381 2025] [proxy_fcgi:error] [pid 53356:tid 53406] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:31.497942 2025] [proxy_fcgi:error] [pid 53356:tid 53397] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:31.619522 2025] [proxy_fcgi:error] [pid 53356:tid 53407] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:31.826878 2025] [proxy_fcgi:error] [pid 53356:tid 53399] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:31.927177 2025] [proxy_fcgi:error] [pid 53356:tid 53402] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:32.040228 2025] [proxy_fcgi:error] [pid 53356:tid 53389] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:32.187348 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:32.298761 2025] [proxy_fcgi:error] [pid 53356:tid 53387] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:32.416302 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:32.547726 2025] [proxy_fcgi:error] [pid 53356:tid 53396] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:32.778580 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:32.883572 2025] [proxy_fcgi:error] [pid 53356:tid 53386] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:33.012260 2025] [proxy_fcgi:error] [pid 53356:tid 53388] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:33.135595 2025] [proxy_fcgi:error] [pid 53356:tid 53398] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:33.255001 2025] [proxy_fcgi:error] [pid 53356:tid 53393] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:33.390298 2025] [proxy_fcgi:error] [pid 53356:tid 53390] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:33.629566 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:33.765048 2025] [proxy_fcgi:error] [pid 53356:tid 53406] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:33.910686 2025] [:error] [pid 53356:tid 53385] [client 194.5.82.102:39053] [client 194.5.82.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.102, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRKS5ekdmt0kzjVcUN809QAAAEA"]
[Tue Nov 11 09:35:33.915131 2025] [proxy_fcgi:error] [pid 53356:tid 53385] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:34.276893 2025] [proxy_fcgi:error] [pid 53356:tid 53403] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:34.375030 2025] [proxy_fcgi:error] [pid 53356:tid 53401] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:34.493790 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:34.740915 2025] [proxy_fcgi:error] [pid 53356:tid 53402] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:34.853665 2025] [proxy_fcgi:error] [pid 53356:tid 53389] [client 194.5.82.102:39053] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:35.061828 2025] [:error] [pid 53356:tid 53387] [client 194.5.82.102:39053] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aRKS5-kdmt0kzjVcUN80_wAAAEI"]
[Tue Nov 11 09:35:35.380559 2025] [proxy_fcgi:error] [pid 59670:tid 59689] [client 194.5.82.86:46221] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:35.622441 2025] [proxy_fcgi:error] [pid 59670:tid 59675] [client 194.5.82.86:46221] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:36.088287 2025] [:error] [pid 59670:tid 59693] [client 194.5.82.86:46221] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRKS6Kk2Cnts0y-hpfphTAAAAJQ"]
[Tue Nov 11 09:35:36.300880 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:36.424212 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:36.525564 2025] [proxy_fcgi:error] [pid 53414:tid 53422] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:36.625712 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:36.766414 2025] [proxy_fcgi:error] [pid 53414:tid 53421] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:36.990249 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:37.141196 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:37.239063 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:37.339503 2025] [proxy_fcgi:error] [pid 53414:tid 53428] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:37.471982 2025] [proxy_fcgi:error] [pid 53414:tid 53418] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:37.573091 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:37.704019 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:37.932804 2025] [proxy_fcgi:error] [pid 53414:tid 53427] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:38.033579 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:38.633830 2025] [proxy_fcgi:error] [pid 53414:tid 53436] [client 194.5.82.56:44799] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:38.827568 2025] [:error] [pid 53414:tid 53432] [client 194.5.82.56:44799] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRKS6gs6pHd_Z5oc1ef9_wAAARA"]
[Tue Nov 11 09:35:39.171719 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 194.5.82.94:39695] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:39.287437 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 194.5.82.94:39695] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:39.423735 2025] [proxy_fcgi:error] [pid 53355:tid 53369] [client 194.5.82.94:39695] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:39.532108 2025] [:error] [pid 53355:tid 53360] [client 194.5.82.94:39695] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aRKS64B5X5A3rMc4_nDKfwAAAAI"]
[Tue Nov 11 09:35:39.861871 2025] [proxy_fcgi:error] [pid 53356:tid 53409] [client 194.5.82.84:61777] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:39.969159 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 194.5.82.84:61777] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:40.096152 2025] [proxy_fcgi:error] [pid 53356:tid 53386] [client 194.5.82.84:61777] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:40.193801 2025] [proxy_fcgi:error] [pid 53356:tid 53398] [client 194.5.82.84:61777] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:40.450506 2025] [:error] [pid 53356:tid 53405] [client 194.5.82.84:61777] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRKS7Okdmt0kzjVcUN81BgAAAFQ"]
[Tue Nov 11 09:35:41.678743 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 194.5.82.57:51039] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:41.790639 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 194.5.82.57:51039] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:41.894353 2025] [proxy_fcgi:error] [pid 53414:tid 53427] [client 194.5.82.57:51039] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:42.017403 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 194.5.82.57:51039] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:42.120558 2025] [:error] [pid 53414:tid 53416] [client 194.5.82.57:51039] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aRKS7gs6pHd_Z5oc1ef-BAAAAQA"]
[Tue Nov 11 09:35:42.438778 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 194.5.82.63:39483] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:42.641148 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 194.5.82.63:39483] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:42.850649 2025] [proxy_fcgi:error] [pid 53449:tid 53456] [client 194.5.82.63:39483] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:43.261634 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 194.5.82.63:39483] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:43.373435 2025] [:error] [pid 53449:tid 53473] [client 194.5.82.63:39483] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aRKS79pz08j5NoUSzp-twgAAAVM"]
[Tue Nov 11 09:35:43.674078 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:43.783966 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:44.006371 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:44.311234 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:44.525393 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:44.666734 2025] [proxy_fcgi:error] [pid 53449:tid 53467] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:44.794110 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:44.902493 2025] [proxy_fcgi:error] [pid 53449:tid 53462] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:45.010813 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:45.130158 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:45.231754 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:45.328443 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:45.451642 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:45.589426 2025] [proxy_fcgi:error] [pid 53449:tid 53464] [client 194.5.82.100:22689] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:45.914323 2025] [:error] [pid 53449:tid 53460] [client 194.5.82.100:22689] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRKS8dpz08j5NoUSzp-t2wAAAUY"]
[Tue Nov 11 09:35:46.154423 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:46.252502 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:46.377882 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:46.578106 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:46.703917 2025] [proxy_fcgi:error] [pid 59670:tid 59679] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:46.828151 2025] [proxy_fcgi:error] [pid 59670:tid 59678] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:47.037429 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:47.243079 2025] [proxy_fcgi:error] [pid 59670:tid 59689] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:47.355974 2025] [proxy_fcgi:error] [pid 59670:tid 59684] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:49.122663 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:49.245013 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:49.444854 2025] [proxy_fcgi:error] [pid 59670:tid 59682] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:49.547770 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 194.5.82.93:56369] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:49.744113 2025] [:error] [pid 59670:tid 59697] [client 194.5.82.93:56369] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aRKS9ak2Cnts0y-hpfphcgAAAJg"]
[Tue Nov 11 09:35:49.928545 2025] [:error] [pid 53414:tid 53423] [client 194.5.82.104:57783] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aRKS9Qs6pHd_Z5oc1ef-CwAAAQc"]
[Tue Nov 11 09:35:50.137462 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 194.5.82.56:61767] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:50.240061 2025] [proxy_fcgi:error] [pid 53449:tid 53467] [client 194.5.82.56:61767] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:50.354602 2025] [proxy_fcgi:error] [pid 53449:tid 53462] [client 194.5.82.56:61767] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:50.463599 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 194.5.82.56:61767] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:50.605813 2025] [:error] [pid 53449:tid 53454] [client 194.5.82.56:61767] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aRKS9tpz08j5NoUSzp-t5AAAAUA"]
[Tue Nov 11 09:35:50.829598 2025] [proxy_fcgi:error] [pid 53449:tid 53459] [client 194.5.82.84:43655] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:50.924973 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 194.5.82.84:43655] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:51.122947 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 194.5.82.84:43655] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:51.212822 2025] [:error] [pid 53449:tid 53456] [client 194.5.82.84:43655] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aRKS99pz08j5NoUSzp-t8QAAAUI"]
[Tue Nov 11 09:35:51.456256 2025] [proxy_fcgi:error] [pid 53356:tid 53390] [client 194.5.82.56:44355] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:51.781195 2025] [:error] [pid 53356:tid 53407] [client 194.5.82.56:44355] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRKS9-kdmt0kzjVcUN81GwAAAFY"]
[Tue Nov 11 09:35:51.984595 2025] [proxy_fcgi:error] [pid 53414:tid 53428] [client 194.5.82.77:31787] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:52.107171 2025] [proxy_fcgi:error] [pid 53414:tid 53419] [client 194.5.82.77:31787] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:52.218818 2025] [:error] [pid 53414:tid 53418] [client 194.5.82.77:31787] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aRKS-As6pHd_Z5oc1ef-EAAAAQI"]
[Tue Nov 11 09:35:52.418151 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 194.5.82.84:34873] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:52.513669 2025] [proxy_fcgi:error] [pid 53355:tid 53380] [client 194.5.82.84:34873] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:52.611400 2025] [:error] [pid 53355:tid 53372] [client 194.5.82.84:34873] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aRKS-IB5X5A3rMc4_nDKiAAAAA4"]
[Tue Nov 11 09:35:53.341097 2025] [proxy_fcgi:error] [pid 53355:tid 53369] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:53.530921 2025] [proxy_fcgi:error] [pid 53355:tid 53363] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:53.735278 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:53.863897 2025] [proxy_fcgi:error] [pid 53355:tid 53366] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:55.543952 2025] [proxy_fcgi:error] [pid 53355:tid 53368] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:57.335396 2025] [proxy_fcgi:error] [pid 53355:tid 53364] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:57.441384 2025] [proxy_fcgi:error] [pid 53355:tid 53382] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:57.668853 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 194.5.82.94:42551] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:57.759914 2025] [:error] [pid 53355:tid 53380] [client 194.5.82.94:42551] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aRKS_YB5X5A3rMc4_nDKnAAAABY"]
[Tue Nov 11 09:35:58.003542 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.106610 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.214159 2025] [proxy_fcgi:error] [pid 53449:tid 53475] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.324586 2025] [proxy_fcgi:error] [pid 53449:tid 53464] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.428831 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.526614 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.627146 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.754173 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.854984 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 194.5.82.86:29535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:58.951739 2025] [:error] [pid 53449:tid 53478] [client 194.5.82.86:29535] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "aRKS_tpz08j5NoUSzp-uEwAAAVg"]
[Tue Nov 11 09:35:59.370018 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:59.485903 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:59.695414 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:35:59.812091 2025] [proxy_fcgi:error] [pid 53355:tid 53363] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:01.658978 2025] [proxy_fcgi:error] [pid 53355:tid 53371] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:01.771022 2025] [proxy_fcgi:error] [pid 53355:tid 53375] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:01.875145 2025] [proxy_fcgi:error] [pid 53355:tid 53364] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:01.979764 2025] [proxy_fcgi:error] [pid 53355:tid 53382] [client 194.5.82.73:28853] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:02.078041 2025] [:error] [pid 53355:tid 53376] [client 194.5.82.73:28853] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aRKTAoB5X5A3rMc4_nDKrgAAABI"]
[Tue Nov 11 09:36:02.279098 2025] [proxy_fcgi:error] [pid 59670:tid 59691] [client 194.5.82.56:40953] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:02.385247 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 194.5.82.56:40953] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:02.478501 2025] [:error] [pid 59670:tid 59684] [client 194.5.82.56:40953] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aRKTAqk2Cnts0y-hpfphiAAAAIs"]
[Tue Nov 11 09:36:02.731723 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:02.909344 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:03.030696 2025] [proxy_fcgi:error] [pid 53355:tid 53358] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:03.144353 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:03.261444 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:03.388811 2025] [proxy_fcgi:error] [pid 53355:tid 53369] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:03.706989 2025] [proxy_fcgi:error] [pid 53355:tid 53378] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:03.904232 2025] [proxy_fcgi:error] [pid 53355:tid 53361] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:04.039567 2025] [proxy_fcgi:error] [pid 53355:tid 53379] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:04.271065 2025] [proxy_fcgi:error] [pid 53355:tid 53368] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:04.506511 2025] [proxy_fcgi:error] [pid 53355:tid 53371] [client 194.5.82.101:61515] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:04.603808 2025] [:error] [pid 53355:tid 53375] [client 194.5.82.101:61515] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "aRKTBIB5X5A3rMc4_nDKwAAAABE"]
[Tue Nov 11 09:36:04.811209 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 194.5.82.71:49485] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:04.950023 2025] [proxy_fcgi:error] [pid 53356:tid 53401] [client 194.5.82.71:49485] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:05.052265 2025] [proxy_fcgi:error] [pid 53356:tid 53399] [client 194.5.82.71:49485] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:05.408625 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 194.5.82.71:49485] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:05.501851 2025] [:error] [pid 53356:tid 53404] [client 194.5.82.71:49485] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/ff2.php"] [unique_id "aRKTBekdmt0kzjVcUN81QAAAAFM"]
[Tue Nov 11 09:36:07.000935 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 194.5.82.100:21307] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:07.125160 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 194.5.82.100:21307] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:07.226093 2025] [proxy_fcgi:error] [pid 53355:tid 53377] [client 194.5.82.100:21307] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:07.429816 2025] [proxy_fcgi:error] [pid 53355:tid 53372] [client 194.5.82.100:21307] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:07.529468 2025] [:error] [pid 53355:tid 53365] [client 194.5.82.100:21307] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aRKTB4B5X5A3rMc4_nDKyAAAAAc"]
[Tue Nov 11 09:36:07.845278 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.65:47279] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:08.156573 2025] [:error] [pid 53449:tid 53472] [client 194.5.82.65:47279] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRKTCNpz08j5NoUSzp-uHQAAAVI"]
[Tue Nov 11 09:36:09.924141 2025] [proxy_fcgi:error] [pid 59670:tid 59680] [client 194.5.82.63:44889] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:10.037222 2025] [:error] [pid 59670:tid 59691] [client 194.5.82.63:44889] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aRKTCqk2Cnts0y-hpfphkwAAAJI"]
[Tue Nov 11 09:36:10.234941 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 194.5.82.60:28379] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:10.710740 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 194.5.82.60:28379] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:10.845415 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 194.5.82.60:28379] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:10.942536 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 194.5.82.60:28379] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:11.047095 2025] [:error] [pid 53449:tid 53475] [client 194.5.82.60:28379] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aRKTC9pz08j5NoUSzp-uJwAAAVU"]
[Tue Nov 11 09:36:11.278455 2025] [:error] [pid 53355:tid 53375] [client 194.5.82.61:43441] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aRKTC4B5X5A3rMc4_nDK0wAAABE"]
[Tue Nov 11 09:36:11.502738 2025] [proxy_fcgi:error] [pid 53414:tid 53419] [client 194.5.82.62:62677] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:11.628760 2025] [proxy_fcgi:error] [pid 53414:tid 53437] [client 194.5.82.62:62677] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:11.767119 2025] [proxy_fcgi:error] [pid 53414:tid 53421] [client 194.5.82.62:62677] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:12.014057 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 194.5.82.62:62677] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:12.138067 2025] [:error] [pid 53414:tid 53425] [client 194.5.82.62:62677] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRKTDAs6pHd_Z5oc1ef-NAAAAQk"]
[Tue Nov 11 09:36:12.347753 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 194.5.82.99:23839] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:12.576253 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 194.5.82.99:23839] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:12.682098 2025] [:error] [pid 59670:tid 59682] [client 194.5.82.99:23839] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/ff2.php"] [unique_id "aRKTDKk2Cnts0y-hpfphmwAAAIk"]
[Tue Nov 11 09:36:12.898488 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 194.5.82.101:57193] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:13.109736 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 194.5.82.101:57193] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:13.208796 2025] [proxy_fcgi:error] [pid 53449:tid 53459] [client 194.5.82.101:57193] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:13.348731 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.101:57193] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:13.510422 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 194.5.82.101:57193] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:13.949886 2025] [:error] [pid 53449:tid 53474] [client 194.5.82.101:57193] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aRKTDdpz08j5NoUSzp-uMQAAAVQ"]
[Tue Nov 11 09:36:14.182828 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 194.5.82.57:64877] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:14.292257 2025] [:error] [pid 53414:tid 53426] [client 194.5.82.57:64877] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aRKTDgs6pHd_Z5oc1ef-OQAAAQo"]
[Tue Nov 11 09:36:14.513882 2025] [proxy_fcgi:error] [pid 53449:tid 53456] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:14.787818 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:14.885918 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:15.023118 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:15.449053 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:15.561565 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:15.670898 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:15.797579 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:15.925391 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:16.138018 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:16.275284 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:16.388669 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:16.514651 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:16.623783 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:16.849557 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:16.976033 2025] [proxy_fcgi:error] [pid 53449:tid 53467] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:17.079734 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:17.191380 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 194.5.82.88:31535] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:17.301524 2025] [:error] [pid 53449:tid 53471] [client 194.5.82.88:31535] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-includes/class-walker-category.php"] [unique_id "aRKTEdpz08j5NoUSzp-uTgAAAVE"]
[Tue Nov 11 09:36:17.630434 2025] [:error] [pid 53414:tid 53427] [client 194.5.82.167:22319] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aRKTEQs6pHd_Z5oc1ef-QQAAAQs"]
[Tue Nov 11 09:36:18.854903 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:18.951373 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:19.404706 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:19.685915 2025] [proxy_fcgi:error] [pid 53414:tid 53435] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:19.784004 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:19.904475 2025] [proxy_fcgi:error] [pid 53414:tid 53421] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:20.353205 2025] [proxy_fcgi:error] [pid 53414:tid 53429] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:20.483043 2025] [proxy_fcgi:error] [pid 53414:tid 53419] [client 194.5.82.92:27383] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:20.600874 2025] [:error] [pid 53414:tid 53430] [client 194.5.82.92:27383] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aRKTFAs6pHd_Z5oc1ef-VgAAAQ4"]
[Tue Nov 11 09:36:20.818775 2025] [:error] [pid 59670:tid 59675] [client 194.5.82.80:52911] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-includes/class-wp-block-pattern-categories-registry.php"] [unique_id "aRKTFKk2Cnts0y-hpfphngAAAII"]
[Tue Nov 11 09:36:21.204418 2025] [proxy_fcgi:error] [pid 53414:tid 53428] [client 194.5.82.64:45365] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:21.315019 2025] [proxy_fcgi:error] [pid 53414:tid 53436] [client 194.5.82.64:45365] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:21.668615 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 194.5.82.64:45365] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:23.445630 2025] [autoindex:error] [pid 53414:tid 53418] [client 194.5.82.64:45365] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 09:36:29.811895 2025] [autoindex:error] [pid 53414:tid 53425] [client 194.5.82.64:45365] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 09:36:35.422716 2025] [proxy_fcgi:error] [pid 53414:tid 53438] [client 194.5.82.64:45365] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 09:36:39.242874 2025] [proxy_fcgi:error] [pid 53356:tid 53398] [client 194.5.82.82:57627] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 16:39:24.066931 2025] [:error] [pid 36580:tid 36648] [client 68.183.153.255:32914] [client 68.183.153.255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRL2PJaaFQZGE3H9yOGh4gAAAEo"]
[Tue Nov 11 16:39:24.907544 2025] [:error] [pid 36578:tid 36601] [client 68.183.153.255:53252] [client 68.183.153.255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRL2PEMi03XeylcOo5WnigAAANI"]
[Wed Nov 12 00:50:41.862017 2025] [proxy_fcgi:error] [pid 54702:tid 55019] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.051445 2025] [proxy_fcgi:error] [pid 54702:tid 55031] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.147290 2025] [proxy_fcgi:error] [pid 54702:tid 55029] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.242677 2025] [proxy_fcgi:error] [pid 54702:tid 55016] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.337408 2025] [proxy_fcgi:error] [pid 54702:tid 55030] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.435453 2025] [proxy_fcgi:error] [pid 54702:tid 55018] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.531173 2025] [proxy_fcgi:error] [pid 54702:tid 55034] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.624525 2025] [proxy_fcgi:error] [pid 54702:tid 55028] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.728282 2025] [proxy_fcgi:error] [pid 54702:tid 55035] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.821487 2025] [proxy_fcgi:error] [pid 54702:tid 55032] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:42.918099 2025] [proxy_fcgi:error] [pid 54702:tid 55023] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:43.010512 2025] [proxy_fcgi:error] [pid 54702:tid 55021] [client 194.5.82.47:55841] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:43.104558 2025] [:error] [pid 54702:tid 55024] [client 194.5.82.47:55841] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRNpY4Cgou0IW-jKFfmP3QAAAYo"]
[Wed Nov 12 00:50:43.288688 2025] [proxy_fcgi:error] [pid 55206:tid 55208] [client 194.5.82.35:44277] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:43.384853 2025] [proxy_fcgi:error] [pid 55206:tid 55226] [client 194.5.82.35:44277] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:43.478034 2025] [proxy_fcgi:error] [pid 55206:tid 55215] [client 194.5.82.35:44277] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:43.571673 2025] [proxy_fcgi:error] [pid 55206:tid 55220] [client 194.5.82.35:44277] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:43.705649 2025] [proxy_fcgi:error] [pid 55206:tid 55217] [client 194.5.82.35:44277] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:43.804204 2025] [:error] [pid 55206:tid 55230] [client 194.5.82.35:44277] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aRNpY-_aSLXgYkIZYTIQbgAAAJY"]
[Wed Nov 12 00:50:44.101401 2025] [proxy_fcgi:error] [pid 54702:tid 55038] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:44.206630 2025] [proxy_fcgi:error] [pid 54702:tid 55036] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:44.395748 2025] [proxy_fcgi:error] [pid 54702:tid 55031] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:44.495777 2025] [proxy_fcgi:error] [pid 54702:tid 55029] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:45.959953 2025] [proxy_fcgi:error] [pid 54702:tid 55030] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:46.058161 2025] [proxy_fcgi:error] [pid 54702:tid 55020] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:46.151522 2025] [proxy_fcgi:error] [pid 54702:tid 55028] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:46.245346 2025] [proxy_fcgi:error] [pid 54702:tid 55035] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:46.339156 2025] [proxy_fcgi:error] [pid 54702:tid 55021] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:46.823689 2025] [proxy_fcgi:error] [pid 54702:tid 55019] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.012538 2025] [proxy_fcgi:error] [pid 54702:tid 55029] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.105144 2025] [proxy_fcgi:error] [pid 54702:tid 55030] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.203617 2025] [proxy_fcgi:error] [pid 54702:tid 55014] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.297620 2025] [proxy_fcgi:error] [pid 54702:tid 55028] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.396504 2025] [proxy_fcgi:error] [pid 54702:tid 55032] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.492216 2025] [proxy_fcgi:error] [pid 54702:tid 55033] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.682114 2025] [proxy_fcgi:error] [pid 54702:tid 55026] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.776177 2025] [proxy_fcgi:error] [pid 54702:tid 55015] [client 194.5.82.31:46531] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:47.999522 2025] [:error] [pid 54702:tid 55019] [client 194.5.82.31:46531] [client 194.5.82.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRNpZ4Cgou0IW-jKFfmQBQAAAYU"]
[Wed Nov 12 00:50:48.185486 2025] [proxy_fcgi:error] [pid 55206:tid 55229] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:48.432847 2025] [proxy_fcgi:error] [pid 55206:tid 55213] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:48.534872 2025] [proxy_fcgi:error] [pid 55206:tid 55232] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:48.630707 2025] [proxy_fcgi:error] [pid 55206:tid 55228] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:48.728375 2025] [proxy_fcgi:error] [pid 55206:tid 55216] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:48.823026 2025] [proxy_fcgi:error] [pid 55206:tid 55218] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:48.949619 2025] [proxy_fcgi:error] [pid 55206:tid 55224] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:49.336386 2025] [proxy_fcgi:error] [pid 55206:tid 55212] [client 194.5.82.7:65039] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:49.426786 2025] [:error] [pid 55206:tid 55214] [client 194.5.82.7:65039] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRNpae_aSLXgYkIZYTIQiQAAAIY"]
[Wed Nov 12 00:50:50.610831 2025] [proxy_fcgi:error] [pid 54701:tid 55010] [client 194.5.82.16:38869] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:50.703684 2025] [proxy_fcgi:error] [pid 54701:tid 54987] [client 194.5.82.16:38869] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:50.849621 2025] [proxy_fcgi:error] [pid 54701:tid 54992] [client 194.5.82.16:38869] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:50.962884 2025] [proxy_fcgi:error] [pid 54701:tid 54989] [client 194.5.82.16:38869] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:51.066546 2025] [proxy_fcgi:error] [pid 54701:tid 55006] [client 194.5.82.16:38869] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:51.158093 2025] [:error] [pid 54701:tid 54991] [client 194.5.82.16:38869] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aRNpaxf-2zu56UfbUVKyrAAAAUY"]
[Wed Nov 12 00:50:51.437907 2025] [proxy_fcgi:error] [pid 55206:tid 55216] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:51.531863 2025] [proxy_fcgi:error] [pid 55206:tid 55218] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:51.626021 2025] [proxy_fcgi:error] [pid 55206:tid 55224] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:51.720347 2025] [proxy_fcgi:error] [pid 55206:tid 55223] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:51.814209 2025] [proxy_fcgi:error] [pid 55206:tid 55209] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:51.910451 2025] [proxy_fcgi:error] [pid 55206:tid 55212] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:52.006067 2025] [proxy_fcgi:error] [pid 55206:tid 55214] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:52.102319 2025] [proxy_fcgi:error] [pid 55206:tid 55208] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:52.307670 2025] [proxy_fcgi:error] [pid 55206:tid 55210] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:52.405397 2025] [proxy_fcgi:error] [pid 55206:tid 55226] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:52.642190 2025] [proxy_fcgi:error] [pid 55206:tid 55220] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.088030 2025] [proxy_fcgi:error] [pid 55206:tid 55232] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.182866 2025] [proxy_fcgi:error] [pid 55206:tid 55228] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.277799 2025] [proxy_fcgi:error] [pid 55206:tid 55216] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.373689 2025] [proxy_fcgi:error] [pid 55206:tid 55218] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.466801 2025] [proxy_fcgi:error] [pid 55206:tid 55217] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.560372 2025] [proxy_fcgi:error] [pid 55206:tid 55224] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.747972 2025] [proxy_fcgi:error] [pid 55206:tid 55219] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.841102 2025] [proxy_fcgi:error] [pid 55206:tid 55209] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:54.933699 2025] [proxy_fcgi:error] [pid 55206:tid 55212] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.033342 2025] [proxy_fcgi:error] [pid 55206:tid 55214] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.129979 2025] [proxy_fcgi:error] [pid 55206:tid 55211] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.225795 2025] [proxy_fcgi:error] [pid 55206:tid 55225] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.411789 2025] [proxy_fcgi:error] [pid 55206:tid 55226] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.507438 2025] [proxy_fcgi:error] [pid 55206:tid 55215] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.597356 2025] [:error] [pid 55206:tid 55230] [client 194.5.82.35:63167] [client 194.5.82.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.35, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRNpb-_aSLXgYkIZYTIQrAAAAJY"]
[Wed Nov 12 00:50:55.602344 2025] [proxy_fcgi:error] [pid 55206:tid 55230] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.896767 2025] [proxy_fcgi:error] [pid 55206:tid 55227] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:55.990395 2025] [proxy_fcgi:error] [pid 55206:tid 55229] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:56.085270 2025] [proxy_fcgi:error] [pid 55206:tid 55232] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:56.271160 2025] [proxy_fcgi:error] [pid 55206:tid 55216] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:56.369119 2025] [proxy_fcgi:error] [pid 55206:tid 55218] [client 194.5.82.35:63167] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:56.552498 2025] [:error] [pid 55206:tid 55224] [client 194.5.82.35:63167] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aRNpcO_aSLXgYkIZYTIQtwAAAJA"]
[Wed Nov 12 00:50:56.835216 2025] [proxy_fcgi:error] [pid 10618:tid 10630] [client 194.5.82.23:51295] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:57.023417 2025] [proxy_fcgi:error] [pid 10618:tid 10627] [client 194.5.82.23:51295] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:58.728140 2025] [:error] [pid 10618:tid 10630] [client 194.5.82.23:51295] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRNpctwQBPCH2K2NYditNgAAAAg"]
[Wed Nov 12 00:50:58.914004 2025] [proxy_fcgi:error] [pid 55206:tid 55232] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.008207 2025] [proxy_fcgi:error] [pid 55206:tid 55216] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.101128 2025] [proxy_fcgi:error] [pid 55206:tid 55218] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.201698 2025] [proxy_fcgi:error] [pid 55206:tid 55217] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.302900 2025] [proxy_fcgi:error] [pid 55206:tid 55224] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.522518 2025] [proxy_fcgi:error] [pid 55206:tid 55208] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.615956 2025] [proxy_fcgi:error] [pid 55206:tid 55209] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.708971 2025] [proxy_fcgi:error] [pid 55206:tid 55220] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:50:59.816658 2025] [proxy_fcgi:error] [pid 55206:tid 55214] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:01.303131 2025] [proxy_fcgi:error] [pid 55206:tid 55226] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:01.424452 2025] [proxy_fcgi:error] [pid 55206:tid 55230] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:01.569055 2025] [proxy_fcgi:error] [pid 55206:tid 55222] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:01.760050 2025] [proxy_fcgi:error] [pid 55206:tid 55227] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:01.858434 2025] [proxy_fcgi:error] [pid 55206:tid 55229] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:02.342008 2025] [proxy_fcgi:error] [pid 55206:tid 55209] [client 194.5.82.46:24121] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:02.528736 2025] [:error] [pid 55206:tid 55221] [client 194.5.82.46:24121] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRNpdu_aSLXgYkIZYTIQ3QAAAI0"]
[Wed Nov 12 00:51:03.807392 2025] [proxy_fcgi:error] [pid 55206:tid 55213] [client 194.5.82.17:23413] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:03.911806 2025] [proxy_fcgi:error] [pid 55206:tid 55211] [client 194.5.82.17:23413] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:04.006214 2025] [proxy_fcgi:error] [pid 55206:tid 55229] [client 194.5.82.17:23413] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:04.098532 2025] [:error] [pid 55206:tid 55218] [client 194.5.82.17:23413] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aRNpeO_aSLXgYkIZYTIQ4gAAAIo"]
[Wed Nov 12 00:51:04.375880 2025] [proxy_fcgi:error] [pid 54701:tid 54992] [client 194.5.82.52:29171] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:04.473222 2025] [proxy_fcgi:error] [pid 54701:tid 54989] [client 194.5.82.52:29171] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:04.572236 2025] [proxy_fcgi:error] [pid 54701:tid 55006] [client 194.5.82.52:29171] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:04.676561 2025] [proxy_fcgi:error] [pid 54701:tid 54991] [client 194.5.82.52:29171] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:04.860674 2025] [:error] [pid 54701:tid 55000] [client 194.5.82.52:29171] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRNpeBf-2zu56UfbUVKyvgAAAU8"]
[Wed Nov 12 00:51:05.045860 2025] [proxy_fcgi:error] [pid 54702:tid 55030] [client 194.5.82.38:33315] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:05.138510 2025] [proxy_fcgi:error] [pid 54702:tid 55020] [client 194.5.82.38:33315] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:05.236662 2025] [proxy_fcgi:error] [pid 54702:tid 55038] [client 194.5.82.38:33315] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:05.334414 2025] [proxy_fcgi:error] [pid 54702:tid 55016] [client 194.5.82.38:33315] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:05.424999 2025] [:error] [pid 54702:tid 55021] [client 194.5.82.38:33315] [client 194.5.82.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aRNpeYCgou0IW-jKFfmQHAAAAYc"]
[Wed Nov 12 00:51:05.701055 2025] [proxy_fcgi:error] [pid 10618:tid 10625] [client 194.5.82.14:24537] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:05.889603 2025] [proxy_fcgi:error] [pid 10618:tid 10631] [client 194.5.82.14:24537] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:06.079606 2025] [proxy_fcgi:error] [pid 10618:tid 10630] [client 194.5.82.14:24537] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:06.462650 2025] [proxy_fcgi:error] [pid 10618:tid 10635] [client 194.5.82.14:24537] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:06.558268 2025] [:error] [pid 10618:tid 10622] [client 194.5.82.14:24537] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aRNpetwQBPCH2K2NYditWwAAAAA"]
[Wed Nov 12 00:51:06.836283 2025] [proxy_fcgi:error] [pid 10618:tid 10642] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:06.929233 2025] [proxy_fcgi:error] [pid 10618:tid 10640] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:08.461262 2025] [proxy_fcgi:error] [pid 10618:tid 10632] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:08.744931 2025] [proxy_fcgi:error] [pid 10618:tid 10642] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:08.933850 2025] [proxy_fcgi:error] [pid 10618:tid 10627] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.027023 2025] [proxy_fcgi:error] [pid 10618:tid 10634] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.125057 2025] [proxy_fcgi:error] [pid 10618:tid 10633] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.219051 2025] [proxy_fcgi:error] [pid 10618:tid 10646] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.314550 2025] [proxy_fcgi:error] [pid 10618:tid 10623] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.414043 2025] [proxy_fcgi:error] [pid 10618:tid 10635] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.507980 2025] [proxy_fcgi:error] [pid 10618:tid 10622] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.601621 2025] [proxy_fcgi:error] [pid 10618:tid 10632] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.698190 2025] [proxy_fcgi:error] [pid 10618:tid 10639] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:09.792636 2025] [proxy_fcgi:error] [pid 10618:tid 10636] [client 194.5.82.42:24507] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:10.094645 2025] [:error] [pid 10618:tid 10631] [client 194.5.82.42:24507] [client 194.5.82.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRNpftwQBPCH2K2NYditfAAAAAk"]
[Wed Nov 12 00:51:10.279293 2025] [proxy_fcgi:error] [pid 54701:tid 55001] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:10.376264 2025] [proxy_fcgi:error] [pid 54701:tid 55009] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:10.471632 2025] [proxy_fcgi:error] [pid 54701:tid 54997] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:10.658905 2025] [proxy_fcgi:error] [pid 54701:tid 54986] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:10.752672 2025] [proxy_fcgi:error] [pid 54701:tid 54995] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:10.846992 2025] [proxy_fcgi:error] [pid 54701:tid 54985] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:11.033969 2025] [proxy_fcgi:error] [pid 54701:tid 55004] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:11.223785 2025] [proxy_fcgi:error] [pid 54701:tid 54987] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:11.325789 2025] [proxy_fcgi:error] [pid 54701:tid 54998] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:11.619245 2025] [proxy_fcgi:error] [pid 54701:tid 54999] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:11.713634 2025] [proxy_fcgi:error] [pid 54701:tid 55007] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:11.906614 2025] [proxy_fcgi:error] [pid 54701:tid 54997] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:12.004521 2025] [proxy_fcgi:error] [pid 54701:tid 54993] [client 194.5.82.8:24501] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:12.188899 2025] [:error] [pid 54701:tid 55010] [client 194.5.82.8:24501] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aRNpgBf-2zu56UfbUVKy3gAAAVg"]
[Wed Nov 12 00:51:12.378944 2025] [:error] [pid 10618:tid 10628] [client 194.5.82.53:47509] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aRNpgNwQBPCH2K2NYdithQAAAAY"]
[Wed Nov 12 00:51:12.574595 2025] [proxy_fcgi:error] [pid 55206:tid 55214] [client 194.5.82.25:61765] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:12.690097 2025] [proxy_fcgi:error] [pid 55206:tid 55230] [client 194.5.82.25:61765] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:12.816643 2025] [proxy_fcgi:error] [pid 55206:tid 55229] [client 194.5.82.25:61765] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:12.918859 2025] [proxy_fcgi:error] [pid 55206:tid 55231] [client 194.5.82.25:61765] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:13.015110 2025] [:error] [pid 55206:tid 55210] [client 194.5.82.25:61765] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aRNpge_aSLXgYkIZYTIQ9gAAAII"]
[Wed Nov 12 00:51:13.205922 2025] [proxy_fcgi:error] [pid 10618:tid 10623] [client 194.5.82.25:44323] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:13.304589 2025] [proxy_fcgi:error] [pid 10618:tid 10629] [client 194.5.82.25:44323] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:13.501640 2025] [proxy_fcgi:error] [pid 10618:tid 10632] [client 194.5.82.25:44323] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:13.591248 2025] [:error] [pid 10618:tid 10644] [client 194.5.82.25:44323] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aRNpgdwQBPCH2K2NYditjAAAABY"]
[Wed Nov 12 00:51:13.792371 2025] [proxy_fcgi:error] [pid 54701:tid 54990] [client 194.5.82.31:38461] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:14.068435 2025] [:error] [pid 54701:tid 55008] [client 194.5.82.31:38461] [client 194.5.82.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRNpghf-2zu56UfbUVKy6AAAAVY"]
[Wed Nov 12 00:51:14.257872 2025] [proxy_fcgi:error] [pid 54700:tid 54951] [client 194.5.82.49:44323] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:14.353211 2025] [proxy_fcgi:error] [pid 54700:tid 54942] [client 194.5.82.49:44323] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:14.451700 2025] [:error] [pid 54700:tid 54950] [client 194.5.82.49:44323] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aRNpgmB5AaOtkwsSKToCbwAAAE0"]
[Wed Nov 12 00:51:14.657479 2025] [proxy_fcgi:error] [pid 10618:tid 10634] [client 194.5.82.40:37559] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:14.753274 2025] [proxy_fcgi:error] [pid 10618:tid 10633] [client 194.5.82.40:37559] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:14.845558 2025] [:error] [pid 10618:tid 10627] [client 194.5.82.40:37559] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aRNpgtwQBPCH2K2NYditkQAAAAU"]
[Wed Nov 12 00:51:15.416102 2025] [proxy_fcgi:error] [pid 54702:tid 55038] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:15.618245 2025] [proxy_fcgi:error] [pid 54702:tid 55015] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:15.820867 2025] [proxy_fcgi:error] [pid 54702:tid 55020] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:15.914365 2025] [proxy_fcgi:error] [pid 54702:tid 55021] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:16.009150 2025] [proxy_fcgi:error] [pid 54702:tid 55022] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:16.407772 2025] [proxy_fcgi:error] [pid 54702:tid 55017] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:16.509332 2025] [proxy_fcgi:error] [pid 54702:tid 55036] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:16.697467 2025] [proxy_fcgi:error] [pid 54702:tid 55019] [client 194.5.82.37:51979] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:16.786845 2025] [:error] [pid 54702:tid 55032] [client 194.5.82.37:51979] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aRNphICgou0IW-jKFfmQQAAAAZI"]
[Wed Nov 12 00:51:16.971386 2025] [proxy_fcgi:error] [pid 54700:tid 54948] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.068253 2025] [proxy_fcgi:error] [pid 54700:tid 54943] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.162111 2025] [proxy_fcgi:error] [pid 54700:tid 54960] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.260063 2025] [proxy_fcgi:error] [pid 54700:tid 54953] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.353403 2025] [proxy_fcgi:error] [pid 54700:tid 54946] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.448278 2025] [proxy_fcgi:error] [pid 54700:tid 54954] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.553539 2025] [proxy_fcgi:error] [pid 54700:tid 54956] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.648855 2025] [proxy_fcgi:error] [pid 54700:tid 54947] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.743105 2025] [proxy_fcgi:error] [pid 54700:tid 54951] [client 194.5.82.5:23561] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:17.843572 2025] [:error] [pid 54700:tid 54942] [client 194.5.82.5:23561] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "aRNphWB5AaOtkwsSKToCfQAAAEU"]
[Wed Nov 12 00:51:18.241354 2025] [proxy_fcgi:error] [pid 55206:tid 55218] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:18.336091 2025] [proxy_fcgi:error] [pid 55206:tid 55226] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:18.526586 2025] [proxy_fcgi:error] [pid 55206:tid 55208] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:18.632386 2025] [proxy_fcgi:error] [pid 55206:tid 55224] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:19.016115 2025] [proxy_fcgi:error] [pid 55206:tid 55219] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:19.123651 2025] [proxy_fcgi:error] [pid 55206:tid 55225] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:19.218912 2025] [proxy_fcgi:error] [pid 55206:tid 55230] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:19.312576 2025] [proxy_fcgi:error] [pid 55206:tid 55213] [client 194.5.82.16:57863] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:19.416646 2025] [:error] [pid 55206:tid 55211] [client 194.5.82.16:57863] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aRNph-_aSLXgYkIZYTIREQAAAIM"]
[Wed Nov 12 00:51:19.599542 2025] [proxy_fcgi:error] [pid 55206:tid 55218] [client 194.5.82.28:33523] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:19.693754 2025] [proxy_fcgi:error] [pid 55206:tid 55215] [client 194.5.82.28:33523] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:19.786699 2025] [:error] [pid 55206:tid 55212] [client 194.5.82.28:33523] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aRNph-_aSLXgYkIZYTIRFAAAAIQ"]
[Wed Nov 12 00:51:19.970956 2025] [proxy_fcgi:error] [pid 10618:tid 10646] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:20.068254 2025] [proxy_fcgi:error] [pid 10618:tid 10639] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:20.163411 2025] [proxy_fcgi:error] [pid 10618:tid 10626] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:20.261781 2025] [proxy_fcgi:error] [pid 10618:tid 10624] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:20.357819 2025] [proxy_fcgi:error] [pid 10618:tid 10640] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:20.461792 2025] [proxy_fcgi:error] [pid 10618:tid 10629] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:20.748054 2025] [proxy_fcgi:error] [pid 10618:tid 10635] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:20.939683 2025] [proxy_fcgi:error] [pid 10618:tid 10630] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:21.036511 2025] [proxy_fcgi:error] [pid 10618:tid 10638] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:21.229892 2025] [proxy_fcgi:error] [pid 10618:tid 10642] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:21.425766 2025] [proxy_fcgi:error] [pid 10618:tid 10622] [client 194.5.82.44:27655] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:21.519741 2025] [:error] [pid 10618:tid 10646] [client 194.5.82.44:27655] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "aRNpidwQBPCH2K2NYditrQAAABg"]
[Wed Nov 12 00:51:21.707040 2025] [proxy_fcgi:error] [pid 54702:tid 55035] [client 194.5.82.11:22703] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:21.800721 2025] [proxy_fcgi:error] [pid 54702:tid 55014] [client 194.5.82.11:22703] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:21.895051 2025] [proxy_fcgi:error] [pid 54702:tid 55024] [client 194.5.82.11:22703] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:22.184576 2025] [proxy_fcgi:error] [pid 54702:tid 55025] [client 194.5.82.11:22703] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:22.274577 2025] [:error] [pid 54702:tid 55037] [client 194.5.82.11:22703] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/ff2.php"] [unique_id "aRNpioCgou0IW-jKFfmQTAAAAZc"]
[Wed Nov 12 00:51:24.071956 2025] [proxy_fcgi:error] [pid 54702:tid 55026] [client 194.5.82.14:53777] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:24.336192 2025] [proxy_fcgi:error] [pid 54702:tid 55038] [client 194.5.82.14:53777] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:24.558518 2025] [proxy_fcgi:error] [pid 54702:tid 55021] [client 194.5.82.14:53777] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:24.837853 2025] [proxy_fcgi:error] [pid 54702:tid 55028] [client 194.5.82.14:53777] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:24.946827 2025] [:error] [pid 54702:tid 55016] [client 194.5.82.14:53777] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aRNpjICgou0IW-jKFfmQVwAAAYI"]
[Wed Nov 12 00:51:25.746369 2025] [proxy_fcgi:error] [pid 55206:tid 55208] [client 194.5.82.39:40843] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:26.100820 2025] [:error] [pid 55206:tid 55209] [client 194.5.82.39:40843] [client 194.5.82.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRNpju_aSLXgYkIZYTIRIgAAAIE"]
[Wed Nov 12 00:51:26.921689 2025] [proxy_fcgi:error] [pid 10618:tid 10634] [client 194.5.82.8:28025] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:27.120466 2025] [:error] [pid 10618:tid 10646] [client 194.5.82.8:28025] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aRNpj9wQBPCH2K2NYdittgAAABg"]
[Wed Nov 12 00:51:28.936362 2025] [proxy_fcgi:error] [pid 54702:tid 55021] [client 194.5.82.20:33415] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:29.035254 2025] [proxy_fcgi:error] [pid 54702:tid 55022] [client 194.5.82.20:33415] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:29.132651 2025] [proxy_fcgi:error] [pid 54702:tid 55028] [client 194.5.82.20:33415] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:29.230870 2025] [proxy_fcgi:error] [pid 54702:tid 55016] [client 194.5.82.20:33415] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:29.340614 2025] [:error] [pid 54702:tid 55014] [client 194.5.82.20:33415] [client 194.5.82.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aRNpkYCgou0IW-jKFfmQZAAAAYA"]
[Wed Nov 12 00:51:31.081216 2025] [:error] [pid 54701:tid 54995] [client 194.5.82.27:61605] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aRNpkxf-2zu56UfbUVKy_gAAAUo"]
[Wed Nov 12 00:51:42.665475 2025] [autoindex:error] [pid 10618:tid 10622] [client 194.5.82.49:48977] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 00:51:48.216503 2025] [autoindex:error] [pid 10618:tid 10628] [client 194.5.82.49:48977] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 00:51:51.693684 2025] [proxy_fcgi:error] [pid 10618:tid 10629] [client 194.5.82.49:48977] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 00:51:54.345503 2025] [proxy_fcgi:error] [pid 54702:tid 55032] [client 194.5.82.21:23153] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 03:29:53.510405 2025] [:error] [pid 31870:tid 31899] [client 164.92.94.204:33154] [client 164.92.94.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aROOsW1yFI8y9xP-IITe6gAAANU"]
[Wed Nov 12 03:29:55.734902 2025] [:error] [pid 31763:tid 31859] [client 164.92.94.204:33160] [client 164.92.94.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "aROOsy8V7oYdx4qECoqP9AAAAJc"]
[Wed Nov 12 03:29:58.235636 2025] [:error] [pid 31763:tid 31844] [client 164.92.94.204:33174] [client 164.92.94.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/env/.env"] [unique_id "aROOti8V7oYdx4qECoqP9QAAAIg"]
[Wed Nov 12 03:30:01.600335 2025] [:error] [pid 31763:tid 31845] [client 164.92.94.204:39604] [client 164.92.94.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aROOuS8V7oYdx4qECoqP-wAAAIk"]
[Wed Nov 12 03:59:20.453435 2025] [:error] [pid 57224:tid 57307] [client 68.183.153.255:56850] [client 68.183.153.255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aROVmBs7oZ7imwCSdAnbNAAAAJc"]
[Wed Nov 12 03:59:26.356380 2025] [:error] [pid 57312:tid 57341] [client 68.183.153.255:45872] [client 68.183.153.255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aROVno0cuHgB17JK5qWP7AAAANg"]
2025/11/12 08:49:36 [error] 24797#24797: *1955 connect() failed (111: Connection refused) while connecting to upstream, client: 44.194.134.53, server: stratapluswa.com.au, request: "GET /%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx", host: "stratapluswa.com.au"
2025/11/12 09:23:25 [error] 23005#23005: *654 openat() "/home/stratapluswacom/public_html/.git/config" failed (2: No such file or directory), client: 138.197.90.106, server: stratapluswa.com.au, request: "GET /.git/config HTTP/1.1", host: "stratapluswa.com.au"
2025/11/12 09:23:26 [error] 23006#23006: *656 openat() "/home/stratapluswacom/public_html/.git/config" failed (2: No such file or directory), client: 138.197.90.106, server: stratapluswa.com.au, request: "GET /.git/config HTTP/1.1", host: "stratapluswa.com.au"
[Wed Nov 12 11:17:55.379490 2025] [:error] [pid 60096:tid 60153] [client 122.51.131.143:42504] [client 122.51.131.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/env/.env"] [unique_id "aRP8YzmzkhCvvk8DXOwebwAAAJQ"]
[Wed Nov 12 18:53:41.312399 2025] [:error] [pid 12744:tid 12750] [client 118.179.189.225:4084] [client 118.179.189.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.179.189.225, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRRnNZ1cp_ouUvkFj0VcSgAAAQI"]
[Wed Nov 12 18:53:41.330397 2025] [proxy_fcgi:error] [pid 12744:tid 12750] [client 118.179.189.225:4084] AH01071: Got error 'Primary script unknown'
[Wed Nov 12 18:53:58.945974 2025] [:error] [pid 60180:tid 60190] [client 49.205.128.16:54418] [client 49.205.128.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.128.16, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRRnRlhgd7ccS8EZg1pFBgAAAUg"]
[Wed Nov 12 18:53:58.958447 2025] [proxy_fcgi:error] [pid 60180:tid 60190] [client 49.205.128.16:54418] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 05:06:08.475197 2025] [:error] [pid 51407:tid 51474] [client 93.123.109.7:38816] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRT2wKKnD465ID-ycMKWGgAAAIk"]
[Thu Nov 13 07:23:39.245252 2025] [:error] [pid 34451:tid 34461] [client 85.203.36.143:62081] [client 85.203.36.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aRUW-zRcD8KetQb4Raqk6wAAAUg"]
[Thu Nov 13 12:33:07.163679 2025] [:error] [pid 6086:tid 6098] [client 45.153.34.41:55604] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRVfg39_6CRZzjZnAe2gIwAAAQk"]
[Thu Nov 13 13:56:20.815068 2025] [:error] [pid 62216:tid 62250] [client 45.153.34.41:50882] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRVzBOpyFB9M2aVQhwPvbQAAAAM"]
[Thu Nov 13 17:55:44.272928 2025] [:error] [pid 44354:tid 44360] [client 150.241.107.255:56604] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "aRWrIHqKopQhy3G4s3l0bgAAAYE"]
[Thu Nov 13 17:55:44.826418 2025] [:error] [pid 62217:tid 62293] [client 150.241.107.255:56816] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "aRWrIBjGU3T9wKBmdNc26wAAAFM"]
[Thu Nov 13 17:55:45.375643 2025] [:error] [pid 44354:tid 44382] [client 150.241.107.255:57145] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIXqKopQhy3G4s3l0lAAAAZc"]
[Fri Nov 14 01:49:06.857492 2025] [proxy_fcgi:error] [pid 56586:tid 56592] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:07.140758 2025] [proxy_fcgi:error] [pid 56586:tid 56612] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:07.478133 2025] [proxy_fcgi:error] [pid 56586:tid 56610] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:07.781642 2025] [proxy_fcgi:error] [pid 56586:tid 56604] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:08.070637 2025] [proxy_fcgi:error] [pid 56586:tid 56593] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:09.191947 2025] [proxy_fcgi:error] [pid 56586:tid 56607] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:09.486701 2025] [proxy_fcgi:error] [pid 56586:tid 56606] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:09.821420 2025] [proxy_fcgi:error] [pid 56586:tid 56594] [client 52.254.87.187:61788] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 01:49:10.104322 2025] [:error] [pid 56586:tid 56592] [client 52.254.87.187:61788] [client 52.254.87.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRYaFq7eYD3G9deYMP5HUAAAAYE"]
[Fri Nov 14 01:49:10.741590 2025] [:error] [pid 56495:tid 56520] [client 52.254.87.187:30784] [client 52.254.87.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRYaFlwO8wZZL5WJceXI5wAAANU"]
[Fri Nov 14 01:49:11.215968 2025] [:error] [pid 49246:tid 49254] [client 52.254.87.187:61766] [client 52.254.87.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRYaF9-hdG_ZJBT6alPlzwAAAEQ"]
[Fri Nov 14 01:49:11.876907 2025] [:error] [pid 56495:tid 56515] [client 52.254.87.187:62217] [client 52.254.87.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRYaF1wO8wZZL5WJceXI6QAAANA"]
[Sat Nov 15 00:46:51.598941 2025] [:error] [pid 45995:tid 46009] [client 35.192.84.27:42790] [client 35.192.84.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRdc-8fhZrb6EV4SvFuyuQAAAgk"]
[Sat Nov 15 04:09:54.220182 2025] [:error] [pid 37318:tid 37381] [client 187.120.22.183:60932] [client 187.120.22.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.120.22.183, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aReMkugM1rHoEAqoQDf20AAAARM"]
[Sat Nov 15 04:09:54.232408 2025] [proxy_fcgi:error] [pid 37318:tid 37381] [client 187.120.22.183:60932] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 11:20:24.823737 2025] [:error] [pid 22613:tid 22623] [client 13.214.189.109:36882] [client 13.214.189.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRfxeCoyR3cDsIRGPRlzoQAAAgg"]
[Sat Nov 15 11:42:01.272695 2025] [:error] [pid 27997:tid 28006] [client 15.164.102.163:51516] [client 15.164.102.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRf2idpja_6cDxKbxFmJRgAAAMc"]
[Sat Nov 15 11:48:26.966382 2025] [:error] [pid 22765:tid 22786] [client 54.153.15.174:43808] [client 54.153.15.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRf4CqbrQzjuZmPIWDabYwAAApA"]
[Sat Nov 15 12:39:04.601533 2025] [:error] [pid 19961:tid 20004] [client 13.158.132.15:49338] [client 13.158.132.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRgD6Dar7Si-84EApVQ7TAAAAcs"]
[Sat Nov 15 12:46:53.461673 2025] [:error] [pid 20654:tid 20657] [client 13.60.243.112:49130] [client 13.60.243.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aRgFvXcS7eC8vO76_yd53wAAA4A"]
[Sat Nov 15 20:26:25.907533 2025] [:error] [pid 20313:tid 20317] [client 45.134.79.103:62982] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRhxcRI9DXIgPadBLUaeNQAAAsE"]
[Sat Nov 15 20:26:26.568877 2025] [:error] [pid 20654:tid 20666] [client 45.134.79.103:63496] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "aRhxcncS7eC8vO76_ycI2QAAA4k"]
[Sat Nov 15 20:26:27.217921 2025] [:error] [pid 22765:tid 22785] [client 45.134.79.103:63754] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aRhxc6brQzjuZmPIWDb-gwAAAo8"]
[Sat Nov 15 20:26:27.860226 2025] [:error] [pid 27997:tid 28015] [client 45.134.79.103:64027] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aRhxc9pja_6cDxKbxFnq7wAAANA"]
[Sat Nov 15 20:26:28.517362 2025] [:error] [pid 19959:tid 19980] [client 45.134.79.103:64228] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdMjejiTUP1-IawPtwQAAAY4"]
[Sat Nov 15 20:26:29.151460 2025] [:error] [pid 27909:tid 27928] [client 45.134.79.103:64397] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdSTfZ6B57n8HepU9rwAAAA8"]
[Sat Nov 15 20:26:29.782290 2025] [:error] [pid 19961:tid 20005] [client 45.134.79.103:64534] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdTar7Si-84EApVSFwQAAAcw"]
[Sat Nov 15 20:26:30.417764 2025] [:error] [pid 27997:tid 28008] [client 45.134.79.103:64662] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdtpja_6cDxKbxFnrCAAAAMk"]
[Sat Nov 15 22:39:25.082282 2025] [:error] [pid 27911:tid 27990] [client 18.141.166.35:59996] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aRiQncGzUdrhGBIfiKSF5gAAAJY"]
[Sat Nov 15 22:39:29.422251 2025] [:error] [pid 20346:tid 20372] [client 18.141.166.35:60012] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "aRiQoZ7hsydZdIoVTltliQAAAxc"]
[Sat Nov 15 22:39:34.306968 2025] [:error] [pid 20346:tid 20354] [client 18.141.166.35:60162] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.tmp"] [unique_id "aRiQpp7hsydZdIoVTltljQAAAwU"]
[Sat Nov 15 22:39:34.308868 2025] [:error] [pid 27997:tid 28022] [client 18.141.166.35:60104] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.test"] [unique_id "aRiQptpja_6cDxKbxFn85QAAANc"]
[Sat Nov 15 22:39:34.312265 2025] [:error] [pid 20346:tid 20369] [client 18.141.166.35:60080] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.development"] [unique_id "aRiQpp7hsydZdIoVTltljgAAAxQ"]
[Sat Nov 15 22:39:34.322735 2025] [:error] [pid 19961:tid 20016] [client 18.141.166.35:60066] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "aRiQpjar7Si-84EApVSUPwAAAdc"]
[Sat Nov 15 22:39:34.322965 2025] [:error] [pid 20313:tid 20336] [client 18.141.166.35:60114] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.orig"] [unique_id "aRiQphI9DXIgPadBLUasXAAAAtQ"]
[Sat Nov 15 22:39:34.329294 2025] [:error] [pid 20346:tid 20358] [client 18.141.166.35:60054] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "aRiQpp7hsydZdIoVTltljwAAAwk"]
[Sat Nov 15 22:39:34.349011 2025] [:error] [pid 27997:tid 28014] [client 18.141.166.35:60040] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env~"] [unique_id "aRiQptpja_6cDxKbxFn85wAAAM8"]
[Sat Nov 15 22:39:34.350713 2025] [:error] [pid 19961:tid 20007] [client 18.141.166.35:60022] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "aRiQpjar7Si-84EApVSUQAAAAc4"]
[Sat Nov 15 22:39:34.354115 2025] [:error] [pid 20346:tid 20360] [client 18.141.166.35:60096] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "aRiQpp7hsydZdIoVTltlkAAAAws"]
[Sat Nov 15 22:39:34.358621 2025] [:error] [pid 19959:tid 19966] [client 18.141.166.35:60180] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env.save"] [unique_id "aRiQpsjejiTUP1-IawMBrgAAAYA"]
[Sat Nov 15 22:39:34.392759 2025] [:error] [pid 19959:tid 19969] [client 18.141.166.35:60222] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env.bak"] [unique_id "aRiQpsjejiTUP1-IawMBrwAAAYM"]
[Sat Nov 15 22:39:34.407290 2025] [:error] [pid 19961:tid 20010] [client 18.141.166.35:60252] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env.save"] [unique_id "aRiQpjar7Si-84EApVSUQQAAAdE"]
[Sat Nov 15 22:39:34.437456 2025] [:error] [pid 20346:tid 20363] [client 18.141.166.35:60154] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.old"] [unique_id "aRiQpp7hsydZdIoVTltlkQAAAw4"]
[Sat Nov 15 22:39:34.446989 2025] [:error] [pid 19959:tid 19987] [client 18.141.166.35:60160] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "aRiQpsjejiTUP1-IawMBsAAAAZU"]
[Sat Nov 15 22:39:34.448999 2025] [:error] [pid 22765:tid 22780] [client 18.141.166.35:60138] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.save"] [unique_id "aRiQpqbrQzjuZmPIWDYXsAAAAoo"]
[Sat Nov 15 22:39:34.463522 2025] [:error] [pid 19959:tid 19975] [client 18.141.166.35:60176] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "aRiQpsjejiTUP1-IawMBsQAAAYk"]
[Sat Nov 15 22:39:34.468081 2025] [:error] [pid 20346:tid 20357] [client 18.141.166.35:60070] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "aRiQpp7hsydZdIoVTltlkgAAAwg"]
[Sat Nov 15 22:39:34.472444 2025] [:error] [pid 19959:tid 19989] [client 18.141.166.35:60034] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "aRiQpsjejiTUP1-IawMBsgAAAZc"]
[Sat Nov 15 22:39:34.477740 2025] [:error] [pid 19959:tid 19968] [client 18.141.166.35:60246] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env.old"] [unique_id "aRiQpsjejiTUP1-IawMBswAAAYI"]
[Sat Nov 15 22:39:34.492299 2025] [:error] [pid 19959:tid 19988] [client 18.141.166.35:60130] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "aRiQpsjejiTUP1-IawMBtAAAAZY"]
[Sat Nov 15 22:39:34.500731 2025] [:error] [pid 19959:tid 19972] [client 18.141.166.35:60292] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/src/.env"] [unique_id "aRiQpsjejiTUP1-IawMBtQAAAYY"]
[Sat Nov 15 22:39:34.514717 2025] [:error] [pid 19959:tid 19970] [client 18.141.166.35:60204] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env.bak"] [unique_id "aRiQpsjejiTUP1-IawMBtgAAAYQ"]
[Sat Nov 15 22:39:34.526841 2025] [:error] [pid 19959:tid 19974] [client 18.141.166.35:60182] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env"] [unique_id "aRiQpsjejiTUP1-IawMBtwAAAYg"]
[Sat Nov 15 22:39:34.537619 2025] [:error] [pid 19959:tid 19985] [client 18.141.166.35:60212] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "aRiQpsjejiTUP1-IawMBuAAAAZM"]
[Sat Nov 15 22:39:34.546931 2025] [:error] [pid 27997:tid 28000] [client 18.141.166.35:60232] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env.save"] [unique_id "aRiQptpja_6cDxKbxFn86AAAAME"]
[Sat Nov 15 22:39:34.592888 2025] [:error] [pid 27911:tid 27985] [client 18.141.166.35:60190] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env.old"] [unique_id "aRiQpsGzUdrhGBIfiKSF8gAAAJE"]
[Sat Nov 15 22:39:34.596182 2025] [:error] [pid 27997:tid 28009] [client 18.141.166.35:60256] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "aRiQptpja_6cDxKbxFn86QAAAMo"]
[Sat Nov 15 22:39:34.603320 2025] [:error] [pid 19959:tid 19967] [client 18.141.166.35:60296] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/config/.env.old"] [unique_id "aRiQpsjejiTUP1-IawMBugAAAYE"]
[Sat Nov 15 22:39:34.643477 2025] [:error] [pid 20346:tid 20359] [client 18.141.166.35:60244] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/config/.env"] [unique_id "aRiQpp7hsydZdIoVTltlkwAAAwo"]
[Sat Nov 15 22:39:34.674511 2025] [:error] [pid 20346:tid 20351] [client 18.141.166.35:60266] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env.old"] [unique_id "aRiQpp7hsydZdIoVTltllAAAAwI"]
[Sat Nov 15 22:39:34.719652 2025] [:error] [pid 19959:tid 19980] [client 18.141.166.35:60280] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/config/.env.save"] [unique_id "aRiQpsjejiTUP1-IawMBuwAAAY4"]
[Sat Nov 15 22:39:34.727632 2025] [:error] [pid 20654:tid 20679] [client 18.141.166.35:58490] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/src/.env.save"] [unique_id "aRiQpncS7eC8vO76_ycihAAAA5Y"]
[Sat Nov 15 22:39:34.784497 2025] [:error] [pid 19961:tid 19995] [client 18.141.166.35:58474] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env.bak"] [unique_id "aRiQpjar7Si-84EApVSURAAAAcI"]
[Sat Nov 15 22:39:34.788115 2025] [:error] [pid 20313:tid 20340] [client 18.141.166.35:58480] [client 18.141.166.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/config/.env.bak"] [unique_id "aRiQphI9DXIgPadBLUasXQAAAtg"]
[Sun Nov 16 03:22:04.376816 2025] [autoindex:error] [pid 27972:tid 27976] [client 20.2.83.141:53771] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 03:25:36.485563 2025] [proxy_fcgi:error] [pid 4648:tid 4663] [client 34.93.78.120:49658] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 16:17:51.091653 2025] [:error] [pid 20556:tid 20561] [client 54.180.86.210:46884] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aRmIr0kbyEckbWtBcCJlEwAAAQM"]
[Sun Nov 16 16:17:51.162500 2025] [:error] [pid 52563:tid 52582] [client 54.180.86.210:46878] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "aRmIr8-l3ey-hVJ5AuuSCAAAANA"]
[Sun Nov 16 16:17:53.621782 2025] [:error] [pid 52469:tid 52488] [client 54.180.86.210:46892] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "aRmIsU6HaXpHeEZ98Z2vbQAAAAs"]
[Sun Nov 16 16:17:53.691897 2025] [:error] [pid 52469:tid 52496] [client 54.180.86.210:46902] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "aRmIsU6HaXpHeEZ98Z2vbwAAABM"]
[Sun Nov 16 16:18:00.467964 2025] [:error] [pid 34227:tid 34236] [client 54.180.86.210:44460] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.development"] [unique_id "aRmIuH108zGLYs9eMuggwQAAAgc"]
[Sun Nov 16 16:18:00.535633 2025] [:error] [pid 52469:tid 52486] [client 54.180.86.210:44504] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env~"] [unique_id "aRmIuE6HaXpHeEZ98Z2veAAAAAk"]
[Sun Nov 16 16:18:00.558228 2025] [:error] [pid 34271:tid 34295] [client 54.180.86.210:44474] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "aRmIuENmlZhoZZV1BUCheAAAAlY"]
[Sun Nov 16 16:18:00.754256 2025] [:error] [pid 34301:tid 34313] [client 54.180.86.210:44488] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "aRmIuLGPoZwUGuFNREuymQAAAok"]
[Sun Nov 16 16:18:00.771629 2025] [:error] [pid 34164:tid 34191] [client 54.180.86.210:44482] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "aRmIuO93ccBCLD8-Q4YxpAAAAZc"]
[Sun Nov 16 16:18:00.798359 2025] [:error] [pid 34301:tid 34324] [client 54.180.86.210:44510] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "aRmIuLGPoZwUGuFNREuymgAAApQ"]
[Sun Nov 16 16:18:01.106269 2025] [:error] [pid 52563:tid 52580] [client 54.180.86.210:44514] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.test"] [unique_id "aRmIuc-l3ey-hVJ5AuuSDgAAAM4"]
[Sun Nov 16 16:18:09.408779 2025] [:error] [pid 34133:tid 34138] [client 54.180.86.210:37812] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.orig"] [unique_id "aRmIwfSAB3iwXVRY0gF8vwAAAUM"]
[Sun Nov 16 16:18:09.448443 2025] [:error] [pid 34301:tid 34327] [client 54.180.86.210:37840] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env"] [unique_id "aRmIwbGPoZwUGuFNREuyoQAAApc"]
[Sun Nov 16 16:18:09.460669 2025] [:error] [pid 52471:tid 52533] [client 54.180.86.210:37878] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env.old"] [unique_id "aRmIwdmWsFzjR5CEgDU5GwAAAIE"]
[Sun Nov 16 16:18:09.475331 2025] [:error] [pid 34271:tid 34294] [client 54.180.86.210:37854] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.tmp"] [unique_id "aRmIwUNmlZhoZZV1BUChfAAAAlU"]
[Sun Nov 16 16:18:09.475331 2025] [:error] [pid 34165:tid 34207] [client 54.180.86.210:37942] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env.bak"] [unique_id "aRmIwXhG2YTKEjXchwkQoAAAAcw"]
[Sun Nov 16 16:18:09.485979 2025] [:error] [pid 52563:tid 52572] [client 54.180.86.210:37866] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env.save"] [unique_id "aRmIwc-l3ey-hVJ5AuuSFgAAAMY"]
[Sun Nov 16 16:18:09.486371 2025] [:error] [pid 52469:tid 52481] [client 54.180.86.210:37848] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "aRmIwU6HaXpHeEZ98Z2vnwAAAAQ"]
[Sun Nov 16 16:18:09.490387 2025] [:error] [pid 34164:tid 34184] [client 54.180.86.210:37920] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "aRmIwe93ccBCLD8-Q4YxyAAAAZA"]
[Sun Nov 16 16:18:09.498287 2025] [:error] [pid 34301:tid 34310] [client 54.180.86.210:37828] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env.save"] [unique_id "aRmIwbGPoZwUGuFNREuyogAAAoY"]
[Sun Nov 16 16:18:09.510808 2025] [:error] [pid 34165:tid 34218] [client 54.180.86.210:37846] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "aRmIwXhG2YTKEjXchwkQoQAAAdc"]
[Sun Nov 16 16:18:09.513905 2025] [:error] [pid 52471:tid 52532] [client 54.180.86.210:37892] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.save"] [unique_id "aRmIwdmWsFzjR5CEgDU5HAAAAIA"]
[Sun Nov 16 16:18:09.521579 2025] [:error] [pid 34165:tid 34199] [client 54.180.86.210:37844] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "aRmIwXhG2YTKEjXchwkQogAAAcQ"]
[Sun Nov 16 16:18:09.531300 2025] [:error] [pid 34165:tid 34215] [client 54.180.86.210:37926] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.old"] [unique_id "aRmIwXhG2YTKEjXchwkQowAAAdQ"]
[Sun Nov 16 16:18:09.539474 2025] [:error] [pid 52469:tid 52497] [client 54.180.86.210:37936] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "aRmIwU6HaXpHeEZ98Z2voAAAABQ"]
[Sun Nov 16 16:18:09.546929 2025] [:error] [pid 20556:tid 20562] [client 54.180.86.210:37896] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env.old"] [unique_id "aRmIwUkbyEckbWtBcCJlQAAAAQQ"]
[Sun Nov 16 16:18:09.556461 2025] [:error] [pid 34301:tid 34306] [client 54.180.86.210:37912] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env.bak"] [unique_id "aRmIwbGPoZwUGuFNREuyowAAAoI"]
[Sun Nov 16 16:18:11.140891 2025] [:error] [pid 34227:tid 34229] [client 54.180.86.210:37950] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env.bak"] [unique_id "aRmIw3108zGLYs9eMuggxwAAAgA"]
[Sun Nov 16 16:18:11.211087 2025] [:error] [pid 34271:tid 34288] [client 54.180.86.210:37962] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env.save"] [unique_id "aRmIw0NmlZhoZZV1BUChfgAAAk8"]
[Sun Nov 16 16:18:11.371237 2025] [:error] [pid 34301:tid 34328] [client 54.180.86.210:37968] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env.old"] [unique_id "aRmIw7GPoZwUGuFNREuypQAAApg"]
[Sun Nov 16 16:18:11.430442 2025] [:error] [pid 34301:tid 34321] [client 54.180.86.210:37978] [client 54.180.86.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/config/.env"] [unique_id "aRmIw7GPoZwUGuFNREuypgAAApE"]
[Sun Nov 16 17:57:38.838154 2025] [autoindex:error] [pid 52469:tid 52496] [client 155.94.163.116:64032] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 22:49:24.510274 2025] [:error] [pid 34164:tid 34191] [client 40.65.231.69:6648] [client 40.65.231.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRnkdO93ccBCLD8-Q4aOogAAAZc"]
[Sun Nov 16 22:49:29.992188 2025] [proxy_fcgi:error] [pid 20556:tid 20570] [client 40.65.231.69:2957] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 22:49:32.427070 2025] [:error] [pid 20556:tid 20566] [client 40.65.231.69:2957] [client 40.65.231.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRnkfEkbyEckbWtBcCLNlwAAAQg"]
[Sun Nov 16 22:49:33.391403 2025] [:error] [pid 52563:tid 52589] [client 40.65.231.69:6600] [client 40.65.231.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRnkfc-l3ey-hVJ5Auve0wAAANc"]
[Sun Nov 16 22:49:34.661483 2025] [:error] [pid 34271:tid 34286] [client 40.65.231.69:3146] [client 40.65.231.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRnkfkNmlZhoZZV1BUDrxgAAAk0"]
[Sun Nov 16 22:49:36.082456 2025] [:error] [pid 34165:tid 34213] [client 40.65.231.69:4398] [client 40.65.231.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRnkgHhG2YTKEjXchwlUuQAAAdI"]
[Sun Nov 16 22:49:36.884949 2025] [:error] [pid 34165:tid 34195] [client 40.65.231.69:6630] [client 40.65.231.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRnkgHhG2YTKEjXchwlUugAAAcA"]
[Mon Nov 17 00:40:46.078764 2025] [:error] [pid 55657:tid 55703] [client 4.206.136.178:41874] [client 4.206.136.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRn-jh2pywrNN427_XQ1uwAAAcA"]
[Mon Nov 17 00:40:52.048008 2025] [proxy_fcgi:error] [pid 55655:tid 55663] [client 4.206.136.178:41965] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 00:40:53.266342 2025] [:error] [pid 55655:tid 55666] [client 4.206.136.178:41965] [client 4.206.136.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRn-lSGT_hu1vaVuRSRjaAAAAAc"]
[Mon Nov 17 00:40:53.929756 2025] [:error] [pid 55745:tid 55752] [client 4.206.136.178:41967] [client 4.206.136.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn-lYZk0eT801XQsatrwgAAAEU"]
[Mon Nov 17 00:40:54.620742 2025] [:error] [pid 55655:tid 55659] [client 4.206.136.178:41948] [client 4.206.136.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn-liGT_hu1vaVuRSRjaQAAAAA"]
[Mon Nov 17 00:40:55.084359 2025] [:error] [pid 55655:tid 55665] [client 4.206.136.178:41939] [client 4.206.136.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn-lyGT_hu1vaVuRSRjagAAAAY"]
[Mon Nov 17 00:40:55.821093 2025] [:error] [pid 55657:tid 55722] [client 4.206.136.178:41977] [client 4.206.136.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRn-lx2pywrNN427_XQ13gAAAco"]
[Mon Nov 17 05:39:51.537606 2025] [proxy_fcgi:error] [pid 40548:tid 40556] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:51.663448 2025] [proxy_fcgi:error] [pid 40548:tid 40550] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:51.784774 2025] [proxy_fcgi:error] [pid 40548:tid 40564] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:51.910096 2025] [proxy_fcgi:error] [pid 40548:tid 40551] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:52.031752 2025] [proxy_fcgi:error] [pid 40548:tid 40559] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:52.158843 2025] [proxy_fcgi:error] [pid 40548:tid 40561] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:52.399031 2025] [proxy_fcgi:error] [pid 40548:tid 40572] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:52.518381 2025] [proxy_fcgi:error] [pid 40548:tid 40563] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:52.657801 2025] [proxy_fcgi:error] [pid 40548:tid 40568] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:52.777501 2025] [proxy_fcgi:error] [pid 40548:tid 40573] [client 172.192.58.120:56581] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:39:52.892802 2025] [:error] [pid 40548:tid 40567] [client 172.192.58.120:56581] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aRpEqAM_PykfYnxh-j-vTwAAARE"]
[Mon Nov 17 05:39:54.274418 2025] [:error] [pid 39449:tid 39466] [client 172.192.58.120:58266] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aRpEqqUCymTA3MDfzLOPVgAAAAw"]
[Mon Nov 17 05:39:57.961066 2025] [:error] [pid 39537:tid 39546] [client 172.192.58.120:56691] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aRpErYZRrh1pcrdcLB_e9wAAAMY"]
[Mon Nov 17 05:39:59.483662 2025] [:error] [pid 39449:tid 39472] [client 172.192.58.120:45564] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aRpEr6UCymTA3MDfzLOPYwAAABI"]
[Mon Nov 17 05:40:00.733374 2025] [:error] [pid 39450:tid 39488] [client 172.192.58.120:51734] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aRpEsOoZqPB4_7vNEDSWoQAAAEc"]
[Mon Nov 17 05:40:01.627273 2025] [:error] [pid 39537:tid 39554] [client 172.192.58.120:51728] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aRpEsYZRrh1pcrdcLB_e_wAAAM4"]
[Mon Nov 17 05:40:06.474005 2025] [:error] [pid 40548:tid 40565] [client 172.192.58.120:45522] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aRpEtgM_PykfYnxh-j-vYgAAAQ8"]
[Mon Nov 17 05:40:08.269006 2025] [:error] [pid 39537:tid 39551] [client 172.192.58.120:45540] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aRpEuIZRrh1pcrdcLB_fDAAAAMs"]
[Mon Nov 17 05:40:09.047769 2025] [:error] [pid 39451:tid 39511] [client 172.192.58.120:58272] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aRpEuefgkqXTS0SO3fBq2QAAAIM"]
[Mon Nov 17 05:40:10.152269 2025] [:error] [pid 39451:tid 39516] [client 172.192.58.120:51715] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aRpEuufgkqXTS0SO3fBq5AAAAIg"]
[Mon Nov 17 05:40:11.800605 2025] [:error] [pid 39537:tid 39548] [client 172.192.58.120:58303] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aRpEu4ZRrh1pcrdcLB_fGwAAAMg"]
[Mon Nov 17 05:40:14.164205 2025] [:error] [pid 40548:tid 40567] [client 172.192.58.120:45513] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aRpEvgM_PykfYnxh-j-vcwAAARE"]
[Mon Nov 17 05:40:19.557490 2025] [:error] [pid 39451:tid 39518] [client 172.192.58.120:58258] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aRpEw-fgkqXTS0SO3fBrPwAAAIo"]
[Mon Nov 17 05:40:21.917248 2025] [:error] [pid 40548:tid 40554] [client 172.192.58.120:56690] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aRpExQM_PykfYnxh-j-vgQAAAQQ"]
[Mon Nov 17 05:40:25.011432 2025] [:error] [pid 39451:tid 39517] [client 172.192.58.120:56589] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aRpEyefgkqXTS0SO3fBrSwAAAIk"]
[Mon Nov 17 05:40:26.065034 2025] [:error] [pid 39449:tid 39468] [client 172.192.58.120:56628] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aRpEyqUCymTA3MDfzLOP4wAAAA4"]
[Mon Nov 17 05:40:27.249978 2025] [:error] [pid 39537:tid 39559] [client 172.192.58.120:51737] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aRpEy4ZRrh1pcrdcLB_fUQAAANM"]
[Mon Nov 17 05:40:30.399888 2025] [:error] [pid 40548:tid 40574] [client 172.192.58.120:51749] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aRpEzgM_PykfYnxh-j-vlwAAARg"]
[Mon Nov 17 05:40:34.176309 2025] [:error] [pid 39449:tid 39470] [client 172.192.58.120:56699] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aRpE0qUCymTA3MDfzLOP_gAAABA"]
[Mon Nov 17 05:40:37.002969 2025] [:error] [pid 40548:tid 40572] [client 172.192.58.120:56598] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aRpE1QM_PykfYnxh-j-vswAAARY"]
[Mon Nov 17 05:40:39.804362 2025] [:error] [pid 39449:tid 39477] [client 172.192.58.120:45550] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aRpE16UCymTA3MDfzLOQCAAAABc"]
[Mon Nov 17 05:40:46.653630 2025] [:error] [pid 39537:tid 39546] [client 172.192.58.120:56686] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aRpE3oZRrh1pcrdcLB_fkAAAAMY"]
[Mon Nov 17 05:40:55.493383 2025] [proxy_fcgi:error] [pid 39450:tid 39502] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:55.613244 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:55.731215 2025] [proxy_fcgi:error] [pid 39450:tid 39486] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:55.864797 2025] [proxy_fcgi:error] [pid 39450:tid 39491] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:55.998841 2025] [proxy_fcgi:error] [pid 39450:tid 39501] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:56.116786 2025] [proxy_fcgi:error] [pid 39450:tid 39499] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:56.237722 2025] [proxy_fcgi:error] [pid 39450:tid 39492] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:56.358182 2025] [proxy_fcgi:error] [pid 39450:tid 39489] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:56.485097 2025] [proxy_fcgi:error] [pid 39450:tid 39497] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:56.603815 2025] [proxy_fcgi:error] [pid 39450:tid 39498] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:56.721681 2025] [proxy_fcgi:error] [pid 39450:tid 39493] [client 172.192.58.120:58263] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:40:56.841395 2025] [:error] [pid 39450:tid 39505] [client 172.192.58.120:58263] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aRpE6OoZqPB4_7vNEDSXNgAAAFg"]
[Mon Nov 17 05:40:58.203159 2025] [:error] [pid 40548:tid 40568] [client 172.192.58.120:45545] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aRpE6gM_PykfYnxh-j-v1gAAARI"]
[Mon Nov 17 05:41:02.666165 2025] [:error] [pid 39449:tid 39454] [client 172.192.58.120:51771] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aRpE7qUCymTA3MDfzLOQJwAAAAA"]
[Mon Nov 17 05:41:05.202490 2025] [:error] [pid 39537:tid 39550] [client 172.192.58.120:43271] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aRpE8YZRrh1pcrdcLB_frwAAAMo"]
[Mon Nov 17 05:41:06.634565 2025] [:error] [pid 39449:tid 39457] [client 172.192.58.120:51729] [client 172.192.58.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aRpE8qUCymTA3MDfzLOQKwAAAAM"]
[Mon Nov 17 05:41:08.982612 2025] [:error] [pid 39451:tid 39513] [client 172.192.58.120:56679] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aRpE9OfgkqXTS0SO3fBroAAAAIU"]
[Mon Nov 17 05:41:10.078258 2025] [:error] [pid 39537:tid 39548] [client 172.192.58.120:55347] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aRpE9oZRrh1pcrdcLB_ftgAAAMg"]
[Mon Nov 17 05:41:11.775350 2025] [:error] [pid 40548:tid 40551] [client 172.192.58.120:45549] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aRpE9wM_PykfYnxh-j-v_QAAAQE"]
[Mon Nov 17 05:41:13.268193 2025] [:error] [pid 39449:tid 39473] [client 172.192.58.120:45548] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aRpE-aUCymTA3MDfzLOQOAAAABM"]
[Mon Nov 17 05:41:15.617591 2025] [:error] [pid 40548:tid 40555] [client 172.192.58.120:51748] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aRpE-wM_PykfYnxh-j-wAgAAAQU"]
[Mon Nov 17 05:41:16.978241 2025] [:error] [pid 39449:tid 39476] [client 172.192.58.120:56633] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aRpE_KUCymTA3MDfzLOQQwAAABY"]
[Mon Nov 17 05:41:20.005807 2025] [:error] [pid 39451:tid 39531] [client 172.192.58.120:51738] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aRpFAOfgkqXTS0SO3fBrqQAAAJc"]
[Mon Nov 17 05:41:21.359675 2025] [:error] [pid 39450:tid 39505] [client 172.192.58.120:58284] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aRpFAeoZqPB4_7vNEDSXTQAAAFg"]
[Mon Nov 17 05:41:21.823702 2025] [:error] [pid 39450:tid 39488] [client 172.192.58.120:51742] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/golden.php"] [unique_id "aRpFAeoZqPB4_7vNEDSXTwAAAEc"]
[Mon Nov 17 05:41:23.904042 2025] [:error] [pid 39449:tid 39461] [client 172.192.58.120:58289] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/golden.php"] [unique_id "aRpFA6UCymTA3MDfzLOQSAAAAAc"]
[Mon Nov 17 05:41:31.713055 2025] [:error] [pid 39451:tid 39512] [client 172.192.58.120:58275] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/golden.php"] [unique_id "aRpFC-fgkqXTS0SO3fBrrgAAAIQ"]
[Mon Nov 17 05:41:35.508562 2025] [:error] [pid 39449:tid 39463] [client 172.192.58.120:45537] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/golden.php"] [unique_id "aRpFD6UCymTA3MDfzLOQUwAAAAk"]
[Mon Nov 17 05:41:41.247335 2025] [:error] [pid 39537:tid 39543] [client 172.192.58.120:56651] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aRpFFYZRrh1pcrdcLB_fzwAAAMM"]
[Mon Nov 17 05:41:42.705968 2025] [:error] [pid 39451:tid 39521] [client 172.192.58.120:56632] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aRpFFufgkqXTS0SO3fBrxgAAAI0"]
[Mon Nov 17 05:41:43.423276 2025] [:error] [pid 39537:tid 39543] [client 172.192.58.120:58249] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aRpFF4ZRrh1pcrdcLB_f5QAAAMM"]
[Mon Nov 17 05:41:47.400064 2025] [:error] [pid 39451:tid 39515] [client 172.192.58.120:51762] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aRpFG-fgkqXTS0SO3fBrzQAAAIc"]
[Mon Nov 17 05:41:49.068220 2025] [:error] [pid 39450:tid 39503] [client 172.192.58.120:58278] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aRpFHeoZqPB4_7vNEDSXcAAAAFY"]
[Mon Nov 17 05:41:53.139627 2025] [:error] [pid 39451:tid 39518] [client 172.192.58.120:43264] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aRpFIefgkqXTS0SO3fBr0wAAAIo"]
[Mon Nov 17 05:41:55.703098 2025] [:error] [pid 40548:tid 40563] [client 172.192.58.120:56663] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aRpFIwM_PykfYnxh-j-wGAAAAQ0"]
[Mon Nov 17 05:41:59.717031 2025] [proxy_fcgi:error] [pid 39451:tid 39513] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:41:59.836347 2025] [proxy_fcgi:error] [pid 39451:tid 39529] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:41:59.974713 2025] [proxy_fcgi:error] [pid 39451:tid 39523] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:00.094336 2025] [proxy_fcgi:error] [pid 39451:tid 39521] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:00.214497 2025] [proxy_fcgi:error] [pid 39451:tid 39531] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:01.696874 2025] [proxy_fcgi:error] [pid 39451:tid 39511] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:01.830909 2025] [proxy_fcgi:error] [pid 39451:tid 39527] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:01.950408 2025] [proxy_fcgi:error] [pid 39451:tid 39519] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:02.102285 2025] [proxy_fcgi:error] [pid 39451:tid 39516] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:02.224612 2025] [proxy_fcgi:error] [pid 39451:tid 39525] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:02.452876 2025] [proxy_fcgi:error] [pid 39451:tid 39532] [client 172.192.58.120:56666] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:42:02.839198 2025] [:error] [pid 39451:tid 39524] [client 172.192.58.120:56666] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "aRpFKufgkqXTS0SO3fBr7AAAAJA"]
[Mon Nov 17 05:42:06.152686 2025] [:error] [pid 40548:tid 40572] [client 172.192.58.120:45553] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "aRpFLgM_PykfYnxh-j-wIQAAARY"]
[Mon Nov 17 05:42:09.126111 2025] [:error] [pid 39450:tid 39499] [client 172.192.58.120:56659] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "aRpFMeoZqPB4_7vNEDSXegAAAFI"]
[Mon Nov 17 05:42:12.705521 2025] [:error] [pid 39537:tid 39554] [client 172.192.58.120:58292] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "aRpFNIZRrh1pcrdcLB_f_QAAAM4"]
[Mon Nov 17 05:42:20.177608 2025] [:error] [pid 39450:tid 39498] [client 172.192.58.120:58287] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/re.php"] [unique_id "aRpFPOoZqPB4_7vNEDSXgQAAAFE"]
[Mon Nov 17 05:42:21.608228 2025] [:error] [pid 39451:tid 39518] [client 172.192.58.120:45567] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/re.php"] [unique_id "aRpFPefgkqXTS0SO3fBr-gAAAIo"]
[Mon Nov 17 05:42:23.403900 2025] [:error] [pid 40548:tid 40558] [client 172.192.58.120:45515] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/re.php"] [unique_id "aRpFPwM_PykfYnxh-j-wLgAAAQg"]
[Mon Nov 17 05:42:27.288785 2025] [:error] [pid 39537:tid 39544] [client 172.192.58.120:51724] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/re.php"] [unique_id "aRpFQ4ZRrh1pcrdcLB_gDgAAAMQ"]
[Mon Nov 17 05:42:28.486188 2025] [:error] [pid 39451:tid 39523] [client 172.192.58.120:56641] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aRpFROfgkqXTS0SO3fBsBwAAAI8"]
[Mon Nov 17 05:42:29.396217 2025] [:error] [pid 40548:tid 40566] [client 172.192.58.120:56697] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aRpFRQM_PykfYnxh-j-wMQAAARA"]
[Mon Nov 17 05:42:30.927535 2025] [:error] [pid 39537:tid 39563] [client 172.192.58.120:51724] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aRpFRoZRrh1pcrdcLB_gFgAAANc"]
[Mon Nov 17 05:42:33.719977 2025] [:error] [pid 40548:tid 40551] [client 172.192.58.120:55356] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aRpFSQM_PykfYnxh-j-wNgAAAQE"]
[Mon Nov 17 05:42:36.602155 2025] [:error] [pid 39449:tid 39454] [client 172.192.58.120:55329] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aRpFTKUCymTA3MDfzLORAgAAAAA"]
[Mon Nov 17 05:42:37.103481 2025] [:error] [pid 39537:tid 39547] [client 172.192.58.120:58299] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aRpFTYZRrh1pcrdcLB_gGgAAAMc"]
[Mon Nov 17 05:42:37.897021 2025] [:error] [pid 39449:tid 39473] [client 172.192.58.120:51733] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aRpFTaUCymTA3MDfzLORBAAAABM"]
[Mon Nov 17 05:42:39.375525 2025] [:error] [pid 39449:tid 39457] [client 172.192.58.120:58300] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aRpFT6UCymTA3MDfzLORBQAAAAM"]
[Mon Nov 17 05:42:41.571716 2025] [:error] [pid 39451:tid 39532] [client 172.192.58.120:58267] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aRpFUefgkqXTS0SO3fBsDwAAAJg"]
[Mon Nov 17 05:42:42.763703 2025] [:error] [pid 39451:tid 39520] [client 172.192.58.120:45511] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aRpFUufgkqXTS0SO3fBsEQAAAIw"]
[Mon Nov 17 05:42:44.026418 2025] [:error] [pid 39537:tid 39541] [client 172.192.58.120:45517] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aRpFVIZRrh1pcrdcLB_gIQAAAME"]
[Mon Nov 17 05:42:46.039360 2025] [:error] [pid 40548:tid 40553] [client 172.192.58.120:43269] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aRpFVgM_PykfYnxh-j-wRwAAAQM"]
[Mon Nov 17 05:42:47.261865 2025] [:error] [pid 39450:tid 39488] [client 172.192.58.120:45514] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aRpFV-oZqPB4_7vNEDSXmgAAAEc"]
[Mon Nov 17 05:42:49.798780 2025] [:error] [pid 39537:tid 39542] [client 172.192.58.120:43284] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aRpFWYZRrh1pcrdcLB_gMgAAAMI"]
[Mon Nov 17 05:42:52.019594 2025] [:error] [pid 39449:tid 39461] [client 172.192.58.120:58264] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aRpFXKUCymTA3MDfzLOREQAAAAc"]
[Mon Nov 17 05:42:55.878034 2025] [:error] [pid 39537:tid 39556] [client 172.192.58.120:58244] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aRpFX4ZRrh1pcrdcLB_gPQAAANA"]
[Mon Nov 17 05:42:57.193333 2025] [:error] [pid 39449:tid 39473] [client 172.192.58.120:56590] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aRpFYaUCymTA3MDfzLORFAAAABM"]
[Mon Nov 17 05:42:57.627482 2025] [:error] [pid 39450:tid 39486] [client 172.192.58.120:51725] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aRpFYeoZqPB4_7vNEDSXqQAAAEU"]
[Mon Nov 17 05:42:59.698951 2025] [:error] [pid 39451:tid 39510] [client 172.192.58.120:58273] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aRpFY-fgkqXTS0SO3fBsJgAAAII"]
[Mon Nov 17 05:43:01.634074 2025] [:error] [pid 39449:tid 39477] [client 172.192.58.120:56692] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aRpFZaUCymTA3MDfzLORHQAAABc"]
[Mon Nov 17 05:43:03.936461 2025] [proxy_fcgi:error] [pid 39449:tid 39463] [client 172.192.58.120:56577] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:43:05.656449 2025] [proxy_fcgi:error] [pid 39449:tid 39476] [client 172.192.58.120:56577] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:43:05.783204 2025] [proxy_fcgi:error] [pid 39449:tid 39462] [client 172.192.58.120:56577] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:43:05.913942 2025] [proxy_fcgi:error] [pid 39449:tid 39474] [client 172.192.58.120:56577] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 05:43:06.034620 2025] [proxy_fcgi:error] [pid 39449:tid 39466] [client 172.192.58.120:56577] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:52.718822 2025] [proxy_fcgi:error] [pid 39537:tid 39558] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:52.925386 2025] [proxy_fcgi:error] [pid 39537:tid 39553] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:53.168597 2025] [proxy_fcgi:error] [pid 39537:tid 39564] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:53.451200 2025] [proxy_fcgi:error] [pid 39537:tid 39551] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:53.673862 2025] [proxy_fcgi:error] [pid 39537:tid 39552] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:53.914014 2025] [proxy_fcgi:error] [pid 39537:tid 39540] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:54.207649 2025] [proxy_fcgi:error] [pid 39537:tid 39554] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:54.567275 2025] [proxy_fcgi:error] [pid 39537:tid 39543] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:55.212816 2025] [proxy_fcgi:error] [pid 39537:tid 39549] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:55.419476 2025] [proxy_fcgi:error] [pid 39537:tid 39544] [client 20.171.140.78:65184] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:15:55.732807 2025] [:error] [pid 39537:tid 39548] [client 20.171.140.78:65184] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen/function.php"] [unique_id "aRsD64ZRrh1pcrdcLB-20QAAAMg"]
[Mon Nov 17 19:15:56.126542 2025] [:error] [pid 40548:tid 40563] [client 20.171.140.78:65161] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen/function.php"] [unique_id "aRsD7AM_PykfYnxh-j9mEAAAAQ0"]
[Mon Nov 17 19:15:56.817613 2025] [:error] [pid 39451:tid 39528] [client 20.171.140.78:65169] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen/function.php"] [unique_id "aRsD7OfgkqXTS0SO3fAcagAAAJQ"]
[Mon Nov 17 19:15:57.501808 2025] [:error] [pid 40548:tid 40551] [client 20.171.140.78:65155] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen/function.php"] [unique_id "aRsD7QM_PykfYnxh-j9mEgAAAQE"]
[Mon Nov 17 21:00:03.218605 2025] [:error] [pid 39449:tid 39469] [client 202.134.186.211:53732] [client 202.134.186.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.134.186.211, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRscU6UCymTA3MDfzLNm4wAAAA8"]
[Mon Nov 17 21:00:03.231960 2025] [proxy_fcgi:error] [pid 39449:tid 39469] [client 202.134.186.211:53732] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:03:08.206836 2025] [:error] [pid 1387:tid 1417] [client 112.198.186.32:48082] [client 112.198.186.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.198.186.32, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRw2TEzBvalKyx3hMvVGuQAAABg"]
[Tue Nov 18 17:03:08.218778 2025] [proxy_fcgi:error] [pid 1387:tid 1417] [client 112.198.186.32:48082] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 20:34:45.662201 2025] [autoindex:error] [pid 44471:tid 44528] [client 84.247.191.22:56260] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 18 21:37:28.689757 2025] [:error] [pid 44472:tid 44543] [client 45.134.79.103:62005] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mIKhGwkiLjv8BQwewQAAAUw"]
[Wed Nov 19 00:06:58.311875 2025] [:error] [pid 44472:tid 44554] [client 34.30.49.159:53418] [client 34.30.49.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.49.159, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aRyZooKhGwkiLjv8BQxFpAAAAVc"]
[Wed Nov 19 00:06:58.323594 2025] [proxy_fcgi:error] [pid 44472:tid 44554] [client 34.30.49.159:53418] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 00:07:00.976904 2025] [:error] [pid 44472:tid 44532] [client 34.30.49.159:53418] [client 34.30.49.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRyZpIKhGwkiLjv8BQxFsQAAAUE"]
[Wed Nov 19 00:07:01.440085 2025] [:error] [pid 44472:tid 44541] [client 34.30.49.159:55744] [client 34.30.49.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRyZpYKhGwkiLjv8BQxFswAAAUo"]
[Wed Nov 19 00:07:01.915512 2025] [:error] [pid 1387:tid 1416] [client 34.30.49.159:63960] [client 34.30.49.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aRyZpUzBvalKyx3hMvXHeAAAABc"]
[Wed Nov 19 00:07:02.397840 2025] [:error] [pid 44470:tid 44497] [client 34.30.49.159:59782] [client 34.30.49.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aRyZpjv-RLYfULjlgDYuGAAAAFY"]
[Wed Nov 19 00:07:02.858728 2025] [:error] [pid 44560:tid 44595] [client 34.30.49.159:61286] [client 34.30.49.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRyZpgnbP7etF3q5-5vwLgAAANg"]
[Wed Nov 19 00:07:03.326863 2025] [:error] [pid 44470:tid 44493] [client 34.30.49.159:55738] [client 34.30.49.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRyZpzv-RLYfULjlgDYuGQAAAFI"]
[Wed Nov 19 00:07:03.781977 2025] [:error] [pid 44472:tid 44544] [client 34.30.49.159:54455] [client 34.30.49.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aRyZp4KhGwkiLjv8BQxFuAAAAU0"]
[Wed Nov 19 20:35:57.174067 2025] [:error] [pid 6919:tid 6934] [client 104.196.176.201:57895] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rUYFdN1s_9xJVUmBdQAAAQw"]
[Thu Nov 20 06:18:28.413420 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 20.19.181.152:50600] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:18:28.679093 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 20.19.181.152:50600] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:18:29.184232 2025] [proxy_fcgi:error] [pid 55343:tid 55408] [client 20.19.181.152:50600] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:18:29.426481 2025] [proxy_fcgi:error] [pid 55343:tid 55419] [client 20.19.181.152:50600] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:18:29.665063 2025] [:error] [pid 55343:tid 55407] [client 20.19.181.152:50600] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ar/mgsl.php"] [unique_id "aR5CNVWlO3EnyVMV7w4AoAAAAIg"]
[Thu Nov 20 06:18:32.384056 2025] [:error] [pid 34405:tid 34431] [client 20.19.181.152:41285] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ar/mgsl.php"] [unique_id "aR5CODFpvu8oRK7ATft7uAAAARg"]
[Thu Nov 20 06:18:35.663482 2025] [:error] [pid 55343:tid 55403] [client 20.19.181.152:42589] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ar/mgsl.php"] [unique_id "aR5CO1WlO3EnyVMV7w4ArwAAAIQ"]
[Thu Nov 20 06:18:50.572255 2025] [:error] [pid 34444:tid 34470] [client 20.19.181.152:42566] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mgsl.php"] [unique_id "aR5CSlNEol4jlmmA_GOWQgAAAVg"]
[Thu Nov 20 06:18:53.270426 2025] [:error] [pid 34444:tid 34456] [client 20.19.181.152:52293] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mgsl.php"] [unique_id "aR5CTVNEol4jlmmA_GOWRgAAAUo"]
[Thu Nov 20 06:18:58.654050 2025] [:error] [pid 55430:tid 55456] [client 20.19.181.152:57604] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mgsl.php"] [unique_id "aR5CUvPZXaIMEU4pE7tHIAAAANc"]
[Thu Nov 20 06:19:09.609699 2025] [:error] [pid 55342:tid 55377] [client 20.19.181.152:57606] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-pano.php"] [unique_id "aR5CXbg6x32Tvk7fIG8_kAAAAEU"]
[Thu Nov 20 06:19:15.397143 2025] [:error] [pid 55342:tid 55396] [client 20.19.181.152:52296] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-pano.php"] [unique_id "aR5CY7g6x32Tvk7fIG8_lAAAAFg"]
[Thu Nov 20 06:19:28.478825 2025] [:error] [pid 55342:tid 55382] [client 20.19.181.152:26161] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/glmiiqmk.php"] [unique_id "aR5CcLg6x32Tvk7fIG8_nQAAAEo"]
[Thu Nov 20 06:19:30.772933 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:31.023468 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:31.266575 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:31.515704 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:31.779136 2025] [proxy_fcgi:error] [pid 55430:tid 55435] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:32.034119 2025] [proxy_fcgi:error] [pid 55430:tid 55452] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:32.565582 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:32.812165 2025] [proxy_fcgi:error] [pid 55430:tid 55447] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:33.053134 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:33.296648 2025] [proxy_fcgi:error] [pid 55430:tid 55456] [client 20.19.181.152:26148] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:19:34.824653 2025] [:error] [pid 55430:tid 55443] [client 20.19.181.152:26148] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0xby.php"] [unique_id "aR5CdvPZXaIMEU4pE7tHPQAAAMo"]
[Thu Nov 20 06:19:37.928520 2025] [:error] [pid 55343:tid 55416] [client 20.19.181.152:52300] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0xby.php"] [unique_id "aR5CeVWlO3EnyVMV7w4A3QAAAJE"]
[Thu Nov 20 06:19:45.232509 2025] [:error] [pid 55342:tid 55384] [client 20.19.181.152:49814] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0xby.php"] [unique_id "aR5Cgbg6x32Tvk7fIG8_rQAAAEw"]
[Thu Nov 20 06:19:46.853650 2025] [:error] [pid 34444:tid 34465] [client 20.19.181.152:26129] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0xby.php"] [unique_id "aR5CglNEol4jlmmA_GOWegAAAVM"]
[Thu Nov 20 06:20:08.149962 2025] [:error] [pid 34444:tid 34459] [client 20.19.181.152:56436] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hel.php"] [unique_id "aR5CmFNEol4jlmmA_GOWlgAAAU0"]
[Thu Nov 20 06:20:20.128037 2025] [:error] [pid 55343:tid 55408] [client 20.19.181.152:51233] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hel.php"] [unique_id "aR5CpFWlO3EnyVMV7w4A9QAAAIk"]
[Thu Nov 20 06:20:22.167148 2025] [:error] [pid 34444:tid 34449] [client 20.19.181.152:54345] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aR5CplNEol4jlmmA_GOWngAAAUM"]
[Thu Nov 20 06:20:23.613733 2025] [:error] [pid 34444:tid 34460] [client 20.19.181.152:3985] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aR5Cp1NEol4jlmmA_GOWoAAAAU4"]
[Thu Nov 20 06:20:26.496172 2025] [:error] [pid 55342:tid 55387] [client 20.19.181.152:43204] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aR5Cqrg6x32Tvk7fIG8_ygAAAE8"]
[Thu Nov 20 06:20:29.914940 2025] [:error] [pid 34405:tid 34429] [client 20.19.181.152:4022] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aR5CrTFpvu8oRK7ATft76AAAARY"]
[Thu Nov 20 06:20:40.082751 2025] [proxy_fcgi:error] [pid 55430:tid 55447] [client 20.19.181.152:56338] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:20:40.331100 2025] [:error] [pid 55430:tid 55434] [client 20.19.181.152:56338] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/met2.php"] [unique_id "aR5CuPPZXaIMEU4pE7tHaQAAAME"]
[Thu Nov 20 06:20:43.906223 2025] [:error] [pid 55430:tid 55455] [client 20.19.181.152:43215] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/met2.php"] [unique_id "aR5Cu_PZXaIMEU4pE7tHbAAAANY"]
[Thu Nov 20 06:20:51.714532 2025] [:error] [pid 34444:tid 34453] [client 20.19.181.152:4011] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/met2.php"] [unique_id "aR5Cw1NEol4jlmmA_GOWrQAAAUc"]
[Thu Nov 20 06:20:57.590779 2025] [:error] [pid 55343:tid 55404] [client 20.19.181.152:3910] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "aR5CyVWlO3EnyVMV7w4BBgAAAIU"]
[Thu Nov 20 06:21:03.679215 2025] [:error] [pid 34444:tid 34461] [client 20.19.181.152:4031] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "aR5Cz1NEol4jlmmA_GOWwQAAAU8"]
[Thu Nov 20 06:21:10.540790 2025] [:error] [pid 34444:tid 34459] [client 20.19.181.152:51137] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "aR5C1lNEol4jlmmA_GOWxAAAAU0"]
[Thu Nov 20 06:21:16.609872 2025] [:error] [pid 55342:tid 55383] [client 20.19.181.152:3960] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x.php"] [unique_id "aR5C3Lg6x32Tvk7fIG8_6wAAAEs"]
[Thu Nov 20 06:21:39.890048 2025] [:error] [pid 55342:tid 55392] [client 20.19.181.152:3963] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/undel.php"] [unique_id "aR5C87g6x32Tvk7fIG9AAgAAAFQ"]
[Thu Nov 20 06:21:49.004445 2025] [proxy_fcgi:error] [pid 34405:tid 34413] [client 20.19.181.152:3979] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:21:49.502489 2025] [proxy_fcgi:error] [pid 34405:tid 34421] [client 20.19.181.152:3979] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 12:10:20.066757 2025] [:error] [pid 34405:tid 34426] [client 98.81.111.26:52847] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wordpress"] [unique_id "aR6UrDFpvu8oRK7ATfvIxAAAARM"]
[Thu Nov 20 12:10:20.475178 2025] [:error] [pid 55430:tid 55455] [client 98.81.111.26:50415] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wordpress"] [unique_id "aR6UrPPZXaIMEU4pE7ugVQAAANY"]
[Thu Nov 20 12:10:20.879602 2025] [:error] [pid 804:tid 807] [client 98.81.111.26:61195] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wordpress"] [unique_id "aR6UrPaRHpUlPL9O0Lk1ZgAAAYE"]
[Thu Nov 20 12:10:21.291489 2025] [:error] [pid 804:tid 836] [client 98.81.111.26:53641] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wordpress"] [unique_id "aR6UrfaRHpUlPL9O0Lk1fAAAAYw"]
[Thu Nov 20 12:10:21.712249 2025] [:error] [pid 55342:tid 55387] [client 98.81.111.26:52604] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wordpress"] [unique_id "aR6Urbg6x32Tvk7fIG-L1gAAAE8"]
[Thu Nov 20 12:10:22.120311 2025] [:error] [pid 55340:tid 55364] [client 98.81.111.26:62399] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrvOxD-NeMydTybBJ2AAAABM"]
[Thu Nov 20 12:10:22.532850 2025] [:error] [pid 34444:tid 34461] [client 98.81.111.26:55831] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrlNEol4jlmmA_GPw7AAAAU8"]
[Thu Nov 20 12:10:22.946629 2025] [:error] [pid 55430:tid 55442] [client 98.81.111.26:53939] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrvPZXaIMEU4pE7ug6AAAAMk"]
[Thu Nov 20 12:10:23.358241 2025] [:error] [pid 55430:tid 55434] [client 98.81.111.26:59830] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6Ur_PZXaIMEU4pE7ug-gAAAME"]
[Thu Nov 20 12:10:23.831352 2025] [:error] [pid 55430:tid 55451] [client 98.81.111.26:49706] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6Ur_PZXaIMEU4pE7uhIAAAANI"]
[Thu Nov 20 12:10:24.249256 2025] [:error] [pid 55430:tid 55436] [client 98.81.111.26:56065] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsPPZXaIMEU4pE7uhSwAAAMM"]
[Thu Nov 20 12:10:24.657617 2025] [:error] [pid 34405:tid 34431] [client 98.81.111.26:63963] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsDFpvu8oRK7ATfvJiQAAARg"]
[Thu Nov 20 12:10:25.066386 2025] [:error] [pid 55430:tid 55455] [client 98.81.111.26:65337] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsfPZXaIMEU4pE7uhYAAAANY"]
[Thu Nov 20 12:10:25.472025 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:61364] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsfPZXaIMEU4pE7uhZwAAAMI"]
[Thu Nov 20 12:10:25.878755 2025] [:error] [pid 55343:tid 55414] [client 98.81.111.26:65127] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsVWlO3EnyVMV7w5ldwAAAI8"]
[Thu Nov 20 12:10:26.286422 2025] [:error] [pid 55342:tid 55396] [client 98.81.111.26:61334] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp"] [unique_id "aR6Usrg6x32Tvk7fIG-MRgAAAFg"]
[Thu Nov 20 12:10:26.691697 2025] [:error] [pid 804:tid 823] [client 98.81.111.26:63119] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp"] [unique_id "aR6UsvaRHpUlPL9O0Lk2JQAAAYc"]
[Thu Nov 20 12:10:27.097235 2025] [:error] [pid 55340:tid 55367] [client 98.81.111.26:49266] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp"] [unique_id "aR6Us_OxD-NeMydTybBKQgAAABY"]
[Thu Nov 20 12:10:27.503994 2025] [:error] [pid 34444:tid 34451] [client 98.81.111.26:54348] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp"] [unique_id "aR6Us1NEol4jlmmA_GPxSAAAAUU"]
[Thu Nov 20 12:10:27.909004 2025] [:error] [pid 804:tid 846] [client 98.81.111.26:51788] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp"] [unique_id "aR6Us_aRHpUlPL9O0Lk2MwAAAZY"]
[Thu Nov 20 12:10:28.317387 2025] [:error] [pid 34444:tid 34450] [client 98.81.111.26:59311] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blog"] [unique_id "aR6UtFNEol4jlmmA_GPxTgAAAUQ"]
[Thu Nov 20 12:10:28.722518 2025] [:error] [pid 804:tid 847] [client 98.81.111.26:59631] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blog"] [unique_id "aR6UtPaRHpUlPL9O0Lk2QQAAAZc"]
[Thu Nov 20 12:10:29.130893 2025] [:error] [pid 34405:tid 34420] [client 98.81.111.26:61594] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blog"] [unique_id "aR6UtTFpvu8oRK7ATfvJrwAAAQ0"]
[Thu Nov 20 12:10:29.538821 2025] [:error] [pid 55342:tid 55387] [client 98.81.111.26:54879] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blog"] [unique_id "aR6Utbg6x32Tvk7fIG-MbgAAAE8"]
[Thu Nov 20 12:10:29.946317 2025] [:error] [pid 55430:tid 55443] [client 98.81.111.26:62902] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blog"] [unique_id "aR6UtfPZXaIMEU4pE7uhjQAAAMo"]
[Thu Nov 20 12:10:30.349715 2025] [:error] [pid 55343:tid 55417] [client 98.81.111.26:59728] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new"] [unique_id "aR6UtlWlO3EnyVMV7w5lmAAAAJI"]
[Thu Nov 20 12:10:30.755024 2025] [:error] [pid 34444:tid 34454] [client 98.81.111.26:60896] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new"] [unique_id "aR6UtlNEol4jlmmA_GPxXwAAAUg"]
[Thu Nov 20 12:10:31.161790 2025] [:error] [pid 804:tid 847] [client 98.81.111.26:53662] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new"] [unique_id "aR6Ut_aRHpUlPL9O0Lk2UwAAAZc"]
[Thu Nov 20 12:10:31.568114 2025] [:error] [pid 55343:tid 55402] [client 98.81.111.26:62161] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new"] [unique_id "aR6Ut1WlO3EnyVMV7w5lngAAAIM"]
[Thu Nov 20 12:10:31.975198 2025] [:error] [pid 55340:tid 55359] [client 98.81.111.26:58770] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new"] [unique_id "aR6Ut_OxD-NeMydTybBKbgAAAA4"]
[Thu Nov 20 12:10:32.380307 2025] [:error] [pid 34405:tid 34420] [client 98.81.111.26:64807] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old"] [unique_id "aR6UuDFpvu8oRK7ATfvJ2wAAAQ0"]
[Thu Nov 20 12:10:32.784588 2025] [:error] [pid 55430:tid 55455] [client 98.81.111.26:56198] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old"] [unique_id "aR6UuPPZXaIMEU4pE7uhsQAAANY"]
[Thu Nov 20 12:10:33.188861 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:54588] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old"] [unique_id "aR6UufPZXaIMEU4pE7uhtAAAAMI"]
[Thu Nov 20 12:10:33.593215 2025] [:error] [pid 55342:tid 55377] [client 98.81.111.26:58503] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old"] [unique_id "aR6Uubg6x32Tvk7fIG-MmAAAAEU"]
[Thu Nov 20 12:10:33.998600 2025] [:error] [pid 55343:tid 55410] [client 98.81.111.26:55331] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old"] [unique_id "aR6UuVWlO3EnyVMV7w5ltQAAAIs"]
[Thu Nov 20 12:10:34.403173 2025] [:error] [pid 34444:tid 34468] [client 98.81.111.26:58058] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/newsite"] [unique_id "aR6UulNEol4jlmmA_GPxfgAAAVY"]
[Thu Nov 20 12:10:34.805503 2025] [:error] [pid 55340:tid 55353] [client 98.81.111.26:60104] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/newsite"] [unique_id "aR6UuvOxD-NeMydTybBKhwAAAAg"]
[Thu Nov 20 12:10:35.208446 2025] [:error] [pid 804:tid 817] [client 98.81.111.26:54115] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/newsite"] [unique_id "aR6Uu_aRHpUlPL9O0Lk2bgAAAYM"]
[Thu Nov 20 12:10:35.615232 2025] [:error] [pid 55340:tid 55346] [client 98.81.111.26:53793] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/newsite"] [unique_id "aR6Uu_OxD-NeMydTybBKlAAAAAE"]
[Thu Nov 20 12:10:36.023447 2025] [:error] [pid 55340:tid 55354] [client 98.81.111.26:55899] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/newsite"] [unique_id "aR6UvPOxD-NeMydTybBKmgAAAAk"]
[Thu Nov 20 12:10:36.427047 2025] [:error] [pid 804:tid 841] [client 98.81.111.26:61085] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test"] [unique_id "aR6UvPaRHpUlPL9O0Lk2fwAAAZE"]
[Thu Nov 20 12:10:36.832455 2025] [:error] [pid 55343:tid 55406] [client 98.81.111.26:50723] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test"] [unique_id "aR6UvFWlO3EnyVMV7w5lzQAAAIc"]
[Thu Nov 20 12:10:37.236775 2025] [:error] [pid 55343:tid 55416] [client 98.81.111.26:56595] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test"] [unique_id "aR6UvVWlO3EnyVMV7w5l0gAAAJE"]
[Thu Nov 20 12:10:37.640472 2025] [:error] [pid 55340:tid 55349] [client 98.81.111.26:55806] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test"] [unique_id "aR6UvfOxD-NeMydTybBKpQAAAAQ"]
[Thu Nov 20 12:10:38.049442 2025] [:error] [pid 55343:tid 55423] [client 98.81.111.26:52936] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test"] [unique_id "aR6UvlWlO3EnyVMV7w5l1gAAAJg"]
[Thu Nov 20 12:10:38.452654 2025] [:error] [pid 55340:tid 55358] [client 98.81.111.26:64399] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main"] [unique_id "aR6UvvOxD-NeMydTybBKrgAAAA0"]
[Thu Nov 20 12:10:38.862372 2025] [:error] [pid 55342:tid 55380] [client 98.81.111.26:59312] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main"] [unique_id "aR6Uvrg6x32Tvk7fIG-M2QAAAEg"]
[Thu Nov 20 12:10:39.267076 2025] [:error] [pid 804:tid 822] [client 98.81.111.26:49586] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main"] [unique_id "aR6Uv_aRHpUlPL9O0Lk2pwAAAYY"]
[Thu Nov 20 12:10:39.671696 2025] [:error] [pid 804:tid 848] [client 98.81.111.26:54015] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main"] [unique_id "aR6Uv_aRHpUlPL9O0Lk2qQAAAZg"]
[Thu Nov 20 12:10:40.076942 2025] [:error] [pid 55340:tid 55349] [client 98.81.111.26:53163] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main"] [unique_id "aR6UwPOxD-NeMydTybBKugAAAAQ"]
[Thu Nov 20 12:10:40.483225 2025] [:error] [pid 34444:tid 34448] [client 98.81.111.26:63065] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testing"] [unique_id "aR6UwFNEol4jlmmA_GPxxwAAAUI"]
[Thu Nov 20 12:10:40.887900 2025] [:error] [pid 34444:tid 34449] [client 98.81.111.26:53931] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testing"] [unique_id "aR6UwFNEol4jlmmA_GPxzAAAAUM"]
[Thu Nov 20 12:10:41.291976 2025] [:error] [pid 34444:tid 34453] [client 98.81.111.26:53518] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testing"] [unique_id "aR6UwVNEol4jlmmA_GPx1AAAAUc"]
[Thu Nov 20 12:10:41.699170 2025] [:error] [pid 34444:tid 34469] [client 98.81.111.26:57059] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testing"] [unique_id "aR6UwVNEol4jlmmA_GPx5wAAAVc"]
[Thu Nov 20 12:10:42.105312 2025] [:error] [pid 804:tid 835] [client 98.81.111.26:52605] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testing"] [unique_id "aR6UwvaRHpUlPL9O0Lk2zgAAAYs"]
[Thu Nov 20 12:10:42.509433 2025] [:error] [pid 804:tid 841] [client 98.81.111.26:57181] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site"] [unique_id "aR6UwvaRHpUlPL9O0Lk22wAAAZE"]
[Thu Nov 20 12:10:42.912227 2025] [:error] [pid 34444:tid 34466] [client 98.81.111.26:56879] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site"] [unique_id "aR6UwlNEol4jlmmA_GPx-AAAAVQ"]
[Thu Nov 20 12:10:43.315887 2025] [:error] [pid 55342:tid 55395] [client 98.81.111.26:59182] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site"] [unique_id "aR6Uw7g6x32Tvk7fIG-M9QAAAFc"]
[Thu Nov 20 12:10:43.720904 2025] [:error] [pid 34444:tid 34449] [client 98.81.111.26:62058] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site"] [unique_id "aR6Uw1NEol4jlmmA_GPyAAAAAUM"]
[Thu Nov 20 12:10:44.124823 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:57146] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site"] [unique_id "aR6UxFNEol4jlmmA_GPyBQAAAUE"]
[Thu Nov 20 12:10:44.529339 2025] [:error] [pid 55342:tid 55387] [client 98.81.111.26:56986] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/backup"] [unique_id "aR6UxLg6x32Tvk7fIG-NAwAAAE8"]
[Thu Nov 20 12:10:44.934343 2025] [:error] [pid 34405:tid 34425] [client 98.81.111.26:55548] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/backup"] [unique_id "aR6UxDFpvu8oRK7ATfvKUQAAARI"]
[Thu Nov 20 12:10:45.338496 2025] [:error] [pid 804:tid 823] [client 98.81.111.26:49253] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/backup"] [unique_id "aR6UxfaRHpUlPL9O0Lk29wAAAYc"]
[Thu Nov 20 12:10:45.743609 2025] [:error] [pid 804:tid 838] [client 98.81.111.26:60497] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/backup"] [unique_id "aR6UxfaRHpUlPL9O0Lk2_AAAAY4"]
[Thu Nov 20 12:10:46.150092 2025] [:error] [pid 55430:tid 55448] [client 98.81.111.26:54895] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/backup"] [unique_id "aR6UxvPZXaIMEU4pE7uiEQAAAM8"]
[Thu Nov 20 12:10:46.557119 2025] [:error] [pid 55430:tid 55440] [client 98.81.111.26:49352] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/demo"] [unique_id "aR6UxvPZXaIMEU4pE7uiFwAAAMc"]
[Thu Nov 20 12:10:46.973640 2025] [:error] [pid 34444:tid 34451] [client 98.81.111.26:49871] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/demo"] [unique_id "aR6UxlNEol4jlmmA_GPyJQAAAUU"]
[Thu Nov 20 12:10:47.383866 2025] [:error] [pid 804:tid 835] [client 98.81.111.26:61653] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/demo"] [unique_id "aR6Ux_aRHpUlPL9O0Lk3CgAAAYs"]
[Thu Nov 20 12:10:47.789402 2025] [:error] [pid 34444:tid 34467] [client 98.81.111.26:57027] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/demo"] [unique_id "aR6Ux1NEol4jlmmA_GPyMwAAAVU"]
[Thu Nov 20 12:10:48.195681 2025] [:error] [pid 55340:tid 55358] [client 98.81.111.26:50117] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/demo"] [unique_id "aR6UyPOxD-NeMydTybBLAAAAAA0"]
[Thu Nov 20 12:10:48.608343 2025] [:error] [pid 55342:tid 55383] [client 98.81.111.26:53358] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/home"] [unique_id "aR6UyLg6x32Tvk7fIG-NIgAAAEs"]
[Thu Nov 20 12:10:49.013394 2025] [:error] [pid 804:tid 821] [client 98.81.111.26:64618] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/home"] [unique_id "aR6UyfaRHpUlPL9O0Lk3FwAAAYU"]
[Thu Nov 20 12:10:49.417949 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:59876] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/home"] [unique_id "aR6UyVNEol4jlmmA_GPyTwAAAUE"]
[Thu Nov 20 12:10:49.824513 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:51830] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/home"] [unique_id "aR6UyfaRHpUlPL9O0Lk3KAAAAY0"]
[Thu Nov 20 12:10:50.230602 2025] [:error] [pid 55342:tid 55377] [client 98.81.111.26:60612] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/home"] [unique_id "aR6Uyrg6x32Tvk7fIG-NMwAAAEU"]
[Thu Nov 20 12:10:50.636019 2025] [:error] [pid 55430:tid 55437] [client 98.81.111.26:53919] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp"] [unique_id "aR6UyvPZXaIMEU4pE7uiYQAAAMQ"]
[Thu Nov 20 12:10:51.042260 2025] [:error] [pid 55342:tid 55373] [client 98.81.111.26:62463] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp"] [unique_id "aR6Uy7g6x32Tvk7fIG-NRgAAAEE"]
[Thu Nov 20 12:10:51.448115 2025] [:error] [pid 55430:tid 55434] [client 98.81.111.26:49887] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp"] [unique_id "aR6Uy_PZXaIMEU4pE7uiagAAAME"]
[Thu Nov 20 12:10:51.856716 2025] [:error] [pid 55343:tid 55402] [client 98.81.111.26:60808] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp"] [unique_id "aR6Uy1WlO3EnyVMV7w5mQgAAAIM"]
[Thu Nov 20 12:10:52.260911 2025] [:error] [pid 55340:tid 55365] [client 98.81.111.26:62700] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp"] [unique_id "aR6UzPOxD-NeMydTybBLIwAAABQ"]
[Thu Nov 20 12:10:52.664311 2025] [:error] [pid 34444:tid 34458] [client 98.81.111.26:55323] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev"] [unique_id "aR6UzFNEol4jlmmA_GPyZwAAAUw"]
[Thu Nov 20 12:10:53.071299 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:61843] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev"] [unique_id "aR6UzfaRHpUlPL9O0Lk3PQAAAY0"]
[Thu Nov 20 12:10:53.477926 2025] [:error] [pid 34405:tid 34408] [client 98.81.111.26:53329] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev"] [unique_id "aR6UzTFpvu8oRK7ATfvKjQAAAQE"]
[Thu Nov 20 12:10:53.881824 2025] [:error] [pid 55343:tid 55406] [client 98.81.111.26:60358] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev"] [unique_id "aR6UzVWlO3EnyVMV7w5mXQAAAIc"]
[Thu Nov 20 12:10:54.286390 2025] [:error] [pid 804:tid 833] [client 98.81.111.26:63649] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev"] [unique_id "aR6UzvaRHpUlPL9O0Lk3RgAAAYk"]
[Thu Nov 20 12:10:54.691310 2025] [:error] [pid 55430:tid 55443] [client 98.81.111.26:51182] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms"] [unique_id "aR6UzvPZXaIMEU4pE7uiiAAAAMo"]
[Thu Nov 20 12:10:55.099827 2025] [:error] [pid 34405:tid 34427] [client 98.81.111.26:49637] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms"] [unique_id "aR6UzzFpvu8oRK7ATfvKlQAAARQ"]
[Thu Nov 20 12:10:55.504654 2025] [:error] [pid 34405:tid 34411] [client 98.81.111.26:51267] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms"] [unique_id "aR6UzzFpvu8oRK7ATfvKmwAAAQQ"]
[Thu Nov 20 12:10:55.910323 2025] [:error] [pid 55342:tid 55373] [client 98.81.111.26:54217] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms"] [unique_id "aR6Uz7g6x32Tvk7fIG-NcAAAAEE"]
[Thu Nov 20 12:10:56.314871 2025] [:error] [pid 34405:tid 34419] [client 98.81.111.26:64449] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms"] [unique_id "aR6U0DFpvu8oRK7ATfvKrwAAAQw"]
[Thu Nov 20 12:10:56.719843 2025] [:error] [pid 55430:tid 55448] [client 98.81.111.26:63594] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/portal"] [unique_id "aR6U0PPZXaIMEU4pE7uipwAAAM8"]
[Thu Nov 20 12:10:57.123440 2025] [:error] [pid 55342:tid 55395] [client 98.81.111.26:58979] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/portal"] [unique_id "aR6U0bg6x32Tvk7fIG-NdQAAAFc"]
[Thu Nov 20 12:10:57.527304 2025] [:error] [pid 55430:tid 55446] [client 98.81.111.26:51505] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/portal"] [unique_id "aR6U0fPZXaIMEU4pE7uiqgAAAM0"]
[Thu Nov 20 12:10:57.932982 2025] [:error] [pid 34444:tid 34460] [client 98.81.111.26:65226] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/portal"] [unique_id "aR6U0VNEol4jlmmA_GPymAAAAU4"]
[Thu Nov 20 12:10:58.363650 2025] [:error] [pid 34405:tid 34425] [client 98.81.111.26:49735] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/portal"] [unique_id "aR6U0jFpvu8oRK7ATfvKywAAARI"]
[Thu Nov 20 12:10:58.768757 2025] [:error] [pid 55342:tid 55380] [client 98.81.111.26:55747] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web"] [unique_id "aR6U0rg6x32Tvk7fIG-NhQAAAEg"]
[Thu Nov 20 12:10:59.173971 2025] [:error] [pid 55430:tid 55442] [client 98.81.111.26:61075] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web"] [unique_id "aR6U0_PZXaIMEU4pE7uiuQAAAMk"]
[Thu Nov 20 12:10:59.579680 2025] [:error] [pid 55342:tid 55377] [client 98.81.111.26:52011] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web"] [unique_id "aR6U07g6x32Tvk7fIG-NjAAAAEU"]
[Thu Nov 20 12:10:59.984576 2025] [:error] [pid 55340:tid 55359] [client 98.81.111.26:51966] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web"] [unique_id "aR6U0_OxD-NeMydTybBLaQAAAA4"]
[Thu Nov 20 12:11:00.396661 2025] [:error] [pid 55340:tid 55349] [client 98.81.111.26:59962] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web"] [unique_id "aR6U1POxD-NeMydTybBLbwAAAAQ"]
[Fri Nov 21 02:02:48.588246 2025] [:error] [pid 28937:tid 28962] [client 103.24.87.67:56352] [client 103.24.87.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.24.87.67, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aR9XyPtbT10GL1y3DOZ68QAAANc"]
[Fri Nov 21 02:02:48.604029 2025] [proxy_fcgi:error] [pid 28937:tid 28962] [client 103.24.87.67:56352] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 02:02:53.836234 2025] [:error] [pid 28937:tid 28961] [client 45.176.233.102:53745] [client 45.176.233.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.176.233.102, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aR9XzftbT10GL1y3DOZ7FwAAANY"]
[Fri Nov 21 02:02:53.841508 2025] [proxy_fcgi:error] [pid 28937:tid 28961] [client 45.176.233.102:53745] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:01:32.656392 2025] [:error] [pid 13325:tid 13334] [client 93.123.109.7:49862] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aR9znCBUXj9tD75On3CFUQAAAAQ"]
[Fri Nov 21 14:50:14.455748 2025] [:error] [pid 25430:tid 25464] [client 213.21.239.4:48108] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSALpqpnWJcWt_4foXkZWAAAAEQ"]
[Fri Nov 21 15:13:40.402952 2025] [:error] [pid 25521:tid 25543] [client 213.21.239.4:47610] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSARJPhXnBMilDddn3XAkAAAANQ"]
[Fri Nov 21 15:49:15.797616 2025] [:error] [pid 25430:tid 25476] [client 213.21.239.4:48650] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAZe6pnWJcWt_4foXkynwAAAFA"]
[Fri Nov 21 15:50:35.218509 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:35.678607 2025] [proxy_fcgi:error] [pid 25431:tid 25503] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:36.134308 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:36.572625 2025] [proxy_fcgi:error] [pid 25431:tid 25490] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:37.010522 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:37.438048 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:37.865562 2025] [proxy_fcgi:error] [pid 25431:tid 25493] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:38.300451 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:38.740303 2025] [proxy_fcgi:error] [pid 25431:tid 25505] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:39.177598 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:40.075579 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:40.509100 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:40.940215 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:41.368945 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:41.795922 2025] [proxy_fcgi:error] [pid 25431:tid 25487] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:42.228866 2025] [proxy_fcgi:error] [pid 25431:tid 25507] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:42.665054 2025] [proxy_fcgi:error] [pid 25431:tid 25490] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:43.095587 2025] [proxy_fcgi:error] [pid 25431:tid 25510] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:43.526780 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 45.132.227.62:64771] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:49.613744 2025] [:error] [pid 25431:tid 25509] [client 45.132.227.62:64771] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSAZ2cklhXxmoIExII0g6AAAAJY"]
[Fri Nov 21 15:50:51.773064 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.93:55405] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSAZ28klhXxmoIExII0hAAAAAJg"]
[Fri Nov 21 15:50:53.918449 2025] [proxy_fcgi:error] [pid 25429:tid 25436] [client 172.98.32.93:53613] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:55.219037 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.93:53613] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSAZ3z4rZbRSr7vu-NOXcAAAAAw"]
[Fri Nov 21 15:50:56.596360 2025] [proxy_fcgi:error] [pid 25554:tid 25566] [client 45.132.227.55:49251] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:57.023088 2025] [proxy_fcgi:error] [pid 25554:tid 25572] [client 45.132.227.55:49251] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:50:57.445848 2025] [:error] [pid 25554:tid 25564] [client 45.132.227.55:49251] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSAZ4R-NtB-9AzFZrk5BmAAAAQY"]
[Fri Nov 21 15:50:58.768433 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 45.132.227.52:27053] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:00.943271 2025] [:error] [pid 46939:tid 46956] [client 45.132.227.52:27053] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSAZ5O0OmVoxD4VZ_ZlbKgAAAU4"]
[Fri Nov 21 15:51:02.232225 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.94:55527] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSAZ5sklhXxmoIExII0hRwAAAJU"]
[Fri Nov 21 15:51:03.110818 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.88:52075] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSAZ5-0OmVoxD4VZ_ZlbNAAAAUY"]
[Fri Nov 21 15:51:03.977607 2025] [:error] [pid 25429:tid 25439] [client 45.132.227.53:64485] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSAZ5z4rZbRSr7vu-NOXnwAAAAY"]
[Fri Nov 21 15:51:04.871223 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.58:37651] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSAZ6O0OmVoxD4VZ_ZlbQAAAAUM"]
[Fri Nov 21 15:51:06.743662 2025] [:error] [pid 25521:tid 25545] [client 45.132.227.55:46233] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSAZ6vhXnBMilDddn3XYMAAAANY"]
[Fri Nov 21 15:51:08.126782 2025] [:error] [pid 25521:tid 25533] [client 172.98.32.92:42279] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSAZ7PhXnBMilDddn3XYNwAAAMo"]
[Fri Nov 21 15:51:08.988588 2025] [proxy_fcgi:error] [pid 25554:tid 25581] [client 136.144.42.79:31407] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:09.844115 2025] [:error] [pid 25554:tid 25563] [client 136.144.42.79:31407] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aSAZ7R-NtB-9AzFZrk5B_wAAAQU"]
[Fri Nov 21 15:51:10.710323 2025] [proxy_fcgi:error] [pid 25554:tid 25581] [client 136.144.42.79:49533] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:11.144202 2025] [proxy_fcgi:error] [pid 25554:tid 25569] [client 136.144.42.79:49533] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:11.566620 2025] [:error] [pid 25554:tid 25564] [client 136.144.42.79:49533] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSAZ7x-NtB-9AzFZrk5CBQAAAQY"]
[Fri Nov 21 15:51:12.839782 2025] [:error] [pid 25429:tid 25444] [client 136.144.42.69:49761] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSAZ8D4rZbRSr7vu-NOX6AAAAAs"]
[Fri Nov 21 15:51:13.714533 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 45.132.227.60:22461] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:14.160181 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.60:22461] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSAZ8u0OmVoxD4VZ_ZlbiwAAAVI"]
[Fri Nov 21 15:51:15.073232 2025] [proxy_fcgi:error] [pid 25430:tid 25483] [client 172.98.32.79:42497] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:16.367463 2025] [proxy_fcgi:error] [pid 25430:tid 25463] [client 172.98.32.79:42497] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:17.711762 2025] [:error] [pid 25430:tid 25469] [client 172.98.32.79:42497] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSAZ9apnWJcWt_4foXk1GQAAAEk"]
[Fri Nov 21 15:51:18.569793 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 172.98.32.77:39459] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:18.991745 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.77:39459] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSAZ9u0OmVoxD4VZ_ZlbugAAAUM"]
[Fri Nov 21 15:51:19.853120 2025] [proxy_fcgi:error] [pid 25429:tid 25452] [client 172.98.32.89:45097] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:20.700389 2025] [:error] [pid 25429:tid 25435] [client 172.98.32.89:45097] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSAZ-D4rZbRSr7vu-NOYMAAAAAI"]
[Fri Nov 21 15:51:22.006138 2025] [:error] [pid 46939:tid 46965] [client 45.132.227.53:39971] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSAZ-u0OmVoxD4VZ_Zlb5QAAAVc"]
[Fri Nov 21 15:51:23.342613 2025] [proxy_fcgi:error] [pid 25430:tid 25460] [client 45.132.227.63:64023] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:23.805896 2025] [proxy_fcgi:error] [pid 25430:tid 25481] [client 45.132.227.63:64023] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:24.697774 2025] [:error] [pid 25430:tid 25470] [client 45.132.227.63:64023] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSAZ_KpnWJcWt_4foXk1RwAAAEo"]
[Fri Nov 21 15:51:26.021764 2025] [:error] [pid 25554:tid 25570] [client 172.98.32.88:43755] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSAZ_h-NtB-9AzFZrk5CWQAAAQw"]
[Fri Nov 21 15:51:27.310514 2025] [:error] [pid 46939:tid 46958] [client 45.132.227.64:52293] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSAZ_-0OmVoxD4VZ_ZlcLQAAAVA"]
[Fri Nov 21 15:51:28.182269 2025] [:error] [pid 25431:tid 25488] [client 45.132.227.67:33869] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSAaAMklhXxmoIExII0iOwAAAIE"]
[Fri Nov 21 15:51:29.052735 2025] [:error] [pid 25554:tid 25577] [client 45.132.227.68:59707] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSAaAR-NtB-9AzFZrk5CcwAAARM"]
[Fri Nov 21 15:51:30.792106 2025] [proxy_fcgi:error] [pid 25554:tid 25567] [client 172.98.32.88:22757] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:31.219631 2025] [:error] [pid 25554:tid 25575] [client 172.98.32.88:22757] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSAaAx-NtB-9AzFZrk5CjAAAARE"]
[Fri Nov 21 15:51:32.108220 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.99:29469] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSAaBKpnWJcWt_4foXk1igAAAFU"]
[Fri Nov 21 15:51:32.984087 2025] [:error] [pid 25521:tid 25545] [client 45.132.227.60:46359] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAaBPhXnBMilDddn3XY0gAAANY"]
[Fri Nov 21 15:51:34.725613 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 172.98.32.79:33719] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:35.578770 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 172.98.32.79:33719] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:36.016606 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 172.98.32.79:33719] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:37.297863 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.79:33719] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSAaCe0OmVoxD4VZ_ZlcqAAAAUY"]
[Fri Nov 21 15:51:39.464140 2025] [:error] [pid 25521:tid 25530] [client 172.98.32.97:25593] [client 172.98.32.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.97, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSAaC_hXnBMilDddn3XZCgAAAMc"]
[Fri Nov 21 15:51:39.909269 2025] [proxy_fcgi:error] [pid 25521:tid 25529] [client 172.98.32.97:25593] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:42.128595 2025] [proxy_fcgi:error] [pid 25521:tid 25525] [client 172.98.32.97:25593] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:42.554713 2025] [proxy_fcgi:error] [pid 25521:tid 25523] [client 172.98.32.97:25593] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:44.714199 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.97:25593] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSAaEPhXnBMilDddn3XZOwAAANA"]
[Fri Nov 21 15:51:46.004724 2025] [proxy_fcgi:error] [pid 25429:tid 25445] [client 172.98.32.86:29793] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:46.483893 2025] [:error] [pid 25429:tid 25438] [client 172.98.32.86:29793] [client 172.98.32.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.86, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSAaEj4rZbRSr7vu-NOZBQAAAAU"]
[Fri Nov 21 15:51:47.348935 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.86:29793] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSAaEz4rZbRSr7vu-NOZCQAAAAo"]
[Fri Nov 21 15:51:48.650660 2025] [proxy_fcgi:error] [pid 46939:tid 46963] [client 45.132.227.60:25783] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:51.014608 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 45.132.227.60:25783] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:51.940098 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 45.132.227.60:25783] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:52.805750 2025] [:error] [pid 46939:tid 46949] [client 45.132.227.60:25783] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSAaGO0OmVoxD4VZ_ZldUQAAAUc"]
[Fri Nov 21 15:51:53.688942 2025] [proxy_fcgi:error] [pid 25521:tid 25527] [client 172.98.32.76:64959] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:55.006079 2025] [proxy_fcgi:error] [pid 25521:tid 25536] [client 172.98.32.76:64959] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:55.904173 2025] [proxy_fcgi:error] [pid 25521:tid 25526] [client 172.98.32.76:64959] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:56.824830 2025] [proxy_fcgi:error] [pid 25521:tid 25545] [client 172.98.32.76:64959] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:57.264644 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.76:64959] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSAaHfhXnBMilDddn3XZsAAAAMw"]
[Fri Nov 21 15:51:58.130637 2025] [proxy_fcgi:error] [pid 25430:tid 25477] [client 172.98.32.100:51181] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:58.558076 2025] [proxy_fcgi:error] [pid 25430:tid 25460] [client 172.98.32.100:51181] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:51:58.982708 2025] [:error] [pid 25430:tid 25473] [client 172.98.32.100:51181] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSAaHqpnWJcWt_4foXk2UwAAAE0"]
[Fri Nov 21 15:52:00.268796 2025] [proxy_fcgi:error] [pid 25521:tid 25545] [client 45.132.227.53:28787] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:01.138291 2025] [:error] [pid 25521:tid 25528] [client 45.132.227.53:28787] [client 45.132.227.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.53, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSAaIfhXnBMilDddn3XZ3gAAAMU"]
[Fri Nov 21 15:52:01.575564 2025] [:error] [pid 25521:tid 25541] [client 45.132.227.53:28787] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSAaIfhXnBMilDddn3XZ4QAAANI"]
[Fri Nov 21 15:52:06.771931 2025] [proxy_fcgi:error] [pid 25429:tid 25437] [client 172.98.32.84:57037] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:08.520222 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 172.98.32.84:57037] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:09.380241 2025] [proxy_fcgi:error] [pid 25429:tid 25452] [client 172.98.32.84:57037] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:09.804376 2025] [:error] [pid 25429:tid 25448] [client 172.98.32.84:57037] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSAaKT4rZbRSr7vu-NOZnAAAAA8"]
[Fri Nov 21 15:52:10.673099 2025] [proxy_fcgi:error] [pid 25429:tid 25442] [client 172.98.32.84:30957] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:11.989445 2025] [:error] [pid 25429:tid 25434] [client 172.98.32.84:30957] [client 172.98.32.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.84, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSAaKz4rZbRSr7vu-NOZqgAAAAE"]
[Fri Nov 21 15:52:12.438026 2025] [proxy_fcgi:error] [pid 25429:tid 25456] [client 172.98.32.84:30957] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:12.869816 2025] [proxy_fcgi:error] [pid 25429:tid 25453] [client 172.98.32.84:30957] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:13.323841 2025] [proxy_fcgi:error] [pid 25429:tid 25438] [client 172.98.32.84:30957] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:13.766631 2025] [:error] [pid 25429:tid 25444] [client 172.98.32.84:30957] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSAaLT4rZbRSr7vu-NOZvgAAAAs"]
[Fri Nov 21 15:52:14.627452 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 45.132.227.53:56401] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:15.064697 2025] [:error] [pid 25431:tid 25505] [client 45.132.227.53:56401] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSAaL8klhXxmoIExII0jlAAAAJI"]
[Fri Nov 21 15:52:16.369334 2025] [proxy_fcgi:error] [pid 25431:tid 25487] [client 45.132.227.53:62243] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:16.800257 2025] [:error] [pid 25431:tid 25501] [client 45.132.227.53:62243] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSAaMMklhXxmoIExII0jnQAAAI4"]
[Fri Nov 21 15:52:18.575624 2025] [proxy_fcgi:error] [pid 25429:tid 25457] [client 45.132.227.53:51397] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:19.008766 2025] [:error] [pid 25429:tid 25441] [client 45.132.227.53:51397] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSAaMz4rZbRSr7vu-NOZzQAAAAg"]
[Fri Nov 21 15:52:19.941727 2025] [:error] [pid 25430:tid 25465] [client 172.98.32.85:27687] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSAaM6pnWJcWt_4foXk27AAAAEU"]
[Fri Nov 21 15:52:22.664934 2025] [proxy_fcgi:error] [pid 25431:tid 25503] [client 136.144.42.70:45751] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:23.152606 2025] [proxy_fcgi:error] [pid 25431:tid 25498] [client 136.144.42.70:45751] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:24.888231 2025] [:error] [pid 25431:tid 25505] [client 136.144.42.70:45751] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSAaOMklhXxmoIExII0j0gAAAJI"]
[Fri Nov 21 15:52:26.246264 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.81:56309] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSAaOh-NtB-9AzFZrk5EygAAAQ0"]
[Fri Nov 21 15:52:27.174216 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 136.144.42.78:53665] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:28.501831 2025] [:error] [pid 46939:tid 46956] [client 136.144.42.78:53665] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSAaPO0OmVoxD4VZ_ZlehQAAAU4"]
[Fri Nov 21 15:52:29.424916 2025] [proxy_fcgi:error] [pid 25554:tid 25578] [client 172.98.32.78:61773] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:30.297585 2025] [proxy_fcgi:error] [pid 25554:tid 25581] [client 172.98.32.78:61773] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:30.729801 2025] [:error] [pid 25554:tid 25564] [client 172.98.32.78:61773] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSAaPh-NtB-9AzFZrk5E8gAAAQY"]
[Fri Nov 21 15:52:31.616463 2025] [proxy_fcgi:error] [pid 25430:tid 25466] [client 172.98.32.94:20535] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:32.507300 2025] [:error] [pid 25430:tid 25461] [client 172.98.32.94:20535] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSAaQKpnWJcWt_4foXk3VQAAAEE"]
[Fri Nov 21 15:52:33.384030 2025] [proxy_fcgi:error] [pid 25521:tid 25528] [client 136.144.42.78:60347] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:34.791647 2025] [:error] [pid 25521:tid 25528] [client 136.144.42.78:60347] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSAaQvhXnBMilDddn3XbCQAAAMU"]
[Fri Nov 21 15:52:36.126630 2025] [proxy_fcgi:error] [pid 25431:tid 25508] [client 45.132.227.64:43045] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:37.080256 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 45.132.227.64:43045] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:37.530555 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 45.132.227.64:43045] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:39.845599 2025] [proxy_fcgi:error] [pid 25431:tid 25490] [client 45.132.227.64:43045] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:40.323087 2025] [:error] [pid 25431:tid 25487] [client 45.132.227.64:43045] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSAaSMklhXxmoIExII0kYAAAAIA"]
[Fri Nov 21 15:52:41.190865 2025] [:error] [pid 25431:tid 25506] [client 172.98.32.99:48847] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSAaScklhXxmoIExII0kaAAAAJM"]
[Fri Nov 21 15:52:42.084631 2025] [:error] [pid 25554:tid 25567] [client 45.132.227.57:24079] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSAaSh-NtB-9AzFZrk5FUgAAAQk"]
[Fri Nov 21 15:52:42.962391 2025] [:error] [pid 25554:tid 25572] [client 172.98.32.93:48893] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSAaSh-NtB-9AzFZrk5FWwAAAQ4"]
[Fri Nov 21 15:52:43.878338 2025] [proxy_fcgi:error] [pid 25430:tid 25479] [client 136.144.42.69:62697] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:44.309288 2025] [:error] [pid 25430:tid 25481] [client 136.144.42.69:62697] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSAaTKpnWJcWt_4foXk3lQAAAFU"]
[Fri Nov 21 15:52:45.176573 2025] [:error] [pid 25430:tid 25468] [client 172.98.32.85:40827] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSAaTapnWJcWt_4foXk3mgAAAEg"]
[Fri Nov 21 15:52:46.074001 2025] [proxy_fcgi:error] [pid 25429:tid 25436] [client 172.98.32.83:62743] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:46.980893 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.83:62743] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSAaTj4rZbRSr7vu-NOaoQAAAA0"]
[Fri Nov 21 15:52:47.852755 2025] [:error] [pid 25430:tid 25482] [client 45.132.227.67:48233] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSAaT6pnWJcWt_4foXk3rAAAAFY"]
[Fri Nov 21 15:52:48.733715 2025] [:error] [pid 25431:tid 25510] [client 136.144.42.70:63343] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSAaUMklhXxmoIExII0kxQAAAJc"]
[Fri Nov 21 15:52:49.613896 2025] [:error] [pid 25430:tid 25470] [client 136.144.42.74:41573] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSAaUapnWJcWt_4foXk3uQAAAEo"]
[Fri Nov 21 15:52:50.952799 2025] [:error] [pid 25430:tid 25461] [client 136.144.42.70:32669] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSAaUqpnWJcWt_4foXk3wgAAAEE"]
[Fri Nov 21 15:52:52.744910 2025] [:error] [pid 25431:tid 25495] [client 136.144.42.78:62961] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSAaVMklhXxmoIExII0k6AAAAIg"]
[Fri Nov 21 15:52:53.654899 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 45.132.227.56:63831] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:55.004938 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 45.132.227.56:63831] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:55.461818 2025] [:error] [pid 46939:tid 46965] [client 45.132.227.56:63831] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSAaV-0OmVoxD4VZ_ZlfVgAAAVc"]
[Fri Nov 21 15:52:56.833846 2025] [proxy_fcgi:error] [pid 25431:tid 25498] [client 172.98.32.83:28571] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:57.267461 2025] [proxy_fcgi:error] [pid 25431:tid 25489] [client 172.98.32.83:28571] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:59.071171 2025] [proxy_fcgi:error] [pid 25431:tid 25491] [client 172.98.32.83:28571] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:52:59.500917 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.83:28571] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSAaW8klhXxmoIExII0lJwAAAJg"]
[Fri Nov 21 15:53:00.423994 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 45.132.227.53:63221] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:01.780614 2025] [:error] [pid 25521:tid 25543] [client 45.132.227.53:63221] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSAaXfhXnBMilDddn3Xb3QAAANQ"]
[Fri Nov 21 15:53:02.682057 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.96:62175] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSAaXj4rZbRSr7vu-NOa_QAAAAY"]
[Fri Nov 21 15:53:05.438320 2025] [:error] [pid 25554:tid 25581] [client 136.144.42.79:45685] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSAaYR-NtB-9AzFZrk5GNQAAARc"]
[Fri Nov 21 15:53:07.286877 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 172.98.32.79:65465] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:07.735612 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 172.98.32.79:65465] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:08.199916 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 172.98.32.79:65465] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:08.649225 2025] [proxy_fcgi:error] [pid 46939:tid 46955] [client 172.98.32.79:65465] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:10.923163 2025] [:error] [pid 46939:tid 46962] [client 172.98.32.79:65465] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSAaZu0OmVoxD4VZ_Zlf0AAAAVQ"]
[Fri Nov 21 15:53:11.789460 2025] [:error] [pid 25554:tid 25562] [client 45.132.227.66:21483] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSAaZx-NtB-9AzFZrk5GXgAAAQQ"]
[Fri Nov 21 15:53:12.676309 2025] [:error] [pid 25431:tid 25499] [client 172.98.32.95:43445] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSAaaMklhXxmoIExII0lfwAAAIw"]
[Fri Nov 21 15:53:13.539889 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.80:44543] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSAaaT4rZbRSr7vu-NObSAAAAAY"]
[Fri Nov 21 15:53:14.420917 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.86:60985] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSAaau0OmVoxD4VZ_Zlf6gAAAVE"]
[Fri Nov 21 15:53:15.297283 2025] [:error] [pid 25430:tid 25461] [client 136.144.42.70:30485] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSAaa6pnWJcWt_4foXk4OAAAAEE"]
[Fri Nov 21 15:53:16.616481 2025] [:error] [pid 25554:tid 25572] [client 172.98.32.98:42755] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSAabB-NtB-9AzFZrk5GggAAAQ4"]
[Fri Nov 21 15:53:17.477014 2025] [:error] [pid 46939:tid 46962] [client 172.98.32.92:41017] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSAabe0OmVoxD4VZ_ZlgEQAAAVQ"]
[Fri Nov 21 15:53:18.384770 2025] [:error] [pid 25521:tid 25538] [client 172.98.32.91:46209] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSAabvhXnBMilDddn3XcNAAAAM8"]
[Fri Nov 21 15:53:19.294966 2025] [:error] [pid 25521:tid 25523] [client 136.144.42.70:36157] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSAab_hXnBMilDddn3XcNwAAAMA"]
[Fri Nov 21 15:53:21.070866 2025] [:error] [pid 25429:tid 25434] [client 136.144.42.69:44263] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSAacT4rZbRSr7vu-NObigAAAAE"]
[Fri Nov 21 15:53:22.414630 2025] [:error] [pid 25554:tid 25560] [client 172.98.32.88:45543] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSAach-NtB-9AzFZrk5GsQAAAQI"]
[Fri Nov 21 15:53:23.317046 2025] [proxy_fcgi:error] [pid 25429:tid 25451] [client 172.98.32.94:64795] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:24.218715 2025] [:error] [pid 25429:tid 25436] [client 172.98.32.94:64795] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSAadD4rZbRSr7vu-NObqwAAAAM"]
[Fri Nov 21 15:53:26.052393 2025] [:error] [pid 25554:tid 25568] [client 136.144.42.70:63611] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSAadh-NtB-9AzFZrk5G1wAAAQo"]
[Fri Nov 21 15:53:26.941586 2025] [proxy_fcgi:error] [pid 25430:tid 25474] [client 172.98.32.92:55977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:27.865766 2025] [proxy_fcgi:error] [pid 25430:tid 25460] [client 172.98.32.92:55977] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:28.320311 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.92:55977] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSAaeKpnWJcWt_4foXk4mQAAAFM"]
[Fri Nov 21 15:53:29.649542 2025] [proxy_fcgi:error] [pid 25554:tid 25580] [client 45.132.227.67:51397] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:30.083992 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 45.132.227.67:51397] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:30.522481 2025] [proxy_fcgi:error] [pid 25554:tid 25567] [client 45.132.227.67:51397] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:30.958264 2025] [:error] [pid 25554:tid 25565] [client 45.132.227.67:51397] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSAaeh-NtB-9AzFZrk5HCQAAAQc"]
[Fri Nov 21 15:53:31.828629 2025] [proxy_fcgi:error] [pid 25430:tid 25470] [client 136.144.42.73:21327] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:32.259321 2025] [:error] [pid 25430:tid 25471] [client 136.144.42.73:21327] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSAafKpnWJcWt_4foXk4uwAAAEs"]
[Fri Nov 21 15:53:34.026858 2025] [proxy_fcgi:error] [pid 25554:tid 25580] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:34.459065 2025] [proxy_fcgi:error] [pid 25554:tid 25559] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:34.947876 2025] [proxy_fcgi:error] [pid 25554:tid 25569] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:35.841721 2025] [proxy_fcgi:error] [pid 25554:tid 25573] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:37.179182 2025] [proxy_fcgi:error] [pid 25554:tid 25559] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:37.612038 2025] [proxy_fcgi:error] [pid 25554:tid 25568] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:38.055626 2025] [proxy_fcgi:error] [pid 25554:tid 25563] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:38.491607 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:39.786236 2025] [proxy_fcgi:error] [pid 25554:tid 25569] [client 45.132.227.55:21695] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:40.216959 2025] [:error] [pid 25554:tid 25572] [client 45.132.227.55:21695] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSAahB-NtB-9AzFZrk5HSgAAAQ4"]
[Fri Nov 21 15:53:41.088817 2025] [:error] [pid 25554:tid 25564] [client 45.132.227.61:35517] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSAahR-NtB-9AzFZrk5HTgAAAQY"]
[Fri Nov 21 15:53:43.159012 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.53:52309] [client 45.132.227.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.53, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSAah_hXnBMilDddn3Xc4gAAAMA"]
[Fri Nov 21 15:53:43.164025 2025] [proxy_fcgi:error] [pid 25521:tid 25523] [client 45.132.227.53:52309] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:43.597207 2025] [proxy_fcgi:error] [pid 25521:tid 25538] [client 45.132.227.53:52309] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:44.029780 2025] [:error] [pid 25521:tid 25543] [client 45.132.227.53:52309] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSAaiPhXnBMilDddn3Xc6AAAANQ"]
[Fri Nov 21 15:53:45.371567 2025] [proxy_fcgi:error] [pid 25429:tid 25433] [client 172.98.32.85:39995] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:45.799170 2025] [:error] [pid 25429:tid 25437] [client 172.98.32.85:39995] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSAaiT4rZbRSr7vu-NOcOQAAAAQ"]
[Fri Nov 21 15:53:46.655419 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.82:25469] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSAaij4rZbRSr7vu-NOcPQAAAA0"]
[Fri Nov 21 15:53:49.352566 2025] [:error] [pid 25430:tid 25467] [client 45.132.227.62:40551] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSAajapnWJcWt_4foXk5CgAAAEc"]
[Fri Nov 21 15:53:50.308168 2025] [:error] [pid 25521:tid 25538] [client 172.98.32.90:59053] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aSAajvhXnBMilDddn3XdGgAAAM8"]
[Fri Nov 21 15:53:52.534493 2025] [proxy_fcgi:error] [pid 25429:tid 25442] [client 172.98.32.85:20633] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:53.411018 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.85:20633] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSAakT4rZbRSr7vu-NOcagAAAA0"]
[Fri Nov 21 15:53:55.253929 2025] [proxy_fcgi:error] [pid 25429:tid 25437] [client 45.132.227.58:49191] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:56.129105 2025] [:error] [pid 25429:tid 25452] [client 45.132.227.58:49191] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSAalD4rZbRSr7vu-NOcewAAABM"]
[Fri Nov 21 15:53:57.007187 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.63:47767] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSAalR-NtB-9AzFZrk5HswAAAQ0"]
[Fri Nov 21 15:53:58.346130 2025] [proxy_fcgi:error] [pid 25429:tid 25449] [client 172.98.32.93:55775] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:53:58.778021 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.93:55775] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSAalj4rZbRSr7vu-NOciAAAAAY"]
[Fri Nov 21 15:53:59.662765 2025] [:error] [pid 25431:tid 25501] [client 45.132.227.56:27279] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSAal8klhXxmoIExII0nEAAAAI4"]
[Fri Nov 21 15:54:01.451631 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 136.144.42.74:62211] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:01.915675 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 136.144.42.74:62211] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:02.840588 2025] [proxy_fcgi:error] [pid 46939:tid 46950] [client 136.144.42.74:62211] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:03.718135 2025] [:error] [pid 46939:tid 46959] [client 136.144.42.74:62211] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSAam-0OmVoxD4VZ_ZlhogAAAVE"]
[Fri Nov 21 15:54:04.594689 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.94:45531] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSAanMklhXxmoIExII0nKAAAAIg"]
[Fri Nov 21 15:54:05.471919 2025] [proxy_fcgi:error] [pid 25431:tid 25502] [client 172.98.32.82:33901] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:05.909565 2025] [proxy_fcgi:error] [pid 25431:tid 25496] [client 172.98.32.82:33901] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:06.774172 2025] [proxy_fcgi:error] [pid 25431:tid 25502] [client 172.98.32.82:33901] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:07.209218 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.82:33901] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSAan8klhXxmoIExII0nRgAAAIo"]
[Fri Nov 21 15:54:08.065723 2025] [:error] [pid 25431:tid 25502] [client 172.98.32.86:22473] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSAaoMklhXxmoIExII0nTwAAAI8"]
[Fri Nov 21 15:54:08.951910 2025] [:error] [pid 25429:tid 25446] [client 45.132.227.65:20829] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSAaoD4rZbRSr7vu-NOcuQAAAA0"]
[Fri Nov 21 15:54:11.720224 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 136.144.42.75:39933] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:12.149083 2025] [:error] [pid 46939:tid 46942] [client 136.144.42.75:39933] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSAapO0OmVoxD4VZ_Zlh6gAAAUA"]
[Fri Nov 21 15:54:13.460786 2025] [:error] [pid 46939:tid 46951] [client 45.132.227.60:56959] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSAape0OmVoxD4VZ_Zlh_AAAAUk"]
[Fri Nov 21 15:54:14.345907 2025] [proxy_fcgi:error] [pid 25431:tid 25496] [client 45.132.227.52:26127] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:14.779343 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 45.132.227.52:26127] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:15.667972 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 45.132.227.52:26127] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:18.032729 2025] [:error] [pid 25431:tid 25507] [client 45.132.227.52:26127] [client 45.132.227.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.52, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "aSAaqsklhXxmoIExII0nwAAAAJQ"]
[Fri Nov 21 15:54:18.922447 2025] [:error] [pid 25431:tid 25500] [client 45.132.227.52:26127] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Fri Nov 21 15:54:19.361031 2025] [proxy_fcgi:error] [pid 25431:tid 25497] [client 45.132.227.52:26127] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:19.797623 2025] [proxy_fcgi:error] [pid 25431:tid 25507] [client 45.132.227.52:26127] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:20.315987 2025] [proxy_fcgi:error] [pid 25431:tid 25508] [client 45.132.227.52:26127] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:20.757265 2025] [:error] [pid 25431:tid 25493] [client 45.132.227.52:26127] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSAarMklhXxmoIExII0n2gAAAIY"]
[Fri Nov 21 15:54:21.676519 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.54:59241] [client 45.132.227.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.54, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSAare0OmVoxD4VZ_ZliPQAAAUs"]
[Fri Nov 21 15:54:22.116318 2025] [proxy_fcgi:error] [pid 46939:tid 46945] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:23.002191 2025] [proxy_fcgi:error] [pid 46939:tid 46956] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:23.443134 2025] [proxy_fcgi:error] [pid 46939:tid 46944] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:24.389582 2025] [proxy_fcgi:error] [pid 46939:tid 46945] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:25.304458 2025] [proxy_fcgi:error] [pid 46939:tid 46965] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:26.645058 2025] [proxy_fcgi:error] [pid 46939:tid 46959] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:29.819653 2025] [proxy_fcgi:error] [pid 46939:tid 46953] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:30.257565 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:31.665566 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:32.555951 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:32.999756 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 45.132.227.54:59241] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:33.430515 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.54:59241] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSAaue0OmVoxD4VZ_Zli2wAAAVI"]
[Fri Nov 21 15:54:34.781407 2025] [proxy_fcgi:error] [pid 25431:tid 25499] [client 172.98.32.100:50883] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:35.215904 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 172.98.32.100:50883] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:35.697663 2025] [:error] [pid 25431:tid 25490] [client 172.98.32.100:50883] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSAau8klhXxmoIExII0oUwAAAIM"]
[Fri Nov 21 15:54:37.139608 2025] [proxy_fcgi:error] [pid 25429:tid 25445] [client 45.132.227.56:23129] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:37.570297 2025] [:error] [pid 25429:tid 25435] [client 45.132.227.56:23129] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSAavT4rZbRSr7vu-NOdWwAAAAI"]
[Fri Nov 21 15:54:39.341586 2025] [proxy_fcgi:error] [pid 25430:tid 25481] [client 45.132.227.65:30711] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:40.221852 2025] [proxy_fcgi:error] [pid 25430:tid 25475] [client 45.132.227.65:30711] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:40.670657 2025] [proxy_fcgi:error] [pid 25430:tid 25467] [client 45.132.227.65:30711] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:41.111079 2025] [proxy_fcgi:error] [pid 25430:tid 25472] [client 45.132.227.65:30711] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:41.593036 2025] [proxy_fcgi:error] [pid 25430:tid 25471] [client 45.132.227.65:30711] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:42.463117 2025] [:error] [pid 25430:tid 25464] [client 45.132.227.65:30711] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSAawqpnWJcWt_4foXk6XQAAAEQ"]
[Fri Nov 21 15:54:43.353703 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 45.132.227.55:50125] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:43.786651 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 45.132.227.55:50125] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:44.219242 2025] [:error] [pid 46939:tid 46965] [client 45.132.227.55:50125] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSAaxO0OmVoxD4VZ_ZljQQAAAVc"]
[Fri Nov 21 15:54:45.575897 2025] [:error] [pid 25429:tid 25454] [client 45.132.227.59:53165] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSAaxT4rZbRSr7vu-NOdhgAAABU"]
[Fri Nov 21 15:54:46.936616 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 136.144.42.77:41911] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:48.297125 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 136.144.42.77:41911] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:48.732853 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 136.144.42.77:41911] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:49.167119 2025] [:error] [pid 25431:tid 25506] [client 136.144.42.77:41911] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSAaycklhXxmoIExII0orQAAAJM"]
[Fri Nov 21 15:54:50.087832 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.55:50175] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSAayu0OmVoxD4VZ_ZljhwAAAUM"]
[Fri Nov 21 15:54:53.209957 2025] [proxy_fcgi:error] [pid 25429:tid 25452] [client 172.98.32.97:20545] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:54.088893 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.97:20545] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSAazj4rZbRSr7vu-NOdxwAAAAw"]
[Fri Nov 21 15:54:55.449198 2025] [:error] [pid 25431:tid 25495] [client 136.144.42.79:33189] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aSAaz8klhXxmoIExII0oyQAAAIg"]
[Fri Nov 21 15:54:56.822453 2025] [proxy_fcgi:error] [pid 46939:tid 46956] [client 136.144.42.78:43139] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:57.255421 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 136.144.42.78:43139] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:57.711408 2025] [:error] [pid 46939:tid 46964] [client 136.144.42.78:43139] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSAa0e0OmVoxD4VZ_Zlj5AAAAVY"]
[Fri Nov 21 15:54:59.104070 2025] [proxy_fcgi:error] [pid 25429:tid 25442] [client 172.98.32.77:43339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:54:59.537885 2025] [proxy_fcgi:error] [pid 25429:tid 25435] [client 172.98.32.77:43339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:00.418360 2025] [proxy_fcgi:error] [pid 25429:tid 25453] [client 172.98.32.77:43339] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:01.801254 2025] [:error] [pid 25429:tid 25444] [client 172.98.32.77:43339] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSAa1T4rZbRSr7vu-NOeGwAAAAs"]
[Fri Nov 21 15:55:02.668844 2025] [proxy_fcgi:error] [pid 25554:tid 25579] [client 136.144.42.77:30291] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:04.058826 2025] [:error] [pid 25554:tid 25565] [client 136.144.42.77:30291] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSAa2B-NtB-9AzFZrk5JugAAAQc"]
[Fri Nov 21 15:55:05.420718 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 136.144.42.77:24231] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:06.730658 2025] [proxy_fcgi:error] [pid 46939:tid 46950] [client 136.144.42.77:24231] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:07.162598 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 136.144.42.77:24231] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:08.043839 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.77:24231] [client 136.144.42.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.77, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSAa3O0OmVoxD4VZ_ZlkTwAAAUU"]
[Fri Nov 21 15:55:08.929929 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 136.144.42.77:24231] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:10.265722 2025] [:error] [pid 46939:tid 46950] [client 136.144.42.77:24231] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSAa3u0OmVoxD4VZ_ZlkZQAAAUg"]
[Fri Nov 21 15:55:11.217743 2025] [proxy_fcgi:error] [pid 25430:tid 25461] [client 172.98.32.90:34869] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:11.648356 2025] [:error] [pid 25430:tid 25474] [client 172.98.32.90:34869] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSAa36pnWJcWt_4foXk7AgAAAE4"]
[Fri Nov 21 15:55:12.586037 2025] [proxy_fcgi:error] [pid 25521:tid 25546] [client 172.98.32.77:48253] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:13.485533 2025] [proxy_fcgi:error] [pid 25521:tid 25532] [client 172.98.32.77:48253] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:14.370963 2025] [:error] [pid 25521:tid 25530] [client 172.98.32.77:48253] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSAa4vhXnBMilDddn3Xe5QAAAMc"]
[Fri Nov 21 15:55:15.699395 2025] [proxy_fcgi:error] [pid 25430:tid 25470] [client 172.98.32.84:25409] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:16.134799 2025] [proxy_fcgi:error] [pid 25430:tid 25481] [client 172.98.32.84:25409] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:17.033484 2025] [:error] [pid 25430:tid 25464] [client 172.98.32.84:25409] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSAa5apnWJcWt_4foXk7IwAAAEQ"]
[Fri Nov 21 15:55:18.417258 2025] [:error] [pid 25430:tid 25480] [client 172.98.32.89:31181] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSAa5qpnWJcWt_4foXk7LAAAAFQ"]
[Fri Nov 21 15:55:19.340395 2025] [proxy_fcgi:error] [pid 25554:tid 25564] [client 45.132.227.67:42385] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:19.789063 2025] [proxy_fcgi:error] [pid 25554:tid 25578] [client 45.132.227.67:42385] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:20.657964 2025] [:error] [pid 25554:tid 25559] [client 45.132.227.67:42385] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSAa6B-NtB-9AzFZrk5KIQAAAQE"]
[Fri Nov 21 15:55:21.555506 2025] [proxy_fcgi:error] [pid 25431:tid 25497] [client 172.98.32.99:27279] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:22.472326 2025] [proxy_fcgi:error] [pid 25431:tid 25487] [client 172.98.32.99:27279] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:22.917176 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.99:27279] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSAa6sklhXxmoIExII0pfgAAAI4"]
[Fri Nov 21 15:55:24.244857 2025] [:error] [pid 25430:tid 25479] [client 45.132.227.63:37329] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSAa7KpnWJcWt_4foXk7PgAAAFM"]
[Fri Nov 21 15:55:25.138489 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.58:48781] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSAa7R-NtB-9AzFZrk5KRQAAAQU"]
[Fri Nov 21 15:55:26.017403 2025] [:error] [pid 25429:tid 25439] [client 45.132.227.60:24941] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSAa7j4rZbRSr7vu-NOergAAAAY"]
[Fri Nov 21 15:55:26.885050 2025] [:error] [pid 25431:tid 25487] [client 45.132.227.55:27741] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSAa7sklhXxmoIExII0pnQAAAIA"]
[Fri Nov 21 15:55:27.743672 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.62:60375] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSAa7_hXnBMilDddn3XfUgAAAMA"]
[Fri Nov 21 15:55:28.734802 2025] [:error] [pid 25521:tid 25526] [client 45.132.227.67:59489] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSAa8PhXnBMilDddn3XfVQAAAMM"]
[Fri Nov 21 15:55:30.609387 2025] [:error] [pid 46939:tid 46948] [client 45.132.227.55:45515] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSAa8u0OmVoxD4VZ_ZllRQAAAUY"]
[Fri Nov 21 15:55:31.501673 2025] [:error] [pid 25431:tid 25507] [client 136.144.42.74:38285] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSAa88klhXxmoIExII0pwQAAAJQ"]
[Fri Nov 21 15:55:33.391640 2025] [:error] [pid 25554:tid 25570] [client 136.144.42.75:61861] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSAa9R-NtB-9AzFZrk5KZAAAAQw"]
[Fri Nov 21 15:55:34.845525 2025] [:error] [pid 25521:tid 25534] [client 172.98.32.76:27767] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSAa9vhXnBMilDddn3XfbQAAAMs"]
[Fri Nov 21 15:55:36.768421 2025] [:error] [pid 46939:tid 46957] [client 136.144.42.72:27337] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSAa-O0OmVoxD4VZ_ZllcgAAAU8"]
[Fri Nov 21 15:55:37.633799 2025] [proxy_fcgi:error] [pid 25521:tid 25540] [client 136.144.42.72:64443] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:40.083799 2025] [:error] [pid 25521:tid 25534] [client 136.144.42.72:64443] [client 136.144.42.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.72, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSAa_PhXnBMilDddn3XflwAAAMs"]
[Fri Nov 21 15:55:42.360810 2025] [proxy_fcgi:error] [pid 25521:tid 25533] [client 136.144.42.72:64443] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:42.792608 2025] [:error] [pid 25521:tid 25544] [client 136.144.42.72:64443] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSAa_vhXnBMilDddn3XfrAAAANU"]
[Fri Nov 21 15:55:43.670153 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.97:35933] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSAa_x-NtB-9AzFZrk5KuQAAAQ0"]
[Fri Nov 21 15:55:45.952542 2025] [proxy_fcgi:error] [pid 25521:tid 25544] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:46.436214 2025] [proxy_fcgi:error] [pid 25521:tid 25524] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:48.299676 2025] [proxy_fcgi:error] [pid 25521:tid 25534] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:48.777525 2025] [proxy_fcgi:error] [pid 25521:tid 25523] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:50.612172 2025] [proxy_fcgi:error] [pid 25521:tid 25534] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:51.057946 2025] [proxy_fcgi:error] [pid 25521:tid 25541] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:51.496051 2025] [proxy_fcgi:error] [pid 25521:tid 25532] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:51.935600 2025] [proxy_fcgi:error] [pid 25521:tid 25530] [client 45.132.227.56:20521] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:52.365957 2025] [:error] [pid 25521:tid 25542] [client 45.132.227.56:20521] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAbCPhXnBMilDddn3Xf-gAAANM"]
[Fri Nov 21 15:55:53.291128 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.63:57389] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSAbCe0OmVoxD4VZ_Zll1wAAAUM"]
[Fri Nov 21 15:55:54.185125 2025] [:error] [pid 25554:tid 25573] [client 172.98.32.87:52971] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSAbCh-NtB-9AzFZrk5LSwAAAQ8"]
[Fri Nov 21 15:55:55.526688 2025] [proxy_fcgi:error] [pid 46939:tid 46957] [client 172.98.32.81:56499] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:55.979162 2025] [proxy_fcgi:error] [pid 46939:tid 46942] [client 172.98.32.81:56499] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:56.865626 2025] [proxy_fcgi:error] [pid 46939:tid 46959] [client 172.98.32.81:56499] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:55:57.778411 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.81:56499] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSAbDe0OmVoxD4VZ_Zll_wAAAVc"]
[Fri Nov 21 15:55:58.659654 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.94:62057] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSAbDj4rZbRSr7vu-NOfggAAAAw"]
[Fri Nov 21 15:55:59.518289 2025] [:error] [pid 25430:tid 25472] [client 172.98.32.82:37895] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSAbD6pnWJcWt_4foXk8GAAAAEw"]
[Fri Nov 21 15:56:02.340492 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.85:53017] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSAbEqpnWJcWt_4foXk8KAAAAEA"]
[Fri Nov 21 15:56:03.638195 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.95:27409] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSAbEz4rZbRSr7vu-NOfqAAAAA0"]
[Fri Nov 21 15:56:05.442297 2025] [:error] [pid 25554:tid 25566] [client 45.132.227.65:61741] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSAbFR-NtB-9AzFZrk5LsAAAAQg"]
[Fri Nov 21 15:56:07.316856 2025] [proxy_fcgi:error] [pid 25430:tid 25466] [client 172.98.32.76:44971] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:08.226195 2025] [proxy_fcgi:error] [pid 25430:tid 25461] [client 172.98.32.76:44971] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:11.443741 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.76:44971] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSAbG6pnWJcWt_4foXk8eQAAAFc"]
[Fri Nov 21 15:56:12.366302 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 136.144.42.80:47751] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:13.266003 2025] [:error] [pid 25429:tid 25453] [client 136.144.42.80:47751] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSAbHT4rZbRSr7vu-NOf5QAAABQ"]
[Fri Nov 21 15:56:16.118979 2025] [proxy_fcgi:error] [pid 25431:tid 25502] [client 45.132.227.68:37407] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:17.468669 2025] [proxy_fcgi:error] [pid 25431:tid 25506] [client 45.132.227.68:37407] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:17.902033 2025] [:error] [pid 25431:tid 25500] [client 45.132.227.68:37407] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSAbIcklhXxmoIExII0rdwAAAI0"]
[Fri Nov 21 15:56:19.683954 2025] [:error] [pid 25554:tid 25582] [client 172.98.32.83:46923] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSAbIx-NtB-9AzFZrk5MFAAAARg"]
[Fri Nov 21 15:56:21.006759 2025] [proxy_fcgi:error] [pid 25521:tid 25545] [client 172.98.32.77:26377] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:22.394474 2025] [:error] [pid 25521:tid 25525] [client 172.98.32.77:26377] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSAbJvhXnBMilDddn3XhPAAAAMI"]
[Fri Nov 21 15:56:25.540229 2025] [:error] [pid 25554:tid 25578] [client 45.132.227.67:29585] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSAbKR-NtB-9AzFZrk5MUwAAARQ"]
[Fri Nov 21 15:56:26.418476 2025] [proxy_fcgi:error] [pid 46939:tid 46951] [client 172.98.32.93:30647] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:26.875213 2025] [proxy_fcgi:error] [pid 46939:tid 46944] [client 172.98.32.93:30647] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:27.374558 2025] [:error] [pid 46939:tid 46950] [client 172.98.32.93:30647] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSAbK-0OmVoxD4VZ_Zlm3wAAAUg"]
[Fri Nov 21 15:56:28.334082 2025] [:error] [pid 25429:tid 25440] [client 172.98.32.88:34169] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSAbLD4rZbRSr7vu-NOgKAAAAAc"]
[Fri Nov 21 15:56:30.586960 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 136.144.42.80:61393] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:31.524091 2025] [:error] [pid 25431:tid 25507] [client 136.144.42.80:61393] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSAbL8klhXxmoIExII0r3wAAAJQ"]
[Fri Nov 21 15:56:32.409151 2025] [proxy_fcgi:error] [pid 25430:tid 25462] [client 45.132.227.56:55611] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:34.373872 2025] [proxy_fcgi:error] [pid 25430:tid 25472] [client 45.132.227.56:55611] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:34.802911 2025] [:error] [pid 25430:tid 25477] [client 45.132.227.56:55611] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSAbMqpnWJcWt_4foXk9PQAAAFE"]
[Fri Nov 21 15:56:36.615645 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 45.132.227.68:29289] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:37.578639 2025] [:error] [pid 46939:tid 46958] [client 45.132.227.68:29289] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSAbNe0OmVoxD4VZ_ZlnLgAAAVA"]
[Fri Nov 21 15:56:38.458695 2025] [:error] [pid 25521:tid 25538] [client 45.132.227.67:23125] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSAbNvhXnBMilDddn3XheAAAAM8"]
[Fri Nov 21 15:56:40.204745 2025] [:error] [pid 46939:tid 46949] [client 45.132.227.56:21467] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSAbOO0OmVoxD4VZ_ZlnQAAAAUc"]
[Fri Nov 21 15:56:42.361703 2025] [:error] [pid 25521:tid 25540] [client 136.144.42.73:52473] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSAbOvhXnBMilDddn3XhlQAAANE"]
[Fri Nov 21 15:56:43.223057 2025] [:error] [pid 25521:tid 25528] [client 172.98.32.78:38333] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSAbO_hXnBMilDddn3XhmgAAAMU"]
[Fri Nov 21 15:56:44.543586 2025] [proxy_fcgi:error] [pid 25554:tid 25567] [client 172.98.32.98:55479] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:46.712005 2025] [:error] [pid 25554:tid 25564] [client 172.98.32.98:55479] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSAbPh-NtB-9AzFZrk5NAAAAAQY"]
[Fri Nov 21 15:56:48.436313 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.87:41913] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSAbQB-NtB-9AzFZrk5NEwAAARA"]
[Fri Nov 21 15:56:49.291849 2025] [:error] [pid 25430:tid 25461] [client 45.132.227.64:45437] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSAbQapnWJcWt_4foXk9tgAAAEE"]
[Fri Nov 21 15:56:50.648947 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 45.132.227.54:20259] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:51.093157 2025] [:error] [pid 25431:tid 25506] [client 45.132.227.54:20259] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSAbQ8klhXxmoIExII0stQAAAJM"]
[Fri Nov 21 15:56:52.424961 2025] [:error] [pid 25430:tid 25477] [client 136.144.42.75:31729] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSAbRKpnWJcWt_4foXk91QAAAFE"]
[Fri Nov 21 15:56:56.381917 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.81:60227] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSAbSO0OmVoxD4VZ_ZlnuQAAAUc"]
[Fri Nov 21 15:56:57.744880 2025] [proxy_fcgi:error] [pid 25521:tid 25536] [client 172.98.32.86:46487] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:56:58.173005 2025] [:error] [pid 25521:tid 25528] [client 172.98.32.86:46487] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSAbSvhXnBMilDddn3XiAAAAAMU"]
[Fri Nov 21 15:56:59.960787 2025] [:error] [pid 25554:tid 25570] [client 45.132.227.67:29227] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSAbSx-NtB-9AzFZrk5NXAAAAQw"]
[Fri Nov 21 15:57:01.403699 2025] [:error] [pid 25429:tid 25449] [client 45.132.227.52:63875] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSAbTT4rZbRSr7vu-NOg6AAAABA"]
[Fri Nov 21 15:57:02.718941 2025] [:error] [pid 46939:tid 46966] [client 172.98.32.81:22707] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSAbTu0OmVoxD4VZ_Zln7wAAAVg"]
[Fri Nov 21 15:57:03.620688 2025] [:error] [pid 25521:tid 25538] [client 172.98.32.91:60479] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSAbT_hXnBMilDddn3XiMAAAAM8"]
[Fri Nov 21 15:57:04.545565 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.92:39575] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSAbUO0OmVoxD4VZ_Zln9gAAAVM"]
[Fri Nov 21 15:57:08.081470 2025] [:error] [pid 25521:tid 25546] [client 172.98.32.92:38313] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSAbVPhXnBMilDddn3XiTwAAANc"]
[Fri Nov 21 15:57:10.394711 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.78:58565] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSAbVu0OmVoxD4VZ_ZloHQAAAVc"]
[Fri Nov 21 15:57:11.775027 2025] [proxy_fcgi:error] [pid 25429:tid 25444] [client 136.144.42.80:64205] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:12.210691 2025] [proxy_fcgi:error] [pid 25429:tid 25456] [client 136.144.42.80:64205] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:12.650173 2025] [:error] [pid 25429:tid 25433] [client 136.144.42.80:64205] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSAbWD4rZbRSr7vu-NOhVAAAAAA"]
[Fri Nov 21 15:57:14.850485 2025] [:error] [pid 46939:tid 46959] [client 136.144.42.72:52253] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSAbWu0OmVoxD4VZ_ZloQQAAAVE"]
[Fri Nov 21 15:57:15.728681 2025] [proxy_fcgi:error] [pid 25554:tid 25566] [client 172.98.32.98:52539] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:18.356739 2025] [:error] [pid 25554:tid 25567] [client 172.98.32.98:52539] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSAbXh-NtB-9AzFZrk5N7QAAAQk"]
[Fri Nov 21 15:57:19.717237 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.90:61127] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSAbX6pnWJcWt_4foXk-0AAAAFM"]
[Fri Nov 21 15:57:21.702168 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.96:56597] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSAbYe0OmVoxD4VZ_ZloigAAAUo"]
[Fri Nov 21 15:57:23.093614 2025] [proxy_fcgi:error] [pid 25521:tid 25532] [client 172.98.32.86:38781] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:23.545760 2025] [:error] [pid 25521:tid 25543] [client 172.98.32.86:38781] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSAbY_hXnBMilDddn3XiqwAAANQ"]
[Fri Nov 21 15:57:29.708144 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.81:35747] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSAbacklhXxmoIExII0uAAAAAJg"]
[Fri Nov 21 15:57:30.556104 2025] [:error] [pid 46939:tid 46966] [client 172.98.32.89:34547] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSAbau0OmVoxD4VZ_Zlo8wAAAVg"]
[Fri Nov 21 15:57:33.924869 2025] [:error] [pid 25521:tid 25543] [client 172.98.32.90:35203] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSAbbfhXnBMilDddn3Xi6QAAANQ"]
[Fri Nov 21 15:57:34.817184 2025] [:error] [pid 25521:tid 25546] [client 45.132.227.60:36595] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSAbbvhXnBMilDddn3Xi7QAAANc"]
[Fri Nov 21 15:57:36.612406 2025] [:error] [pid 25429:tid 25446] [client 45.132.227.59:38289] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSAbcD4rZbRSr7vu-NOiKgAAAA0"]
[Fri Nov 21 15:57:37.467026 2025] [:error] [pid 46939:tid 46958] [client 136.144.42.72:40775] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSAbce0OmVoxD4VZ_ZlpKwAAAVA"]
[Fri Nov 21 15:57:38.343817 2025] [:error] [pid 25431:tid 25503] [client 45.132.227.52:43857] [client 45.132.227.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.52, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSAbcsklhXxmoIExII0uRgAAAJA"]
[Fri Nov 21 15:57:38.348012 2025] [proxy_fcgi:error] [pid 25431:tid 25503] [client 45.132.227.52:43857] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:38.771311 2025] [:error] [pid 25431:tid 25494] [client 45.132.227.52:43857] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSAbcsklhXxmoIExII0uSwAAAIc"]
[Fri Nov 21 15:57:40.565973 2025] [proxy_fcgi:error] [pid 25431:tid 25504] [client 45.132.227.53:49965] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:41.022566 2025] [:error] [pid 25431:tid 25492] [client 45.132.227.53:49965] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSAbdcklhXxmoIExII0uZQAAAIU"]
[Fri Nov 21 15:57:41.984043 2025] [:error] [pid 46939:tid 46962] [client 172.98.32.96:28949] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSAbde0OmVoxD4VZ_ZlpSgAAAVQ"]
[Fri Nov 21 15:57:42.907052 2025] [proxy_fcgi:error] [pid 46939:tid 46960] [client 172.98.32.94:60427] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:46.048399 2025] [:error] [pid 46939:tid 46955] [client 172.98.32.94:60427] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSAbeu0OmVoxD4VZ_ZlpbgAAAU0"]
[Fri Nov 21 15:57:46.945462 2025] [:error] [pid 25430:tid 25477] [client 45.132.227.62:30733] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSAbeqpnWJcWt_4foXk_dAAAAFE"]
[Fri Nov 21 15:57:50.022234 2025] [:error] [pid 25521:tid 25541] [client 172.98.32.99:44563] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSAbfvhXnBMilDddn3XjXAAAANI"]
[Fri Nov 21 15:57:50.951024 2025] [:error] [pid 25429:tid 25443] [client 45.132.227.53:27895] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSAbfj4rZbRSr7vu-NOiswAAAAo"]
[Fri Nov 21 15:57:51.887887 2025] [proxy_fcgi:error] [pid 46939:tid 46949] [client 136.144.42.77:33363] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:52.351881 2025] [:error] [pid 46939:tid 46958] [client 136.144.42.77:33363] [client 136.144.42.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.77, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSAbgO0OmVoxD4VZ_ZlpowAAAVA"]
[Fri Nov 21 15:57:53.270684 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.77:33363] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSAbge0OmVoxD4VZ_ZlpqwAAAUI"]
[Fri Nov 21 15:57:56.000092 2025] [:error] [pid 25554:tid 25569] [client 136.144.42.73:20267] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSAbgx-NtB-9AzFZrk5PAQAAAQs"]
[Fri Nov 21 15:57:56.901745 2025] [proxy_fcgi:error] [pid 25554:tid 25563] [client 172.98.32.84:43133] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:57:57.399160 2025] [:error] [pid 25554:tid 25570] [client 172.98.32.84:43133] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSAbhR-NtB-9AzFZrk5PCgAAAQw"]
[Fri Nov 21 15:57:58.251200 2025] [:error] [pid 25430:tid 25473] [client 136.144.42.75:65429] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSAbhqpnWJcWt_4foXk_xwAAAE0"]
[Fri Nov 21 15:57:59.120810 2025] [proxy_fcgi:error] [pid 25521:tid 25527] [client 172.98.32.99:44891] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:00.543782 2025] [:error] [pid 25521:tid 25536] [client 172.98.32.99:44891] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSAbiPhXnBMilDddn3XjmwAAAM0"]
[Fri Nov 21 15:58:02.318575 2025] [:error] [pid 25521:tid 25523] [client 172.98.32.91:62919] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSAbivhXnBMilDddn3XjowAAAMA"]
[Fri Nov 21 15:58:03.208930 2025] [proxy_fcgi:error] [pid 25430:tid 25472] [client 45.132.227.68:54409] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:04.137982 2025] [proxy_fcgi:error] [pid 25430:tid 25481] [client 45.132.227.68:54409] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:05.009582 2025] [:error] [pid 25430:tid 25478] [client 45.132.227.68:54409] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSAbjapnWJcWt_4foXk_9AAAAFI"]
[Fri Nov 21 15:58:05.883291 2025] [:error] [pid 25429:tid 25437] [client 172.98.32.93:22039] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSAbjT4rZbRSr7vu-NOjGAAAAAQ"]
[Fri Nov 21 15:58:07.179306 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.58:55601] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSAbj-0OmVoxD4VZ_Zlp_AAAAVI"]
[Fri Nov 21 15:58:08.035889 2025] [proxy_fcgi:error] [pid 25429:tid 25443] [client 172.98.32.96:57617] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:10.763337 2025] [:error] [pid 25429:tid 25448] [client 172.98.32.96:57617] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSAbkj4rZbRSr7vu-NOjYgAAAA8"]
[Fri Nov 21 15:58:12.609223 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.94:46075] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.stratapluswa.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.stratapluswa.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSAblKpnWJcWt_4foXlAPwAAAFM"]
[Fri Nov 21 15:58:13.069835 2025] [:error] [pid 25430:tid 25482] [client 172.98.32.94:46075] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSAblapnWJcWt_4foXlAQwAAAFY"]
[Fri Nov 21 15:58:14.912621 2025] [:error] [pid 25430:tid 25464] [client 136.144.42.72:48747] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSAblqpnWJcWt_4foXlAUgAAAEQ"]
[Fri Nov 21 15:58:17.351121 2025] [:error] [pid 25521:tid 25525] [client 172.98.32.98:56929] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSAbmfhXnBMilDddn3XkAwAAAMI"]
[Fri Nov 21 15:58:19.186980 2025] [proxy_fcgi:error] [pid 25431:tid 25508] [client 172.98.32.93:45551] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:21.098344 2025] [:error] [pid 25431:tid 25502] [client 172.98.32.93:45551] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSAbncklhXxmoIExII0vzwAAAI8"]
[Fri Nov 21 15:58:22.836317 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.76:29485] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSAbnsklhXxmoIExII0v4QAAAJU"]
[Fri Nov 21 15:58:25.398686 2025] [:error] [pid 25429:tid 25453] [client 136.144.42.75:20369] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSAboT4rZbRSr7vu-NOj9AAAABQ"]
[Fri Nov 21 15:58:26.283223 2025] [proxy_fcgi:error] [pid 25429:tid 25450] [client 136.144.42.75:59347] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:28.565391 2025] [:error] [pid 25429:tid 25449] [client 136.144.42.75:59347] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSAbpD4rZbRSr7vu-NOkHAAAABA"]
[Fri Nov 21 15:58:29.872757 2025] [:error] [pid 25521:tid 25530] [client 172.98.32.100:28831] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSAbpfhXnBMilDddn3XkTgAAAMc"]
[Fri Nov 21 15:58:30.731363 2025] [proxy_fcgi:error] [pid 25429:tid 25454] [client 136.144.42.80:34933] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:31.167712 2025] [:error] [pid 25429:tid 25452] [client 136.144.42.80:34933] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSAbpz4rZbRSr7vu-NOkPQAAABM"]
[Fri Nov 21 15:58:32.057877 2025] [:error] [pid 25430:tid 25464] [client 45.132.227.54:53301] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSAbqKpnWJcWt_4foXlApQAAAEQ"]
[Fri Nov 21 15:58:33.956004 2025] [:error] [pid 25429:tid 25440] [client 172.98.32.83:62187] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSAbqT4rZbRSr7vu-NOkYgAAAAc"]
[Fri Nov 21 15:58:36.205638 2025] [proxy_fcgi:error] [pid 25431:tid 25503] [client 172.98.32.96:30993] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:36.657271 2025] [:error] [pid 25431:tid 25505] [client 172.98.32.96:30993] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSAbrMklhXxmoIExII0wLAAAAJI"]
[Fri Nov 21 15:58:37.557698 2025] [:error] [pid 25521:tid 25541] [client 172.98.32.95:64293] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSAbrfhXnBMilDddn3XkggAAANI"]
[Fri Nov 21 15:58:39.847364 2025] [proxy_fcgi:error] [pid 25521:tid 25524] [client 45.132.227.63:21563] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:40.706690 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.63:21563] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSAbsPhXnBMilDddn3XkjwAAAMI"]
[Fri Nov 21 15:58:42.467488 2025] [:error] [pid 46939:tid 46944] [client 45.132.227.57:48859] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSAbsu0OmVoxD4VZ_ZlrUQAAAUI"]
[Fri Nov 21 15:58:43.382616 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 45.132.227.60:46937] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:44.665336 2025] [:error] [pid 25431:tid 25510] [client 45.132.227.60:46937] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSAbtMklhXxmoIExII0wmwAAAJc"]
[Fri Nov 21 15:58:45.517219 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.52:28291] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSAbtR-NtB-9AzFZrk5QQQAAARU"]
[Fri Nov 21 15:58:46.864380 2025] [:error] [pid 25521:tid 25537] [client 45.132.227.66:32747] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSAbtvhXnBMilDddn3XkwAAAAM4"]
[Fri Nov 21 15:58:47.761083 2025] [proxy_fcgi:error] [pid 25431:tid 25511] [client 172.98.32.94:43507] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:48.711738 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.94:43507] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSAbuMklhXxmoIExII0w0gAAAIE"]
[Fri Nov 21 15:58:49.612483 2025] [proxy_fcgi:error] [pid 46939:tid 46948] [client 172.98.32.81:26003] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:58:50.515060 2025] [:error] [pid 46939:tid 46956] [client 172.98.32.81:26003] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSAbuu0OmVoxD4VZ_ZlrggAAAU4"]
[Fri Nov 21 15:58:51.379670 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.78:58291] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSAbux-NtB-9AzFZrk5QYQAAARc"]
[Fri Nov 21 15:58:52.782856 2025] [:error] [pid 25431:tid 25491] [client 45.132.227.68:33809] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSAbvMklhXxmoIExII0xFwAAAIQ"]
[Fri Nov 21 15:58:53.677801 2025] [:error] [pid 25430:tid 25470] [client 172.98.32.88:23167] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSAbvapnWJcWt_4foXlBRwAAAEo"]
[Fri Nov 21 15:58:55.528533 2025] [:error] [pid 25429:tid 25433] [client 172.98.32.89:44471] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSAbvz4rZbRSr7vu-NOlcgAAAAA"]
[Fri Nov 21 15:58:56.831963 2025] [:error] [pid 25521:tid 25546] [client 172.98.32.76:59421] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSAbwPhXnBMilDddn3Xk-wAAANc"]
[Fri Nov 21 15:58:57.755230 2025] [:error] [pid 25429:tid 25445] [client 136.144.42.75:20875] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSAbwT4rZbRSr7vu-NOliQAAAAw"]
[Fri Nov 21 15:58:58.642169 2025] [:error] [pid 46939:tid 46959] [client 45.132.227.53:59253] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSAbwu0OmVoxD4VZ_ZlrvwAAAVE"]
[Fri Nov 21 15:59:00.821812 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.96:57247] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSAbxB-NtB-9AzFZrk5QtAAAAQc"]
[Fri Nov 21 15:59:02.620045 2025] [:error] [pid 25554:tid 25578] [client 45.132.227.66:25887] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSAbxh-NtB-9AzFZrk5QwgAAARQ"]
[Fri Nov 21 15:59:03.967703 2025] [:error] [pid 25429:tid 25452] [client 45.132.227.59:40627] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSAbxz4rZbRSr7vu-NOltQAAABM"]
[Fri Nov 21 15:59:06.436203 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.95:25171] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSAbysklhXxmoIExII0xWgAAAI0"]
[Fri Nov 21 15:59:08.211639 2025] [proxy_fcgi:error] [pid 46939:tid 46963] [client 172.98.32.95:52439] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:09.996665 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.95:52439] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSAbze0OmVoxD4VZ_ZlsXAAAAUM"]
[Fri Nov 21 15:59:10.915761 2025] [:error] [pid 46939:tid 46947] [client 172.98.32.94:26597] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSAbzu0OmVoxD4VZ_ZlsZwAAAUU"]
[Fri Nov 21 15:59:12.332439 2025] [proxy_fcgi:error] [pid 25431:tid 25495] [client 172.98.32.89:30879] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:12.770107 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.89:30879] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSAb0MklhXxmoIExII0xiQAAAI0"]
[Fri Nov 21 15:59:15.453503 2025] [:error] [pid 25554:tid 25568] [client 136.144.42.75:46587] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSAb0x-NtB-9AzFZrk5RCgAAAQo"]
[Fri Nov 21 15:59:16.836835 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 172.98.32.86:27443] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:17.261251 2025] [:error] [pid 46939:tid 46956] [client 172.98.32.86:27443] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSAb1e0OmVoxD4VZ_ZlsnQAAAU4"]
[Fri Nov 21 15:59:18.989146 2025] [:error] [pid 25554:tid 25561] [client 172.98.32.98:31143] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSAb1h-NtB-9AzFZrk5RKAAAAQM"]
[Fri Nov 21 15:59:19.855812 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 172.98.32.84:49917] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:20.344920 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.84:49917] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSAb2MklhXxmoIExII0xpQAAAI4"]
[Fri Nov 21 15:59:21.632599 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.56:55429] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSAb2fhXnBMilDddn3XlogAAAMI"]
[Fri Nov 21 15:59:23.849600 2025] [proxy_fcgi:error] [pid 25429:tid 25446] [client 172.98.32.79:56857] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:24.370135 2025] [:error] [pid 25429:tid 25434] [client 172.98.32.79:56857] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSAb3D4rZbRSr7vu-NOmJwAAAAE"]
[Fri Nov 21 15:59:26.540748 2025] [:error] [pid 25431:tid 25501] [client 45.132.227.62:25451] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSAb3sklhXxmoIExII0xxQAAAI4"]
[Fri Nov 21 15:59:27.402783 2025] [proxy_fcgi:error] [pid 25431:tid 25502] [client 45.132.227.65:51221] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:27.844869 2025] [:error] [pid 25431:tid 25506] [client 45.132.227.65:51221] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSAb38klhXxmoIExII0x0QAAAJM"]
[Fri Nov 21 15:59:28.705912 2025] [:error] [pid 25521:tid 25540] [client 45.132.227.52:33981] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSAb4PhXnBMilDddn3Xl1QAAANE"]
[Fri Nov 21 15:59:29.583332 2025] [proxy_fcgi:error] [pid 25430:tid 25478] [client 45.132.227.60:38865] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:30.458899 2025] [:error] [pid 25430:tid 25465] [client 45.132.227.60:38865] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSAb4qpnWJcWt_4foXlB-QAAAEU"]
[Fri Nov 21 15:59:31.374854 2025] [:error] [pid 25431:tid 25493] [client 45.132.227.54:49521] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSAb48klhXxmoIExII0x4AAAAIY"]
[Fri Nov 21 15:59:35.070870 2025] [:error] [pid 25554:tid 25560] [client 172.98.32.95:54559] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSAb5x-NtB-9AzFZrk5RywAAAQI"]
[Fri Nov 21 15:59:36.002113 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.99:44943] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSAb6MklhXxmoIExII0x7gAAAJA"]
[Fri Nov 21 15:59:37.348327 2025] [:error] [pid 25430:tid 25472] [client 172.98.32.81:47521] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSAb6apnWJcWt_4foXlCGgAAAEw"]
[Fri Nov 21 15:59:38.202660 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.80:46295] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSAb6j4rZbRSr7vu-NOmYwAAAA4"]
[Fri Nov 21 15:59:39.090060 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.67:62563] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSAb6x-NtB-9AzFZrk5R5AAAAQ0"]
[Fri Nov 21 15:59:40.049419 2025] [:error] [pid 25554:tid 25574] [client 136.144.42.73:57017] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSAb7B-NtB-9AzFZrk5R6QAAARA"]
[Fri Nov 21 15:59:42.704058 2025] [:error] [pid 25521:tid 25542] [client 136.144.42.74:22443] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSAb7vhXnBMilDddn3XmSQAAANM"]
[Fri Nov 21 15:59:43.629331 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.100:42355] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSAb7z4rZbRSr7vu-NOmdwAAAAo"]
[Fri Nov 21 15:59:44.958608 2025] [proxy_fcgi:error] [pid 25521:tid 25528] [client 136.144.42.79:20569] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 15:59:45.387824 2025] [:error] [pid 25521:tid 25526] [client 136.144.42.79:20569] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSAb8fhXnBMilDddn3XmYwAAAMM"]
[Fri Nov 21 15:59:46.342934 2025] [:error] [pid 25554:tid 25567] [client 172.98.32.86:20379] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSAb8h-NtB-9AzFZrk5SAwAAAQk"]
[Fri Nov 21 15:59:48.142738 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.96:34693] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSAb9PhXnBMilDddn3XmfQAAAMw"]
[Fri Nov 21 15:59:49.028826 2025] [:error] [pid 25430:tid 25463] [client 45.132.227.61:32581] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSAb9apnWJcWt_4foXlCVAAAAEM"]
[Fri Nov 21 15:59:53.086769 2025] [:error] [pid 25431:tid 25491] [client 45.132.227.54:38947] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSAb-cklhXxmoIExII0yVwAAAIQ"]
[Fri Nov 21 15:59:53.949003 2025] [:error] [pid 25521:tid 25535] [client 45.132.227.52:54225] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSAb-fhXnBMilDddn3XmnwAAAMw"]
[Fri Nov 21 15:59:55.770998 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.78:38657] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSAb--0OmVoxD4VZ_ZluKwAAAUc"]
[Fri Nov 21 15:59:57.090640 2025] [:error] [pid 25554:tid 25577] [client 136.144.42.72:44793] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSAb_R-NtB-9AzFZrk5SUwAAARM"]
[Fri Nov 21 15:59:58.521567 2025] [:error] [pid 25554:tid 25568] [client 45.132.227.66:48941] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSAb_h-NtB-9AzFZrk5SWwAAAQo"]
[Fri Nov 21 15:59:59.443040 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.80:40843] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSAb_8klhXxmoIExII0ylgAAAJg"]
[Fri Nov 21 16:00:00.326421 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.98:63237] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSAcAB-NtB-9AzFZrk5SaQAAAQE"]
[Fri Nov 21 16:00:02.666010 2025] [:error] [pid 46939:tid 46942] [client 172.98.32.87:31445] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSAcAu0OmVoxD4VZ_ZluZAAAAUA"]
[Fri Nov 21 16:00:03.635329 2025] [proxy_fcgi:error] [pid 25431:tid 25492] [client 45.132.227.62:41005] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:00:04.096381 2025] [:error] [pid 25431:tid 25488] [client 45.132.227.62:41005] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSAcBMklhXxmoIExII0yuQAAAIE"]
[Fri Nov 21 16:00:05.865603 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 172.98.32.86:57249] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:00:06.307220 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.86:57249] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSAcBu0OmVoxD4VZ_ZlulQAAAUo"]
[Fri Nov 21 16:00:07.212661 2025] [:error] [pid 25431:tid 25488] [client 45.132.227.68:53421] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSAcB8klhXxmoIExII0y0AAAAIE"]
[Fri Nov 21 16:00:08.549049 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.83:30783] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSAcCMklhXxmoIExII0y2gAAAJg"]
[Fri Nov 21 16:00:11.641251 2025] [proxy_fcgi:error] [pid 25521:tid 25528] [client 45.132.227.68:65225] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:00:13.380879 2025] [:error] [pid 25521:tid 25532] [client 45.132.227.68:65225] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSAcDfhXnBMilDddn3XnNAAAAMk"]
[Fri Nov 21 16:00:14.679960 2025] [:error] [pid 25554:tid 25558] [client 45.132.227.65:54445] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSAcDh-NtB-9AzFZrk5SowAAAQA"]
[Fri Nov 21 16:00:16.461286 2025] [:error] [pid 25521:tid 25523] [client 172.98.32.97:34225] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSAcEPhXnBMilDddn3XnRQAAAMA"]
[Fri Nov 21 16:00:17.424863 2025] [:error] [pid 46939:tid 46951] [client 45.132.227.66:60231] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSAcEe0OmVoxD4VZ_ZlvJAAAAUk"]
[Fri Nov 21 16:00:18.293334 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.85:36809] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSAcEu0OmVoxD4VZ_ZlvNAAAAVM"]
[Fri Nov 21 16:12:43.524443 2025] [:error] [pid 25430:tid 25475] [client 213.21.239.4:40310] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAe-6pnWJcWt_4foXlMcwAAAE8"]
[Fri Nov 21 16:31:48.901150 2025] [proxy_fcgi:error] [pid 46939:tid 46960] [client 141.98.11.16:57352] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:31:49.473385 2025] [proxy_fcgi:error] [pid 25521:tid 25532] [client 141.98.11.16:60404] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 18:45:31.806206 2025] [:error] [pid 25521:tid 25546] [client 104.28.240.83:17922] [client 104.28.240.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.83, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSBCy_hXnBMilDddn3Ud6QAAANc"]
[Fri Nov 21 18:45:31.814539 2025] [proxy_fcgi:error] [pid 25521:tid 25546] [client 104.28.240.83:17922] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 03:52:52.460769 2025] [:error] [pid 53477:tid 53482] [client 103.167.150.158:58560] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDFH7Lu30Ku9O40aKiGwAAAAE"]
[Sat Nov 22 04:20:16.574017 2025] [:error] [pid 53479:tid 53540] [client 66.249.64.234:48072] [client 66.249.64.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casino/777pg.html"] [unique_id "aSDJgG6cicFF3Aas-oRGwAAAAIQ"]
[Sat Nov 22 04:20:30.874661 2025] [:error] [pid 53477:tid 53504] [client 66.249.64.234:38214] [client 66.249.64.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fishing/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%20%E0%B9%82%E0%B8%9A%E0%B8%99%E0%B8%B1%E0%B8%AA%20%E0%B8%A1%E0%B8%B2%E0%B8%81%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.html"] [unique_id "aSDJjn7Lu30Ku9O40aKsLgAAABc"]
[Sat Nov 22 06:56:46.276450 2025] [proxy_fcgi:error] [pid 53566:tid 53590] [client 212.116.231.26:50960] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:46.695661 2025] [:error] [pid 53566:tid 53585] [client 212.116.231.26:50960] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSDuLsbSHDBkRbwMbd5njwAAANE"]
[Sat Nov 22 06:56:47.506596 2025] [:error] [pid 53477:tid 53488] [client 212.116.231.26:51580] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSDuL37Lu30Ku9O40aIG_QAAAAc"]
[Sat Nov 22 06:56:48.319663 2025] [:error] [pid 53566:tid 53590] [client 212.116.231.26:52038] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSDuMMbSHDBkRbwMbd5nowAAANY"]
[Sat Nov 22 06:56:49.160620 2025] [:error] [pid 53479:tid 53536] [client 212.116.231.26:52498] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSDuMW6cicFF3Aas-oShsQAAAIA"]
[Sat Nov 22 06:56:49.971083 2025] [:error] [pid 9547:tid 9556] [client 212.116.231.26:45810] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSDuMdClOR5qk7DoMeGl5QAAAUM"]
[Sat Nov 22 06:56:50.784636 2025] [:error] [pid 25856:tid 25859] [client 212.116.231.26:46332] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMhsTP0wy94zKUvHn2gAAAQE"]
[Sat Nov 22 06:56:51.596113 2025] [:error] [pid 25856:tid 25882] [client 212.116.231.26:46854] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMxsTP0wy94zKUvHoBgAAARg"]
[Sat Nov 22 06:56:52.429641 2025] [:error] [pid 53566:tid 53587] [client 212.116.231.26:26854] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNMbSHDBkRbwMbd5n-gAAANM"]
[Sat Nov 22 06:56:53.241758 2025] [:error] [pid 53478:tid 53529] [client 212.116.231.26:47714] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNQhUYdXBbQswAdRAhgAAAFQ"]
[Sat Nov 22 06:56:54.054039 2025] [:error] [pid 9547:tid 9564] [client 212.116.231.26:48168] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNtClOR5qk7DoMeGmMQAAAUs"]
[Sat Nov 22 07:50:51.036636 2025] [:error] [pid 53478:tid 53523] [client 66.249.64.234:46516] [client 66.249.64.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dabong/Login%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A5%E0%B8%B4%E0%B8%87.html"] [unique_id "aSD62whUYdXBbQswAdROJQAAAE4"]
[Sat Nov 22 08:50:05.896621 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:07.259577 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:07.474701 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:08.341536 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:08.614782 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:08.824651 2025] [:error] [pid 53477:tid 53496] [client 40.65.193.232:1339] [client 40.65.193.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.65.193.232, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aSEIwH7Lu30Ku9O40aIoZwAAAA8"], referer: https://www.bing.com/
[Sat Nov 22 08:50:08.828342 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:09.857382 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:10.089838 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:11.963083 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:12.181997 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:12.427952 2025] [proxy_fcgi:error] [pid 53477:tid 53495] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:12.641790 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:13.245332 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:13.502452 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:13.715011 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:14.013292 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:14.233358 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:14.473087 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 40.65.193.232:1339] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:15.531118 2025] [:error] [pid 53477:tid 53505] [client 40.65.193.232:1339] [client 40.65.193.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aSEIx37Lu30Ku9O40aIojgAAABg"], referer: https://duckduckgo.com/
[Sat Nov 22 08:50:16.324719 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 40.65.193.232:5079] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:18.096339 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 40.65.193.232:5079] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:18.588416 2025] [proxy_fcgi:error] [pid 53566:tid 53579] [client 40.65.193.232:5079] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:18.803690 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 40.65.193.232:5079] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:19.026451 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 40.65.193.232:5079] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:20.159824 2025] [:error] [pid 53566:tid 53576] [client 40.65.193.232:5079] [client 40.65.193.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSEIzMbSHDBkRbwMbd6Q9QAAAMg"], referer: https://www.google.com/
[Sat Nov 22 08:50:21.321104 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:22.300156 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 08:50:23.447206 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 08:50:23.679564 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:23.889705 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:24.101331 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:24.324474 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:25.429924 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 40.65.193.232:3482] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:26.822923 2025] [:error] [pid 53477:tid 53495] [client 40.65.193.232:3482] [client 40.65.193.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSEI0n7Lu30Ku9O40aIoqwAAAA4"], referer: https://www.google.de/
[Sat Nov 22 08:50:40.392343 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:40.600244 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:40.929629 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:41.222451 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:41.684140 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:41.893504 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:42.109144 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:42.322619 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:44.099993 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:44.321242 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:44.574569 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:44.789870 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:44.997922 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:45.201974 2025] [:error] [pid 9547:tid 9576] [client 40.65.193.232:4985] [client 40.65.193.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.65.193.232, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSEI5dClOR5qk7DoMeHjEwAAAVc"], referer: https://duckduckgo.com/
[Sat Nov 22 08:50:45.206656 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:45.414580 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:45.624619 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:45.834990 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:46.043185 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:46.252976 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 08:50:46.468421 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:46.717617 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:46.982164 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:47.219078 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:47.427753 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:47.651333 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:47.864926 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:48.095014 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:48.303691 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:48.598962 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:48.817666 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:51.342051 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:53.807117 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:54.014977 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:54.225371 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:54.434819 2025] [proxy_fcgi:error] [pid 9547:tid 9555] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:54.643777 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:56.063401 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:50:56.285303 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:56.502975 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:56.753928 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:50:56.995169 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:50:57.225900 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:57.435792 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:50:57.677344 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:57.928584 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 08:50:58.175163 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:50:58.406592 2025] [proxy_fcgi:error] [pid 9547:tid 9555] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:50:58.644209 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:51:01.691409 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 08:51:01.902487 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:51:02.112220 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:51:02.410468 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:51:02.669410 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 08:51:02.878465 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:51:03.087610 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 08:51:03.309657 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:51:03.525582 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 08:51:03.747442 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:51:03.973096 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:51:04.206202 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 08:51:04.443380 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:51:05.508917 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 08:51:05.727192 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 08:51:05.941493 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:51:06.152643 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 08:51:06.361439 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 08:51:06.579175 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 40.65.193.232:4985] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 10:11:19.290831 2025] [autoindex:error] [pid 53479:tid 53546] [client 139.59.37.180:53499] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 22:27:57.057755 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 172.192.40.201:43917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:57.180845 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 172.192.40.201:43917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:57.326056 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 172.192.40.201:43917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:57.452319 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 172.192.40.201:43917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:57.574106 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 172.192.40.201:43917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:57.691600 2025] [:error] [pid 25856:tid 25880] [client 172.192.40.201:43917] [client 172.192.40.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aSHIbRsTP0wy94zKUvH_WgAAARY"]
[Sat Nov 22 22:27:57.925697 2025] [proxy_fcgi:error] [pid 44259:tid 44283] [client 172.192.40.201:44006] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:58.043343 2025] [proxy_fcgi:error] [pid 44259:tid 44281] [client 172.192.40.201:44006] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:58.160631 2025] [proxy_fcgi:error] [pid 44259:tid 44286] [client 172.192.40.201:44006] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:58.280378 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 172.192.40.201:44006] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:58.398503 2025] [proxy_fcgi:error] [pid 44259:tid 44278] [client 172.192.40.201:44006] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 22:27:58.512271 2025] [:error] [pid 44259:tid 44279] [client 172.192.40.201:44006] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aSHIbnXe1xL-_YOdRmTf3wAAAZE"]
[Sat Nov 22 22:27:58.829339 2025] [:error] [pid 53479:tid 53553] [client 172.192.40.201:44002] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aSHIbm6cicFF3Aas-oTa6wAAAJE"]
[Sat Nov 22 22:27:59.076056 2025] [:error] [pid 53477:tid 53496] [client 172.192.40.201:44008] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aSHIb37Lu30Ku9O40aL72wAAAA8"]
[Sat Nov 22 22:27:59.404154 2025] [:error] [pid 53478:tid 53514] [client 172.192.40.201:43923] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aSHIbwhUYdXBbQswAdQ0hwAAAEU"]
[Sat Nov 22 22:27:59.645366 2025] [:error] [pid 53478:tid 53527] [client 172.192.40.201:43971] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aSHIbwhUYdXBbQswAdQ0iAAAAFI"]
[Sat Nov 22 22:27:59.975826 2025] [:error] [pid 53477:tid 53484] [client 172.192.40.201:43992] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aSHIb37Lu30Ku9O40aL73QAAAAM"]
[Sat Nov 22 22:28:00.225314 2025] [:error] [pid 44259:tid 44264] [client 172.192.40.201:43911] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aSHIcHXe1xL-_YOdRmTf4QAAAYI"]
[Sat Nov 22 22:28:00.457422 2025] [:error] [pid 53479:tid 53547] [client 172.192.40.201:43982] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "aSHIcG6cicFF3Aas-oTa8AAAAIs"]
[Sat Nov 22 22:28:00.686092 2025] [:error] [pid 53479:tid 53551] [client 172.192.40.201:43985] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aSHIcG6cicFF3Aas-oTa8gAAAI8"]
[Sat Nov 22 22:28:00.988155 2025] [:error] [pid 9547:tid 9555] [client 172.192.40.201:43991] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aSHIcNClOR5qk7DoMeEKXAAAAUI"]
[Sat Nov 22 22:28:01.237136 2025] [:error] [pid 9547:tid 9562] [client 172.192.40.201:43981] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aSHIcdClOR5qk7DoMeEKXQAAAUk"]
[Sat Nov 22 22:28:01.465780 2025] [:error] [pid 9547:tid 9572] [client 172.192.40.201:44001] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "aSHIcdClOR5qk7DoMeEKXgAAAVM"]
[Sat Nov 22 22:28:01.777999 2025] [:error] [pid 53477:tid 53492] [client 172.192.40.201:43859] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aSHIcX7Lu30Ku9O40aL74QAAAAs"]
[Sat Nov 22 22:28:02.068487 2025] [:error] [pid 44259:tid 44262] [client 172.192.40.201:43939] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aSHIcnXe1xL-_YOdRmTf4gAAAYA"]
[Sat Nov 22 22:28:02.327863 2025] [:error] [pid 53566:tid 53568] [client 172.192.40.201:43921] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aSHIcsbSHDBkRbwMbd5tjgAAAMA"]
[Sat Nov 22 22:28:02.595113 2025] [:error] [pid 53566:tid 53589] [client 172.192.40.201:43913] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless2.php"] [unique_id "aSHIcsbSHDBkRbwMbd5tjwAAANU"]
[Sat Nov 22 22:28:02.829251 2025] [:error] [pid 9547:tid 9556] [client 172.192.40.201:43904] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aSHIctClOR5qk7DoMeEKYQAAAUM"]
[Sat Nov 22 22:28:03.075240 2025] [:error] [pid 25856:tid 25871] [client 172.192.40.201:43915] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aSHIcxsTP0wy94zKUvH_ZAAAAQ0"]
[Sat Nov 22 22:28:03.324965 2025] [:error] [pid 44259:tid 44266] [client 172.192.40.201:43920] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aSHIc3Xe1xL-_YOdRmTf5gAAAYQ"]
[Sat Nov 22 22:28:03.554923 2025] [:error] [pid 44259:tid 44270] [client 172.192.40.201:43847] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aSHIc3Xe1xL-_YOdRmTf5wAAAYg"]
[Sat Nov 22 22:28:03.800803 2025] [:error] [pid 9547:tid 9568] [client 172.192.40.201:43986] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aSHIc9ClOR5qk7DoMeEKYwAAAU8"]
[Sat Nov 22 22:28:04.034699 2025] [:error] [pid 53566:tid 53576] [client 172.192.40.201:43852] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aSHIdMbSHDBkRbwMbd5tkAAAAMg"]
[Sat Nov 22 22:28:04.273437 2025] [:error] [pid 53478:tid 53521] [client 172.192.40.201:44000] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aSHIdAhUYdXBbQswAdQ0iQAAAEw"]
[Sat Nov 22 22:28:04.504002 2025] [:error] [pid 53477:tid 53499] [client 172.192.40.201:43937] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aSHIdH7Lu30Ku9O40aL75AAAABI"]
[Sat Nov 22 22:28:04.775947 2025] [:error] [pid 25856:tid 25859] [client 172.192.40.201:43906] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsa.php"] [unique_id "aSHIdBsTP0wy94zKUvH_ZwAAAQE"]
[Sat Nov 22 22:28:05.096953 2025] [:error] [pid 53566:tid 53590] [client 172.192.40.201:44021] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsa.php"] [unique_id "aSHIdcbSHDBkRbwMbd5tkwAAANY"]
[Sat Nov 22 22:28:05.352538 2025] [:error] [pid 25856:tid 25868] [client 172.192.40.201:43984] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsa.php"] [unique_id "aSHIdRsTP0wy94zKUvH_aAAAAQo"]
[Sat Nov 22 22:28:05.653516 2025] [:error] [pid 53478:tid 53533] [client 172.192.40.201:43983] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsa.php"] [unique_id "aSHIdQhUYdXBbQswAdQ0jAAAAFg"]
[Sat Nov 22 22:28:05.974426 2025] [:error] [pid 53478:tid 53529] [client 172.192.40.201:43980] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "aSHIdQhUYdXBbQswAdQ0jQAAAFQ"]
[Sat Nov 22 22:28:06.239077 2025] [:error] [pid 9547:tid 9560] [client 172.192.40.201:43910] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "aSHIdtClOR5qk7DoMeEKZQAAAUc"]
[Sat Nov 22 22:28:06.576539 2025] [:error] [pid 25856:tid 25869] [client 172.192.40.201:43848] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "aSHIdhsTP0wy94zKUvH_aQAAAQs"]
[Sat Nov 22 22:28:06.829645 2025] [:error] [pid 53478:tid 53532] [client 172.192.40.201:44022] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "aSHIdghUYdXBbQswAdQ0jgAAAFc"]
[Sat Nov 22 22:28:07.069475 2025] [:error] [pid 44259:tid 44285] [client 172.192.40.201:43981] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "aSHId3Xe1xL-_YOdRmTf6wAAAZc"]
[Sat Nov 22 22:28:07.309893 2025] [:error] [pid 53477:tid 53497] [client 172.192.40.201:44024] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "aSHId37Lu30Ku9O40aL76AAAABA"]
[Sat Nov 22 22:28:07.537989 2025] [:error] [pid 25856:tid 25861] [client 172.192.40.201:43778] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "aSHIdxsTP0wy94zKUvH_agAAAQM"]
[Sat Nov 22 22:28:07.857750 2025] [:error] [pid 53479:tid 53559] [client 172.192.40.201:43963] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "aSHId26cicFF3Aas-oTbBQAAAJc"]
[Sat Nov 22 22:28:08.093583 2025] [:error] [pid 25856:tid 25875] [client 172.192.40.201:43938] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "aSHIeBsTP0wy94zKUvH_bAAAARE"]
[Sat Nov 22 22:28:08.414693 2025] [:error] [pid 53478:tid 53513] [client 172.192.40.201:44015] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "aSHIeAhUYdXBbQswAdQ0jwAAAEQ"]
[Sat Nov 22 22:28:08.653891 2025] [:error] [pid 53478:tid 53517] [client 172.192.40.201:44016] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "aSHIeAhUYdXBbQswAdQ0kQAAAEg"]
[Sat Nov 22 22:28:08.886695 2025] [:error] [pid 53477:tid 53496] [client 172.192.40.201:43999] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "aSHIeH7Lu30Ku9O40aL77AAAAA8"]
[Sat Nov 22 22:28:09.129078 2025] [:error] [pid 44259:tid 44264] [client 172.192.40.201:43933] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dejavu.php"] [unique_id "aSHIeXXe1xL-_YOdRmTf8QAAAYI"]
[Sat Nov 22 22:28:09.368756 2025] [:error] [pid 44259:tid 44280] [client 172.192.40.201:43970] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dejavu.php"] [unique_id "aSHIeXXe1xL-_YOdRmTf8gAAAZI"]
[Sat Nov 22 22:28:09.605830 2025] [:error] [pid 53477:tid 53505] [client 172.192.40.201:43951] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dejavu.php"] [unique_id "aSHIeX7Lu30Ku9O40aL77wAAABg"]
[Sat Nov 22 22:28:09.951614 2025] [:error] [pid 53566:tid 53579] [client 172.192.40.201:43936] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dejavu.php"] [unique_id "aSHIecbSHDBkRbwMbd5tlgAAAMs"]
[Sat Nov 22 22:28:10.217327 2025] [:error] [pid 53479:tid 53540] [client 172.192.40.201:44007] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aSHIem6cicFF3Aas-oTbCQAAAIQ"]
[Sat Nov 22 22:28:10.505318 2025] [:error] [pid 25856:tid 25877] [client 172.192.40.201:43930] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aSHIehsTP0wy94zKUvH_bwAAARM"]
[Sat Nov 22 22:28:10.751129 2025] [:error] [pid 9547:tid 9574] [client 172.192.40.201:44014] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aSHIetClOR5qk7DoMeEKZgAAAVU"]
[Sat Nov 22 22:28:11.065889 2025] [:error] [pid 25856:tid 25864] [client 172.192.40.201:43978] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aSHIexsTP0wy94zKUvH_cAAAAQY"]
[Sat Nov 22 22:28:11.341785 2025] [:error] [pid 44259:tid 44276] [client 172.192.40.201:43969] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aSHIe3Xe1xL-_YOdRmTf9QAAAY4"]
[Sat Nov 22 22:28:11.647504 2025] [:error] [pid 44259:tid 44284] [client 172.192.40.201:43841] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aSHIe3Xe1xL-_YOdRmTf9gAAAZY"]
[Sat Nov 22 22:28:12.034656 2025] [:error] [pid 44259:tid 44273] [client 172.192.40.201:44018] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aSHIfHXe1xL-_YOdRmTf9wAAAYs"]
[Sat Nov 22 22:28:12.300576 2025] [:error] [pid 25856:tid 25870] [client 172.192.40.201:43968] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "aSHIfBsTP0wy94zKUvH_cwAAAQw"]
[Sat Nov 22 22:28:12.595752 2025] [:error] [pid 53566:tid 53586] [client 172.192.40.201:43998] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aSHIfMbSHDBkRbwMbd5tmQAAANI"]
[Sat Nov 22 22:28:12.996898 2025] [:error] [pid 9547:tid 9577] [client 172.192.40.201:43843] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aSHIfNClOR5qk7DoMeEKaAAAAVg"]
[Sat Nov 22 22:28:13.298996 2025] [:error] [pid 53566:tid 53575] [client 172.192.40.201:44017] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aSHIfcbSHDBkRbwMbd5tmwAAAMc"]
[Sat Nov 22 22:28:13.538855 2025] [:error] [pid 9547:tid 9555] [client 172.192.40.201:44020] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aSHIfdClOR5qk7DoMeEKaQAAAUI"]
[Sat Nov 22 22:28:13.775281 2025] [:error] [pid 44259:tid 44274] [client 172.192.40.201:43955] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/past.php"] [unique_id "aSHIfXXe1xL-_YOdRmTf_QAAAYw"]
[Sat Nov 22 22:28:14.069039 2025] [:error] [pid 44259:tid 44269] [client 172.192.40.201:43976] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/past.php"] [unique_id "aSHIfnXe1xL-_YOdRmTf_gAAAYc"]
[Sat Nov 22 22:28:14.330665 2025] [:error] [pid 44259:tid 44264] [client 172.192.40.201:43950] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/past.php"] [unique_id "aSHIfnXe1xL-_YOdRmTgAQAAAYI"]
[Sat Nov 22 22:28:14.646587 2025] [:error] [pid 9547:tid 9572] [client 172.192.40.201:43927] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/past.php"] [unique_id "aSHIftClOR5qk7DoMeEKawAAAVM"]
[Sat Nov 22 22:28:14.950101 2025] [:error] [pid 53566:tid 53581] [client 172.192.40.201:43851] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aSHIfsbSHDBkRbwMbd5tngAAAM0"]
[Sat Nov 22 22:28:15.259202 2025] [:error] [pid 9547:tid 9571] [client 172.192.40.201:43996] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aSHIf9ClOR5qk7DoMeEKbAAAAVI"]
[Sat Nov 22 22:28:15.486940 2025] [:error] [pid 44259:tid 44265] [client 172.192.40.201:43993] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aSHIf3Xe1xL-_YOdRmTgBgAAAYM"]
[Sat Nov 22 22:28:15.788411 2025] [:error] [pid 25856:tid 25881] [client 172.192.40.201:43872] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aSHIfxsTP0wy94zKUvH_eAAAARc"]
[Sat Nov 22 22:28:16.025376 2025] [:error] [pid 44259:tid 44286] [client 172.192.40.201:43973] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aSHIgHXe1xL-_YOdRmTgCwAAAZg"]
[Sat Nov 22 22:28:16.257428 2025] [:error] [pid 44259:tid 44278] [client 172.192.40.201:43953] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aSHIgHXe1xL-_YOdRmTgDQAAAZA"]
[Sat Nov 22 22:28:16.486211 2025] [:error] [pid 9547:tid 9557] [client 172.192.40.201:43929] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aSHIgNClOR5qk7DoMeEKbQAAAUQ"]
[Sat Nov 22 22:28:16.779957 2025] [:error] [pid 53478:tid 53520] [client 172.192.40.201:43990] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aSHIgAhUYdXBbQswAdQ0nQAAAEs"]
[Sat Nov 22 22:28:17.084405 2025] [:error] [pid 53479:tid 53552] [client 172.192.40.201:44004] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aSHIgW6cicFF3Aas-oTbEAAAAJA"]
[Sat Nov 22 22:28:17.396862 2025] [:error] [pid 44259:tid 44266] [client 172.192.40.201:44019] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aSHIgXXe1xL-_YOdRmTgFAAAAYQ"]
[Sat Nov 22 22:28:17.647640 2025] [:error] [pid 53477:tid 53486] [client 172.192.40.201:44031] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aSHIgX7Lu30Ku9O40aL7-gAAAAU"]
[Sat Nov 22 22:28:17.974196 2025] [:error] [pid 53477:tid 53490] [client 172.192.40.201:43924] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aSHIgX7Lu30Ku9O40aL7-wAAAAk"]
[Sat Nov 22 22:28:18.205894 2025] [:error] [pid 53477:tid 53496] [client 172.192.40.201:44003] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "aSHIgn7Lu30Ku9O40aL7_AAAAA8"]
[Sat Nov 22 22:28:18.499135 2025] [:error] [pid 53477:tid 53487] [client 172.192.40.201:43916] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "aSHIgn7Lu30Ku9O40aL7_QAAAAY"]
[Sat Nov 22 22:28:18.831020 2025] [:error] [pid 53477:tid 53494] [client 172.192.40.201:43964] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "aSHIgn7Lu30Ku9O40aL8AAAAAA0"]
[Sat Nov 22 22:28:19.075147 2025] [:error] [pid 53566:tid 53589] [client 172.192.40.201:43928] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "aSHIg8bSHDBkRbwMbd5toQAAANU"]
[Sat Nov 22 22:28:19.306626 2025] [:error] [pid 53477:tid 53500] [client 172.192.40.201:43881] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aSHIg37Lu30Ku9O40aL8AgAAABM"]
[Sat Nov 22 22:28:19.569288 2025] [:error] [pid 25856:tid 25869] [client 172.192.40.201:43907] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aSHIgxsTP0wy94zKUvH_egAAAQs"]
[Sat Nov 22 22:28:19.928922 2025] [:error] [pid 53479:tid 53545] [client 172.192.40.201:44027] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aSHIg26cicFF3Aas-oTbEgAAAIk"]
[Sat Nov 22 22:28:20.230298 2025] [:error] [pid 9547:tid 9573] [client 172.192.40.201:43934] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aSHIhNClOR5qk7DoMeEKbwAAAVQ"]
[Sat Nov 22 22:28:20.532415 2025] [:error] [pid 53478:tid 53532] [client 172.192.40.201:43954] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSHIhAhUYdXBbQswAdQ0oAAAAFc"]
[Sat Nov 22 22:28:20.773839 2025] [:error] [pid 53478:tid 53513] [client 172.192.40.201:43966] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSHIhAhUYdXBbQswAdQ0oQAAAEQ"]
[Sat Nov 22 22:28:21.109859 2025] [:error] [pid 53478:tid 53523] [client 172.192.40.201:44025] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSHIhQhUYdXBbQswAdQ0owAAAE4"]
[Sat Nov 22 22:28:21.341478 2025] [:error] [pid 53477:tid 53491] [client 172.192.40.201:43866] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSHIhX7Lu30Ku9O40aL8BgAAAAo"]
[Sat Nov 22 22:28:21.641035 2025] [:error] [pid 44259:tid 44263] [client 172.192.40.201:44028] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ot.php"] [unique_id "aSHIhXXe1xL-_YOdRmTgHwAAAYE"]
[Sat Nov 22 22:28:21.901601 2025] [:error] [pid 44259:tid 44282] [client 172.192.40.201:44009] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ot.php"] [unique_id "aSHIhXXe1xL-_YOdRmTgIAAAAZQ"]
[Sat Nov 22 22:28:22.252567 2025] [:error] [pid 44259:tid 44262] [client 172.192.40.201:43779] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ot.php"] [unique_id "aSHIhnXe1xL-_YOdRmTgIwAAAYA"]
[Sat Nov 22 22:28:22.521914 2025] [:error] [pid 53479:tid 53544] [client 172.192.40.201:43931] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ot.php"] [unique_id "aSHIhm6cicFF3Aas-oTbEwAAAIg"]
[Sat Nov 22 22:28:22.807215 2025] [:error] [pid 53479:tid 53539] [client 172.192.40.201:43941] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lc.php"] [unique_id "aSHIhm6cicFF3Aas-oTbFAAAAIM"]
[Sat Nov 22 22:28:23.110787 2025] [:error] [pid 53479:tid 53553] [client 172.192.40.201:43713] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lc.php"] [unique_id "aSHIh26cicFF3Aas-oTbFgAAAJE"]
[Sat Nov 22 22:28:23.539289 2025] [:error] [pid 53479:tid 53560] [client 172.192.40.201:43879] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lc.php"] [unique_id "aSHIh26cicFF3Aas-oTbGgAAAJg"]
[Sat Nov 22 22:28:23.891944 2025] [:error] [pid 44259:tid 44270] [client 172.192.40.201:44011] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lc.php"] [unique_id "aSHIh3Xe1xL-_YOdRmTgJQAAAYg"]
[Sat Nov 22 22:28:24.124912 2025] [:error] [pid 44259:tid 44276] [client 172.192.40.201:43947] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cool.php"] [unique_id "aSHIiHXe1xL-_YOdRmTgKAAAAY4"]
[Sat Nov 22 22:28:24.450795 2025] [:error] [pid 25856:tid 25874] [client 172.192.40.201:43876] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cool.php"] [unique_id "aSHIiBsTP0wy94zKUvH_fgAAARA"]
[Sat Nov 22 22:28:24.680038 2025] [:error] [pid 53478:tid 53526] [client 172.192.40.201:43853] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cool.php"] [unique_id "aSHIiAhUYdXBbQswAdQ0pwAAAFE"]
[Sat Nov 22 22:28:24.911754 2025] [:error] [pid 53478:tid 53524] [client 172.192.40.201:43856] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cool.php"] [unique_id "aSHIiAhUYdXBbQswAdQ0qAAAAE8"]
[Sat Nov 22 22:28:25.158613 2025] [:error] [pid 53566:tid 53580] [client 172.192.40.201:43909] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "aSHIicbSHDBkRbwMbd5towAAAMw"]
[Sat Nov 22 22:28:25.437289 2025] [:error] [pid 53477:tid 53503] [client 172.192.40.201:43885] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "aSHIiX7Lu30Ku9O40aL8CAAAABY"]
[Sat Nov 22 22:28:25.736825 2025] [:error] [pid 25856:tid 25864] [client 172.192.40.201:43977] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "aSHIiRsTP0wy94zKUvH_fwAAAQY"]
[Sat Nov 22 22:28:25.968677 2025] [:error] [pid 25856:tid 25878] [client 172.192.40.201:43945] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "aSHIiRsTP0wy94zKUvH_gwAAARQ"]
[Sat Nov 22 22:28:26.208169 2025] [:error] [pid 9547:tid 9566] [client 172.192.40.201:43943] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aSHIitClOR5qk7DoMeEKdAAAAU0"]
[Sat Nov 22 22:28:26.524988 2025] [:error] [pid 25856:tid 25862] [client 172.192.40.201:44012] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aSHIihsTP0wy94zKUvH_hQAAAQQ"]
[Sat Nov 22 22:28:26.766568 2025] [:error] [pid 25856:tid 25872] [client 172.192.40.201:44005] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aSHIihsTP0wy94zKUvH_hgAAAQ4"]
[Sat Nov 22 22:28:27.073335 2025] [:error] [pid 53566:tid 53582] [client 172.192.40.201:43967] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aSHIi8bSHDBkRbwMbd5tpAAAAM4"]
[Sat Nov 22 22:28:27.317089 2025] [:error] [pid 53478:tid 53521] [client 172.192.40.201:43989] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aSHIiwhUYdXBbQswAdQ0qwAAAEw"]
[Sat Nov 22 22:28:27.625406 2025] [:error] [pid 9547:tid 9576] [client 172.192.40.201:43896] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aSHIi9ClOR5qk7DoMeEKdwAAAVc"]
[Sat Nov 22 22:28:27.866354 2025] [:error] [pid 53477:tid 53487] [client 172.192.40.201:43860] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aSHIi37Lu30Ku9O40aL8CgAAAAY"]
[Sat Nov 22 22:28:28.121250 2025] [:error] [pid 44259:tid 44263] [client 172.192.40.201:43840] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "aSHIjHXe1xL-_YOdRmTgLwAAAYE"]
[Sat Nov 22 22:28:28.354494 2025] [:error] [pid 53479:tid 53557] [client 172.192.40.201:43882] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "aSHIjG6cicFF3Aas-oTbHQAAAJU"]
[Sat Nov 22 22:28:28.622026 2025] [:error] [pid 53479:tid 53549] [client 172.192.40.201:43987] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "aSHIjG6cicFF3Aas-oTbHgAAAI0"]
[Sat Nov 22 22:28:28.974247 2025] [:error] [pid 53478:tid 53523] [client 172.192.40.201:43884] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "aSHIjAhUYdXBbQswAdQ0rgAAAE4"]
[Sat Nov 22 22:28:29.260396 2025] [:error] [pid 53477:tid 53494] [client 172.192.40.201:44013] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "aSHIjX7Lu30Ku9O40aL8DAAAAA0"]
[Sat Nov 22 22:28:29.489783 2025] [:error] [pid 53479:tid 53538] [client 172.192.40.201:43975] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aSHIjW6cicFF3Aas-oTbIwAAAII"]
[Sat Nov 22 22:28:29.736261 2025] [:error] [pid 9547:tid 9562] [client 172.192.40.201:43919] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aSHIjdClOR5qk7DoMeEKfAAAAUk"]
[Sat Nov 22 22:28:29.968212 2025] [:error] [pid 25856:tid 25873] [client 172.192.40.201:43886] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aSHIjRsTP0wy94zKUvH_igAAAQ8"]
[Sat Nov 22 22:28:30.206560 2025] [:error] [pid 53478:tid 53530] [client 172.192.40.201:43926] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aSHIjghUYdXBbQswAdQ0rwAAAFU"]
[Sat Nov 22 22:28:30.535261 2025] [:error] [pid 44259:tid 44270] [client 172.192.40.201:43925] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "aSHIjnXe1xL-_YOdRmTgTQAAAYg"]
[Sat Nov 22 22:28:30.764309 2025] [:error] [pid 44259:tid 44268] [client 172.192.40.201:43972] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "aSHIjnXe1xL-_YOdRmTgUQAAAYY"]
[Sat Nov 22 22:28:30.995795 2025] [:error] [pid 9547:tid 9561] [client 172.192.40.201:43878] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "aSHIjtClOR5qk7DoMeEKkwAAAUg"]
[Sat Nov 22 22:28:31.229425 2025] [:error] [pid 44259:tid 44275] [client 172.192.40.201:43957] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "aSHIj3Xe1xL-_YOdRmTgVgAAAY0"]
[Sat Nov 22 22:28:31.467225 2025] [:error] [pid 9547:tid 9564] [client 172.192.40.201:43871] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/astab.php"] [unique_id "aSHIj9ClOR5qk7DoMeEKlwAAAUs"]
[Sat Nov 22 22:28:31.805994 2025] [:error] [pid 53478:tid 53512] [client 172.192.40.201:43787] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/astab.php"] [unique_id "aSHIjwhUYdXBbQswAdQ0sAAAAEM"]
[Sat Nov 22 22:28:32.044206 2025] [:error] [pid 44259:tid 44263] [client 172.192.40.201:43935] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/astab.php"] [unique_id "aSHIkHXe1xL-_YOdRmTgXAAAAYE"]
[Sat Nov 22 22:28:32.323093 2025] [:error] [pid 44259:tid 44262] [client 172.192.40.201:43974] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/astab.php"] [unique_id "aSHIkHXe1xL-_YOdRmTgXwAAAYA"]
[Sat Nov 22 22:28:32.623752 2025] [:error] [pid 53566:tid 53572] [client 172.192.40.201:43857] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl.php"] [unique_id "aSHIkMbSHDBkRbwMbd5tpgAAAMQ"]
[Sat Nov 22 22:28:32.860711 2025] [:error] [pid 53478:tid 53509] [client 172.192.40.201:43868] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl.php"] [unique_id "aSHIkAhUYdXBbQswAdQ0sQAAAEA"]
[Sat Nov 22 22:28:33.176612 2025] [:error] [pid 53478:tid 53528] [client 172.192.40.201:43789] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl.php"] [unique_id "aSHIkQhUYdXBbQswAdQ0sgAAAFM"]
[Sat Nov 22 22:28:33.555282 2025] [:error] [pid 9547:tid 9566] [client 172.192.40.201:43844] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl.php"] [unique_id "aSHIkdClOR5qk7DoMeEKmwAAAU0"]
[Sat Nov 22 22:28:34.245732 2025] [:error] [pid 44259:tid 44268] [client 172.192.40.201:43962] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file17.php"] [unique_id "aSHIknXe1xL-_YOdRmTgZQAAAYY"]
[Sat Nov 22 22:28:34.577136 2025] [:error] [pid 53479:tid 53560] [client 172.192.40.201:43922] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file17.php"] [unique_id "aSHIkm6cicFF3Aas-oTbKQAAAJg"]
[Sat Nov 22 22:28:34.850680 2025] [:error] [pid 53478:tid 53511] [client 172.192.40.201:43949] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file17.php"] [unique_id "aSHIkghUYdXBbQswAdQ0swAAAEI"]
[Sat Nov 22 22:28:35.078387 2025] [:error] [pid 53479:tid 53543] [client 172.192.40.201:43821] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file17.php"] [unique_id "aSHIk26cicFF3Aas-oTbKgAAAIc"]
[Sat Nov 22 22:28:35.311420 2025] [:error] [pid 53479:tid 53542] [client 172.192.40.201:43731] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "aSHIk26cicFF3Aas-oTbKwAAAIY"]
[Sat Nov 22 22:28:35.604632 2025] [:error] [pid 53479:tid 53550] [client 172.192.40.201:43861] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "aSHIk26cicFF3Aas-oTbLAAAAI4"]
[Sat Nov 22 22:28:35.834421 2025] [:error] [pid 9547:tid 9569] [client 172.192.40.201:43854] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "aSHIk9ClOR5qk7DoMeEKnAAAAVA"]
[Sat Nov 22 22:28:36.066674 2025] [:error] [pid 9547:tid 9555] [client 172.192.40.201:43855] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "aSHIlNClOR5qk7DoMeEKnQAAAUI"]
[Sat Nov 22 22:28:36.368140 2025] [:error] [pid 9547:tid 9577] [client 172.192.40.201:43891] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSHIlNClOR5qk7DoMeEKnwAAAVg"]
[Sat Nov 22 22:28:36.684275 2025] [:error] [pid 9547:tid 9554] [client 172.192.40.201:43870] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSHIlNClOR5qk7DoMeEKoAAAAUE"]
[Sat Nov 22 22:28:36.973065 2025] [:error] [pid 53477:tid 53481] [client 172.192.40.201:43845] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSHIlH7Lu30Ku9O40aL8EAAAAAA"]
[Sat Nov 22 22:28:37.215590 2025] [:error] [pid 53477:tid 53491] [client 172.192.40.201:43842] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSHIlX7Lu30Ku9O40aL8EQAAAAo"]
[Sat Nov 22 22:28:37.449015 2025] [:error] [pid 53477:tid 53501] [client 172.192.40.201:43784] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aSHIlX7Lu30Ku9O40aL8EgAAABQ"]
[Sat Nov 22 22:28:37.756246 2025] [:error] [pid 53477:tid 53482] [client 172.192.40.201:43813] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aSHIlX7Lu30Ku9O40aL8FAAAAAE"]
[Sat Nov 22 22:28:37.986850 2025] [:error] [pid 53479:tid 53551] [client 172.192.40.201:43997] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aSHIlW6cicFF3Aas-oTbLgAAAI8"]
[Sat Nov 22 22:28:38.219825 2025] [:error] [pid 53478:tid 53515] [client 172.192.40.201:43849] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aSHIlghUYdXBbQswAdQ0tAAAAEY"]
[Sat Nov 22 22:28:38.455178 2025] [:error] [pid 53479:tid 53555] [client 172.192.40.201:43901] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSHIlm6cicFF3Aas-oTbLwAAAJM"]
[Sat Nov 22 22:28:38.751460 2025] [:error] [pid 53477:tid 53486] [client 172.192.40.201:43948] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSHIln7Lu30Ku9O40aL8GAAAAAU"]
[Sat Nov 22 22:28:38.988342 2025] [:error] [pid 53477:tid 53496] [client 172.192.40.201:43944] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSHIln7Lu30Ku9O40aL8GQAAAA8"]
[Sat Nov 22 22:28:39.216023 2025] [:error] [pid 44259:tid 44267] [client 172.192.40.201:43873] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSHIl3Xe1xL-_YOdRmTgcAAAAYU"]
[Sat Nov 22 22:28:39.505177 2025] [:error] [pid 9547:tid 9562] [client 172.192.40.201:43959] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/faq.php"] [unique_id "aSHIl9ClOR5qk7DoMeEKogAAAUk"]
[Sat Nov 22 22:28:39.742220 2025] [:error] [pid 9547:tid 9561] [client 172.192.40.201:43782] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/faq.php"] [unique_id "aSHIl9ClOR5qk7DoMeEKowAAAUg"]
[Sat Nov 22 22:28:40.042690 2025] [:error] [pid 53566:tid 53568] [client 172.192.40.201:43785] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/faq.php"] [unique_id "aSHImMbSHDBkRbwMbd5tsAAAAMA"]
[Sat Nov 22 22:28:40.278832 2025] [:error] [pid 25856:tid 25879] [client 172.192.40.201:43810] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/faq.php"] [unique_id "aSHImBsTP0wy94zKUvH_lwAAARU"]
[Sat Nov 22 22:28:40.517428 2025] [:error] [pid 53478:tid 53510] [client 172.192.40.201:44029] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aSHImAhUYdXBbQswAdQ0uAAAAEE"]
[Sat Nov 22 22:28:40.744878 2025] [:error] [pid 53479:tid 53549] [client 172.192.40.201:43776] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aSHImG6cicFF3Aas-oTbMAAAAI0"]
[Sat Nov 22 22:28:40.980794 2025] [:error] [pid 25856:tid 25862] [client 172.192.40.201:43908] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aSHImBsTP0wy94zKUvH_mQAAAQQ"]
[Sat Nov 22 22:28:41.208294 2025] [:error] [pid 9547:tid 9568] [client 172.192.40.201:43751] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aSHImdClOR5qk7DoMeEKpgAAAU8"]
[Sat Nov 22 22:28:41.445799 2025] [:error] [pid 53478:tid 53521] [client 172.192.40.201:43814] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CLA.php"] [unique_id "aSHImQhUYdXBbQswAdQ0uQAAAEw"]
[Sat Nov 22 22:28:41.760194 2025] [:error] [pid 53478:tid 53527] [client 172.192.40.201:43801] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CLA.php"] [unique_id "aSHImQhUYdXBbQswAdQ0ugAAAFI"]
[Sat Nov 22 22:28:41.989813 2025] [:error] [pid 53478:tid 53518] [client 172.192.40.201:43961] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CLA.php"] [unique_id "aSHImQhUYdXBbQswAdQ0uwAAAEk"]
[Sat Nov 22 22:28:42.218458 2025] [:error] [pid 25856:tid 25871] [client 172.192.40.201:43784] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CLA.php"] [unique_id "aSHImhsTP0wy94zKUvH_mwAAAQ0"]
[Sat Nov 22 22:28:42.449758 2025] [:error] [pid 53478:tid 53533] [client 172.192.40.201:43940] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aSHImghUYdXBbQswAdQ0vAAAAFg"]
[Sat Nov 22 22:28:42.746664 2025] [:error] [pid 44259:tid 44273] [client 172.192.40.201:43946] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aSHImnXe1xL-_YOdRmTgeAAAAYs"]
[Sat Nov 22 22:28:43.056584 2025] [:error] [pid 44259:tid 44285] [client 172.192.40.201:43858] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aSHIm3Xe1xL-_YOdRmTgeQAAAZc"]
[Sat Nov 22 22:28:43.305084 2025] [:error] [pid 44259:tid 44282] [client 172.192.40.201:43901] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aSHIm3Xe1xL-_YOdRmTgewAAAZQ"]
[Sat Nov 22 22:28:43.547726 2025] [:error] [pid 44259:tid 44284] [client 172.192.40.201:43994] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "aSHIm3Xe1xL-_YOdRmTgfQAAAZY"]
[Sat Nov 22 22:28:43.774796 2025] [:error] [pid 44259:tid 44271] [client 172.192.40.201:43875] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "aSHIm3Xe1xL-_YOdRmTgfwAAAYk"]
[Sat Nov 22 22:28:44.002753 2025] [:error] [pid 25856:tid 25876] [client 172.192.40.201:43995] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "aSHInBsTP0wy94zKUvH_nAAAARI"]
[Sat Nov 22 22:28:44.255011 2025] [:error] [pid 44259:tid 44263] [client 172.192.40.201:43905] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "aSHInHXe1xL-_YOdRmTggwAAAYE"]
[Sat Nov 22 22:28:44.483133 2025] [:error] [pid 44259:tid 44267] [client 172.192.40.201:43867] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aSHInHXe1xL-_YOdRmTghAAAAYU"]
[Sat Nov 22 22:28:44.744918 2025] [:error] [pid 44259:tid 44264] [client 172.192.40.201:43802] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aSHInHXe1xL-_YOdRmTghgAAAYI"]
[Sat Nov 22 22:28:44.993280 2025] [:error] [pid 25856:tid 25881] [client 172.192.40.201:43952] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aSHInBsTP0wy94zKUvH_ngAAARc"]
[Sat Nov 22 22:28:45.220887 2025] [:error] [pid 25856:tid 25859] [client 172.192.40.201:43864] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aSHInRsTP0wy94zKUvH_oAAAAQE"]
[Sat Nov 22 22:28:45.522962 2025] [:error] [pid 44259:tid 44273] [client 172.192.40.201:43790] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHInXXe1xL-_YOdRmTgigAAAYs"]
[Sat Nov 22 22:28:45.851769 2025] [:error] [pid 53479:tid 53546] [client 172.192.40.201:43798] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHInW6cicFF3Aas-oTbMgAAAIo"]
[Sat Nov 22 22:28:46.098658 2025] [:error] [pid 53478:tid 53520] [client 172.192.40.201:43788] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHInghUYdXBbQswAdQ0vgAAAEs"]
[Sat Nov 22 22:28:46.389074 2025] [:error] [pid 44259:tid 44282] [client 172.192.40.201:43718] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHInnXe1xL-_YOdRmTgjAAAAZQ"]
[Sun Nov 23 05:47:26.889162 2025] [:error] [pid 44652:tid 44727] [client 85.8.130.42:61295] [client 85.8.130.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.42, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSIvbtiQFwsyXQDhwyDOeAAAARU"]
[Sun Nov 23 05:47:26.900754 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 85.8.130.42:61295] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 06:33:08.624971 2025] [:error] [pid 38739:tid 38769] [client 216.126.225.91:58292] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSI6JAdvEgJm2n2cDmoZ4AAAAEA"]
[Sun Nov 23 10:59:20.391501 2025] [proxy_fcgi:error] [pid 38824:tid 38850] [client 34.100.172.116:34576] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 10:59:21.081226 2025] [:error] [pid 38738:tid 38747] [client 34.100.172.116:34596] [client 34.100.172.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSJ4iQytc6TL9XavPmNDowAAAAU"]
[Sun Nov 23 16:39:42.688630 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:42.815615 2025] [proxy_fcgi:error] [pid 38738:tid 38752] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:42.918618 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.041596 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.155615 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.280829 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.379602 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.508607 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.632638 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.732610 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:43.931076 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.057608 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.195029 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.308961 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.520626 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.634195 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.789629 2025] [proxy_fcgi:error] [pid 38738:tid 38762] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.893919 2025] [proxy_fcgi:error] [pid 38738:tid 38759] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:44.989593 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.63:62941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:47.045701 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.63:62941] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLIUwytc6TL9XavPmPqMQAAAAE"]
[Sun Nov 23 16:39:47.644901 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.46:63309] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLIUwytc6TL9XavPmPqPQAAAAQ"]
[Sun Nov 23 16:39:48.239623 2025] [proxy_fcgi:error] [pid 38739:tid 38771] [client 140.99.1.14:39155] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:48.739938 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.14:39155] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLIVAdvEgJm2n2cDmoaBgAAAFQ"]
[Sun Nov 23 16:39:49.068621 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.28:21227] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:49.177846 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.28:21227] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:49.292018 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.28:21227] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLIVQytc6TL9XavPmPqZQAAAAI"]
[Sun Nov 23 16:39:49.654624 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.8:35519] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:50.339408 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.8:35519] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLIVtiQFwsyXQDhwyCfTgAAAQ0"]
[Sun Nov 23 16:39:50.640922 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.50:24421] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLIVgytc6TL9XavPmPqdAAAAAU"]
[Sun Nov 23 16:39:50.876896 2025] [:error] [pid 14602:tid 14630] [client 140.99.1.76:62473] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLIVh-I77jdD81pU-mIdwAAAUk"]
[Sun Nov 23 16:39:51.112783 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.49:60277] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLIVx-I77jdD81pU-mIhQAAAVc"]
[Sun Nov 23 16:39:51.340057 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.50:45965] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLIV9iQFwsyXQDhwyCfVwAAAQI"]
[Sun Nov 23 16:39:52.598464 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.32:24061] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLIWAytc6TL9XavPmPqiQAAAAk"]
[Sun Nov 23 16:39:52.901329 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.20:34451] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLIWB-I77jdD81pU-mIsQAAAU8"]
[Sun Nov 23 16:39:53.105626 2025] [proxy_fcgi:error] [pid 38739:tid 38784] [client 140.99.1.8:23099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:53.429920 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.8:23099] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aSLIWQdvEgJm2n2cDmoaWgAAAEk"]
[Sun Nov 23 16:39:53.679607 2025] [proxy_fcgi:error] [pid 14602:tid 14642] [client 140.99.1.47:29107] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:53.837618 2025] [proxy_fcgi:error] [pid 14602:tid 14644] [client 140.99.1.47:29107] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:54.005114 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.47:29107] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLIWh-I77jdD81pU-mI0wAAAVg"]
[Sun Nov 23 16:39:54.408385 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.26:20303] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLIWtiQFwsyXQDhwyCffgAAAQc"]
[Sun Nov 23 16:39:54.621663 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.65:32313] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:54.713272 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.65:32313] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLIWgdvEgJm2n2cDmoacAAAAEA"]
[Sun Nov 23 16:39:54.945613 2025] [proxy_fcgi:error] [pid 38824:tid 38851] [client 140.99.1.30:43653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:55.385379 2025] [proxy_fcgi:error] [pid 38824:tid 38841] [client 140.99.1.30:43653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:56.132477 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.30:43653] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLIXE8WZjXLvbHTHPemtAAAANg"]
[Sun Nov 23 16:39:56.366663 2025] [proxy_fcgi:error] [pid 38824:tid 38828] [client 140.99.1.46:27619] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:56.470182 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.46:27619] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLIXE8WZjXLvbHTHPemugAAAMc"]
[Sun Nov 23 16:39:56.718627 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 140.99.1.15:36447] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:56.936306 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.15:36447] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLIXAytc6TL9XavPmPqzgAAABA"]
[Sun Nov 23 16:39:57.462094 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.43:47459] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLIXQ13QPZSi6O8umWGuwAAAIs"]
[Sun Nov 23 16:39:57.794735 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.8:25087] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:57.911457 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 140.99.1.8:25087] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:58.128862 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.8:25087] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLIXtiQFwsyXQDhwyCfrgAAAQs"]
[Sun Nov 23 16:39:58.502686 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.13:58397] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLIXtiQFwsyXQDhwyCftgAAARQ"]
[Sun Nov 23 16:39:58.882025 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.46:52517] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLIXh-I77jdD81pU-mJMQAAAUo"]
[Sun Nov 23 16:39:59.115523 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.44:38897] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLIXwytc6TL9XavPmPq6AAAABU"]
[Sun Nov 23 16:39:59.316678 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.11:37327] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLIXwytc6TL9XavPmPq7wAAAAs"]
[Sun Nov 23 16:39:59.797091 2025] [proxy_fcgi:error] [pid 14602:tid 14627] [client 140.99.1.33:57341] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:39:59.958662 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.33:57341] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLIXx-I77jdD81pU-mJRgAAAU4"]
[Sun Nov 23 16:40:00.941782 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.50:44853] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLIYA13QPZSi6O8umWG6wAAAI4"]
[Sun Nov 23 16:40:01.145926 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.52:52595] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLIYU8WZjXLvbHTHPem9QAAAMU"]
[Sun Nov 23 16:40:02.010669 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 140.99.1.48:29453] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.265649 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.48:29453] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.386607 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 140.99.1.48:29453] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.841007 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.48:29453] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLIYtiQFwsyXQDhwyCf6AAAAQc"]
[Sun Nov 23 16:40:07.419271 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.78:60205] [client 140.99.1.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.78, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLIZx-I77jdD81pU-mJ5AAAAUQ"]
[Sun Nov 23 16:40:07.551467 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.78:60205] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:08.218624 2025] [proxy_fcgi:error] [pid 14602:tid 14634] [client 140.99.1.78:60205] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:08.367931 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.78:60205] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:09.298534 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.78:60205] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLIaR-I77jdD81pU-mKHAAAAVQ"]
[Sun Nov 23 16:40:09.664880 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.65:64943] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:09.777953 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.65:64943] [client 140.99.1.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.65, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLIaQytc6TL9XavPmPrbAAAAAI"]
[Sun Nov 23 16:40:10.037790 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.65:64943] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLIagytc6TL9XavPmPrcwAAABE"]
[Sun Nov 23 16:40:10.505669 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 140.99.1.15:48437] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:10.900610 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.15:48437] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:11.131673 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 140.99.1.15:48437] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:11.355834 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.15:48437] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLIawytc6TL9XavPmPrkQAAAA8"]
[Sun Nov 23 16:40:11.702620 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.78:21963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:12.088811 2025] [proxy_fcgi:error] [pid 38739:tid 38774] [client 140.99.1.78:21963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:12.304000 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 140.99.1.78:21963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:12.625902 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 140.99.1.78:21963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:12.726956 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.78:21963] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLIbAdvEgJm2n2cDmobsQAAAE8"]
[Sun Nov 23 16:40:12.927794 2025] [proxy_fcgi:error] [pid 44652:tid 44709] [client 140.99.1.28:39407] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:13.051620 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 140.99.1.28:39407] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:13.153683 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.28:39407] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLIbdiQFwsyXQDhwyCghwAAAQE"]
[Sun Nov 23 16:40:13.540628 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.20:30987] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:13.757854 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.20:30987] [client 140.99.1.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.20, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLIbR-I77jdD81pU-mKjQAAAU4"]
[Sun Nov 23 16:40:13.919686 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.20:30987] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLIbR-I77jdD81pU-mKkAAAAVg"]
[Sun Nov 23 16:40:16.102886 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.6:41967] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:16.536666 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.6:41967] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:16.929609 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 140.99.1.6:41967] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:17.054991 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.6:41967] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLIcQ13QPZSi6O8umWH1AAAAJI"]
[Sun Nov 23 16:40:17.265631 2025] [proxy_fcgi:error] [pid 38740:tid 38799] [client 140.99.1.78:35371] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:17.772874 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.78:35371] [client 140.99.1.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.78, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLIcQ13QPZSi6O8umWH4QAAAIc"]
[Sun Nov 23 16:40:17.961705 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 140.99.1.78:35371] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:18.060599 2025] [proxy_fcgi:error] [pid 38740:tid 38812] [client 140.99.1.78:35371] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:18.176605 2025] [proxy_fcgi:error] [pid 38740:tid 38799] [client 140.99.1.78:35371] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:18.272224 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.78:35371] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLIcg13QPZSi6O8umWH7AAAAIE"]
[Sun Nov 23 16:40:18.626786 2025] [proxy_fcgi:error] [pid 38739:tid 38778] [client 140.99.1.62:44581] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:18.721096 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.62:44581] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLIcgdvEgJm2n2cDmob_AAAAEQ"]
[Sun Nov 23 16:40:19.050083 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.50:58623] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:19.264658 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.50:58623] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLIcw13QPZSi6O8umWH-wAAAIw"]
[Sun Nov 23 16:40:19.804610 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.63:52869] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:19.937792 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.63:52869] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLIcwytc6TL9XavPmPsFQAAABI"]
[Sun Nov 23 16:40:20.298187 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.17:61057] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLIdAytc6TL9XavPmPsGgAAABY"]
[Sun Nov 23 16:40:20.646613 2025] [proxy_fcgi:error] [pid 14602:tid 14636] [client 140.99.1.5:53955] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:20.747601 2025] [proxy_fcgi:error] [pid 14602:tid 14625] [client 140.99.1.5:53955] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:21.330263 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.5:53955] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLIdR-I77jdD81pU-mLDQAAAU4"]
[Sun Nov 23 16:40:21.681280 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.17:26401] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLIddiQFwsyXQDhwyChTAAAARg"]
[Sun Nov 23 16:40:21.992559 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.72:20627] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:22.318064 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.72:20627] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLIdk8WZjXLvbHTHPeoFAAAAMk"]
[Sun Nov 23 16:40:22.723633 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 140.99.1.3:42237] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:23.061767 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 140.99.1.3:42237] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:23.182676 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.3:42237] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLId08WZjXLvbHTHPeoHQAAANM"]
[Sun Nov 23 16:40:23.401663 2025] [proxy_fcgi:error] [pid 38824:tid 38850] [client 140.99.1.15:38395] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:23.655872 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.15:38395] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLId08WZjXLvbHTHPeoJAAAANI"]
[Sun Nov 23 16:40:23.956700 2025] [proxy_fcgi:error] [pid 38738:tid 38749] [client 140.99.1.30:49335] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:24.308292 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.30:49335] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLIeAytc6TL9XavPmPsdQAAABM"]
[Sun Nov 23 16:40:24.695796 2025] [proxy_fcgi:error] [pid 14602:tid 14626] [client 140.99.1.17:54047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:24.924697 2025] [proxy_fcgi:error] [pid 14602:tid 14627] [client 140.99.1.17:54047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:25.043638 2025] [proxy_fcgi:error] [pid 14602:tid 14645] [client 140.99.1.17:54047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:25.306630 2025] [proxy_fcgi:error] [pid 14602:tid 14634] [client 140.99.1.17:54047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:25.448732 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.17:54047] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLIeR-I77jdD81pU-mLOAAAAUg"]
[Sun Nov 23 16:40:25.661806 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.50:49535] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLIeQytc6TL9XavPmPsqAAAAAc"]
[Sun Nov 23 16:40:25.856564 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.77:64231] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLIeQdvEgJm2n2cDmocdwAAAEI"]
[Sun Nov 23 16:40:26.055320 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.70:35611] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLIeg13QPZSi6O8umWIiwAAAJA"]
[Sun Nov 23 16:40:26.375771 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 140.99.1.62:27329] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:26.469711 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.62:27329] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLIek8WZjXLvbHTHPeoWgAAANE"]
[Sun Nov 23 16:40:26.675798 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.43:26385] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLIeg13QPZSi6O8umWIlQAAAJM"]
[Sun Nov 23 16:40:26.991926 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 140.99.1.71:39703] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:27.242947 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.71:39703] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLIe08WZjXLvbHTHPeoaAAAAME"]
[Sun Nov 23 16:40:27.441696 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.38:56737] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLIew13QPZSi6O8umWIqgAAAJQ"]
[Sun Nov 23 16:40:27.659850 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.43:32989] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLIew13QPZSi6O8umWIsAAAAJA"]
[Sun Nov 23 16:40:27.845790 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.78:42429] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLIex-I77jdD81pU-mLagAAAU4"]
[Sun Nov 23 16:40:29.252935 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.6:53741] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLIfQdvEgJm2n2cDmocpAAAAE8"]
[Sun Nov 23 16:40:29.755089 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.33:36581] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLIfU8WZjXLvbHTHPeopQAAAMI"]
[Sun Nov 23 16:40:29.961598 2025] [proxy_fcgi:error] [pid 14602:tid 14628] [client 140.99.1.37:25407] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:30.295649 2025] [proxy_fcgi:error] [pid 14602:tid 14631] [client 140.99.1.37:25407] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:30.435813 2025] [:error] [pid 14602:tid 14624] [client 140.99.1.37:25407] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLIfh-I77jdD81pU-mLnAAAAUM"]
[Sun Nov 23 16:40:30.876615 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.62:37747] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:30.988856 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.62:37747] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:31.550604 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 140.99.1.62:37747] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:31.651343 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.62:37747] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLIfw13QPZSi6O8umWJHgAAAJY"]
[Sun Nov 23 16:40:32.026629 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.27:60079] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:32.575116 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.27:60079] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLIgNiQFwsyXQDhwyCh4QAAAQ0"]
[Sun Nov 23 16:40:32.842068 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.15:61071] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLIgB-I77jdD81pU-mLvwAAAVI"]
[Sun Nov 23 16:40:33.402803 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.18:63121] [client 140.99.1.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSLIgU8WZjXLvbHTHPeo3QAAAMY"]
[Sun Nov 23 16:40:33.967501 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.73:37489] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLIgU8WZjXLvbHTHPeo5AAAAMo"]
[Sun Nov 23 16:40:34.451618 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.10:28059] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:34.663229 2025] [proxy_fcgi:error] [pid 14602:tid 14637] [client 140.99.1.10:28059] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:34.798623 2025] [proxy_fcgi:error] [pid 14602:tid 14626] [client 140.99.1.10:28059] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:34.936448 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 140.99.1.10:28059] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:35.638835 2025] [:error] [pid 14602:tid 14624] [client 140.99.1.10:28059] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLIgx-I77jdD81pU-mL-QAAAUM"]
[Sun Nov 23 16:40:35.824529 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.71:55481] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLIgw13QPZSi6O8umWJZgAAAJM"]
[Sun Nov 23 16:40:38.588007 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.67:26381] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLIhgytc6TL9XavPmPtvwAAAAo"]
[Sun Nov 23 16:40:38.792831 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.63:24705] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLIhk8WZjXLvbHTHPepKgAAAME"]
[Sun Nov 23 16:40:39.012561 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.7:20575] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLIh08WZjXLvbHTHPepMgAAANc"]
[Sun Nov 23 16:40:39.280319 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.30:45611] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLIhw13QPZSi6O8umWJmgAAAIo"]
[Sun Nov 23 16:40:39.659927 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.13:35437] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLIhwdvEgJm2n2cDmodZgAAAFI"]
[Sun Nov 23 16:40:39.856916 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.39:21503] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLIhwytc6TL9XavPmPt0wAAAAY"]
[Sun Nov 23 16:40:39.859782 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:40.099090 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:40.618923 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:40.629841 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.75:40001] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLIiA13QPZSi6O8umWJsAAAAI4"]
[Sun Nov 23 16:40:40.772606 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:40.826365 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.20:45071] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLIiAytc6TL9XavPmPt5gAAAA8"]
[Sun Nov 23 16:40:40.875603 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:40.992947 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:41.174274 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:41.378968 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.73:25397] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLIiR-I77jdD81pU-mMowAAAVU"]
[Sun Nov 23 16:40:41.732729 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.18:42493] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLIidiQFwsyXQDhwyCiigAAARY"]
[Sun Nov 23 16:40:43.097405 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.44:27765] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:43.450777 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.44:27765] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLIiw13QPZSi6O8umWJzgAAAJA"]
[Sun Nov 23 16:40:43.951743 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.44:20021] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLIiw13QPZSi6O8umWJ1gAAAIc"]
[Sun Nov 23 16:40:44.166705 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.32:20937] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:44.441925 2025] [proxy_fcgi:error] [pid 38738:tid 38753] [client 140.99.1.32:20937] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:44.653665 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.32:20937] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLIjAytc6TL9XavPmPuHgAAAA0"]
[Sun Nov 23 16:40:44.997621 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.43:56415] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:45.118612 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.43:56415] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:45.224677 2025] [proxy_fcgi:error] [pid 38740:tid 38812] [client 140.99.1.43:56415] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:45.291624 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:45.651941 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.43:56415] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLIjQ13QPZSi6O8umWJ8gAAAIw"]
[Sun Nov 23 16:40:45.799977 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:45.903636 2025] [proxy_fcgi:error] [pid 38738:tid 38753] [client 140.99.1.77:20767] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:45.932296 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:45.999876 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.77:20767] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLIjQytc6TL9XavPmPuNAAAAAY"]
[Sun Nov 23 16:40:46.147633 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.243718 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.568602 2025] [proxy_fcgi:error] [pid 38738:tid 38762] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.741995 2025] [proxy_fcgi:error] [pid 38738:tid 38759] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.743941 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.849428 2025] [proxy_fcgi:error] [pid 38738:tid 38742] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.886643 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.105700 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.165944 2025] [proxy_fcgi:error] [pid 38738:tid 38742] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.212140 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.385613 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.562887 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.614718 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.732878 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.67:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.808617 2025] [proxy_fcgi:error] [pid 38738:tid 38743] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.937600 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:48.069946 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.17:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:48.347113 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.17:61287] [client 140.99.1.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLIkAytc6TL9XavPmPugQAAAA8"]
[Sun Nov 23 16:40:48.768697 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 140.99.1.50:47275] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:48.885192 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.50:47275] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLIkNiQFwsyXQDhwyCi6AAAARI"]
[Sun Nov 23 16:40:49.116218 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.65:38125] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLIkQytc6TL9XavPmPujwAAAAU"]
[Sun Nov 23 16:40:52.072864 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.15:44335] [client 140.99.1.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.15, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSLIlAdvEgJm2n2cDmoeHQAAAEg"]
[Sun Nov 23 16:40:52.084614 2025] [proxy_fcgi:error] [pid 38739:tid 38777] [client 140.99.1.15:44335] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:52.205628 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.15:44335] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:52.299412 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.15:44335] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLIlAdvEgJm2n2cDmoeJAAAAEU"]
[Sun Nov 23 16:40:52.559839 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.67:62367] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLIlA13QPZSi6O8umWKgQAAAJY"]
[Sun Nov 23 16:40:52.670957 2025] [proxy_fcgi:error] [pid 38824:tid 38830] [client 140.99.1.27:25695] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:52.779807 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.27:25695] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLIlE8WZjXLvbHTHPeqRgAAAMs"]
[Sun Nov 23 16:40:54.024951 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.74:27685] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLIltiQFwsyXQDhwyCjMwAAAQI"]
[Sun Nov 23 16:40:54.683327 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.78:24223] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLIltiQFwsyXQDhwyCjPQAAAQE"]
[Sun Nov 23 16:40:55.431877 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.63:51199] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aSLIl08WZjXLvbHTHPeqZQAAANE"]
[Sun Nov 23 16:40:56.233625 2025] [proxy_fcgi:error] [pid 14602:tid 14644] [client 140.99.1.78:38015] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:56.483326 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.78:38015] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLImB-I77jdD81pU-mN8QAAAVI"]
[Sun Nov 23 16:40:56.888639 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.7:44955] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLImA13QPZSi6O8umWK2gAAAJA"]
[Sun Nov 23 16:40:57.330601 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.7:23341] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:57.469632 2025] [proxy_fcgi:error] [pid 38824:tid 38838] [client 140.99.1.31:27819] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:57.553084 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.7:23341] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSLImR-I77jdD81pU-mOCAAAAVM"]
[Sun Nov 23 16:40:57.961623 2025] [:error] [pid 14602:tid 14622] [client 140.99.1.73:55189] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSLImR-I77jdD81pU-mODAAAAUE"]
[Sun Nov 23 16:40:57.989956 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.31:27819] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLImU8WZjXLvbHTHPeqkQAAAM0"]
[Sun Nov 23 16:40:58.488607 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.67:30147] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:58.501612 2025] [proxy_fcgi:error] [pid 14602:tid 14641] [client 140.99.1.27:47765] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:58.589798 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.67:30147] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLImg13QPZSi6O8umWK9QAAAI0"]
[Sun Nov 23 16:40:58.611620 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.27:47765] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:58.724938 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.27:47765] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLImh-I77jdD81pU-mOJQAAAUA"]
[Sun Nov 23 16:40:58.875886 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.28:59173] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLImgytc6TL9XavPmPvdAAAAAM"]
[Sun Nov 23 16:40:59.542648 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.53:22921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:59.599727 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.3:28771] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:59.642613 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 140.99.1.53:22921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:00.021653 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.53:22921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:00.300450 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.53:22921] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLInB-I77jdD81pU-mOTgAAAUA"]
[Sun Nov 23 16:41:00.493091 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.6:27851] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLInE8WZjXLvbHTHPeqrQAAANI"]
[Sun Nov 23 16:41:00.529984 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.3:28771] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLInNiQFwsyXQDhwyCjoQAAAQo"]
[Sun Nov 23 16:41:00.873638 2025] [proxy_fcgi:error] [pid 44652:tid 44717] [client 140.99.1.16:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:01.088817 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.32:46063] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLInQytc6TL9XavPmPvkgAAAAA"]
[Sun Nov 23 16:41:01.111611 2025] [proxy_fcgi:error] [pid 44652:tid 44709] [client 140.99.1.16:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:01.412638 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.18:39269] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLInQytc6TL9XavPmPvmAAAAA4"]
[Sun Nov 23 16:41:01.474609 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.16:61287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:01.590568 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.16:61287] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSLIndiQFwsyXQDhwyCjuwAAAQQ"]
[Sun Nov 23 16:41:01.606221 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.13:63371] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLInU8WZjXLvbHTHPeqvQAAAMY"]
[Sun Nov 23 16:41:01.809118 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.43:24489] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLInU8WZjXLvbHTHPeqywAAAMY"]
[Sun Nov 23 16:41:01.813234 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.37:30563] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLInR-I77jdD81pU-mOdAAAAU8"]
[Sun Nov 23 16:41:02.064014 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.48:41963] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLInk8WZjXLvbHTHPeq2AAAAMU"]
[Sun Nov 23 16:41:02.064251 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.74:63015] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSLIng13QPZSi6O8umWLVQAAAIo"]
[Sun Nov 23 16:41:02.375145 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.31:30253] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLIngytc6TL9XavPmPvsQAAAA4"]
[Sun Nov 23 16:41:02.897625 2025] [proxy_fcgi:error] [pid 38739:tid 38781] [client 140.99.1.33:63357] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:03.052171 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.33:63357] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSLInwdvEgJm2n2cDmoe-QAAAEU"]
[Sun Nov 23 16:41:03.147472 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.70:32871] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:03.350659 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.70:32871] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aSLInwdvEgJm2n2cDmofCwAAAE8"]
[Sun Nov 23 16:41:03.353300 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.6:58657] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSLInwytc6TL9XavPmPvxwAAAAQ"]
[Sun Nov 23 16:41:03.643711 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 140.99.1.37:59603] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:03.646617 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.26:41629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:03.754607 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 140.99.1.37:59603] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:03.770626 2025] [proxy_fcgi:error] [pid 44652:tid 44713] [client 140.99.1.26:41629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:03.850946 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.37:59603] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLIn9iQFwsyXQDhwyCj8gAAAQA"]
[Sun Nov 23 16:41:03.972606 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.26:41629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:04.208776 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.43:29863] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLIoE8WZjXLvbHTHPerDQAAANc"]
[Sun Nov 23 16:41:04.408629 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 140.99.1.26:48743] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:04.413882 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.26:41629] [client 140.99.1.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.26, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "aSLIoNiQFwsyXQDhwyCkDgAAARg"]
[Sun Nov 23 16:41:04.514806 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.26:48743] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLIoE8WZjXLvbHTHPerGAAAAMU"]
[Sun Nov 23 16:41:04.662936 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.26:41629] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Sun Nov 23 16:41:04.810701 2025] [proxy_fcgi:error] [pid 38738:tid 38742] [client 140.99.1.44:21001] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:04.841624 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 140.99.1.26:41629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:04.951627 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.26:41629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:05.075607 2025] [proxy_fcgi:error] [pid 44652:tid 44713] [client 140.99.1.26:41629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:05.140326 2025] [proxy_fcgi:error] [pid 38738:tid 38759] [client 140.99.1.44:21001] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:05.166454 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.26:41629] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSLIodiQFwsyXQDhwyCkHwAAARg"]
[Sun Nov 23 16:41:05.397782 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.70:38403] [client 140.99.1.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.70, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSLIoU8WZjXLvbHTHPerLAAAAMM"]
[Sun Nov 23 16:41:05.508925 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.44:21001] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLIoQytc6TL9XavPmPwBAAAAA8"]
[Sun Nov 23 16:41:05.519622 2025] [proxy_fcgi:error] [pid 38824:tid 38845] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:05.766625 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.74:40555] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:05.776611 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:05.971792 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.74:40555] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLIoQytc6TL9XavPmPwDgAAAAI"]
[Sun Nov 23 16:41:06.000647 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:06.613621 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:06.836651 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:07.023610 2025] [proxy_fcgi:error] [pid 38739:tid 38789] [client 140.99.1.74:45943] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:07.166634 2025] [proxy_fcgi:error] [pid 38824:tid 38846] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:07.246143 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.74:45943] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLIowdvEgJm2n2cDmofkQAAAFg"]
[Sun Nov 23 16:41:08.183909 2025] [proxy_fcgi:error] [pid 38824:tid 38845] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:08.340738 2025] [proxy_fcgi:error] [pid 38824:tid 38838] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:08.601345 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.68:41051] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLIpB-I77jdD81pU-mO-QAAAVc"]
[Sun Nov 23 16:41:08.738627 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.017611 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 140.99.1.43:23923] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.097602 2025] [proxy_fcgi:error] [pid 38824:tid 38850] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.203616 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 140.99.1.43:23923] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.224607 2025] [proxy_fcgi:error] [pid 38824:tid 38849] [client 140.99.1.70:38403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.347361 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.70:38403] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSLIpU8WZjXLvbHTHPerlgAAANc"]
[Sun Nov 23 16:41:09.502092 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.43:23923] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLIpdiQFwsyXQDhwyCkZwAAAQ8"]
[Sun Nov 23 16:41:09.759124 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 140.99.1.31:22669] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.841053 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.27:52375] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLIpR-I77jdD81pU-mPDwAAAVc"]
[Sun Nov 23 16:41:09.869822 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.31:22669] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.988717 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.31:22669] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSLIpQytc6TL9XavPmPwXQAAAAY"]
[Sun Nov 23 16:41:10.230563 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.46:41649] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLIpk8WZjXLvbHTHPerrAAAANg"]
[Sun Nov 23 16:41:10.412906 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.20:21419] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:10.566330 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.33:60959] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLIpk8WZjXLvbHTHPersQAAANc"]
[Sun Nov 23 16:41:10.885399 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.20:21419] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSLIptiQFwsyXQDhwyCkfgAAAQI"]
[Sun Nov 23 16:41:12.001612 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.78:50121] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.374879 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.78:50121] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.557618 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.78:50121] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.670689 2025] [proxy_fcgi:error] [pid 14602:tid 14633] [client 140.99.1.78:50121] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.773394 2025] [proxy_fcgi:error] [pid 14602:tid 14624] [client 140.99.1.78:50121] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:13.070055 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.78:50121] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSLIqR-I77jdD81pU-mPUAAAAU8"]
[Sun Nov 23 16:41:14.065045 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 140.99.1.31:21337] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:14.145845 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.68:49195] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLIqtiQFwsyXQDhwyCkzQAAAQY"]
[Sun Nov 23 16:41:14.175616 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 140.99.1.31:21337] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:14.318824 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.31:21337] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSLIqtiQFwsyXQDhwyCk1AAAAQA"]
[Sun Nov 23 16:41:14.770865 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.67:30549] [client 140.99.1.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "aSLIqgytc6TL9XavPmPwnQAAAA4"]
[Sun Nov 23 16:41:14.998709 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.77:53615] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:15.109819 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.77:53615] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLIqwdvEgJm2n2cDmogIgAAAFI"]
[Sun Nov 23 16:41:15.311893 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.74:55383] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLIqw13QPZSi6O8umWMkgAAAIU"]
[Sun Nov 23 16:41:15.385605 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.13:28865] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSLIq08WZjXLvbHTHPer7AAAAM8"]
[Sun Nov 23 16:41:15.600762 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.43:44185] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLIq08WZjXLvbHTHPer8gAAAMY"]
[Sun Nov 23 16:41:15.812694 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.10:55583] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:16.042601 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.39:34409] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:16.151608 2025] [proxy_fcgi:error] [pid 38738:tid 38751] [client 140.99.1.10:55583] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:16.424096 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.39:34409] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:16.593620 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.39:34409] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:16.664624 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.10:55583] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:16.815516 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.10:55583] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSLIrAytc6TL9XavPmPwxgAAABA"]
[Sun Nov 23 16:41:17.016946 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.39:34409] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLIrdiQFwsyXQDhwyClKwAAARA"]
[Sun Nov 23 16:41:17.022944 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.39:53671] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSLIrQytc6TL9XavPmPwygAAABI"]
[Sun Nov 23 16:41:17.866734 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.49:26823] [client 140.99.1.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.49, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLIrR-I77jdD81pU-mPjgAAAUY"]
[Sun Nov 23 16:41:18.036198 2025] [proxy_fcgi:error] [pid 14602:tid 14639] [client 140.99.1.49:26823] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:18.085613 2025] [proxy_fcgi:error] [pid 38824:tid 38830] [client 140.99.1.53:33303] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:18.375987 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.53:33303] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSLIrk8WZjXLvbHTHPesNwAAAMA"]
[Sun Nov 23 16:41:18.829609 2025] [proxy_fcgi:error] [pid 14602:tid 14636] [client 140.99.1.49:26823] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:18.871688 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.10:62801] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aSLIrgdvEgJm2n2cDmogfgAAAEw"]
[Sun Nov 23 16:41:18.976839 2025] [proxy_fcgi:error] [pid 14602:tid 14629] [client 140.99.1.49:26823] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:19.175603 2025] [proxy_fcgi:error] [pid 14602:tid 14640] [client 140.99.1.28:55437] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:19.290624 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.28:55437] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:19.398667 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.28:55437] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSLIrx-I77jdD81pU-mPwAAAAUg"]
[Sun Nov 23 16:41:19.584700 2025] [:error] [pid 14602:tid 14630] [client 140.99.1.49:26823] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLIrx-I77jdD81pU-mPwgAAAUk"]
[Sun Nov 23 16:41:19.987494 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 140.99.1.11:37233] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:20.193662 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.6:64179] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:20.297606 2025] [proxy_fcgi:error] [pid 38824:tid 38830] [client 140.99.1.6:64179] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:20.658620 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 140.99.1.6:64179] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:21.057864 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.6:64179] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSLIsU8WZjXLvbHTHPeshQAAANE"]
[Sun Nov 23 16:41:21.246631 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 140.99.1.16:42987] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:21.769875 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.16:42987] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSLIsQdvEgJm2n2cDmogwgAAAEo"]
[Sun Nov 23 16:41:22.144709 2025] [proxy_fcgi:error] [pid 38824:tid 38851] [client 140.99.1.3:44355] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:22.512624 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 140.99.1.3:44355] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:22.622043 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 140.99.1.3:44355] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:22.893844 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.3:44355] [client 140.99.1.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.3, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSLIsk8WZjXLvbHTHPesswAAAMI"]
[Sun Nov 23 16:41:23.230624 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 140.99.1.3:44355] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:23.566465 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.3:44355] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSLIs08WZjXLvbHTHPesygAAAM0"]
[Sun Nov 23 16:41:23.739959 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.11:37233] [client 140.99.1.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.11, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLIswytc6TL9XavPmPxYQAAABM"]
[Sun Nov 23 16:41:24.252166 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.11:37233] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLItAytc6TL9XavPmPxawAAABE"]
[Sun Nov 23 16:41:24.601879 2025] [proxy_fcgi:error] [pid 14602:tid 14634] [client 140.99.1.30:40477] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:24.846632 2025] [proxy_fcgi:error] [pid 14602:tid 14628] [client 140.99.1.33:44903] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:25.028720 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.33:44903] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSLItR-I77jdD81pU-mQOQAAAVA"]
[Sun Nov 23 16:41:25.089064 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.30:40477] [client 140.99.1.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aSLItR-I77jdD81pU-mQOwAAAVU"]
[Sun Nov 23 16:41:25.251629 2025] [proxy_fcgi:error] [pid 14602:tid 14624] [client 140.99.1.49:25585] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:25.330646 2025] [proxy_fcgi:error] [pid 14602:tid 14641] [client 140.99.1.47:23047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:25.469208 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.49:25585] [client 140.99.1.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/error.php"] [unique_id "aSLItR-I77jdD81pU-mQUAAAAVg"]
[Sun Nov 23 16:41:25.585535 2025] [proxy_fcgi:error] [pid 14602:tid 14631] [client 140.99.1.47:23047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:25.730844 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.32:64039] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:25.886495 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.47:23047] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLItR-I77jdD81pU-mQYgAAAVg"]
[Sun Nov 23 16:41:26.143777 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.32:64039] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSLItg13QPZSi6O8umWNWAAAAIM"]
[Sun Nov 23 16:41:26.250918 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.14:38243] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:26.657971 2025] [proxy_fcgi:error] [pid 14602:tid 14645] [client 140.99.1.39:61885] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:26.802305 2025] [proxy_fcgi:error] [pid 14602:tid 14626] [client 140.99.1.39:61885] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:26.809737 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.14:38243] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:27.172663 2025] [proxy_fcgi:error] [pid 38738:tid 38743] [client 140.99.1.14:38243] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:27.548625 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.14:38243] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:27.600957 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.39:61885] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSLItx-I77jdD81pU-mQnAAAAVU"]
[Sun Nov 23 16:41:27.657081 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.14:38243] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLItwytc6TL9XavPmPxwgAAAAM"]
[Sun Nov 23 16:41:27.922610 2025] [proxy_fcgi:error] [pid 44652:tid 44706] [client 140.99.1.75:21137] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:27.943147 2025] [:error] [pid 14602:tid 14623] [client 140.99.1.74:57251] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSLItx-I77jdD81pU-mQqQAAAUI"]
[Sun Nov 23 16:41:28.035824 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.75:21137] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:28.193333 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.75:21137] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLIuNiQFwsyXQDhwyCmmwAAAQY"]
[Sun Nov 23 16:41:28.235294 2025] [proxy_fcgi:error] [pid 14602:tid 14635] [client 140.99.1.77:57693] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:28.455610 2025] [proxy_fcgi:error] [pid 14602:tid 14625] [client 140.99.1.77:57693] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:28.625615 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 140.99.1.14:36367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:28.732449 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.77:57693] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSLIuB-I77jdD81pU-mQuQAAAU4"]
[Sun Nov 23 16:41:28.943112 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.14:36367] [client 140.99.1.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.14, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLIuAdvEgJm2n2cDmohcwAAAEY"]
[Sun Nov 23 16:41:29.013642 2025] [proxy_fcgi:error] [pid 14602:tid 14625] [client 140.99.1.8:28181] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:29.082888 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.14:36367] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLIuQdvEgJm2n2cDmoheAAAAFg"]
[Sun Nov 23 16:41:29.302616 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.8:28181] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:29.458355 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.8:28181] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSLIuR-I77jdD81pU-mQ1AAAAUQ"]
[Sun Nov 23 16:41:31.102594 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.14:29959] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSLIuwytc6TL9XavPmPyDgAAABY"]
[Sun Nov 23 16:41:31.118622 2025] [proxy_fcgi:error] [pid 38738:tid 38752] [client 140.99.1.53:25553] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:31.288391 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.28:49381] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSLIuw13QPZSi6O8umWNugAAAIg"]
[Sun Nov 23 16:41:31.510236 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.71:20047] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSLIu9iQFwsyXQDhwyCm1QAAAQk"]
[Sun Nov 23 16:41:31.811605 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 140.99.1.53:25553] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:31.938248 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.48:21651] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSLIu9iQFwsyXQDhwyCm3AAAAQE"]
[Sun Nov 23 16:41:32.187584 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.53:28107] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSLIvA13QPZSi6O8umWN1AAAAJM"]
[Sun Nov 23 16:41:32.379821 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.78:36521] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSLIvA13QPZSi6O8umWN2QAAAII"]
[Sun Nov 23 16:41:32.445648 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.53:25553] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:32.552099 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.53:25553] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLIvAytc6TL9XavPmPyOQAAAAs"]
[Sun Nov 23 16:41:32.917708 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.18:36201] [client 140.99.1.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/radio.php"] [unique_id "aSLIvAdvEgJm2n2cDmohygAAAFU"]
[Sun Nov 23 16:41:32.948931 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.20:44737] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSLIvPq-c47Q5mW5E9FhkQAAAYw"]
[Sun Nov 23 16:41:33.166887 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.28:37367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:33.199972 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.28:21773] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSLIvR-I77jdD81pU-mRHAAAAUc"]
[Sun Nov 23 16:41:33.481177 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.3:63705] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSLIvR-I77jdD81pU-mRHQAAAUY"]
[Sun Nov 23 16:41:33.642802 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.28:37367] [client 140.99.1.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.28, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLIvQ13QPZSi6O8umWN-gAAAIE"]
[Sun Nov 23 16:41:33.794631 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.28:37367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:33.901614 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.28:37367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:33.937476 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.39:34241] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSLIvQ13QPZSi6O8umWODgAAAI4"]
[Sun Nov 23 16:41:34.048619 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.28:37367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:34.243909 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.28:37367] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLIvg13QPZSi6O8umWOHAAAAII"]
[Sun Nov 23 16:41:34.493884 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.47:60763] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSLIvh-I77jdD81pU-mRLAAAAUQ"]
[Sun Nov 23 16:41:34.536608 2025] [proxy_fcgi:error] [pid 14602:tid 14628] [client 140.99.1.17:45941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:34.641678 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.17:45941] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLIvh-I77jdD81pU-mRNQAAAVQ"]
[Sun Nov 23 16:41:34.737626 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 140.99.1.50:48237] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:34.975930 2025] [proxy_fcgi:error] [pid 16066:tid 16088] [client 140.99.1.2:43677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:35.448643 2025] [:error] [pid 16066:tid 16079] [client 140.99.1.2:43677] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLIv_q-c47Q5mW5E9FhxAAAAYo"]
[Sun Nov 23 16:41:35.574004 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.50:48237] [client 140.99.1.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.50, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSLIvwytc6TL9XavPmPyiQAAAAU"]
[Sun Nov 23 16:41:35.933168 2025] [proxy_fcgi:error] [pid 14602:tid 14641] [client 140.99.1.70:60271] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:36.482369 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.70:60271] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLIwB-I77jdD81pU-mRUAAAAVQ"]
[Sun Nov 23 16:41:36.730934 2025] [proxy_fcgi:error] [pid 38738:tid 38759] [client 140.99.1.50:48237] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:36.754958 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.11:30109] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLIwE8WZjXLvbHTHPetywAAANg"]
[Sun Nov 23 16:41:36.840913 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.50:48237] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSLIwAytc6TL9XavPmPypQAAAAI"]
[Sun Nov 23 16:41:36.971869 2025] [proxy_fcgi:error] [pid 44652:tid 44721] [client 140.99.1.49:27685] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:37.047102 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.32:34541] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSLIwQdvEgJm2n2cDmoiDgAAAFQ"]
[Sun Nov 23 16:41:37.130829 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.49:27685] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:37.737606 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.49:27685] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLIwdiQFwsyXQDhwyCnVAAAAQg"]
[Sun Nov 23 16:41:37.808622 2025] [proxy_fcgi:error] [pid 16066:tid 16083] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:37.973874 2025] [proxy_fcgi:error] [pid 16066:tid 16085] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:38.174235 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.14:30079] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLIwvq-c47Q5mW5E9FiAAAAAYE"]
[Sun Nov 23 16:41:38.491680 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 140.99.1.17:38273] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:38.859027 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.17:38273] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLIwgytc6TL9XavPmPy3AAAAAQ"]
[Sun Nov 23 16:41:38.893952 2025] [proxy_fcgi:error] [pid 16066:tid 16082] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:39.055637 2025] [proxy_fcgi:error] [pid 16066:tid 16086] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:39.104609 2025] [proxy_fcgi:error] [pid 16066:tid 16075] [client 140.99.1.70:37519] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:39.301696 2025] [proxy_fcgi:error] [pid 16066:tid 16074] [client 140.99.1.70:37519] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:39.463838 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.70:37519] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLIw_q-c47Q5mW5E9FiKgAAAYk"]
[Sun Nov 23 16:41:39.503825 2025] [proxy_fcgi:error] [pid 16066:tid 16083] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:39.659626 2025] [proxy_fcgi:error] [pid 16066:tid 16080] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:39.815154 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.53:42123] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:40.100341 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.53:42123] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLIxAytc6TL9XavPmPy_QAAAAA"]
[Sun Nov 23 16:41:40.200611 2025] [proxy_fcgi:error] [pid 16066:tid 16075] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:40.397670 2025] [proxy_fcgi:error] [pid 16066:tid 16092] [client 140.99.1.11:20761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:40.402620 2025] [proxy_fcgi:error] [pid 38739:tid 38771] [client 140.99.1.69:37347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:40.502915 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.11:20761] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLIxPq-c47Q5mW5E9FiQAAAAYI"]
[Sun Nov 23 16:41:40.737683 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.69:37347] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLIxAdvEgJm2n2cDmoiPAAAAE0"]
[Sun Nov 23 16:41:40.738822 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.24:31507] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSLIxNiQFwsyXQDhwyCngQAAAQM"]
[Sun Nov 23 16:41:40.963283 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.76:59201] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSLIxB-I77jdD81pU-mRlQAAAUY"]
[Sun Nov 23 16:41:41.177668 2025] [proxy_fcgi:error] [pid 16066:tid 16092] [client 140.99.1.52:40653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.486677 2025] [proxy_fcgi:error] [pid 16066:tid 16074] [client 140.99.1.52:40653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.490610 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.48:27987] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.608624 2025] [proxy_fcgi:error] [pid 16066:tid 16075] [client 140.99.1.52:40653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.611604 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.48:27987] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.893751 2025] [proxy_fcgi:error] [pid 16066:tid 16085] [client 140.99.1.52:40653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.895943 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.48:27987] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:42.102769 2025] [:error] [pid 16066:tid 16087] [client 140.99.1.52:40653] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLIxvq-c47Q5mW5E9FiYAAAAZI"]
[Sun Nov 23 16:41:42.422248 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.71:27993] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLIxgdvEgJm2n2cDmoiVwAAAEI"]
[Sun Nov 23 16:41:42.570540 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.48:27987] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSLIxg13QPZSi6O8umWOpwAAAJg"]
[Sun Nov 23 16:41:42.625497 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.31:34079] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLIxg13QPZSi6O8umWOqQAAAIE"]
[Sun Nov 23 16:41:42.766974 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.5:44529] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSLIxk8WZjXLvbHTHPeuRgAAAMk"]
[Sun Nov 23 16:41:42.917016 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.78:20203] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLIxk8WZjXLvbHTHPeuRwAAAMM"]
[Sun Nov 23 16:41:43.241651 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 140.99.1.14:61795] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:43.388843 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.14:61795] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLIxw13QPZSi6O8umWOtQAAAIw"]
[Sun Nov 23 16:41:43.570320 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.8:60617] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSLIxx-I77jdD81pU-mRvQAAAUY"]
[Sun Nov 23 16:41:43.649022 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.62:46913] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLIx08WZjXLvbHTHPeuUgAAAMM"]
[Sun Nov 23 16:41:44.007614 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 140.99.1.6:37977] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:44.365750 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.6:37977] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLIyA13QPZSi6O8umWOxQAAAJA"]
[Sun Nov 23 16:41:44.478246 2025] [:error] [pid 16066:tid 16080] [client 140.99.1.20:44775] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSLIyPq-c47Q5mW5E9FikwAAAYs"]
[Sun Nov 23 16:41:44.565823 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.73:62913] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLIyAdvEgJm2n2cDmoiiwAAAEg"]
[Sun Nov 23 16:41:45.260376 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.10:21403] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSLIyR-I77jdD81pU-mR2AAAAVQ"]
[Sun Nov 23 16:41:45.747083 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.68:21439] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSLIyQdvEgJm2n2cDmoipQAAAEE"]
[Sun Nov 23 16:41:45.830899 2025] [:error] [pid 16066:tid 16076] [client 140.99.1.39:63679] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLIyfq-c47Q5mW5E9FiqgAAAYc"]
[Sun Nov 23 16:41:46.032808 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.14:37107] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLIytiQFwsyXQDhwyCnvQAAAQQ"]
[Sun Nov 23 16:41:46.578489 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.38:50967] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLIyh-I77jdD81pU-mR8wAAAU8"]
[Sun Nov 23 16:41:46.597674 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.72:61537] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:46.969598 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 140.99.1.72:61537] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:47.995325 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.72:61537] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSLIy9iQFwsyXQDhwyCn4QAAARc"]
[Sun Nov 23 16:41:48.061697 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.18:52823] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLIzA13QPZSi6O8umWO_gAAAIM"]
[Sun Nov 23 16:41:48.242618 2025] [proxy_fcgi:error] [pid 16066:tid 16091] [client 140.99.1.71:47897] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:48.400088 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 140.99.1.76:64413] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:48.553877 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.71:47897] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSLIzPq-c47Q5mW5E9Fi7AAAAYw"]
[Sun Nov 23 16:41:48.775624 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 140.99.1.76:64413] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:48.938859 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.76:64413] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLIzE8WZjXLvbHTHPeuygAAAMY"]
[Sun Nov 23 16:41:49.026667 2025] [proxy_fcgi:error] [pid 16066:tid 16082] [client 140.99.1.38:41777] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:49.434665 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.9:46037] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:49.656234 2025] [proxy_fcgi:error] [pid 38738:tid 38766] [client 140.99.1.9:46037] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:50.425613 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 140.99.1.9:46037] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:50.520031 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.9:46037] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLIzgytc6TL9XavPmPzuwAAABQ"]
[Sun Nov 23 16:41:50.718653 2025] [proxy_fcgi:error] [pid 38740:tid 38805] [client 140.99.1.30:33025] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:55.147532 2025] [proxy_fcgi:error] [pid 16066:tid 16079] [client 140.99.1.38:41777] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:55.381708 2025] [:error] [pid 16066:tid 16091] [client 140.99.1.38:41777] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSLI0_q-c47Q5mW5E9FjuwAAAZY"]
[Sun Nov 23 16:41:55.395927 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.30:33025] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLI0w13QPZSi6O8umWQAwAAAJY"]
[Sun Nov 23 16:41:55.661792 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.69:21841] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLI0w13QPZSi6O8umWQFAAAAIY"]
[Sun Nov 23 16:41:55.847600 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.42:29015] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSLI0wytc6TL9XavPmP0NgAAAAk"]
[Sun Nov 23 16:41:56.189612 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 140.99.1.78:53007] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:56.347754 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.78:21633] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLI1Pq-c47Q5mW5E9FjzwAAAYg"]
[Sun Nov 23 16:41:56.613399 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.78:53007] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSLI1AdvEgJm2n2cDmojjgAAAEU"]
[Sun Nov 23 16:41:57.035258 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 140.99.1.13:56831] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:57.139854 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.13:56831] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:57.246558 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 140.99.1.13:56831] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:57.359741 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.13:56831] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:57.466743 2025] [:error] [pid 16066:tid 16072] [client 140.99.1.73:48629] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSLI1fq-c47Q5mW5E9Fj4QAAAYM"]
[Sun Nov 23 16:41:57.785646 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.10:26243] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:57.899027 2025] [proxy_fcgi:error] [pid 38738:tid 38749] [client 140.99.1.10:26243] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:57.998081 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.10:26243] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSLI1Qytc6TL9XavPmP0dQAAAA0"]
[Sun Nov 23 16:41:57.998673 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.13:56831] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLI1diQFwsyXQDhwyConAAAARA"]
[Sun Nov 23 16:41:58.234879 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.74:48491] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLI1h-I77jdD81pU-mS3gAAAVQ"]
[Sun Nov 23 16:41:58.237920 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.62:35417] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSLI1k8WZjXLvbHTHPevmwAAANg"]
[Sun Nov 23 16:41:58.488614 2025] [:error] [pid 16066:tid 16069] [client 140.99.1.13:29609] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLI1vq-c47Q5mW5E9FkBgAAAYA"]
[Sun Nov 23 16:41:58.841962 2025] [:error] [pid 16066:tid 16087] [client 140.99.1.5:41089] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLI1vq-c47Q5mW5E9FkDwAAAZI"]
[Sun Nov 23 16:41:59.111467 2025] [:error] [pid 14602:tid 14626] [client 140.99.1.63:38719] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLI1x-I77jdD81pU-mS9QAAAUU"]
[Sun Nov 23 16:41:59.312652 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.77:63645] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLI1wytc6TL9XavPmP0kAAAABc"]
[Sun Nov 23 16:41:59.332953 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 140.99.1.62:30671] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:59.564248 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.62:30671] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSLI108WZjXLvbHTHPevvgAAANg"]
[Sun Nov 23 16:41:59.644692 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.39:60829] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLI1w13QPZSi6O8umWQhAAAAIM"]
[Sun Nov 23 16:41:59.917601 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.9:39947] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:00.168921 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.78:39285] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLI2NiQFwsyXQDhwyCo0AAAARE"]
[Sun Nov 23 16:42:00.450727 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.39:36429] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLI2A13QPZSi6O8umWQkgAAAIA"]
[Sun Nov 23 16:42:00.754414 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.13:54989] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLI2AdvEgJm2n2cDmoj9wAAAE0"]
[Sun Nov 23 16:42:02.344993 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.31:60511] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLI2vq-c47Q5mW5E9FkdAAAAZE"]
[Sun Nov 23 16:42:02.423653 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.9:39947] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:02.532774 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.9:39947] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSLI2g13QPZSi6O8umWQpgAAAIU"]
[Sun Nov 23 16:42:02.696986 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.38:42531] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLI2gytc6TL9XavPmP0qAAAAAQ"]
[Sun Nov 23 16:42:02.891662 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 140.99.1.3:57077] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:03.056897 2025] [proxy_fcgi:error] [pid 16066:tid 16085] [client 140.99.1.5:26219] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:03.124922 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.3:57077] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLI208WZjXLvbHTHPewDAAAAMc"]
[Sun Nov 23 16:42:03.416837 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.5:26219] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLI2_q-c47Q5mW5E9FkoQAAAZA"]
[Sun Nov 23 16:42:03.614770 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.52:59987] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSLI29iQFwsyXQDhwyCpEAAAARc"]
[Sun Nov 23 16:42:03.629231 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.63:44617] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLI2wdvEgJm2n2cDmokPQAAAFM"]
[Sun Nov 23 16:42:04.298831 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.16:52525] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSLI3A13QPZSi6O8umWQxwAAAIQ"]
[Sun Nov 23 16:42:04.881273 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.68:62163] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSLI3A13QPZSi6O8umWQ5QAAAIQ"]
[Sun Nov 23 16:42:04.951625 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.11:45113] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:05.246381 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.11:45113] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:05.354083 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.11:45113] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLI3QdvEgJm2n2cDmokfgAAAFg"]
[Sun Nov 23 16:42:05.688611 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.32:52901] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:05.916621 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 140.99.1.32:52901] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:06.082610 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.32:52901] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:06.243043 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.32:52901] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLI3g13QPZSi6O8umWREAAAAIE"]
[Sun Nov 23 16:42:06.465606 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 140.99.1.76:39715] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:06.566723 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.76:39715] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLI3g13QPZSi6O8umWRHgAAAIM"]
[Sun Nov 23 16:42:07.623678 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:07.820606 2025] [proxy_fcgi:error] [pid 38739:tid 38778] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:07.954964 2025] [proxy_fcgi:error] [pid 38739:tid 38769] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:08.187995 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:08.590847 2025] [proxy_fcgi:error] [pid 38739:tid 38789] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:08.768631 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:08.980396 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:09.120622 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:09.502604 2025] [proxy_fcgi:error] [pid 38739:tid 38769] [client 140.99.1.46:64089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:09.641596 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.46:64089] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLI4QdvEgJm2n2cDmok-QAAAEk"]
[Sun Nov 23 16:42:09.923064 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.17:59309] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLI4fq-c47Q5mW5E9FlUwAAAZA"]
[Sun Nov 23 16:42:10.132893 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.63:47287] [client 140.99.1.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.63, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSLI4k8WZjXLvbHTHPewcgAAAMk"]
[Sun Nov 23 16:42:10.185915 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 140.99.1.63:47287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:10.294593 2025] [proxy_fcgi:error] [pid 38824:tid 38849] [client 140.99.1.63:47287] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:10.526972 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.63:47287] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLI4k8WZjXLvbHTHPeweAAAAM4"]
[Sun Nov 23 16:42:11.086657 2025] [proxy_fcgi:error] [pid 14602:tid 14623] [client 140.99.1.14:26203] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:11.179769 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.14:26203] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLI4x-I77jdD81pU-mT9QAAAVU"]
[Sun Nov 23 16:42:11.430997 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.77:31793] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLI408WZjXLvbHTHPewfQAAANQ"]
[Sun Nov 23 16:42:12.228833 2025] [:error] [pid 16066:tid 16074] [client 140.99.1.47:23917] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLI5Pq-c47Q5mW5E9FlhQAAAYU"]
[Sun Nov 23 16:42:12.596075 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.28:35327] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aSLI5A13QPZSi6O8umWRqwAAAI0"]
[Sun Nov 23 16:42:14.367050 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.42:21443] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSLI5vq-c47Q5mW5E9FlvQAAAZU"]
[Sun Nov 23 16:42:14.888600 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.50:49537] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:15.574289 2025] [:error] [pid 14602:tid 14626] [client 140.99.1.50:49537] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSLI5x-I77jdD81pU-mUegAAAUU"]
[Sun Nov 23 16:42:16.232324 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.50:49219] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSLI6A13QPZSi6O8umWR2gAAAIU"]
[Sun Nov 23 16:42:16.477177 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.69:44051] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSLI6B-I77jdD81pU-mUjwAAAVQ"]
[Sun Nov 23 16:42:16.997620 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 140.99.1.53:52011] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:17.571235 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.53:52011] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSLI6QdvEgJm2n2cDmolcwAAAEw"]
[Sun Nov 23 16:42:17.962676 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.15:31497] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSLI6Q13QPZSi6O8umWR9wAAAJg"]
[Sun Nov 23 16:42:19.021455 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.69:32967] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSLI69iQFwsyXQDhwyCqEAAAARg"]
[Sun Nov 23 16:42:19.422749 2025] [proxy_fcgi:error] [pid 38824:tid 38851] [client 140.99.1.43:26757] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:19.532151 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.43:26757] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSLI608WZjXLvbHTHPew_QAAANU"]
[Sun Nov 23 16:42:20.604157 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.6:56843] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSLI7A13QPZSi6O8umWSUwAAAIU"]
[Sun Nov 23 16:42:20.936755 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.30:27529] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSLI7Aytc6TL9XavPmP3GQAAAAs"]
[Sun Nov 23 16:42:21.359413 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.14:59383] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSLI7diQFwsyXQDhwyCqTwAAAQU"]
[Sun Nov 23 16:42:21.722936 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.31:35781] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSLI7U8WZjXLvbHTHPexHQAAANU"]
[Sun Nov 23 16:42:22.122788 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.69:43697] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSLI7gdvEgJm2n2cDmolpQAAAEY"]
[Sun Nov 23 16:42:23.676638 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.26:48403] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSLI7x-I77jdD81pU-mVMgAAAVM"]
[Sun Nov 23 16:42:24.668052 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.62:50939] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSLI8E8WZjXLvbHTHPexPwAAAM0"]
[Sun Nov 23 16:42:25.201710 2025] [proxy_fcgi:error] [pid 16066:tid 16089] [client 140.99.1.9:34255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:25.395616 2025] [proxy_fcgi:error] [pid 16066:tid 16087] [client 140.99.1.9:34255] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:25.525460 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.9:34255] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSLI8fq-c47Q5mW5E9FmowAAAY4"]
[Sun Nov 23 16:42:26.649240 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.78:35995] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSLI8tiQFwsyXQDhwyCq1gAAAQ8"]
[Sun Nov 23 16:42:26.992998 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.43:47551] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:27.811606 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.43:47551] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSLI8w13QPZSi6O8umWS6wAAAI0"]
[Sun Nov 23 16:42:28.227973 2025] [:error] [pid 16066:tid 16073] [client 140.99.1.28:37551] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSLI9Pq-c47Q5mW5E9Fm4wAAAYQ"]
[Sun Nov 23 16:42:28.613151 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.10:33547] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSLI9A13QPZSi6O8umWTBAAAAIg"]
[Sun Nov 23 16:42:29.032615 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 140.99.1.31:65133] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:29.191619 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.31:65133] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSLI9U8WZjXLvbHTHPexkQAAAMc"]
[Sun Nov 23 16:42:30.508805 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.28:46693] [client 140.99.1.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3"] [unique_id "aSLI9g13QPZSi6O8umWTQQAAAI8"]
[Sun Nov 23 16:42:38.537067 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.62:28691] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSLI_g13QPZSi6O8umWUEgAAAJQ"]
[Sun Nov 23 16:42:38.749855 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.17:33503] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSLI_gdvEgJm2n2cDmonLAAAAEc"]
[Sun Nov 23 16:42:39.412512 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.24:20121] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSLI_w13QPZSi6O8umWUOAAAAIc"]
[Sun Nov 23 16:42:39.700658 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.3:29511] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLI_08WZjXLvbHTHPeySgAAANU"]
[Sun Nov 23 16:42:40.443665 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.13:53631] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSLJAAdvEgJm2n2cDmonTgAAAEw"]
[Sun Nov 23 16:42:40.754865 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.46:37527] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSLJAA13QPZSi6O8umWUXQAAAJU"]
[Sun Nov 23 16:42:41.074713 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.28:47771] [client 140.99.1.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.28, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSLJAU8WZjXLvbHTHPeyZgAAANM"]
[Sun Nov 23 16:42:41.089660 2025] [proxy_fcgi:error] [pid 38824:tid 38846] [client 140.99.1.28:47771] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:41.190127 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.28:47771] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSLJAU8WZjXLvbHTHPeyawAAANA"]
[Sun Nov 23 16:42:41.782229 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.69:31501] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:41.877850 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.69:31501] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSLJAQ13QPZSi6O8umWUiAAAAI8"]
[Sun Nov 23 16:42:42.244960 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.5:21569] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSLJAgdvEgJm2n2cDmoncAAAAEY"]
[Sun Nov 23 16:42:42.526627 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.9:42729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:43.765545 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.9:42729] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSLJAw13QPZSi6O8umWUxgAAAIM"]
[Sun Nov 23 16:42:43.988591 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.77:29625] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSLJAwdvEgJm2n2cDmonqAAAAEM"]
[Sun Nov 23 16:42:44.568567 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.67:20623] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSLJBA13QPZSi6O8umWU5QAAAIY"]
[Sun Nov 23 16:42:44.831566 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.71:22481] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSLJBAdvEgJm2n2cDmonvAAAAE4"]
[Sun Nov 23 16:42:45.235774 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 140.99.1.33:36957] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:45.394079 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.33:36957] [client 140.99.1.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.33, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSLJBdiQFwsyXQDhwyCsxwAAAQs"]
[Sun Nov 23 16:42:45.592588 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.33:36957] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSLJBdiQFwsyXQDhwyCszgAAAQE"]
[Sun Nov 23 16:42:46.977932 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.73:55971] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSLJBtiQFwsyXQDhwyCs6AAAAQU"]
[Sun Nov 23 16:42:47.338619 2025] [proxy_fcgi:error] [pid 14602:tid 14624] [client 140.99.1.69:62361] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:47.478609 2025] [:error] [pid 14602:tid 14622] [client 140.99.1.69:62361] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSLJBx-I77jdD81pU-mXGwAAAUE"]
[Sun Nov 23 16:42:47.808200 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.62:48343] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSLJB9iQFwsyXQDhwyCs8wAAARE"]
[Sun Nov 23 16:42:48.099614 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 140.99.1.53:48967] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:48.601735 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.53:48967] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSLJCA13QPZSi6O8umWVbAAAAI0"]
[Sun Nov 23 16:42:49.298494 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.39:27569] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSLJCdiQFwsyXQDhwyCtCgAAAQQ"]
[Sun Nov 23 16:42:49.511451 2025] [proxy_fcgi:error] [pid 16066:tid 16080] [client 140.99.1.75:20861] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:50.313604 2025] [proxy_fcgi:error] [pid 16066:tid 16082] [client 140.99.1.75:20861] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:50.584287 2025] [:error] [pid 16066:tid 16074] [client 140.99.1.75:20861] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSLJCvq-c47Q5mW5E9Fo2AAAAYU"]
[Sun Nov 23 16:42:51.406045 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.62:51295] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSLJCx-I77jdD81pU-mXRgAAAUo"]
[Sun Nov 23 16:42:52.953708 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.48:42443] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSLJDA13QPZSi6O8umWV4wAAAI4"]
[Sun Nov 23 16:42:53.204636 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 140.99.1.73:31635] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:54.091857 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.73:31635] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSLJDk8WZjXLvbHTHPezpAAAANg"]
[Sun Nov 23 16:43:03.484017 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.38:51101] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.stratapluswa.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.stratapluswa.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSLJFw13QPZSi6O8umWWzQAAAI0"]
[Sun Nov 23 16:43:03.657491 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.38:51101] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSLJFw13QPZSi6O8umWW0AAAAJg"]
[Sun Nov 23 16:43:04.126819 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.74:28105] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSLJGNiQFwsyXQDhwyCtswAAARI"]
[Sun Nov 23 16:43:04.483220 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.53:31649] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSLJGB-I77jdD81pU-mYFwAAAU8"]
[Sun Nov 23 16:43:04.900543 2025] [proxy_fcgi:error] [pid 16066:tid 16092] [client 140.99.1.42:64865] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:05.529627 2025] [:error] [pid 16066:tid 16076] [client 140.99.1.42:64865] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSLJGfq-c47Q5mW5E9Fp2AAAAYc"]
[Sun Nov 23 16:43:13.185386 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.17:35531] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSLJIR-I77jdD81pU-mYwQAAAVU"]
[Sun Nov 23 16:43:13.617195 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.7:22219] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSLJIfq-c47Q5mW5E9FqPwAAAYE"]
[Sun Nov 23 16:43:13.864251 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 140.99.1.37:60131] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:14.594091 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.37:60131] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSLJIg13QPZSi6O8umWYHQAAAJg"]
[Sun Nov 23 16:43:15.111733 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.38:55247] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSLJI9iQFwsyXQDhwyCuMQAAARc"]
[Sun Nov 23 16:43:15.317873 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 140.99.1.27:30177] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:15.428004 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.27:30177] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSLJI9iQFwsyXQDhwyCuOwAAAQ4"]
[Sun Nov 23 16:43:15.749270 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.43:58377] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSLJI08WZjXLvbHTHPe1JQAAAME"]
[Sun Nov 23 16:43:17.404393 2025] [:error] [pid 16066:tid 16082] [client 140.99.1.39:29889] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSLJJfq-c47Q5mW5E9FqewAAAY0"]
[Sun Nov 23 16:43:17.986626 2025] [proxy_fcgi:error] [pid 14602:tid 14628] [client 140.99.1.16:55015] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:18.116874 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.16:55015] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSLJJh-I77jdD81pU-mZRgAAAVc"]
[Sun Nov 23 16:43:18.477754 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.9:46073] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSLJJvq-c47Q5mW5E9FqnAAAAYk"]
[Sun Nov 23 16:43:20.266653 2025] [proxy_fcgi:error] [pid 38739:tid 38770] [client 140.99.1.32:34879] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:20.546630 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.32:34879] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSLJKAdvEgJm2n2cDmoqhgAAAEA"]
[Sun Nov 23 16:43:21.237297 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.33:35435] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSLJKU8WZjXLvbHTHPe1pwAAAM4"]
[Sun Nov 23 16:43:21.574630 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 140.99.1.11:35951] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:22.007413 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.11:35951] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSLJKgdvEgJm2n2cDmoqmQAAAEo"]
[Sun Nov 23 16:43:22.464985 2025] [:error] [pid 38739:tid 38780] [client 140.99.1.33:27097] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSLJKgdvEgJm2n2cDmoqnAAAAEs"]
[Sun Nov 23 16:43:22.869896 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.49:33855] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSLJKgytc6TL9XavPmP9nQAAABI"]
[Sun Nov 23 16:43:23.621360 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.77:59769] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:23.925473 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.77:59769] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSLJKx-I77jdD81pU-mZ5wAAAUo"]
[Sun Nov 23 16:43:24.246618 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 140.99.1.67:20379] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:24.497967 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.67:20379] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSLJLB-I77jdD81pU-mZ-wAAAUA"]
[Sun Nov 23 16:43:24.856922 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.75:42525] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSLJLNiQFwsyXQDhwyCu5AAAAQo"]
[Sun Nov 23 16:43:30.721821 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.10:44707] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSLJMtiQFwsyXQDhwyCvZgAAARg"]
[Sun Nov 23 16:43:30.976706 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.26:30559] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSLJMh-I77jdD81pU-makwAAAVc"]
[Sun Nov 23 16:43:31.500829 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.62:36291] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSLJMwdvEgJm2n2cDmordwAAAFU"]
[Sun Nov 23 16:43:32.439938 2025] [:error] [pid 14602:tid 14622] [client 140.99.1.72:30137] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSLJNB-I77jdD81pU-mavwAAAUE"]
[Sun Nov 23 16:43:32.725054 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.5:36853] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSLJNA13QPZSi6O8umWZZwAAAJE"]
[Sun Nov 23 16:43:32.965070 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.31:25439] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSLJNA13QPZSi6O8umWZbgAAAI0"]
[Sun Nov 23 16:43:33.557829 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.5:48145] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSLJNQytc6TL9XavPmP-lAAAAAQ"]
[Sun Nov 23 16:43:34.201332 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.46:41653] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSLJNgdvEgJm2n2cDmorugAAAEQ"]
[Sun Nov 23 16:43:34.650061 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.62:44633] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSLJNgytc6TL9XavPmP-pgAAABc"]
[Sun Nov 23 16:43:35.059709 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.24:52321] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSLJNw13QPZSi6O8umWZnwAAAJM"]
[Sun Nov 23 16:43:35.667623 2025] [proxy_fcgi:error] [pid 38739:tid 38784] [client 140.99.1.43:32653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:42.417741 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.43:32653] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSLJPgdvEgJm2n2cDmosvQAAAEk"]
[Sun Nov 23 16:43:42.641364 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.24:63369] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSLJPg13QPZSi6O8umWaZwAAAJA"]
[Sun Nov 23 16:43:43.196681 2025] [proxy_fcgi:error] [pid 38824:tid 38830] [client 140.99.1.38:59311] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:43.320257 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.38:59311] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSLJP08WZjXLvbHTHPe3xgAAANc"]
[Sun Nov 23 16:43:44.097708 2025] [:error] [pid 16066:tid 16088] [client 140.99.1.24:45843] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSLJQPq-c47Q5mW5E9FtXQAAAZM"]
[Sun Nov 23 16:43:45.022986 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.38:40307] [client 140.99.1.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adminfus.php"] [unique_id "aSLJQU8WZjXLvbHTHPe35QAAANc"]
[Sun Nov 23 16:43:45.265215 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.33:42225] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:45.439763 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.33:42225] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSLJQQytc6TL9XavPmP_dgAAABc"]
[Sun Nov 23 16:43:46.099290 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.16:32825] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSLJQvq-c47Q5mW5E9FtewAAAYk"]
[Sun Nov 23 16:43:46.368670 2025] [proxy_fcgi:error] [pid 44652:tid 44707] [client 140.99.1.33:43635] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:46.460617 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.33:43635] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSLJQtiQFwsyXQDhwyCwdQAAAQ0"]
[Sun Nov 23 16:43:47.992231 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.69:27631] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSLJQwdvEgJm2n2cDmotdwAAAFY"]
[Sun Nov 23 16:43:48.689681 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 140.99.1.78:46207] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:48.862347 2025] [:error] [pid 14602:tid 14633] [client 140.99.1.78:46207] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSLJRB-I77jdD81pU-mcHgAAAUw"]
[Sun Nov 23 16:43:49.666705 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.9:25015] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSLJRR-I77jdD81pU-mcNQAAAVU"]
[Sun Nov 23 16:43:49.971623 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.76:59423] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:50.108851 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.76:59423] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSLJRh-I77jdD81pU-mcSAAAAVg"]
[Sun Nov 23 16:43:50.345045 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.72:35913] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSLJRvq-c47Q5mW5E9FtswAAAZU"]
[Sun Nov 23 16:43:50.577621 2025] [proxy_fcgi:error] [pid 14602:tid 14635] [client 140.99.1.67:47905] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:43:50.868560 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.67:47905] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSLJRh-I77jdD81pU-mcZQAAAVI"]
[Sun Nov 23 16:43:51.230858 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.30:36369] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSLJRx-I77jdD81pU-mcbgAAAVg"]
[Sun Nov 23 16:43:58.609612 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.47:24897] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSLJTgytc6TL9XavPmMAlwAAABM"]
[Sun Nov 23 16:43:58.820673 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.15:59925] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSLJTg13QPZSi6O8umWcLQAAAIg"]
[Sun Nov 23 16:43:59.260228 2025] [:error] [pid 16066:tid 16075] [client 140.99.1.6:55567] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSLJT_q-c47Q5mW5E9FuLgAAAYY"]
[Sun Nov 23 16:43:59.498861 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.6:38451] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSLJT08WZjXLvbHTHPe5MQAAANY"]
[Sun Nov 23 16:43:59.695219 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.44:49999] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSLJT08WZjXLvbHTHPe5PQAAAMk"]
[Sun Nov 23 16:43:59.935868 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.77:65177] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSLJTwytc6TL9XavPmMAsgAAAA4"]
[Sun Nov 23 16:44:00.878934 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.14:63309] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSLJUB-I77jdD81pU-mdUQAAAUg"]
[Sun Nov 23 16:44:02.111314 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.42:43717] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSLJUgytc6TL9XavPmMA0QAAAAI"]
[Sun Nov 23 16:44:02.654630 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 140.99.1.18:40787] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:02.821905 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.18:40787] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSLJUtiQFwsyXQDhwyCyGwAAAQY"]
[Sun Nov 23 16:44:03.012835 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.53:39487] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSLJU_q-c47Q5mW5E9FucgAAAYE"]
[Sun Nov 23 16:44:03.651858 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.31:29023] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSLJU_q-c47Q5mW5E9FuiAAAAY4"]
[Sun Nov 23 16:44:03.845391 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.20:23749] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSLJU08WZjXLvbHTHPe5kgAAANE"]
[Sun Nov 23 16:44:05.828705 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.17:45883] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSLJVQytc6TL9XavPmMBHgAAABI"]
[Sun Nov 23 16:44:06.035478 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.62:28089] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSLJVk8WZjXLvbHTHPe5tQAAANc"]
[Sun Nov 23 16:44:06.615566 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.16:25459] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSLJVg13QPZSi6O8umWc9wAAAJI"]
[Sun Nov 23 16:44:07.001632 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.17:62281] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSLJVwytc6TL9XavPmMBOQAAABU"]
[Sun Nov 23 16:44:07.484524 2025] [:error] [pid 38739:tid 38780] [client 140.99.1.73:61349] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSLJVwdvEgJm2n2cDmovXQAAAEs"]
[Sun Nov 23 16:44:07.713014 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.76:25837] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSLJV9iQFwsyXQDhwyCykAAAARc"]
[Sun Nov 23 16:44:07.978087 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.10:37519] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSLJVw13QPZSi6O8umWdHgAAAI4"]
[Sun Nov 23 16:44:08.590540 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.69:29315] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSLJWA13QPZSi6O8umWdOgAAAIA"]
[Sun Nov 23 16:44:08.917757 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.71:24307] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:09.054184 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.71:24307] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSLJWQytc6TL9XavPmMBYAAAAAU"]
[Sun Nov 23 16:44:09.588073 2025] [proxy_fcgi:error] [pid 38824:tid 38841] [client 140.99.1.32:51889] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:09.682411 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.32:51889] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSLJWU8WZjXLvbHTHPe6AAAAANA"]
[Sun Nov 23 16:44:09.930959 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.15:60693] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSLJWQytc6TL9XavPmMBfgAAABc"]
[Sun Nov 23 16:44:10.329887 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.18:21067] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSLJWgytc6TL9XavPmMBkgAAAAc"]
[Sun Nov 23 16:44:10.867090 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.46:20341] [client 140.99.1.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/css/hekokstyle.php"] [unique_id "aSLJWk8WZjXLvbHTHPe6MAAAAM8"]
[Sun Nov 23 16:44:12.710615 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 140.99.1.24:49427] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:13.272458 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.24:49427] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSLJXQ13QPZSi6O8umWdsQAAAIA"]
[Sun Nov 23 16:44:13.782652 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.13:27585] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSLJXR-I77jdD81pU-memAAAAVY"]
[Sun Nov 23 16:44:15.272266 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.11:41273] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSLJXw13QPZSi6O8umWd7AAAAIo"]
[Sun Nov 23 16:44:15.553250 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.3:33699] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSLJX08WZjXLvbHTHPe6sgAAAMk"]
[Sun Nov 23 16:44:15.749183 2025] [:error] [pid 16066:tid 16080] [client 140.99.1.26:22153] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSLJX_q-c47Q5mW5E9FvowAAAYs"]
[Sun Nov 23 16:44:24.893815 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.32:55517] [client 140.99.1.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/user/"] [unique_id "aSLJaA13QPZSi6O8umWe1wAAAJA"]
[Sun Nov 23 16:44:25.228005 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.31:38397] [client 140.99.1.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/ao_ccss/"] [unique_id "aSLJaQ13QPZSi6O8umWe4AAAAJc"]
[Sun Nov 23 16:44:49.109265 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.63:30863] [client 140.99.1.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/XML/"] [unique_id "aSLJgQytc6TL9XavPmME4QAAAAI"]
[Sun Nov 23 16:44:49.349018 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.63:59265] [client 140.99.1.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/XML/"] [unique_id "aSLJgfq-c47Q5mW5E9FyZgAAAZU"]
[Sun Nov 23 16:50:53.917624 2025] [proxy_fcgi:error] [pid 17534:tid 17548] [client 167.71.203.246:62416] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:04.641545 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 141.11.36.103:27083] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:05.640167 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 141.11.36.103:27083] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:06.102445 2025] [:error] [pid 38824:tid 38845] [client 141.11.36.103:27083] [client 141.11.36.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLYkk8WZjXLvbHTHPfhpQAAANI"]
[Sun Nov 23 17:49:07.112717 2025] [proxy_fcgi:error] [pid 44652:tid 44709] [client 141.11.36.57:53135] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:07.962667 2025] [:error] [pid 44652:tid 44715] [client 141.11.36.57:53135] [client 141.11.36.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSLYk9iQFwsyXQDhwyDnvwAAAQk"]
[Sun Nov 23 17:49:08.937012 2025] [proxy_fcgi:error] [pid 38739:tid 38774] [client 141.11.36.71:50265] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:10.761360 2025] [proxy_fcgi:error] [pid 38739:tid 38789] [client 141.11.36.71:50265] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:11.232327 2025] [proxy_fcgi:error] [pid 38739:tid 38769] [client 141.11.36.71:50265] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:11.951412 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 141.11.36.71:50265] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:13.345725 2025] [:error] [pid 38739:tid 38780] [client 141.11.36.71:50265] [client 141.11.36.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSLYmQdvEgJm2n2cDmpX2gAAAEs"]
[Sun Nov 23 17:49:14.650986 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 141.11.36.66:29143] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:15.254465 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 141.11.36.66:29143] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:15.640836 2025] [:error] [pid 14602:tid 14643] [client 141.11.36.66:29143] [client 141.11.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSLYmx-I77jdD81pU-nKnAAAAVY"]
[Sun Nov 23 17:49:16.571507 2025] [:error] [pid 16066:tid 16078] [client 141.11.36.94:49989] [client 141.11.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSLYnPq-c47Q5mW5E9GgJgAAAYk"]
[Sun Nov 23 17:49:17.561885 2025] [:error] [pid 17534:tid 17550] [client 141.11.36.105:36305] [client 141.11.36.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSLYnXPX9nXBrhgM8sxgxQAAAc4"]
[Sun Nov 23 17:49:19.126921 2025] [:error] [pid 16066:tid 16088] [client 141.11.36.104:62217] [client 141.11.36.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSLYn_q-c47Q5mW5E9GgMgAAAZM"]
[Sun Nov 23 17:49:20.607713 2025] [:error] [pid 38738:tid 38756] [client 141.11.36.86:41039] [client 141.11.36.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSLYoAytc6TL9XavPmMutQAAAA4"]
[Sun Nov 23 17:49:25.445600 2025] [proxy_fcgi:error] [pid 16066:tid 16080] [client 141.11.36.68:50291] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:27.770048 2025] [proxy_fcgi:error] [pid 16066:tid 16085] [client 141.11.36.68:50291] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:28.903340 2025] [:error] [pid 16066:tid 16086] [client 141.11.36.68:50291] [client 141.11.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLYqPq-c47Q5mW5E9GgPAAAAZE"]
[Sun Nov 23 17:49:30.842771 2025] [:error] [pid 38740:tid 38812] [client 141.11.36.72:44275] [client 141.11.36.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSLYqg13QPZSi6O8umXN0wAAAJA"]
[Sun Nov 23 17:49:32.211792 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:32.806828 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:33.964418 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:34.507539 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:34.948327 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:35.557609 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:36.022769 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:36.492560 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:36.908236 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:37.456248 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:37.882737 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:38.416997 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:38.998250 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:40.909963 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:41.613106 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:42.150544 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:42.721032 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:44.068826 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:44.639905 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:45.332654 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:46.502632 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:47.014910 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:47.530032 2025] [proxy_fcgi:error] [pid 38740:tid 38812] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:48.769421 2025] [proxy_fcgi:error] [pid 38740:tid 38799] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:49.176261 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:49.616531 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:50.212436 2025] [proxy_fcgi:error] [pid 38740:tid 38805] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:50.770803 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:51.267713 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:52.331086 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:52.805187 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:53.231829 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:53.829094 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:55.597007 2025] [:error] [pid 38740:tid 38806] [client 141.11.36.63:24099] [client 141.11.36.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.63, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSLYww13QPZSi6O8umXOMQAAAIo"]
[Sun Nov 23 17:49:55.601031 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:56.605275 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:57.214731 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 141.11.36.63:24099] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:57.753047 2025] [:error] [pid 38740:tid 38812] [client 141.11.36.63:24099] [client 141.11.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSLYxQ13QPZSi6O8umXOOAAAAJA"]
[Sun Nov 23 17:49:58.742494 2025] [proxy_fcgi:error] [pid 16066:tid 16079] [client 141.11.36.103:29257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:49:59.137758 2025] [proxy_fcgi:error] [pid 16066:tid 16086] [client 141.11.36.103:29257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:00.055673 2025] [proxy_fcgi:error] [pid 16066:tid 16093] [client 141.11.36.103:29257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:03.592823 2025] [proxy_fcgi:error] [pid 16066:tid 16070] [client 141.11.36.103:29257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:04.555988 2025] [proxy_fcgi:error] [pid 16066:tid 16072] [client 141.11.36.103:29257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:05.130007 2025] [proxy_fcgi:error] [pid 16066:tid 16069] [client 141.11.36.103:29257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:06.811071 2025] [proxy_fcgi:error] [pid 16066:tid 16073] [client 141.11.36.103:29257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:13.951179 2025] [proxy_fcgi:error] [pid 16066:tid 16093] [client 141.11.36.78:59041] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:14.623817 2025] [proxy_fcgi:error] [pid 16066:tid 16084] [client 141.11.36.78:59041] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:15.650957 2025] [:error] [pid 16066:tid 16089] [client 141.11.36.78:59041] [client 141.11.36.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSLY1_q-c47Q5mW5E9GgZgAAAZQ"]
[Sun Nov 23 17:50:17.796941 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:18.307383 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:23.294090 2025] [proxy_fcgi:error] [pid 38738:tid 38749] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:23.739130 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:24.431279 2025] [proxy_fcgi:error] [pid 38738:tid 38747] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:24.886359 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:25.566106 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:28.271123 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:29.454635 2025] [proxy_fcgi:error] [pid 38738:tid 38753] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:29.900988 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:33.337292 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:33.753646 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:34.281570 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:34.725530 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:35.705313 2025] [proxy_fcgi:error] [pid 38738:tid 38753] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:36.221955 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:36.706713 2025] [proxy_fcgi:error] [pid 38738:tid 38743] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:37.181784 2025] [proxy_fcgi:error] [pid 38738:tid 38752] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:37.699365 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:38.214037 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:38.808384 2025] [proxy_fcgi:error] [pid 38738:tid 38747] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:39.329131 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 141.11.36.64:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:41.944068 2025] [:error] [pid 38738:tid 38754] [client 141.11.36.64:51391] [client 141.11.36.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSLY8Qytc6TL9XavPmMvDQAAAAw"]
[Sun Nov 23 17:50:44.011714 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:44.624332 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:45.309428 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:45.832731 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:46.520822 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:46.992273 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:47.435291 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:47.935271 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:48.536070 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:49.714415 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:50.277451 2025] [proxy_fcgi:error] [pid 38740:tid 38805] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:50.759206 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:51.349675 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:51.876506 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:52.405218 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:53.022275 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:54.026720 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:54.601798 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:55.124176 2025] [proxy_fcgi:error] [pid 38740:tid 38812] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:55.739012 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:56.952081 2025] [proxy_fcgi:error] [pid 38740:tid 38799] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:57.374291 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:57.955009 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:58.518906 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:50:59.619137 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:51:00.706970 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:51:01.269763 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:51:01.703714 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:51:03.232927 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 141.11.36.59:29827] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:51:20.320174 2025] [:error] [pid 38740:tid 38806] [client 141.11.36.59:29827] [client 141.11.36.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSLZGA13QPZSi6O8umXOtwAAAIo"]
[Sun Nov 23 17:51:23.905625 2025] [proxy_fcgi:error] [pid 16066:tid 16086] [client 141.11.36.83:40807] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:51:47.961505 2025] [autoindex:error] [pid 38739:tid 38790] [client 141.11.36.66:55853] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 17:51:48.470770 2025] [autoindex:error] [pid 38739:tid 38791] [client 141.11.36.66:55853] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 17:51:49.133620 2025] [autoindex:error] [pid 38739:tid 38784] [client 141.11.36.66:55853] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 22:31:36.772956 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 22:31:38.147789 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 22:31:38.404965 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 22:31:38.628791 2025] [proxy_fcgi:error] [pid 44652:tid 44713] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 22:31:38.840211 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 22:31:39.050788 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 22:31:39.472381 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 22:31:39.681622 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 22:31:39.892176 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 22:31:40.102726 2025] [proxy_fcgi:error] [pid 44652:tid 44724] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 22:31:40.322534 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 22:31:40.534448 2025] [proxy_fcgi:error] [pid 44652:tid 44721] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 22:31:40.743009 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 22:31:40.953739 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 22:31:41.162966 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 172.200.72.102:28658] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 22:31:41.368913 2025] [:error] [pid 44652:tid 44727] [client 172.200.72.102:28658] [client 172.200.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSMazdiQFwsyXQDhwyA1IgAAARU"], referer: https://www.google.fr/
[Sun Nov 23 22:31:41.938473 2025] [:error] [pid 8036:tid 8056] [client 172.200.72.102:28563] [client 172.200.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSMazdBT69EcgFwgTmqD9wAAAgk"], referer: https://www.google.fr/
[Sun Nov 23 22:31:42.561070 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 172.200.72.102:28621] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 22:31:42.773821 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 172.200.72.102:28621] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 22:31:43.203238 2025] [proxy_fcgi:error] [pid 38738:tid 38762] [client 172.200.72.102:28621] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 22:31:44.315034 2025] [:error] [pid 38738:tid 38747] [client 172.200.72.102:28621] [client 172.200.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSMa0Aytc6TL9XavPmNbWwAAAAU"], referer: https://www.google.com/
[Sun Nov 23 22:31:45.349290 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 172.200.72.102:28670] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 22:31:45.556922 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 172.200.72.102:28670] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 22:31:46.041113 2025] [proxy_fcgi:error] [pid 38739:tid 38769] [client 172.200.72.102:28670] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 22:31:47.244899 2025] [:error] [pid 38739:tid 38787] [client 172.200.72.102:28670] [client 172.200.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSMa0wdvEgJm2n2cDmqDdgAAAFI"], referer: https://www.google.de/
[Sun Nov 23 22:31:48.162834 2025] [proxy_fcgi:error] [pid 17534:tid 17551] [client 172.200.72.102:28564] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 22:31:48.402127 2025] [proxy_fcgi:error] [pid 17534:tid 17547] [client 172.200.72.102:28564] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 22:31:48.899931 2025] [proxy_fcgi:error] [pid 17534:tid 17538] [client 172.200.72.102:28564] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 22:31:50.399865 2025] [:error] [pid 17534:tid 17541] [client 172.200.72.102:28564] [client 172.200.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/bala.php"] [unique_id "aSMa1nPX9nXBrhgM8syi1gAAAcU"], referer: https://www.google.de/
[Sun Nov 23 22:31:52.045604 2025] [proxy_fcgi:error] [pid 8036:tid 8067] [client 172.200.72.102:28612] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 22:31:52.494400 2025] [:error] [pid 8036:tid 8047] [client 172.200.72.102:28612] [client 172.200.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSMa2NBT69EcgFwgTmqD_wAAAgA"], referer: https://www.google.co.uk/
[Sun Nov 23 22:31:53.406340 2025] [proxy_fcgi:error] [pid 14602:tid 14631] [client 172.200.72.102:28550] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 22:31:54.718698 2025] [:error] [pid 14602:tid 14626] [client 172.200.72.102:28550] [client 172.200.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSMa2h-I77jdD81pU-n4vgAAAUU"], referer: https://duckduckgo.com/
[Sun Nov 23 22:31:55.490331 2025] [proxy_fcgi:error] [pid 8036:tid 8066] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 22:31:55.703918 2025] [proxy_fcgi:error] [pid 8036:tid 8048] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 22:31:56.655762 2025] [proxy_fcgi:error] [pid 8036:tid 8069] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 22:31:56.933156 2025] [proxy_fcgi:error] [pid 8036:tid 8060] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 22:31:57.362035 2025] [proxy_fcgi:error] [pid 8036:tid 8052] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 22:31:57.578042 2025] [proxy_fcgi:error] [pid 8036:tid 8067] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 22:31:57.803420 2025] [proxy_fcgi:error] [pid 8036:tid 8053] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 22:31:58.459028 2025] [proxy_fcgi:error] [pid 8036:tid 8058] [client 172.200.72.102:28626] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 22:32:00.657465 2025] [:error] [pid 8036:tid 8048] [client 172.200.72.102:28626] [client 172.200.72.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.200.72.102, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSMa4NBT69EcgFwgTmqEHAAAAgE"], referer: https://www.google.de/
[Mon Nov 24 03:40:31.364853 2025] [:error] [pid 1452:tid 1472] [client 20.238.52.119:15020] [client 20.238.52.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new"] [unique_id "aSNjLxKZkEEyVNVXr_nnLAAAAE8"]
[Mon Nov 24 04:47:34.098301 2025] [proxy_fcgi:error] [pid 12911:tid 12960] [client 167.71.203.246:57953] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 08:22:44.002524 2025] [:error] [pid 48601:tid 48670] [client 103.65.237.124:49732] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "aSOlVIMM4MaVTk74-AYp5AAAAg0"]
[Mon Nov 24 08:22:44.235269 2025] [:error] [pid 48601:tid 48667] [client 103.65.237.124:64864] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOlVIMM4MaVTk74-AYp5QAAAgo"]
[Mon Nov 24 19:31:28.214576 2025] [proxy_fcgi:error] [pid 48599:tid 48626] [client 4.233.64.129:61078] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:31:28.457028 2025] [proxy_fcgi:error] [pid 48599:tid 48627] [client 4.233.64.129:61078] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:31:28.708509 2025] [proxy_fcgi:error] [pid 48599:tid 48621] [client 4.233.64.129:61078] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:31:28.959193 2025] [proxy_fcgi:error] [pid 48599:tid 48610] [client 4.233.64.129:61078] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:31:29.205999 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 4.233.64.129:61078] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:31:29.468514 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 4.233.64.129:61078] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:31:29.705647 2025] [:error] [pid 48599:tid 48623] [client 4.233.64.129:61078] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenium4.php"] [unique_id "aSRCEZzvu6PDJiRKE3I6DAAAAZQ"]
[Mon Nov 24 19:31:32.604022 2025] [:error] [pid 48688:tid 48704] [client 4.233.64.129:61093] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenium4.php"] [unique_id "aSRCFBm2q1FkzLam7A229AAAAkw"]
[Mon Nov 24 19:31:34.338794 2025] [:error] [pid 9630:tid 9653] [client 4.233.64.129:61087] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenium4.php"] [unique_id "aSRCFirSgUgPGkizt2oVrwAAAFU"]
[Mon Nov 24 19:31:36.904504 2025] [:error] [pid 16516:tid 16520] [client 4.233.64.129:61084] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenium4.php"] [unique_id "aSRCGPqZbniwaNwL8Xn3oAAAAQE"]
[Mon Nov 24 19:31:37.908270 2025] [:error] [pid 16593:tid 16610] [client 4.233.64.129:13013] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xpw.php"] [unique_id "aSRCGRVGznHBJI2LKpRVQgAAAo8"]
[Mon Nov 24 19:31:41.128233 2025] [:error] [pid 48599:tid 48605] [client 4.233.64.129:61098] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xpw.php"] [unique_id "aSRCHZzvu6PDJiRKE3I6EQAAAYI"]
[Mon Nov 24 19:31:51.829058 2025] [:error] [pid 16549:tid 16571] [client 4.233.64.129:13009] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xpw.php"] [unique_id "aSRCJ6eWW19A99PUw_dRBQAAAVI"]
[Mon Nov 24 19:31:53.107079 2025] [:error] [pid 48599:tid 48610] [client 4.233.64.129:13031] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww2.php"] [unique_id "aSRCKZzvu6PDJiRKE3I6GQAAAYc"]
[Mon Nov 24 19:32:24.606258 2025] [:error] [pid 16441:tid 16451] [client 4.233.64.129:61116] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "aSRCSIq_bc5MOa9Hflll0AAAAIc"]
[Mon Nov 24 19:32:28.220534 2025] [:error] [pid 16441:tid 16450] [client 4.233.64.129:61073] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "aSRCTIq_bc5MOa9Hflll3QAAAIY"]
[Mon Nov 24 19:32:31.861637 2025] [proxy_fcgi:error] [pid 16593:tid 16610] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:32.103214 2025] [proxy_fcgi:error] [pid 16593:tid 16616] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:32.356670 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:32.600248 2025] [proxy_fcgi:error] [pid 16593:tid 16617] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:32.849781 2025] [proxy_fcgi:error] [pid 16593:tid 16618] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:33.097270 2025] [proxy_fcgi:error] [pid 16593:tid 16604] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:33.347369 2025] [proxy_fcgi:error] [pid 16593:tid 16611] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:33.624085 2025] [proxy_fcgi:error] [pid 16593:tid 16599] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:33.865520 2025] [proxy_fcgi:error] [pid 16593:tid 16605] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:34.108728 2025] [proxy_fcgi:error] [pid 16593:tid 16609] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:34.360481 2025] [proxy_fcgi:error] [pid 16593:tid 16614] [client 4.233.64.129:61105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:32:34.602630 2025] [:error] [pid 16593:tid 16598] [client 4.233.64.129:61105] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kr.php"] [unique_id "aSRCUhVGznHBJI2LKpRVigAAAoM"]
[Mon Nov 24 19:32:42.944264 2025] [:error] [pid 9630:tid 9639] [client 4.233.64.129:13012] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kr.php"] [unique_id "aSRCWirSgUgPGkizt2oWWwAAAEc"]
[Mon Nov 24 19:32:46.378501 2025] [:error] [pid 16441:tid 16456] [client 4.233.64.129:61109] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kr.php"] [unique_id "aSRCXoq_bc5MOa9HfllmDgAAAIw"]
[Mon Nov 24 19:32:48.857287 2025] [:error] [pid 16593:tid 16596] [client 4.233.64.129:12997] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kr.php"] [unique_id "aSRCYBVGznHBJI2LKpRVlgAAAoE"]
[Mon Nov 24 19:32:51.363092 2025] [:error] [pid 48688:tid 48710] [client 4.233.64.129:13016] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/18299.php"] [unique_id "aSRCYxm2q1FkzLam7A23LQAAAlI"]
[Mon Nov 24 19:32:54.273061 2025] [:error] [pid 48599:tid 48624] [client 4.233.64.129:61118] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/18299.php"] [unique_id "aSRCZpzvu6PDJiRKE3I6dAAAAZU"]
[Mon Nov 24 19:32:56.510924 2025] [:error] [pid 9630:tid 9635] [client 4.233.64.129:13015] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/18299.php"] [unique_id "aSRCaCrSgUgPGkizt2oWYwAAAEM"]
[Mon Nov 24 19:32:59.931768 2025] [:error] [pid 16441:tid 16454] [client 4.233.64.129:55360] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/18299.php"] [unique_id "aSRCa4q_bc5MOa9HfllmKAAAAIo"]
[Mon Nov 24 19:33:02.614292 2025] [:error] [pid 16441:tid 16446] [client 4.233.64.129:13051] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aSRCboq_bc5MOa9HfllmLAAAAII"]
[Mon Nov 24 19:33:05.289722 2025] [:error] [pid 48601:tid 48657] [client 4.233.64.129:12995] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aSRCcYMM4MaVTk74-AbPWgAAAgA"]
[Mon Nov 24 19:33:07.283508 2025] [:error] [pid 49900:tid 49906] [client 4.233.64.129:61085] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aSRCczCyPLrvg06aorkt1QAAAAQ"]
[Mon Nov 24 19:33:10.598198 2025] [:error] [pid 48599:tid 48622] [client 4.233.64.129:61089] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aSRCdpzvu6PDJiRKE3I6jQAAAZM"]
[Mon Nov 24 19:33:15.922007 2025] [:error] [pid 9630:tid 9650] [client 4.233.64.129:61119] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chati.php"] [unique_id "aSRCeyrSgUgPGkizt2oWcgAAAFI"]
[Mon Nov 24 19:33:21.309023 2025] [:error] [pid 48599:tid 48615] [client 4.233.64.129:61080] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chati.php"] [unique_id "aSRCgZzvu6PDJiRKE3I6kwAAAYw"]
[Mon Nov 24 19:33:25.705904 2025] [:error] [pid 16593:tid 16610] [client 4.233.64.129:61117] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chati.php"] [unique_id "aSRChRVGznHBJI2LKpRVqgAAAo8"]
[Mon Nov 24 19:33:29.837766 2025] [:error] [pid 9630:tid 9636] [client 4.233.64.129:61100] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content-over.php"] [unique_id "aSRCiSrSgUgPGkizt2oWegAAAEQ"]
[Mon Nov 24 19:33:33.250870 2025] [:error] [pid 16593:tid 16615] [client 4.233.64.129:13040] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content-over.php"] [unique_id "aSRCjRVGznHBJI2LKpRVsAAAApQ"]
[Mon Nov 24 19:33:38.524680 2025] [proxy_fcgi:error] [pid 48601:tid 48658] [client 4.233.64.129:61067] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:33:38.768138 2025] [proxy_fcgi:error] [pid 48601:tid 48672] [client 4.233.64.129:61067] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:33:39.118142 2025] [proxy_fcgi:error] [pid 48601:tid 48667] [client 4.233.64.129:61067] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:33:39.366117 2025] [proxy_fcgi:error] [pid 48601:tid 48680] [client 4.233.64.129:61067] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:33:39.768214 2025] [proxy_fcgi:error] [pid 48601:tid 48659] [client 4.233.64.129:61067] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:33:40.028109 2025] [proxy_fcgi:error] [pid 48601:tid 48668] [client 4.233.64.129:61067] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:33:40.356561 2025] [:error] [pid 48601:tid 48673] [client 4.233.64.129:61067] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSRClIMM4MaVTk74-AbPdAAAAhA"]
[Mon Nov 24 19:33:44.350446 2025] [:error] [pid 48688:tid 48696] [client 4.233.64.129:61107] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "aSRCmBm2q1FkzLam7A23RAAAAkQ"]
[Mon Nov 24 19:33:49.389476 2025] [:error] [pid 48599:tid 48618] [client 4.233.64.129:13034] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "aSRCnZzvu6PDJiRKE3I6pAAAAY8"]
[Mon Nov 24 19:33:52.978033 2025] [:error] [pid 16441:tid 16467] [client 4.233.64.129:13020] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "aSRCoIq_bc5MOa9HfllmdwAAAJc"]
[Mon Nov 24 19:34:00.852077 2025] [:error] [pid 48688:tid 48697] [client 4.233.64.129:55391] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/gec.php"] [unique_id "aSRCqBm2q1FkzLam7A23TwAAAkU"]
[Mon Nov 24 19:34:02.956842 2025] [:error] [pid 16441:tid 16446] [client 4.233.64.129:13011] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/gec.php"] [unique_id "aSRCqoq_bc5MOa9HfllmgwAAAII"]
[Mon Nov 24 19:34:04.946716 2025] [:error] [pid 48600:tid 48652] [client 4.233.64.129:61063] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/gec.php"] [unique_id "aSRCrPtOzSUAQvWVjBePaAAAAdY"]
[Mon Nov 24 19:34:11.064670 2025] [:error] [pid 49900:tid 49920] [client 4.233.64.129:12815] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/gec.php"] [unique_id "aSRCszCyPLrvg06aorkuBQAAABI"]
[Mon Nov 24 19:34:13.227638 2025] [:error] [pid 16549:tid 16573] [client 4.233.64.129:13041] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nfu.php"] [unique_id "aSRCtaeWW19A99PUw_dRxwAAAVQ"]
[Mon Nov 24 19:34:21.897430 2025] [:error] [pid 16441:tid 16447] [client 4.233.64.129:13023] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nfu.php"] [unique_id "aSRCvYq_bc5MOa9HfllmuQAAAIM"]
[Mon Nov 24 19:34:25.361914 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:13043] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nfu.php"] [unique_id "aSRCwZzvu6PDJiRKE3I6xgAAAZA"]
[Mon Nov 24 19:34:30.074006 2025] [:error] [pid 48601:tid 48658] [client 4.233.64.129:55389] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/nfu.php"] [unique_id "aSRCxoMM4MaVTk74-AbPkgAAAgE"]
[Mon Nov 24 19:34:41.351261 2025] [:error] [pid 49900:tid 49916] [client 4.233.64.129:13046] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/nfu.php"] [unique_id "aSRC0TCyPLrvg06aorkuKwAAAA4"]
[Mon Nov 24 19:35:12.953512 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 4.233.64.129:13027] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:35:13.203981 2025] [:error] [pid 48599:tid 48608] [client 4.233.64.129:13027] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl6.php"] [unique_id "aSRC8Zzvu6PDJiRKE3I68gAAAYU"]
[Mon Nov 24 19:35:16.503072 2025] [:error] [pid 48599:tid 48609] [client 4.233.64.129:61091] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl6.php"] [unique_id "aSRC9Jzvu6PDJiRKE3I69QAAAYY"]
[Mon Nov 24 19:35:19.455484 2025] [:error] [pid 9630:tid 9648] [client 4.233.64.129:12806] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl6.php"] [unique_id "aSRC9yrSgUgPGkizt2oW3QAAAFA"]
[Mon Nov 24 19:35:23.666964 2025] [:error] [pid 48600:tid 48639] [client 4.233.64.129:61115] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl6.php"] [unique_id "aSRC-_tOzSUAQvWVjBePrgAAAck"]
[Mon Nov 24 19:35:27.359660 2025] [:error] [pid 16549:tid 16566] [client 4.233.64.129:61079] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "aSRC_6eWW19A99PUw_dSDgAAAU4"]
[Mon Nov 24 19:35:33.144930 2025] [:error] [pid 49900:tid 49903] [client 4.233.64.129:12994] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "aSRDBTCyPLrvg06aorkuWQAAAAE"]
[Mon Nov 24 19:35:37.196879 2025] [:error] [pid 9630:tid 9656] [client 4.233.64.129:55361] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "aSRDCSrSgUgPGkizt2oW-wAAAFg"]
[Mon Nov 24 19:37:26.754644 2025] [proxy_fcgi:error] [pid 16441:tid 16464] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:27.041027 2025] [proxy_fcgi:error] [pid 16441:tid 16451] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:27.282957 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:27.784348 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:28.042671 2025] [proxy_fcgi:error] [pid 16441:tid 16465] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:28.303023 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:28.747996 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:29.031391 2025] [proxy_fcgi:error] [pid 16441:tid 16454] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:29.273387 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:30.668145 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:37:30.986956 2025] [:error] [pid 16441:tid 16468] [client 4.233.64.129:12499] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSRDeoq_bc5MOa9Hflln1gAAAJg"]
[Mon Nov 24 19:37:32.721766 2025] [:error] [pid 49900:tid 49904] [client 4.233.64.129:12481] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSRDfDCyPLrvg06aorkurgAAAAI"]
[Mon Nov 24 19:37:34.841453 2025] [:error] [pid 16441:tid 16460] [client 4.233.64.129:12511] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSRDfoq_bc5MOa9Hflln6AAAAJA"]
[Mon Nov 24 19:37:36.890029 2025] [:error] [pid 16549:tid 16565] [client 4.233.64.129:61078] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "aSRDgKeWW19A99PUw_dSigAAAU0"]
[Mon Nov 24 19:37:40.990114 2025] [:error] [pid 16593:tid 16607] [client 4.233.64.129:61098] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSRDhBVGznHBJI2LKpRWawAAAow"]
[Mon Nov 24 19:38:33.291795 2025] [:error] [pid 48601:tid 48672] [client 4.233.64.129:12539] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aSRDuYMM4MaVTk74-AbQmQAAAg8"]
[Mon Nov 24 19:38:38.764754 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:13041] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aSRDvoq_bc5MOa9HflloRwAAAJI"]
[Mon Nov 24 19:38:45.033244 2025] [:error] [pid 48599:tid 48622] [client 4.233.64.129:12491] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aSRDxZzvu6PDJiRKE3I7lgAAAZM"]
[Mon Nov 24 19:38:49.627969 2025] [:error] [pid 48601:tid 48680] [client 4.233.64.129:61092] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aSRDyYMM4MaVTk74-AbQowAAAhc"]
[Mon Nov 24 19:38:51.143621 2025] [:error] [pid 16441:tid 16457] [client 4.233.64.129:12540] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aSRDy4q_bc5MOa9HflloeAAAAI0"]
[Mon Nov 24 19:38:56.144603 2025] [:error] [pid 48599:tid 48604] [client 4.233.64.129:61110] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aSRD0Jzvu6PDJiRKE3I7mwAAAYE"]
[Mon Nov 24 19:38:59.323003 2025] [:error] [pid 16441:tid 16454] [client 4.233.64.129:61094] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aSRD04q_bc5MOa9HfllojQAAAIo"]
[Mon Nov 24 19:39:02.103817 2025] [:error] [pid 49900:tid 49915] [client 4.233.64.129:12487] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "aSRD1jCyPLrvg06aorkvMgAAAA0"]
[Mon Nov 24 19:39:05.534298 2025] [:error] [pid 48599:tid 48613] [client 4.233.64.129:12503] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "aSRD2Zzvu6PDJiRKE3I7qgAAAYo"]
[Mon Nov 24 19:39:09.212836 2025] [:error] [pid 48688:tid 48709] [client 4.233.64.129:13031] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "aSRD3Rm2q1FkzLam7A24lAAAAlE"]
[Mon Nov 24 19:39:11.272817 2025] [:error] [pid 16593:tid 16604] [client 4.233.64.129:12520] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "aSRD3xVGznHBJI2LKpRWzgAAAok"]
[Mon Nov 24 19:39:12.662800 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:61103] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSRD4Jzvu6PDJiRKE3I7sAAAAZA"]
[Mon Nov 24 19:39:16.440723 2025] [:error] [pid 9630:tid 9638] [client 4.233.64.129:12512] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSRD5CrSgUgPGkizt2oYHAAAAEY"]
[Mon Nov 24 19:39:19.823807 2025] [:error] [pid 48600:tid 48653] [client 4.233.64.129:12541] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSRD5_tOzSUAQvWVjBeQWgAAAdc"]
[Mon Nov 24 19:39:22.653685 2025] [:error] [pid 48688:tid 48705] [client 4.233.64.129:61095] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aSRD6hm2q1FkzLam7A24mgAAAk0"]
[Mon Nov 24 19:39:27.941770 2025] [:error] [pid 48599:tid 48616] [client 4.233.64.129:13045] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r.php"] [unique_id "aSRD75zvu6PDJiRKE3I7vgAAAY0"]
[Mon Nov 24 19:39:35.505020 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:35.747468 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:35.991629 2025] [proxy_fcgi:error] [pid 16441:tid 16465] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:36.242842 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:36.482606 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:36.735359 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:37.160294 2025] [proxy_fcgi:error] [pid 16441:tid 16456] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:37.411345 2025] [proxy_fcgi:error] [pid 16441:tid 16463] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:37.818268 2025] [proxy_fcgi:error] [pid 16441:tid 16466] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:38.113409 2025] [proxy_fcgi:error] [pid 16441:tid 16452] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:38.396081 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 4.233.64.129:61113] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:39:38.644917 2025] [:error] [pid 16441:tid 16444] [client 4.233.64.129:61113] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aSRD-oq_bc5MOa9HfllpFQAAAIA"]
[Mon Nov 24 19:39:39.912119 2025] [:error] [pid 48600:tid 48646] [client 4.233.64.129:61091] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aSRD-_tOzSUAQvWVjBeQfgAAAdA"]
[Mon Nov 24 19:39:42.127028 2025] [:error] [pid 9630:tid 9645] [client 4.233.64.129:61057] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aSRD_irSgUgPGkizt2oYPgAAAE0"]
[Mon Nov 24 19:39:46.715819 2025] [:error] [pid 9630:tid 9641] [client 4.233.64.129:61105] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aSREAirSgUgPGkizt2oYRAAAAEk"]
[Mon Nov 24 19:39:49.152181 2025] [:error] [pid 9630:tid 9636] [client 4.233.64.129:61067] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSREBSrSgUgPGkizt2oYSwAAAEQ"]
[Mon Nov 24 19:39:56.345835 2025] [:error] [pid 16441:tid 16461] [client 4.233.64.129:61089] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSREDIq_bc5MOa9HfllpSwAAAJE"]
[Mon Nov 24 19:39:57.496118 2025] [:error] [pid 9630:tid 9649] [client 4.233.64.129:13007] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSREDSrSgUgPGkizt2oYZQAAAFE"]
[Mon Nov 24 19:40:00.190704 2025] [:error] [pid 49900:tid 49922] [client 4.233.64.129:13020] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSREEDCyPLrvg06aorkvdQAAABQ"]
[Mon Nov 24 19:40:07.989680 2025] [:error] [pid 48599:tid 48611] [client 4.233.64.129:12543] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/02.php"] [unique_id "aSREF5zvu6PDJiRKE3I8CAAAAYg"]
[Mon Nov 24 19:40:11.594418 2025] [:error] [pid 48600:tid 48643] [client 4.233.64.129:12536] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/02.php"] [unique_id "aSREG_tOzSUAQvWVjBeQswAAAc0"]
[Mon Nov 24 19:40:12.841373 2025] [:error] [pid 49900:tid 49918] [client 4.233.64.129:12506] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/02.php"] [unique_id "aSREHDCyPLrvg06aorkvfQAAABA"]
[Mon Nov 24 19:40:14.355828 2025] [:error] [pid 48601:tid 48659] [client 4.233.64.129:55360] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/02.php"] [unique_id "aSREHoMM4MaVTk74-AbRAwAAAgI"]
[Mon Nov 24 19:40:18.353291 2025] [:error] [pid 49900:tid 49907] [client 4.233.64.129:61076] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "aSREIjCyPLrvg06aorkvggAAAAU"]
[Mon Nov 24 19:40:36.363309 2025] [:error] [pid 49900:tid 49912] [client 4.233.64.129:12510] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/go.php"] [unique_id "aSRENDCyPLrvg06aorkvlAAAAAo"]
[Mon Nov 24 19:40:41.953398 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 4.233.64.129:12517] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:42.277195 2025] [proxy_fcgi:error] [pid 49900:tid 49911] [client 4.233.64.129:12517] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:42.536521 2025] [proxy_fcgi:error] [pid 49900:tid 49917] [client 4.233.64.129:12517] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:42.778285 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 4.233.64.129:12517] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:43.019344 2025] [proxy_fcgi:error] [pid 49900:tid 49920] [client 4.233.64.129:12517] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:43.265363 2025] [:error] [pid 49900:tid 49906] [client 4.233.64.129:12517] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSREOzCyPLrvg06aorkvngAAAAQ"]
[Mon Nov 24 19:40:44.975944 2025] [:error] [pid 48688:tid 48693] [client 4.233.64.129:13002] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSREPBm2q1FkzLam7A25GAAAAkE"]
[Mon Nov 24 19:40:46.442059 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 4.233.64.129:12992] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:46.717297 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 4.233.64.129:12992] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:46.957033 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 4.233.64.129:12992] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:47.248541 2025] [proxy_fcgi:error] [pid 48599:tid 48614] [client 4.233.64.129:12992] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:47.493708 2025] [proxy_fcgi:error] [pid 48599:tid 48623] [client 4.233.64.129:12992] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:40:47.733881 2025] [:error] [pid 48599:tid 48618] [client 4.233.64.129:12992] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSREP5zvu6PDJiRKE3I8QgAAAY8"]
[Mon Nov 24 19:40:50.157683 2025] [:error] [pid 16441:tid 16452] [client 4.233.64.129:61080] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSREQoq_bc5MOa9HfllpnAAAAIg"]
[Mon Nov 24 19:40:52.198588 2025] [:error] [pid 16593:tid 16600] [client 4.233.64.129:55380] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSRERBVGznHBJI2LKpRXOwAAAoU"]
[Mon Nov 24 19:40:53.397016 2025] [:error] [pid 49900:tid 49919] [client 4.233.64.129:12538] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSRERTCyPLrvg06aorkvoAAAABE"]
[Mon Nov 24 19:40:56.577595 2025] [:error] [pid 16441:tid 16444] [client 4.233.64.129:12502] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/function.php"] [unique_id "aSRESIq_bc5MOa9HfllpsAAAAIA"]
[Mon Nov 24 19:40:58.430428 2025] [:error] [pid 49900:tid 49926] [client 4.233.64.129:13006] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/function.php"] [unique_id "aSRESjCyPLrvg06aorkvpwAAABg"]
[Mon Nov 24 19:41:13.728362 2025] [:error] [pid 16441:tid 16464] [client 4.233.64.129:13013] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSREWYq_bc5MOa9Hfllp1AAAAJQ"]
[Mon Nov 24 19:41:15.380282 2025] [:error] [pid 48600:tid 48642] [client 4.233.64.129:61106] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSREW_tOzSUAQvWVjBeQ7QAAAcw"]
[Mon Nov 24 19:41:20.041079 2025] [:error] [pid 9630:tid 9640] [client 4.233.64.129:12513] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSREYCrSgUgPGkizt2oY4gAAAEg"]
[Mon Nov 24 19:41:22.364630 2025] [:error] [pid 9630:tid 9649] [client 4.233.64.129:13019] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSREYirSgUgPGkizt2oY4wAAAFE"]
[Mon Nov 24 19:41:26.448770 2025] [:error] [pid 48688:tid 48692] [client 4.233.64.129:61079] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "aSREZhm2q1FkzLam7A25SwAAAkA"]
[Mon Nov 24 19:41:27.805958 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:55367] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "aSREZ4q_bc5MOa9Hfllp5wAAAJU"]
[Mon Nov 24 19:41:30.061414 2025] [:error] [pid 16593:tid 16601] [client 4.233.64.129:61069] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "aSREahVGznHBJI2LKpRXWgAAAoY"]
[Mon Nov 24 19:41:40.356827 2025] [:error] [pid 16516:tid 16536] [client 4.233.64.129:12508] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "aSREdPqZbniwaNwL8Xn5iQAAARE"]
[Mon Nov 24 19:41:47.083818 2025] [proxy_fcgi:error] [pid 9630:tid 9633] [client 4.233.64.129:61090] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:41:47.573596 2025] [proxy_fcgi:error] [pid 9630:tid 9648] [client 4.233.64.129:61090] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:41:47.824129 2025] [:error] [pid 9630:tid 9644] [client 4.233.64.129:61090] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSREeyrSgUgPGkizt2oY7wAAAEw"]
[Mon Nov 24 19:41:55.128922 2025] [proxy_fcgi:error] [pid 9630:tid 9653] [client 4.233.64.129:12486] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:41:55.376572 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 4.233.64.129:12486] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:41:55.616796 2025] [:error] [pid 9630:tid 9638] [client 4.233.64.129:12486] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about/function.php"] [unique_id "aSREgyrSgUgPGkizt2oY9wAAAEY"]
[Mon Nov 24 19:42:25.790423 2025] [:error] [pid 49900:tid 49902] [client 4.233.64.129:61077] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aSREoTCyPLrvg06aorkv4QAAAAA"]
[Mon Nov 24 19:42:27.287931 2025] [:error] [pid 48601:tid 48677] [client 4.233.64.129:55374] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aSREo4MM4MaVTk74-AbRbwAAAhQ"]
[Mon Nov 24 19:42:29.502834 2025] [:error] [pid 9630:tid 9637] [client 4.233.64.129:13000] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat1.php"] [unique_id "aSREpSrSgUgPGkizt2oZDAAAAEU"]
[Mon Nov 24 19:42:34.920186 2025] [:error] [pid 16549:tid 16553] [client 4.233.64.129:61117] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat1.php"] [unique_id "aSREqqeWW19A99PUw_dTeAAAAUE"]
[Mon Nov 24 19:42:36.502088 2025] [:error] [pid 48688:tid 48712] [client 4.233.64.129:12483] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat1.php"] [unique_id "aSRErBm2q1FkzLam7A25cAAAAlQ"]
[Mon Nov 24 19:42:48.941224 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:12996] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aSREuIq_bc5MOa9HfllqHQAAAI8"]
[Mon Nov 24 19:42:55.194141 2025] [proxy_fcgi:error] [pid 48688:tid 48701] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:42:55.440303 2025] [proxy_fcgi:error] [pid 48688:tid 48707] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:42:55.691090 2025] [proxy_fcgi:error] [pid 48688:tid 48693] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:42:55.934607 2025] [proxy_fcgi:error] [pid 48688:tid 48713] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:42:56.184582 2025] [proxy_fcgi:error] [pid 48688:tid 48716] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:42:56.436146 2025] [proxy_fcgi:error] [pid 48688:tid 48695] [client 4.233.64.129:12499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:42:56.685944 2025] [:error] [pid 48688:tid 48699] [client 4.233.64.129:12499] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypass.php"] [unique_id "aSREwBm2q1FkzLam7A25gAAAAkc"]
[Mon Nov 24 19:43:01.532291 2025] [:error] [pid 48601:tid 48666] [client 4.233.64.129:61058] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypass.php"] [unique_id "aSRExYMM4MaVTk74-AbRhgAAAgk"]
[Mon Nov 24 19:43:05.117258 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:55416] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypass.php"] [unique_id "aSREyYMM4MaVTk74-AbRigAAAhI"]
[Mon Nov 24 19:43:07.486462 2025] [:error] [pid 16441:tid 16467] [client 4.233.64.129:55404] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypass.php"] [unique_id "aSREy4q_bc5MOa9HfllqNgAAAJc"]
[Mon Nov 24 19:43:10.007321 2025] [:error] [pid 48600:tid 48641] [client 4.233.64.129:61110] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSREzvtOzSUAQvWVjBeRJgAAAcs"]
[Mon Nov 24 19:43:11.343256 2025] [:error] [pid 48601:tid 48678] [client 4.233.64.129:12500] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSREz4MM4MaVTk74-AbRjgAAAhU"]
[Mon Nov 24 19:43:17.675761 2025] [:error] [pid 16549:tid 16557] [client 4.233.64.129:12525] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aSRE1aeWW19A99PUw_dTkgAAAUU"]
[Mon Nov 24 19:43:19.306783 2025] [:error] [pid 16549:tid 16567] [client 4.233.64.129:13022] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "aSRE16eWW19A99PUw_dTlAAAAU8"]
[Mon Nov 24 19:43:23.000862 2025] [:error] [pid 48688:tid 48715] [client 4.233.64.129:61059] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "aSRE2hm2q1FkzLam7A25ngAAAlc"]
[Mon Nov 24 19:43:25.770605 2025] [:error] [pid 48600:tid 48636] [client 4.233.64.129:13033] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "aSRE3ftOzSUAQvWVjBeRKwAAAcY"]
[Mon Nov 24 19:43:28.414843 2025] [:error] [pid 16516:tid 16526] [client 4.233.64.129:13001] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "aSRE4PqZbniwaNwL8Xn5tQAAAQc"]
[Mon Nov 24 19:43:32.214437 2025] [:error] [pid 49900:tid 49909] [client 4.233.64.129:12518] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "aSRE5DCyPLrvg06aorkwFAAAAAc"]
[Mon Nov 24 19:43:34.805796 2025] [:error] [pid 16441:tid 16463] [client 4.233.64.129:55377] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "aSRE5oq_bc5MOa9HfllqVAAAAJM"]
[Mon Nov 24 19:43:36.170995 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:61063] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "aSRE6Iq_bc5MOa9HfllqWAAAAJU"]
[Mon Nov 24 19:43:39.084484 2025] [:error] [pid 48599:tid 48625] [client 4.233.64.129:61111] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "aSRE65zvu6PDJiRKE3I81AAAAZY"]
[Mon Nov 24 19:43:44.696710 2025] [:error] [pid 9630:tid 9641] [client 4.233.64.129:12492] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSRE8CrSgUgPGkizt2oZVwAAAEk"]
[Mon Nov 24 19:43:54.567350 2025] [:error] [pid 16549:tid 16573] [client 4.233.64.129:12484] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "aSRE-qeWW19A99PUw_dTqgAAAVQ"]
[Mon Nov 24 19:43:56.866114 2025] [proxy_fcgi:error] [pid 16549:tid 16562] [client 4.233.64.129:61102] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:43:57.109590 2025] [proxy_fcgi:error] [pid 16549:tid 16565] [client 4.233.64.129:61102] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:43:57.359177 2025] [proxy_fcgi:error] [pid 16549:tid 16563] [client 4.233.64.129:61102] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:43:58.342884 2025] [:error] [pid 16549:tid 16571] [client 4.233.64.129:61102] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "aSRE_qeWW19A99PUw_dTwwAAAVI"]
[Mon Nov 24 19:43:59.418512 2025] [:error] [pid 48688:tid 48695] [client 4.233.64.129:12524] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "aSRE_xm2q1FkzLam7A25sQAAAkM"]
[Mon Nov 24 19:44:02.025763 2025] [:error] [pid 48600:tid 48651] [client 4.233.64.129:13014] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "aSRFAvtOzSUAQvWVjBeRRAAAAdU"]
[Mon Nov 24 19:44:06.745463 2025] [:error] [pid 16549:tid 16566] [client 4.233.64.129:13017] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "aSRFBqeWW19A99PUw_dTyAAAAU4"]
[Mon Nov 24 19:44:09.020532 2025] [:error] [pid 49900:tid 49908] [client 4.233.64.129:13026] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSRFCTCyPLrvg06aorkwJwAAAAY"]
[Mon Nov 24 19:44:10.253864 2025] [:error] [pid 16516:tid 16527] [client 4.233.64.129:55372] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSRFCvqZbniwaNwL8Xn50wAAAQg"]
[Mon Nov 24 19:44:12.983891 2025] [:error] [pid 48599:tid 48610] [client 4.233.64.129:12520] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSRFDJzvu6PDJiRKE3I87wAAAYc"]
[Mon Nov 24 19:44:20.567539 2025] [:error] [pid 49900:tid 49926] [client 4.233.64.129:12840] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSRFFDCyPLrvg06aorkwMAAAABg"]
[Mon Nov 24 19:44:32.874984 2025] [:error] [pid 48599:tid 48624] [client 4.233.64.129:61062] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSRFIJzvu6PDJiRKE3I9CgAAAZU"]
[Mon Nov 24 19:44:34.771029 2025] [:error] [pid 49900:tid 49907] [client 4.233.64.129:61086] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSRFIjCyPLrvg06aorkwQQAAAAU"]
[Mon Nov 24 19:44:47.598614 2025] [:error] [pid 48599:tid 48611] [client 4.233.64.129:12543] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSRFL5zvu6PDJiRKE3I9RgAAAYg"]
[Mon Nov 24 19:44:49.307813 2025] [:error] [pid 48599:tid 48622] [client 4.233.64.129:61075] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/fucku.php"] [unique_id "aSRFMZzvu6PDJiRKE3I9UwAAAZM"]
[Mon Nov 24 19:45:00.907448 2025] [proxy_fcgi:error] [pid 16593:tid 16603] [client 4.233.64.129:13011] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 19:45:01.174865 2025] [proxy_fcgi:error] [pid 16593:tid 16599] [client 4.233.64.129:13011] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 21:45:37.351450 2025] [:error] [pid 16441:tid 16445] [client 193.32.126.212:53232] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "aSRhgYq_bc5MOa9HflmTMQAAAIE"]
[Mon Nov 24 21:45:37.843527 2025] [:error] [pid 48688:tid 48713] [client 193.32.126.212:53911] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "aSRhgRm2q1FkzLam7A3PwAAAAlU"]
[Mon Nov 24 21:45:38.335725 2025] [:error] [pid 48601:tid 48658] [client 193.32.126.212:54430] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgoMM4MaVTk74-Abm_QAAAgE"]
[Tue Nov 25 07:51:08.210480 2025] [:error] [pid 14078:tid 14154] [client 209.50.167.118:41161] [client 209.50.167.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "aSTvbNVXYbb0ii_rVoJtwAAAAJE"]
[Tue Nov 25 07:51:12.645475 2025] [:error] [pid 14688:tid 14699] [client 45.3.44.106:17161] [client 45.3.44.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.svn/wc.db"] [unique_id "aSTvcG9vYrBoEsiDniwJtgAAAQk"]
[Tue Nov 25 07:51:16.993920 2025] [:error] [pid 14078:tid 14152] [client 209.50.183.1:58823] [client 209.50.183.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "aSTvdNVXYbb0ii_rVoJtxwAAAI8"]
[Tue Nov 25 15:36:11.133060 2025] [:error] [pid 14168:tid 14174] [client 144.126.228.9:61619] [client 144.126.228.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.228.9, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSVca_R-ZDU0QEgAIIs0FAAAAMM"]
[Tue Nov 25 15:36:11.145677 2025] [proxy_fcgi:error] [pid 14168:tid 14174] [client 144.126.228.9:61619] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:01:03.463122 2025] [:error] [pid 28836:tid 28964] [client 103.48.103.51:19440] [client 103.48.103.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.103.51, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aSViP5wNRsoxcLQGkTeQkAAAAsk"]
[Tue Nov 25 16:01:03.475692 2025] [proxy_fcgi:error] [pid 28836:tid 28964] [client 103.48.103.51:19440] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:53:10.707616 2025] [proxy_fcgi:error] [pid 28609:tid 28623] [client 138.199.60.187:52486] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:53:12.091135 2025] [:error] [pid 28609:tid 28624] [client 138.199.60.187:52486] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSWKmCGGdT-nZJVs3x248wAAAYY"]
[Tue Nov 25 18:53:12.360308 2025] [:error] [pid 14078:tid 14139] [client 138.199.60.187:53202] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSWKmNVXYbb0ii_rVoI36wAAAII"]
[Tue Nov 25 18:53:12.608889 2025] [:error] [pid 14168:tid 14171] [client 138.199.60.187:53396] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSWKmPR-ZDU0QEgAIItcPwAAAMA"]
[Tue Nov 25 18:53:12.880521 2025] [:error] [pid 28739:tid 28771] [client 138.199.60.187:53626] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSWKmBxGpKmlkG4FexRwZgAAAgk"]
[Tue Nov 25 18:53:13.354646 2025] [:error] [pid 2987:tid 3000] [client 138.199.60.187:53880] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "aSWKmc-djEt-pTzPxnyUIQAAAUs"]
[Tue Nov 25 18:53:13.893817 2025] [:error] [pid 28739:tid 28780] [client 138.199.60.187:54040] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSWKmRxGpKmlkG4FexRwbAAAAhI"]
[Tue Nov 25 18:53:14.137900 2025] [:error] [pid 28842:tid 29005] [client 138.199.60.187:54312] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSWKmtNmoaPf6T4-6C2DxAAAA08"]
[Tue Nov 25 18:53:14.417672 2025] [:error] [pid 14077:tid 14111] [client 138.199.60.187:54446] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSWKmhG9n7UHEkwDTyh-WAAAAEE"]
[Tue Nov 25 18:53:14.685357 2025] [:error] [pid 28609:tid 28638] [client 138.199.60.187:54620] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSWKmiGGdT-nZJVs3x25CgAAAZQ"]
[Tue Nov 25 18:53:14.939903 2025] [:error] [pid 14076:tid 14101] [client 138.199.60.187:54756] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSWKmnsB4Gz6Qw-pvBsKbgAAABQ"]
[Tue Nov 25 19:27:28.368322 2025] [:error] [pid 28842:tid 29021] [client 54.173.250.15:56260] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSWSoNNmoaPf6T4-6C2QdAAAA1M"]
[Tue Nov 25 23:59:18.492046 2025] [:error] [pid 28739:tid 28773] [client 139.59.30.253:59968] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/"] [unique_id "aSXSVhxGpKmlkG4FexThJAAAAgs"], referer: binance.com
[Wed Nov 26 00:12:35.168982 2025] [:error] [pid 43981:tid 43985] [client 34.16.16.99:49662] [client 34.16.16.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSXVcwgZn97m_qh_RaGPQAAAAwI"]
[Wed Nov 26 04:30:49.635495 2025] [:error] [pid 38796:tid 38811] [client 54.173.250.15:48184] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSYR-QGcUUzaXxvjCXOaZAAAAUw"]
[Wed Nov 26 05:17:52.437755 2025] [proxy_fcgi:error] [pid 3011:tid 3058] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:17:52.685793 2025] [proxy_fcgi:error] [pid 3011:tid 3057] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 05:17:52.999622 2025] [proxy_fcgi:error] [pid 3011:tid 3056] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:17:53.348383 2025] [proxy_fcgi:error] [pid 3011:tid 3060] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:17:53.487904 2025] [proxy_fcgi:error] [pid 3011:tid 3050] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:17:53.606760 2025] [proxy_fcgi:error] [pid 3011:tid 3066] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:17:53.875770 2025] [proxy_fcgi:error] [pid 3011:tid 3044] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:17:54.369159 2025] [proxy_fcgi:error] [pid 3011:tid 3051] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:17:54.491697 2025] [proxy_fcgi:error] [pid 3011:tid 3052] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:17:54.612682 2025] [proxy_fcgi:error] [pid 3011:tid 3064] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:17:54.763038 2025] [proxy_fcgi:error] [pid 3011:tid 3063] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:17:54.882564 2025] [proxy_fcgi:error] [pid 3011:tid 3045] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:17:55.003190 2025] [proxy_fcgi:error] [pid 3011:tid 3062] [client 4.189.168.3:24523] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:18:00.307582 2025] [autoindex:error] [pid 3011:tid 3064] [client 4.189.168.3:24523] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 05:18:00.692174 2025] [autoindex:error] [pid 3011:tid 3062] [client 4.189.168.3:24523] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 13:24:46.554026 2025] [autoindex:error] [pid 45901:tid 45924] [client 139.59.30.253:62406] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 18:39:41.859741 2025] [:error] [pid 46443:tid 46452] [client 213.21.239.4:41780] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/config"] [unique_id "aSbY7cLmDsnHrj-QFB_TUgAAAEc"]
[Wed Nov 26 18:39:41.862437 2025] [:error] [pid 46443:tid 46464] [client 213.21.239.4:41686] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.git/config"] [unique_id "aSbY7cLmDsnHrj-QFB_TUwAAAFM"]
[Wed Nov 26 18:39:41.862440 2025] [:error] [pid 20733:tid 20735] [client 213.21.239.4:41820] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.git/config"] [unique_id "aSbY7QV9EP2HuRvnH8dPOwAAAMA"]
[Wed Nov 26 18:39:41.862684 2025] [:error] [pid 45684:tid 45723] [client 213.21.239.4:41782] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/.git/%0Aconfig"] [unique_id "aSbY7fg5LMxwI4-PD1c5KwAAAAg"]
[Wed Nov 26 18:39:41.863012 2025] [:error] [pid 20733:tid 20749] [client 213.21.239.4:41822] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/application/.git/config"] [unique_id "aSbY7QV9EP2HuRvnH8dPPAAAAM4"]
[Wed Nov 26 18:39:41.868343 2025] [:error] [pid 6471:tid 6490] [client 213.21.239.4:41690] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/content../.git/config"] [unique_id "aSbY7eh3Z9TZLlRuTiODRgAAAJA"]
[Wed Nov 26 18:39:41.868839 2025] [:error] [pid 20733:tid 20748] [client 213.21.239.4:41718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.git/config"] [unique_id "aSbY7QV9EP2HuRvnH8dPPQAAAM0"]
[Wed Nov 26 18:39:41.869282 2025] [:error] [pid 45685:tid 45750] [client 213.21.239.4:41692] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/.git/config"] [unique_id "aSbY7Vj3f_NRdgU0DQ7PiQAAAQg"]
[Wed Nov 26 18:39:41.870462 2025] [:error] [pid 45769:tid 45791] [client 213.21.239.4:41868] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/.git;/config"] [unique_id "aSbY7VdG5Eht9c3yy4MahgAAAdM"]
[Wed Nov 26 18:39:41.872822 2025] [:error] [pid 6471:tid 6476] [client 213.21.239.4:41734] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa../config"] [unique_id "aSbY7eh3Z9TZLlRuTiODRwAAAII"]
[Wed Nov 26 18:39:41.873381 2025] [:error] [pid 45769:tid 45782] [client 213.21.239.4:41732] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/config"] [unique_id "aSbY7VdG5Eht9c3yy4MahwAAAco"]
[Wed Nov 26 18:39:41.875096 2025] [:error] [pid 20733:tid 20744] [client 213.21.239.4:41838] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au../config"] [unique_id "aSbY7QV9EP2HuRvnH8dPPgAAAMk"]
[Wed Nov 26 18:39:41.877258 2025] [:error] [pid 45684:tid 45729] [client 213.21.239.4:41770] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/;/.git/config"] [unique_id "aSbY7fg5LMxwI4-PD1c5LAAAAA4"]
[Wed Nov 26 18:39:41.878730 2025] [:error] [pid 20733:tid 20750] [client 213.21.239.4:41834] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/.git/config;"] [unique_id "aSbY7QV9EP2HuRvnH8dPPwAAAM8"]
[Wed Nov 26 18:39:41.879832 2025] [:error] [pid 6471:tid 6482] [client 213.21.239.4:41670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/css../.git/config"] [unique_id "aSbY7eh3Z9TZLlRuTiODSAAAAIg"]
[Wed Nov 26 18:39:41.880846 2025] [:error] [pid 20733:tid 20743] [client 213.21.239.4:41832] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/static../.git/config"] [unique_id "aSbY7QV9EP2HuRvnH8dPQAAAAMg"]
[Wed Nov 26 18:39:41.882389 2025] [:error] [pid 20733:tid 20757] [client 213.21.239.4:41836] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/assets../.git/config"] [unique_id "aSbY7QV9EP2HuRvnH8dPQQAAANY"]
[Wed Nov 26 18:39:41.883944 2025] [:error] [pid 46443:tid 46468] [client 213.21.239.4:41710] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/common/.git/config"] [unique_id "aSbY7cLmDsnHrj-QFB_TVAAAAFc"]
[Wed Nov 26 18:39:41.884092 2025] [:error] [pid 6471:tid 6481] [client 213.21.239.4:41880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/dev/.git/config"] [unique_id "aSbY7eh3Z9TZLlRuTiODSQAAAIc"]
[Wed Nov 26 18:39:41.889588 2025] [:error] [pid 45769:tid 45772] [client 213.21.239.4:41730] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/developer/.git/config"] [unique_id "aSbY7VdG5Eht9c3yy4MaiAAAAcA"]
[Wed Nov 26 18:39:41.890187 2025] [:error] [pid 20733:tid 20752] [client 213.21.239.4:41708] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/..;/.git/config"] [unique_id "aSbY7QV9EP2HuRvnH8dPQgAAANE"]
[Wed Nov 26 18:39:41.890322 2025] [:error] [pid 45685:tid 45765] [client 213.21.239.4:41760] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa../.git/config"] [unique_id "aSbY7Vj3f_NRdgU0DQ7PigAAARc"]
[Wed Nov 26 18:39:41.891969 2025] [:error] [pid 20733:tid 20740] [client 213.21.239.4:41800] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/backup/.git/config"] [unique_id "aSbY7QV9EP2HuRvnH8dPQwAAAMU"]
[Wed Nov 26 18:39:41.892275 2025] [:error] [pid 45685:tid 45764] [client 213.21.239.4:41764] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/database/.git/config"] [unique_id "aSbY7Vj3f_NRdgU0DQ7PiwAAARY"]
[Wed Nov 26 18:39:41.894889 2025] [:error] [pid 45684:tid 45717] [client 213.21.239.4:41802] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/.git/config;.."] [unique_id "aSbY7fg5LMxwI4-PD1c5LQAAAAI"]
[Wed Nov 26 18:39:43.880390 2025] [:error] [pid 45684:tid 45735] [client 213.21.239.4:42084] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/config"] [unique_id "aSbY7_g5LMxwI4-PD1c5OgAAABQ"]
[Wed Nov 26 18:39:43.883160 2025] [:error] [pid 45684:tid 45724] [client 213.21.239.4:42088] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/.git;/config"] [unique_id "aSbY7_g5LMxwI4-PD1c5OwAAAAk"]
[Wed Nov 26 18:39:43.895142 2025] [:error] [pid 45769:tid 45778] [client 213.21.239.4:42102] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa../config"] [unique_id "aSbY71dG5Eht9c3yy4MakwAAAcY"]
[Wed Nov 26 18:39:43.895222 2025] [:error] [pid 45683:tid 45691] [client 213.21.239.4:42114] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa/config"] [unique_id "aSbY7xX1gQgNFW_222qiJwAAAUM"]
[Wed Nov 26 18:39:43.901949 2025] [:error] [pid 6471:tid 6483] [client 213.21.239.4:42122] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au../config"] [unique_id "aSbY7-h3Z9TZLlRuTiODSgAAAIk"]
[Wed Nov 26 18:39:44.290070 2025] [:error] [pid 20733:tid 20752] [client 213.21.239.4:42230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/%0Aconfig"] [unique_id "aSbY8AV9EP2HuRvnH8dPSAAAANE"]
[Wed Nov 26 18:39:44.290482 2025] [:error] [pid 45769:tid 45777] [client 213.21.239.4:42298] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/..;/.git/config"] [unique_id "aSbY8FdG5Eht9c3yy4MalQAAAcU"]
[Wed Nov 26 18:39:44.295300 2025] [:error] [pid 45683:tid 45700] [client 213.21.239.4:42172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/git/.git/config"] [unique_id "aSbY8BX1gQgNFW_222qiKAAAAUw"]
[Wed Nov 26 18:39:44.295809 2025] [:error] [pid 46443:tid 46466] [client 213.21.239.4:42404] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSbY8MLmDsnHrj-QFB_TWwAAAFU"]
[Wed Nov 26 18:39:44.303015 2025] [:error] [pid 45684:tid 45721] [client 213.21.239.4:42354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/;/.git/config"] [unique_id "aSbY8Pg5LMxwI4-PD1c5QAAAAAY"]
[Wed Nov 26 18:39:44.304253 2025] [:error] [pid 6471:tid 6484] [client 213.21.239.4:42466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/..;/.git/config"] [unique_id "aSbY8Oh3Z9TZLlRuTiODTQAAAIo"]
[Wed Nov 26 18:39:44.309784 2025] [:error] [pid 46443:tid 46447] [client 213.21.239.4:42414] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config;"] [unique_id "aSbY8MLmDsnHrj-QFB_TXAAAAEI"]
[Wed Nov 26 18:39:44.310317 2025] [:error] [pid 45683:tid 45688] [client 213.21.239.4:42254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au../.git/config"] [unique_id "aSbY8BX1gQgNFW_222qiKgAAAUA"]
[Wed Nov 26 18:39:44.314205 2025] [:error] [pid 20733:tid 20754] [client 213.21.239.4:42186] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/images../.git/config"] [unique_id "aSbY8AV9EP2HuRvnH8dPSwAAANM"]
[Wed Nov 26 18:39:44.315186 2025] [:error] [pid 45769:tid 45787] [client 213.21.239.4:42340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/config;.."] [unique_id "aSbY8FdG5Eht9c3yy4MalwAAAc8"]
[Wed Nov 26 18:39:44.318950 2025] [:error] [pid 45684:tid 45731] [client 213.21.239.4:42512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/;/.git/config"] [unique_id "aSbY8Pg5LMxwI4-PD1c5QQAAABA"]
[Wed Nov 26 18:39:44.321462 2025] [:error] [pid 45684:tid 45736] [client 213.21.239.4:42276] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/img../.git/config"] [unique_id "aSbY8Pg5LMxwI4-PD1c5QgAAABU"]
[Wed Nov 26 18:39:44.323372 2025] [:error] [pid 45769:tid 45782] [client 213.21.239.4:42386] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/static../.git/config"] [unique_id "aSbY8FdG5Eht9c3yy4MamQAAAco"]
[Wed Nov 26 18:39:44.328307 2025] [:error] [pid 46443:tid 46457] [client 213.21.239.4:42478] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/config;"] [unique_id "aSbY8MLmDsnHrj-QFB_TXQAAAEw"]
[Wed Nov 26 18:39:44.333136 2025] [:error] [pid 46443:tid 46467] [client 213.21.239.4:42310] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/config"] [unique_id "aSbY8MLmDsnHrj-QFB_TXwAAAFY"]
[Wed Nov 26 18:39:44.334517 2025] [:error] [pid 45769:tid 45772] [client 213.21.239.4:42494] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.git;/config"] [unique_id "aSbY8FdG5Eht9c3yy4MamgAAAcA"]
[Wed Nov 26 18:39:44.335581 2025] [:error] [pid 45683:tid 45693] [client 213.21.239.4:42504] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.git;/config;"] [unique_id "aSbY8BX1gQgNFW_222qiLAAAAUU"]
[Wed Nov 26 18:39:44.337623 2025] [:error] [pid 6471:tid 6487] [client 213.21.239.4:42418] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config;.."] [unique_id "aSbY8Oh3Z9TZLlRuTiODUgAAAI0"]
[Wed Nov 26 18:39:44.340284 2025] [:error] [pid 20733:tid 20758] [client 213.21.239.4:42480] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git;/config"] [unique_id "aSbY8AV9EP2HuRvnH8dPTAAAANc"]
[Wed Nov 26 18:39:44.342810 2025] [:error] [pid 45684:tid 45730] [client 213.21.239.4:42484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSbY8Pg5LMxwI4-PD1c5RgAAAA8"]
[Wed Nov 26 18:39:46.292874 2025] [:error] [pid 45684:tid 45718] [client 213.21.239.4:42552] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/js../.git/config"] [unique_id "aSbY8vg5LMxwI4-PD1c5UgAAAAM"]
[Wed Nov 26 18:39:46.297051 2025] [:error] [pid 45683:tid 45704] [client 213.21.239.4:42636] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/m/.git/config"] [unique_id "aSbY8hX1gQgNFW_222qiMQAAAVA"]
[Wed Nov 26 18:39:46.301043 2025] [:error] [pid 45769:tid 45784] [client 213.21.239.4:42568] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/live/.git/config"] [unique_id "aSbY8ldG5Eht9c3yy4MamwAAAcw"]
[Wed Nov 26 18:39:46.305695 2025] [:error] [pid 45684:tid 45732] [client 213.21.239.4:42630] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/lib../.git/config"] [unique_id "aSbY8vg5LMxwI4-PD1c5VQAAABE"]
[Wed Nov 26 18:39:46.310022 2025] [:error] [pid 45683:tid 45705] [client 213.21.239.4:42600] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/message-api/.git/config"] [unique_id "aSbY8hX1gQgNFW_222qiMgAAAVE"]
[Wed Nov 26 18:39:46.347406 2025] [:error] [pid 45684:tid 45724] [client 213.21.239.4:42698] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.git;/config;"] [unique_id "aSbY8vg5LMxwI4-PD1c5VgAAAAk"]
[Wed Nov 26 18:39:46.350748 2025] [:error] [pid 45684:tid 45723] [client 213.21.239.4:42692] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.git;/config"] [unique_id "aSbY8vg5LMxwI4-PD1c5VwAAAAg"]
[Wed Nov 26 18:39:46.363711 2025] [:error] [pid 45684:tid 45729] [client 213.21.239.4:42710] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git;/config"] [unique_id "aSbY8vg5LMxwI4-PD1c5WQAAAA4"]
[Wed Nov 26 18:39:47.284869 2025] [:error] [pid 46443:tid 46460] [client 213.21.239.4:42752] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/prod/.git/config"] [unique_id "aSbY88LmDsnHrj-QFB_TZAAAAE8"]
[Wed Nov 26 18:39:47.287748 2025] [:error] [pid 45769:tid 45794] [client 213.21.239.4:42792] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au../config"] [unique_id "aSbY81dG5Eht9c3yy4ManQAAAdY"]
[Wed Nov 26 18:39:47.292760 2025] [:error] [pid 46443:tid 46469] [client 213.21.239.4:42850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/public/.git/config"] [unique_id "aSbY88LmDsnHrj-QFB_TZQAAAFg"]
[Wed Nov 26 18:39:47.297833 2025] [:error] [pid 20733:tid 20742] [client 213.21.239.4:42762] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/config"] [unique_id "aSbY8wV9EP2HuRvnH8dPTgAAAMc"]
[Wed Nov 26 18:39:47.298197 2025] [:error] [pid 6471:tid 6480] [client 213.21.239.4:42854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/qa/.git/config"] [unique_id "aSbY8-h3Z9TZLlRuTiODVQAAAIY"]
[Wed Nov 26 18:39:47.305248 2025] [:error] [pid 6471:tid 6492] [client 213.21.239.4:42778] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/new/.git/config"] [unique_id "aSbY8-h3Z9TZLlRuTiODVwAAAJI"]
[Wed Nov 26 18:39:47.309838 2025] [:error] [pid 45684:tid 45726] [client 213.21.239.4:42968] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config"] [unique_id "aSbY8_g5LMxwI4-PD1c5XgAAAAs"]
[Wed Nov 26 18:39:47.311698 2025] [:error] [pid 6471:tid 6493] [client 213.21.239.4:42972] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/config;.."] [unique_id "aSbY8-h3Z9TZLlRuTiODWAAAAJM"]
[Wed Nov 26 18:39:47.312215 2025] [:error] [pid 46443:tid 46454] [client 213.21.239.4:42880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/..;/.git/config"] [unique_id "aSbY88LmDsnHrj-QFB_TaQAAAEk"]
[Wed Nov 26 18:39:47.314270 2025] [:error] [pid 46443:tid 46450] [client 213.21.239.4:42736] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au../.git/config"] [unique_id "aSbY88LmDsnHrj-QFB_TagAAAEU"]
[Wed Nov 26 18:39:47.317789 2025] [:error] [pid 46443:tid 46466] [client 213.21.239.4:42808] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/%0Aconfig"] [unique_id "aSbY88LmDsnHrj-QFB_TawAAAFU"]
[Wed Nov 26 18:39:47.321845 2025] [:error] [pid 45769:tid 45786] [client 213.21.239.4:42924] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/static../.git/config"] [unique_id "aSbY81dG5Eht9c3yy4ManwAAAc4"]
[Wed Nov 26 18:39:47.323332 2025] [:error] [pid 46443:tid 46447] [client 213.21.239.4:42834] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git/config;"] [unique_id "aSbY88LmDsnHrj-QFB_TbAAAAEI"]
[Wed Nov 26 18:39:47.325711 2025] [:error] [pid 45684:tid 45718] [client 213.21.239.4:42836] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/config"] [unique_id "aSbY8_g5LMxwI4-PD1c5XwAAAAM"]
[Wed Nov 26 18:39:47.326103 2025] [:error] [pid 6471:tid 6494] [client 213.21.239.4:43012] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/../config"] [unique_id "aSbY8-h3Z9TZLlRuTiODXAAAAJQ"]
[Wed Nov 26 18:39:47.328187 2025] [:error] [pid 6471:tid 6487] [client 213.21.239.4:42986] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git;/config"] [unique_id "aSbY8-h3Z9TZLlRuTiODXQAAAI0"]
[Wed Nov 26 18:39:47.330407 2025] [:error] [pid 46443:tid 46461] [client 213.21.239.4:42960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/;/.git/config"] [unique_id "aSbY88LmDsnHrj-QFB_TbgAAAFA"]
[Wed Nov 26 18:39:49.287252 2025] [:error] [pid 45769:tid 45793] [client 213.21.239.4:43072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/;/.git/config"] [unique_id "aSbY9VdG5Eht9c3yy4MapQAAAdU"]
[Wed Nov 26 18:39:49.288097 2025] [:error] [pid 46443:tid 46448] [client 213.21.239.4:43080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSbY9cLmDsnHrj-QFB_TbwAAAEM"]
[Wed Nov 26 18:39:49.290972 2025] [:error] [pid 45683:tid 45708] [client 213.21.239.4:43110] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/../.git/config"] [unique_id "aSbY9RX1gQgNFW_222qiOgAAAVQ"]
[Wed Nov 26 18:39:49.293126 2025] [:error] [pid 46443:tid 46466] [client 213.21.239.4:43062] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config;"] [unique_id "aSbY9cLmDsnHrj-QFB_TcQAAAFU"]
[Wed Nov 26 18:39:49.298040 2025] [:error] [pid 6471:tid 6492] [client 213.21.239.4:43046] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSbY9eh3Z9TZLlRuTiODYQAAAJI"]
[Wed Nov 26 18:39:49.301667 2025] [:error] [pid 46443:tid 46457] [client 213.21.239.4:43124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config;.."] [unique_id "aSbY9cLmDsnHrj-QFB_TdAAAAEw"]
[Wed Nov 26 18:39:49.302844 2025] [:error] [pid 45769:tid 45781] [client 213.21.239.4:43142] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.git;/config"] [unique_id "aSbY9VdG5Eht9c3yy4MapgAAAck"]
[Wed Nov 26 18:39:49.304937 2025] [:error] [pid 45683:tid 45696] [client 213.21.239.4:43164] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au../config"] [unique_id "aSbY9RX1gQgNFW_222qiPAAAAUg"]
[Wed Nov 26 18:39:49.310535 2025] [:error] [pid 45684:tid 45719] [client 213.21.239.4:43132] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/..;/.git/config"] [unique_id "aSbY9fg5LMxwI4-PD1c5ZQAAAAQ"]
[Wed Nov 26 18:39:49.321888 2025] [:error] [pid 45683:tid 45705] [client 213.21.239.4:43190] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config"] [unique_id "aSbY9RX1gQgNFW_222qiPwAAAVE"]
[Wed Nov 26 18:39:49.339349 2025] [:error] [pid 6471:tid 6479] [client 213.21.239.4:43224] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/.git;/config"] [unique_id "aSbY9eh3Z9TZLlRuTiODYwAAAIU"]
[Wed Nov 26 18:39:49.343790 2025] [:error] [pid 46443:tid 46464] [client 213.21.239.4:43220] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au/config"] [unique_id "aSbY9cLmDsnHrj-QFB_TdQAAAFM"]
[Wed Nov 26 18:39:49.345825 2025] [:error] [pid 45683:tid 45712] [client 213.21.239.4:43206] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/../config"] [unique_id "aSbY9RX1gQgNFW_222qiQQAAAVg"]
[Wed Nov 26 18:39:50.280309 2025] [:error] [pid 45683:tid 45690] [client 213.21.239.4:43280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/staging/.git/config"] [unique_id "aSbY9hX1gQgNFW_222qiRAAAAUI"]
[Wed Nov 26 18:39:50.282158 2025] [:error] [pid 45769:tid 45785] [client 213.21.239.4:43320] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/web/.git/config"] [unique_id "aSbY9ldG5Eht9c3yy4MaqAAAAc0"]
[Wed Nov 26 18:39:50.287374 2025] [:error] [pid 45769:tid 45789] [client 213.21.239.4:43258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/uat/.git/config"] [unique_id "aSbY9ldG5Eht9c3yy4MaqQAAAdE"]
[Wed Nov 26 18:39:50.295299 2025] [:error] [pid 45683:tid 45697] [client 213.21.239.4:43294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/static../.git/config"] [unique_id "aSbY9hX1gQgNFW_222qiRgAAAUk"]
[Wed Nov 26 18:39:50.299285 2025] [:error] [pid 45683:tid 45711] [client 213.21.239.4:43346] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSbY9hX1gQgNFW_222qiRwAAAVc"]
[Wed Nov 26 18:39:50.302116 2025] [:error] [pid 45683:tid 45699] [client 213.21.239.4:43332] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/static../.git/config"] [unique_id "aSbY9hX1gQgNFW_222qiSAAAAUs"]
[Wed Nov 26 18:39:50.303269 2025] [:error] [pid 45685:tid 45766] [client 213.21.239.4:43354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSbY9lj3f_NRdgU0DQ7PmQAAARg"]
[Wed Nov 26 18:39:50.304789 2025] [:error] [pid 45684:tid 45732] [client 213.21.239.4:43362] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSbY9vg5LMxwI4-PD1c5agAAABE"]
[Wed Nov 26 18:39:51.332203 2025] [:error] [pid 45684:tid 45738] [client 213.21.239.4:43370] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.git;/config"] [unique_id "aSbY9_g5LMxwI4-PD1c5bwAAABc"]
[Wed Nov 26 20:14:58.515957 2025] [proxy_fcgi:error] [pid 45684:tid 45716] [client 35.232.250.106:60716] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 20:15:00.867741 2025] [proxy_fcgi:error] [pid 20733:tid 20750] [client 35.232.250.106:62826] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 20:15:05.774359 2025] [:error] [pid 20733:tid 20735] [client 35.232.250.106:51064] [client 35.232.250.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "aSbvSQV9EP2HuRvnH8dhlgAAAMA"]
[Wed Nov 26 20:15:10.785721 2025] [proxy_fcgi:error] [pid 20733:tid 20751] [client 35.232.250.106:50539] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:51:13.173028 2025] [:error] [pid 20733:tid 20739] [client 47.129.39.114:56620] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aScF0QV9EP2HuRvnH8d2BgAAAMQ"]
[Wed Nov 26 21:51:13.564798 2025] [:error] [pid 46443:tid 46466] [client 47.129.39.114:56634] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "aScF0cLmDsnHrj-QFB8S8gAAAFU"]
[Wed Nov 26 21:51:13.959711 2025] [:error] [pid 45684:tid 45721] [client 47.129.39.114:56650] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.local"] [unique_id "aScF0fg5LMxwI4-PD1eL7AAAAAY"]
[Wed Nov 26 21:51:14.354687 2025] [:error] [pid 45684:tid 45736] [client 47.129.39.114:56658] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "aScF0vg5LMxwI4-PD1eL8AAAABU"]
[Wed Nov 26 21:51:14.749754 2025] [:error] [pid 45684:tid 45722] [client 47.129.39.114:56672] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "aScF0vg5LMxwI4-PD1eL9AAAAAc"]
[Wed Nov 26 21:51:15.143389 2025] [:error] [pid 6471:tid 6498] [client 47.129.39.114:56674] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "aScF0-h3Z9TZLlRuTiO1QQAAAJg"]
[Wed Nov 26 21:51:15.542856 2025] [:error] [pid 45685:tid 45751] [client 47.129.39.114:40604] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.development"] [unique_id "aScF01j3f_NRdgU0DQ74NQAAAQk"]
[Wed Nov 26 21:51:15.939386 2025] [:error] [pid 45684:tid 45721] [client 47.129.39.114:40618] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.production"] [unique_id "aScF0_g5LMxwI4-PD1eL-QAAAAY"]
[Wed Nov 26 21:51:16.337079 2025] [:error] [pid 45683:tid 45710] [client 47.129.39.114:40622] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.test"] [unique_id "aScF1BX1gQgNFW_222rMowAAAVY"]
[Wed Nov 26 21:51:16.732888 2025] [:error] [pid 45683:tid 45690] [client 47.129.39.114:40636] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "aScF1BX1gQgNFW_222rMpAAAAUI"]
[Wed Nov 26 21:51:17.127026 2025] [:error] [pid 46443:tid 46456] [client 47.129.39.114:40652] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env~"] [unique_id "aScF1cLmDsnHrj-QFB8S9AAAAEs"]
[Wed Nov 26 21:51:17.520408 2025] [:error] [pid 46443:tid 46449] [client 47.129.39.114:40658] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "aScF1cLmDsnHrj-QFB8S9QAAAEQ"]
[Wed Nov 26 21:51:17.913609 2025] [:error] [pid 45683:tid 45702] [client 47.129.39.114:40668] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.old"] [unique_id "aScF1RX1gQgNFW_222rMpwAAAU4"]
[Wed Nov 26 21:51:18.305476 2025] [:error] [pid 45684:tid 45729] [client 47.129.39.114:40674] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "aScF1vg5LMxwI4-PD1eL_gAAAA4"]
[Wed Nov 26 21:51:18.700002 2025] [:error] [pid 45685:tid 45753] [client 47.129.39.114:40682] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.save"] [unique_id "aScF1lj3f_NRdgU0DQ74OAAAAQs"]
[Wed Nov 26 21:51:19.092794 2025] [:error] [pid 45685:tid 45747] [client 47.129.39.114:40686] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.orig"] [unique_id "aScF11j3f_NRdgU0DQ74OQAAAQU"]
[Wed Nov 26 21:51:19.487877 2025] [:error] [pid 45683:tid 45688] [client 47.129.39.114:40698] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "aScF1xX1gQgNFW_222rMqAAAAUA"]
[Wed Nov 26 21:51:19.882057 2025] [:error] [pid 6471:tid 6483] [client 47.129.39.114:40704] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.tmp"] [unique_id "aScF1-h3Z9TZLlRuTiO1RAAAAIk"]
[Wed Nov 26 21:51:20.274844 2025] [:error] [pid 20733:tid 20740] [client 47.129.39.114:40708] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "aScF2AV9EP2HuRvnH8d2HgAAAMU"]
[Wed Nov 26 21:51:20.668887 2025] [:error] [pid 20733:tid 20736] [client 47.129.39.114:40718] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/admin/.env"] [unique_id "aScF2AV9EP2HuRvnH8d2IAAAAME"]
[Wed Nov 26 21:51:21.065269 2025] [:error] [pid 45684:tid 45728] [client 47.129.39.114:40734] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/admin/.env.save"] [unique_id "aScF2fg5LMxwI4-PD1eMAAAAAA0"]
[Wed Nov 26 21:51:21.458745 2025] [:error] [pid 46443:tid 46446] [client 47.129.39.114:40750] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/admin/.env.bak"] [unique_id "aScF2cLmDsnHrj-QFB8S9gAAAEE"]
[Wed Nov 26 21:51:21.852156 2025] [:error] [pid 6471:tid 6493] [client 47.129.39.114:40762] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/admin/.env.old"] [unique_id "aScF2eh3Z9TZLlRuTiO1RQAAAJM"]
[Wed Nov 26 21:51:22.249068 2025] [:error] [pid 45769:tid 45788] [client 47.129.39.114:40774] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/api/.env"] [unique_id "aScF2ldG5Eht9c3yy4NDMwAAAdA"]
[Wed Nov 26 21:51:22.643487 2025] [:error] [pid 45684:tid 45721] [client 47.129.39.114:40788] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/api/.env.save"] [unique_id "aScF2vg5LMxwI4-PD1eMAwAAAAY"]
[Wed Nov 26 21:51:23.039916 2025] [:error] [pid 45769:tid 45792] [client 47.129.39.114:40802] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/api/.env.bak"] [unique_id "aScF21dG5Eht9c3yy4NDNgAAAdQ"]
[Wed Nov 26 21:51:23.438615 2025] [:error] [pid 45684:tid 45724] [client 47.129.39.114:40806] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/api/.env.old"] [unique_id "aScF2_g5LMxwI4-PD1eMBAAAAAk"]
[Wed Nov 26 21:51:23.833364 2025] [:error] [pid 45769:tid 45779] [client 47.129.39.114:40822] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/app/.env"] [unique_id "aScF21dG5Eht9c3yy4NDOAAAAcc"]
[Wed Nov 26 21:51:24.227610 2025] [:error] [pid 45684:tid 45733] [client 47.129.39.114:40834] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/app/.env.save"] [unique_id "aScF3Pg5LMxwI4-PD1eMBQAAABI"]
[Wed Nov 26 21:51:24.621502 2025] [:error] [pid 45684:tid 45734] [client 47.129.39.114:40850] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/app/.env.bak"] [unique_id "aScF3Pg5LMxwI4-PD1eMBgAAABM"]
[Wed Nov 26 21:51:25.018397 2025] [:error] [pid 45684:tid 45729] [client 47.129.39.114:40866] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/app/.env.old"] [unique_id "aScF3fg5LMxwI4-PD1eMBwAAAA4"]
[Wed Nov 26 21:51:25.411346 2025] [:error] [pid 46443:tid 46455] [client 47.129.39.114:44902] [client 47.129.39.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/config/.env"] [unique_id "aScF3cLmDsnHrj-QFB8S-QAAAEo"]
[Thu Nov 27 00:57:39.409039 2025] [:error] [pid 8184:tid 8236] [client 103.77.107.57:60603] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "aScxg7-M2IHkRYVrcbN82QAAAEA"]
[Thu Nov 27 01:16:02.974861 2025] [:error] [pid 54723:tid 54743] [client 216.126.239.203:39120] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aSc10g2CEg7QoyDosdL4egAAAA0"]
[Thu Nov 27 06:47:23.506043 2025] [proxy_fcgi:error] [pid 33578:tid 33642] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:23.627062 2025] [proxy_fcgi:error] [pid 33578:tid 33643] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:23.826978 2025] [proxy_fcgi:error] [pid 33578:tid 33644] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:24.264351 2025] [proxy_fcgi:error] [pid 33578:tid 33645] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:24.459666 2025] [proxy_fcgi:error] [pid 33578:tid 33646] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:24.579354 2025] [proxy_fcgi:error] [pid 33578:tid 33647] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:24.706059 2025] [proxy_fcgi:error] [pid 33578:tid 33648] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:26.255791 2025] [proxy_fcgi:error] [pid 33578:tid 33650] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:26.378188 2025] [proxy_fcgi:error] [pid 33578:tid 33651] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:26.510210 2025] [proxy_fcgi:error] [pid 33578:tid 33652] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:26.751719 2025] [proxy_fcgi:error] [pid 33578:tid 33654] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:26.892874 2025] [proxy_fcgi:error] [pid 33578:tid 33655] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:27.011499 2025] [proxy_fcgi:error] [pid 33578:tid 33656] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:27.122691 2025] [proxy_fcgi:error] [pid 33578:tid 33657] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:27.270646 2025] [proxy_fcgi:error] [pid 33578:tid 33658] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:27.395012 2025] [proxy_fcgi:error] [pid 33578:tid 33659] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:27.509165 2025] [proxy_fcgi:error] [pid 33578:tid 33660] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:27.617766 2025] [proxy_fcgi:error] [pid 33578:tid 33661] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:27.727335 2025] [proxy_fcgi:error] [pid 33578:tid 33662] [client 194.5.82.91:39479] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:29.678814 2025] [:error] [pid 33578:tid 33654] [client 194.5.82.91:39479] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSeDgY-6NXYrRSLhFNJ34wAAAI0"]
[Thu Nov 27 06:47:30.493766 2025] [:error] [pid 33578:tid 33660] [client 194.5.82.62:49027] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSeDgo-6NXYrRSLhFNJ36AAAAJM"]
[Thu Nov 27 06:47:31.421225 2025] [proxy_fcgi:error] [pid 33576:tid 33603] [client 194.5.82.71:51207] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:31.852070 2025] [:error] [pid 33576:tid 33589] [client 194.5.82.71:51207] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSeDg4mLVaeLbYFcrTqtVwAAAMI"]
[Thu Nov 27 06:47:32.268151 2025] [proxy_fcgi:error] [pid 33577:tid 33626] [client 194.5.82.82:46967] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:33.892506 2025] [proxy_fcgi:error] [pid 33577:tid 33616] [client 194.5.82.82:46967] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:34.014908 2025] [:error] [pid 33577:tid 33621] [client 194.5.82.82:46967] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSeDhhprw54Mry02Wlx6BAAAAQc"]
[Thu Nov 27 06:47:34.376026 2025] [proxy_fcgi:error] [pid 33578:tid 33655] [client 194.5.82.63:44545] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:35.152697 2025] [:error] [pid 33578:tid 33663] [client 194.5.82.63:44545] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSeDh4-6NXYrRSLhFNJ3_AAAAJY"]
[Thu Nov 27 06:47:35.652853 2025] [:error] [pid 33669:tid 33691] [client 194.5.82.80:36987] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSeDh8mtmh798IUH1RaYzgAAAVI"]
[Thu Nov 27 06:47:35.957044 2025] [:error] [pid 33669:tid 33697] [client 194.5.82.56:49057] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSeDh8mtmh798IUH1RaY0gAAAVg"]
[Thu Nov 27 06:47:36.299038 2025] [:error] [pid 33669:tid 33675] [client 194.5.82.59:44351] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSeDiMmtmh798IUH1RaY1QAAAUI"]
[Thu Nov 27 06:47:36.596715 2025] [:error] [pid 33669:tid 33678] [client 194.5.82.61:62625] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSeDiMmtmh798IUH1RaY1wAAAUU"]
[Thu Nov 27 06:47:36.953290 2025] [:error] [pid 33578:tid 33642] [client 194.5.82.167:46773] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSeDiI-6NXYrRSLhFNJ3_wAAAIE"]
[Thu Nov 27 06:47:37.348133 2025] [:error] [pid 33669:tid 33682] [client 194.5.82.70:57061] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSeDicmtmh798IUH1RaY2QAAAUk"]
[Thu Nov 27 06:47:37.591715 2025] [proxy_fcgi:error] [pid 33576:tid 33609] [client 194.5.82.88:38113] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:37.907998 2025] [:error] [pid 33576:tid 33601] [client 194.5.82.88:38113] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aSeDiYmLVaeLbYFcrTqtcAAAAM4"]
[Thu Nov 27 06:47:39.255827 2025] [proxy_fcgi:error] [pid 33576:tid 33598] [client 194.5.82.84:27425] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:39.412998 2025] [proxy_fcgi:error] [pid 33576:tid 33603] [client 194.5.82.84:27425] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:39.528309 2025] [:error] [pid 33576:tid 33594] [client 194.5.82.84:27425] [client 194.5.82.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSeDi4mLVaeLbYFcrTqtdwAAAMc"]
[Thu Nov 27 06:47:43.515230 2025] [:error] [pid 35619:tid 35645] [client 194.5.82.57:58675] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSeDj2Kcnns0qJEM1gcM7QAAAM8"]
[Thu Nov 27 06:47:43.922606 2025] [proxy_fcgi:error] [pid 35619:tid 35653] [client 194.5.82.67:33619] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:44.046681 2025] [:error] [pid 35619:tid 35654] [client 194.5.82.67:33619] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSeDkGKcnns0qJEM1gcM_gAAANg"]
[Thu Nov 27 06:47:44.281112 2025] [proxy_fcgi:error] [pid 35620:tid 35658] [client 194.5.82.101:38799] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:44.725334 2025] [proxy_fcgi:error] [pid 35620:tid 35661] [client 194.5.82.101:38799] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:46.937962 2025] [:error] [pid 35620:tid 35665] [client 194.5.82.101:38799] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSeDkptcSswJrt7VcOJh3gAAAQg"]
[Thu Nov 27 06:47:47.264623 2025] [proxy_fcgi:error] [pid 35620:tid 35667] [client 194.5.82.81:29021] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:47.410229 2025] [:error] [pid 35620:tid 35668] [client 194.5.82.81:29021] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSeDk5tcSswJrt7VcOJh4AAAAQs"]
[Thu Nov 27 06:47:47.659274 2025] [proxy_fcgi:error] [pid 35710:tid 35712] [client 194.5.82.89:61861] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:48.043211 2025] [:error] [pid 35710:tid 35714] [client 194.5.82.89:61861] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSeDlJoUvzNP2m7-ztqv6QAAAAI"]
[Thu Nov 27 06:47:48.436185 2025] [:error] [pid 35619:tid 35633] [client 194.5.82.91:21197] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSeDlGKcnns0qJEM1gcNIAAAAMM"]
[Thu Nov 27 06:47:48.981966 2025] [proxy_fcgi:error] [pid 35619:tid 35634] [client 194.5.82.89:58557] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:49.093681 2025] [proxy_fcgi:error] [pid 35619:tid 35637] [client 194.5.82.89:58557] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:49.415813 2025] [:error] [pid 35619:tid 35644] [client 194.5.82.89:58557] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSeDlWKcnns0qJEM1gcNKQAAAM4"]
[Thu Nov 27 06:47:49.920423 2025] [:error] [pid 35620:tid 35671] [client 194.5.82.59:20791] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSeDlZtcSswJrt7VcOJh4gAAAQ4"]
[Thu Nov 27 06:47:51.541738 2025] [:error] [pid 35620:tid 35677] [client 194.5.82.69:44053] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSeDl5tcSswJrt7VcOJh5QAAARQ"]
[Thu Nov 27 06:47:51.845633 2025] [:error] [pid 35619:tid 35644] [client 194.5.82.88:56675] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSeDl2Kcnns0qJEM1gcNNQAAAM4"]
[Thu Nov 27 06:47:52.141481 2025] [:error] [pid 35710:tid 35726] [client 194.5.82.81:32633] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSeDmJoUvzNP2m7-ztqv8gAAAA4"]
[Thu Nov 27 06:47:52.966924 2025] [proxy_fcgi:error] [pid 35710:tid 35733] [client 194.5.82.74:35041] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:53.177283 2025] [:error] [pid 35710:tid 35734] [client 194.5.82.74:35041] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSeDmZoUvzNP2m7-ztqv9wAAABY"]
[Thu Nov 27 06:47:53.511603 2025] [:error] [pid 35619:tid 35653] [client 194.5.82.54:53693] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSeDmWKcnns0qJEM1gcNOgAAANc"]
[Thu Nov 27 06:47:53.823411 2025] [:error] [pid 35620:tid 35680] [client 194.5.82.99:49419] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSeDmZtcSswJrt7VcOJh5gAAARc"]
[Thu Nov 27 06:47:54.398872 2025] [proxy_fcgi:error] [pid 35620:tid 35660] [client 194.5.82.89:48297] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:54.699805 2025] [proxy_fcgi:error] [pid 35620:tid 35662] [client 194.5.82.89:48297] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:54.881491 2025] [proxy_fcgi:error] [pid 35620:tid 35664] [client 194.5.82.89:48297] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:47:55.296437 2025] [:error] [pid 35620:tid 35668] [client 194.5.82.89:48297] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSeDm5tcSswJrt7VcOJh8AAAAQs"]
[Thu Nov 27 06:48:00.199855 2025] [:error] [pid 37242:tid 37256] [client 194.5.82.71:54057] [client 194.5.82.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.71, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSeDoAjpNyZAgjQIducBuwAAAMA"]
[Thu Nov 27 06:48:00.374258 2025] [proxy_fcgi:error] [pid 37242:tid 37265] [client 194.5.82.71:54057] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:01.371294 2025] [proxy_fcgi:error] [pid 37242:tid 37275] [client 194.5.82.71:54057] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:01.502013 2025] [proxy_fcgi:error] [pid 37242:tid 37276] [client 194.5.82.71:54057] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:02.242338 2025] [:error] [pid 37242:tid 37266] [client 194.5.82.71:54057] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSeDogjpNyZAgjQIducB0gAAAMo"]
[Thu Nov 27 06:48:02.605443 2025] [proxy_fcgi:error] [pid 37243:tid 37287] [client 194.5.82.98:56055] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:02.758547 2025] [:error] [pid 37243:tid 37288] [client 194.5.82.98:56055] [client 194.5.82.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.98, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSeDokRummqnmSn4fqkB1QAAAQM"]
[Thu Nov 27 06:48:03.122213 2025] [:error] [pid 37243:tid 37291] [client 194.5.82.98:56055] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSeDo0RummqnmSn4fqkB1wAAAQU"]
[Thu Nov 27 06:48:03.587140 2025] [proxy_fcgi:error] [pid 37244:tid 37290] [client 194.5.82.63:46507] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:04.041601 2025] [proxy_fcgi:error] [pid 37244:tid 37295] [client 194.5.82.63:46507] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:04.380283 2025] [proxy_fcgi:error] [pid 37244:tid 37299] [client 194.5.82.63:46507] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:04.650719 2025] [:error] [pid 37244:tid 37302] [client 194.5.82.63:46507] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSeDpIqb0SmfDtXaHRjerwAAAUg"]
[Thu Nov 27 06:48:04.891051 2025] [proxy_fcgi:error] [pid 37244:tid 37307] [client 194.5.82.73:34497] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:05.382181 2025] [proxy_fcgi:error] [pid 37244:tid 37312] [client 194.5.82.73:34497] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:05.617860 2025] [proxy_fcgi:error] [pid 37244:tid 37316] [client 194.5.82.73:34497] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:05.936410 2025] [proxy_fcgi:error] [pid 37244:tid 37320] [client 194.5.82.73:34497] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:06.153046 2025] [:error] [pid 37244:tid 37323] [client 194.5.82.73:34497] [client 194.5.82.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSeDpoqb0SmfDtXaHRjeuAAAAVI"]
[Thu Nov 27 06:48:06.431420 2025] [proxy_fcgi:error] [pid 37337:tid 37343] [client 194.5.82.70:57641] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:06.536613 2025] [proxy_fcgi:error] [pid 37337:tid 37345] [client 194.5.82.70:57641] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:06.691475 2025] [:error] [pid 37337:tid 37346] [client 194.5.82.70:57641] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSeDps5RmpOldZ_gswbhJgAAAEM"]
[Thu Nov 27 06:48:07.090264 2025] [proxy_fcgi:error] [pid 37243:tid 37305] [client 194.5.82.100:54623] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:07.320614 2025] [:error] [pid 37243:tid 37309] [client 194.5.82.100:54623] [client 194.5.82.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.100, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSeDp0RummqnmSn4fqkB3AAAAQ0"]
[Thu Nov 27 06:48:07.444635 2025] [:error] [pid 37243:tid 37311] [client 194.5.82.100:54623] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSeDp0RummqnmSn4fqkB3QAAAQ4"]
[Thu Nov 27 06:48:09.227432 2025] [proxy_fcgi:error] [pid 37337:tid 37359] [client 194.5.82.66:21599] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:09.765531 2025] [proxy_fcgi:error] [pid 37337:tid 37364] [client 194.5.82.66:21599] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:10.089468 2025] [proxy_fcgi:error] [pid 37337:tid 37367] [client 194.5.82.66:21599] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:10.294031 2025] [:error] [pid 37337:tid 37368] [client 194.5.82.66:21599] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSeDqs5RmpOldZ_gswbhOgAAAFg"]
[Thu Nov 27 06:48:10.527918 2025] [proxy_fcgi:error] [pid 37337:tid 37346] [client 194.5.82.67:51729] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:14.886008 2025] [:error] [pid 38842:tid 38859] [client 194.5.82.58:42995] [client 194.5.82.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.58, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSeDrmpkB9Nuz31EkggGJQAAAUo"]
[Thu Nov 27 06:48:15.025824 2025] [proxy_fcgi:error] [pid 38842:tid 38861] [client 194.5.82.58:42995] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:15.151886 2025] [proxy_fcgi:error] [pid 38842:tid 38862] [client 194.5.82.58:42995] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:16.835941 2025] [proxy_fcgi:error] [pid 38842:tid 38868] [client 194.5.82.58:42995] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:16.978469 2025] [:error] [pid 38842:tid 38869] [client 194.5.82.58:42995] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSeDsGpkB9Nuz31EkggGLwAAAVQ"]
[Thu Nov 27 06:48:17.264710 2025] [proxy_fcgi:error] [pid 38906:tid 38911] [client 194.5.82.57:51153] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:17.404084 2025] [:error] [pid 38906:tid 38913] [client 194.5.82.57:51153] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSeDsRJW0lSW_a6F_uvBTwAAAAM"]
[Thu Nov 27 06:48:17.769748 2025] [proxy_fcgi:error] [pid 38843:tid 38883] [client 194.5.82.67:65379] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:17.885633 2025] [:error] [pid 38843:tid 38884] [client 194.5.82.67:65379] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSeDsbjiwdpxfQgydR-A-gAAAEg"]
[Thu Nov 27 06:48:18.449258 2025] [proxy_fcgi:error] [pid 38906:tid 38918] [client 194.5.82.71:51345] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:18.603849 2025] [:error] [pid 38906:tid 38920] [client 194.5.82.71:51345] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSeDshJW0lSW_a6F_uvBUwAAAAo"]
[Thu Nov 27 06:48:18.869680 2025] [:error] [pid 38843:tid 38888] [client 194.5.82.59:63399] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSeDsrjiwdpxfQgydR-A-wAAAEw"]
[Thu Nov 27 06:48:21.836136 2025] [proxy_fcgi:error] [pid 38843:tid 38892] [client 194.5.82.61:42763] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:22.002351 2025] [proxy_fcgi:error] [pid 38843:tid 38893] [client 194.5.82.61:42763] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:22.513952 2025] [:error] [pid 38843:tid 38897] [client 194.5.82.61:42763] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSeDtrjiwdpxfQgydR-BAgAAAFU"]
[Thu Nov 27 06:48:22.866929 2025] [:error] [pid 38906:tid 38926] [client 194.5.82.80:31611] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSeDthJW0lSW_a6F_uvBVQAAABA"]
[Thu Nov 27 06:48:23.125927 2025] [proxy_fcgi:error] [pid 38906:tid 38928] [client 194.5.82.85:56197] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:23.532570 2025] [:error] [pid 38906:tid 38931] [client 194.5.82.85:56197] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSeDtxJW0lSW_a6F_uvBWQAAABU"]
[Thu Nov 27 06:48:23.733055 2025] [proxy_fcgi:error] [pid 38842:tid 38865] [client 194.5.82.89:57521] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:24.041779 2025] [proxy_fcgi:error] [pid 38842:tid 38856] [client 194.5.82.89:57521] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:24.139279 2025] [:error] [pid 38842:tid 38862] [client 194.5.82.89:57521] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSeDuGpkB9Nuz31EkggGOwAAAU0"]
[Thu Nov 27 06:48:24.425340 2025] [proxy_fcgi:error] [pid 38842:tid 38850] [client 194.5.82.55:33881] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:25.082187 2025] [:error] [pid 38842:tid 38862] [client 194.5.82.55:33881] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSeDuWpkB9Nuz31EkggGUAAAAU0"]
[Thu Nov 27 06:48:25.294784 2025] [proxy_fcgi:error] [pid 38906:tid 38916] [client 194.5.82.70:38281] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:25.682130 2025] [:error] [pid 38906:tid 38921] [client 194.5.82.70:38281] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSeDuRJW0lSW_a6F_uvBZgAAAAs"]
[Thu Nov 27 06:48:26.232988 2025] [proxy_fcgi:error] [pid 38948:tid 38996] [client 194.5.82.71:23765] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:26.509138 2025] [proxy_fcgi:error] [pid 38948:tid 38998] [client 194.5.82.71:23765] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:26.619738 2025] [proxy_fcgi:error] [pid 38948:tid 38999] [client 194.5.82.71:23765] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:28.317026 2025] [proxy_fcgi:error] [pid 38948:tid 39001] [client 194.5.82.71:23765] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:28.445194 2025] [:error] [pid 38948:tid 39002] [client 194.5.82.71:23765] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSeDvMd2nmbTPqmGqufE2wAAAIs"]
[Thu Nov 27 06:48:28.824365 2025] [:error] [pid 38906:tid 38924] [client 194.5.82.93:40779] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSeDvBJW0lSW_a6F_uvBaAAAAA4"]
[Thu Nov 27 06:48:29.054834 2025] [:error] [pid 38948:tid 39004] [client 194.5.82.70:20785] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSeDvcd2nmbTPqmGqufE3AAAAI0"]
[Thu Nov 27 06:48:29.298940 2025] [:error] [pid 38948:tid 39007] [client 194.5.82.71:37365] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSeDvcd2nmbTPqmGqufE3QAAAJA"]
[Thu Nov 27 06:48:29.554778 2025] [proxy_fcgi:error] [pid 38948:tid 39009] [client 194.5.82.64:44301] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:29.691316 2025] [:error] [pid 38948:tid 39010] [client 194.5.82.64:44301] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSeDvcd2nmbTPqmGqufE3wAAAJM"]
[Thu Nov 27 06:48:29.957952 2025] [:error] [pid 38842:tid 38867] [client 194.5.82.66:46377] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSeDvWpkB9Nuz31EkggGYgAAAVI"]
[Thu Nov 27 06:48:31.723969 2025] [proxy_fcgi:error] [pid 38906:tid 38934] [client 194.5.82.69:24227] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:31.962320 2025] [:error] [pid 38906:tid 38910] [client 194.5.82.69:24227] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSeDvxJW0lSW_a6F_uvBbQAAAAA"]
[Thu Nov 27 06:48:32.174837 2025] [:error] [pid 38906:tid 38916] [client 194.5.82.99:29725] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSeDwBJW0lSW_a6F_uvBbwAAAAY"]
[Thu Nov 27 06:48:32.447633 2025] [:error] [pid 38948:tid 38991] [client 194.5.82.80:63607] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSeDwMd2nmbTPqmGqufE4gAAAIA"]
[Thu Nov 27 06:48:32.689108 2025] [:error] [pid 38948:tid 38992] [client 194.5.82.70:32061] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSeDwMd2nmbTPqmGqufE4wAAAIE"]
[Thu Nov 27 06:48:37.510185 2025] [:error] [pid 40866:tid 40877] [client 194.5.82.80:32693] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSeDxQSQSUCoCJLoY9KjUwAAAAk"]
[Thu Nov 27 06:48:38.090237 2025] [:error] [pid 40866:tid 40882] [client 194.5.82.85:62511] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSeDxgSQSUCoCJLoY9KjWQAAAA4"]
[Thu Nov 27 06:48:38.368205 2025] [proxy_fcgi:error] [pid 40866:tid 40885] [client 194.5.82.102:45315] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:38.736103 2025] [proxy_fcgi:error] [pid 40866:tid 40888] [client 194.5.82.102:45315] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:38.889830 2025] [:error] [pid 40866:tid 40890] [client 194.5.82.102:45315] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSeDxgSQSUCoCJLoY9KjYAAAABY"]
[Thu Nov 27 06:48:39.374669 2025] [proxy_fcgi:error] [pid 40866:tid 40875] [client 194.5.82.92:24989] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:39.488841 2025] [proxy_fcgi:error] [pid 40866:tid 40877] [client 194.5.82.92:24989] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:40.089021 2025] [proxy_fcgi:error] [pid 40866:tid 40880] [client 194.5.82.92:24989] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:40.230997 2025] [:error] [pid 40866:tid 40881] [client 194.5.82.92:24989] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSeDyASQSUCoCJLoY9KjaQAAAA0"]
[Thu Nov 27 06:48:40.599179 2025] [proxy_fcgi:error] [pid 40898:tid 40904] [client 194.5.82.72:32125] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:41.109484 2025] [:error] [pid 40898:tid 40908] [client 194.5.82.72:32125] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSeDyWiSQ19cRYsjlc7jwwAAAMY"]
[Thu Nov 27 06:48:41.326973 2025] [:error] [pid 41062:tid 41065] [client 194.5.82.168:56147] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSeDyUq3pYwsfuWDo_-k8AAAAUE"]
[Thu Nov 27 06:48:42.247729 2025] [:error] [pid 40898:tid 40914] [client 194.5.82.79:40027] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSeDymiSQ19cRYsjlc7jyQAAAMw"]
[Thu Nov 27 06:48:42.874668 2025] [proxy_fcgi:error] [pid 41062:tid 41074] [client 194.5.82.55:39267] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:43.000993 2025] [proxy_fcgi:error] [pid 41062:tid 41076] [client 194.5.82.55:39267] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:43.158856 2025] [proxy_fcgi:error] [pid 41062:tid 41078] [client 194.5.82.55:39267] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:43.335339 2025] [proxy_fcgi:error] [pid 41062:tid 41079] [client 194.5.82.55:39267] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:44.119369 2025] [:error] [pid 41062:tid 41084] [client 194.5.82.55:39267] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSeDzEq3pYwsfuWDo_-k_AAAAVQ"]
[Thu Nov 27 06:48:44.446707 2025] [:error] [pid 40898:tid 40918] [client 194.5.82.68:55647] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSeDzGiSQ19cRYsjlc7jywAAANA"]
[Thu Nov 27 06:48:44.766844 2025] [:error] [pid 40899:tid 40935] [client 194.5.82.87:65079] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSeDzGnBnYHK6eCtI_Nd5wAAAYY"]
[Thu Nov 27 06:48:45.051239 2025] [:error] [pid 40899:tid 40937] [client 194.5.82.74:47387] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSeDzWnBnYHK6eCtI_Nd6QAAAYg"]
[Thu Nov 27 06:48:45.296221 2025] [:error] [pid 40899:tid 40939] [client 194.5.82.168:64065] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSeDzWnBnYHK6eCtI_Nd6gAAAYo"]
[Thu Nov 27 06:48:45.558664 2025] [:error] [pid 40866:tid 40892] [client 194.5.82.59:28889] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSeDzQSQSUCoCJLoY9KjagAAABg"]
[Thu Nov 27 06:48:46.030167 2025] [:error] [pid 40866:tid 40877] [client 194.5.82.59:31255] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSeDzgSQSUCoCJLoY9KjbAAAAAk"]
[Thu Nov 27 06:48:46.413747 2025] [:error] [pid 40866:tid 40873] [client 194.5.82.96:48079] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSeDzgSQSUCoCJLoY9KjbQAAAAU"]
[Thu Nov 27 06:48:46.635728 2025] [:error] [pid 40866:tid 40868] [client 194.5.82.93:31369] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSeDzgSQSUCoCJLoY9KjbwAAAAA"]
[Thu Nov 27 06:48:47.954622 2025] [:error] [pid 40898:tid 40923] [client 194.5.82.101:51971] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSeDz2iSQ19cRYsjlc7jzQAAANU"]
[Thu Nov 27 06:48:48.610137 2025] [:error] [pid 40898:tid 40903] [client 194.5.82.65:56971] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSeD0GiSQ19cRYsjlc7j0AAAAME"]
[Thu Nov 27 06:48:48.993982 2025] [:error] [pid 41062:tid 41068] [client 194.5.82.61:47675] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSeD0Eq3pYwsfuWDo_-lAQAAAUQ"]
[Thu Nov 27 06:48:52.670659 2025] [proxy_fcgi:error] [pid 42443:tid 42447] [client 194.5.82.72:31327] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:52.925900 2025] [:error] [pid 42443:tid 42456] [client 194.5.82.72:31327] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSeD1L9PG6CGCgm_g8OnTAAAAMo"]
[Thu Nov 27 06:48:53.657818 2025] [:error] [pid 42443:tid 42465] [client 194.5.82.70:48019] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSeD1b9PG6CGCgm_g8OnVAAAANM"]
[Thu Nov 27 06:48:54.302297 2025] [proxy_fcgi:error] [pid 42443:tid 42468] [client 194.5.82.59:29291] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:54.689583 2025] [proxy_fcgi:error] [pid 42443:tid 42446] [client 194.5.82.59:29291] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:54.820978 2025] [:error] [pid 42443:tid 42454] [client 194.5.82.59:29291] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSeD1r9PG6CGCgm_g8OnWQAAAMg"]
[Thu Nov 27 06:48:55.190778 2025] [proxy_fcgi:error] [pid 42596:tid 42611] [client 194.5.82.59:47699] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:55.411751 2025] [proxy_fcgi:error] [pid 42596:tid 42612] [client 194.5.82.59:47699] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:55.594084 2025] [proxy_fcgi:error] [pid 42596:tid 42613] [client 194.5.82.59:47699] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:55.752100 2025] [:error] [pid 42596:tid 42614] [client 194.5.82.59:47699] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSeD13Cx-ncqdPnUWEFe2gAAAEU"]
[Thu Nov 27 06:48:56.026288 2025] [proxy_fcgi:error] [pid 42443:tid 42452] [client 194.5.82.60:26669] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:56.153297 2025] [:error] [pid 42443:tid 42458] [client 194.5.82.60:26669] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSeD2L9PG6CGCgm_g8OnWwAAAMw"]
[Thu Nov 27 06:48:56.728488 2025] [proxy_fcgi:error] [pid 42444:tid 42478] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:56.854987 2025] [proxy_fcgi:error] [pid 42444:tid 42479] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:57.247834 2025] [proxy_fcgi:error] [pid 42444:tid 42480] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:57.636226 2025] [proxy_fcgi:error] [pid 42444:tid 42482] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:58.132348 2025] [proxy_fcgi:error] [pid 42444:tid 42485] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:58.270353 2025] [proxy_fcgi:error] [pid 42444:tid 42486] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:58.426267 2025] [proxy_fcgi:error] [pid 42444:tid 42488] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:58.555677 2025] [proxy_fcgi:error] [pid 42444:tid 42489] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:58.973268 2025] [proxy_fcgi:error] [pid 42444:tid 42492] [client 194.5.82.78:35917] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:59.144414 2025] [:error] [pid 42444:tid 42493] [client 194.5.82.78:35917] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSeD25NUlD1yvO57K8zohAAAAZQ"]
[Thu Nov 27 06:48:59.405703 2025] [:error] [pid 42444:tid 42495] [client 194.5.82.76:50997] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSeD25NUlD1yvO57K8zohQAAAZY"]
[Thu Nov 27 06:48:59.787500 2025] [:error] [pid 42774:tid 42831] [client 194.5.82.66:28577] [client 194.5.82.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.66, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aSeD2zrrbP9ikaOh6Qv33wAAAIE"]
[Thu Nov 27 06:48:59.792445 2025] [proxy_fcgi:error] [pid 42774:tid 42831] [client 194.5.82.66:28577] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:48:59.915366 2025] [proxy_fcgi:error] [pid 42774:tid 42833] [client 194.5.82.66:28577] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:00.029711 2025] [:error] [pid 42774:tid 42834] [client 194.5.82.66:28577] [client 194.5.82.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSeD3DrrbP9ikaOh6Qv34gAAAIQ"]
[Thu Nov 27 06:49:00.448131 2025] [proxy_fcgi:error] [pid 42774:tid 42837] [client 194.5.82.72:64793] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:00.575146 2025] [:error] [pid 42774:tid 42838] [client 194.5.82.72:64793] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSeD3DrrbP9ikaOh6Qv35QAAAIg"]
[Thu Nov 27 06:49:00.890312 2025] [:error] [pid 42596:tid 42624] [client 194.5.82.56:45943] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSeD3HCx-ncqdPnUWEFe3gAAAE8"]
[Thu Nov 27 06:49:01.758077 2025] [:error] [pid 42596:tid 42632] [client 194.5.82.70:57147] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSeD3XCx-ncqdPnUWEFe5AAAAFc"]
[Thu Nov 27 06:49:02.044710 2025] [:error] [pid 42596:tid 42613] [client 194.5.82.94:65289] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aSeD3nCx-ncqdPnUWEFe6QAAAEQ"]
[Thu Nov 27 06:49:08.591813 2025] [proxy_fcgi:error] [pid 44042:tid 44055] [client 194.5.82.95:61117] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:08.962205 2025] [:error] [pid 44042:tid 44067] [client 194.5.82.95:61117] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSeD5L-USH7tQGSgxgVXtwAAARU"]
[Thu Nov 27 06:49:09.927104 2025] [proxy_fcgi:error] [pid 44043:tid 44080] [client 194.5.82.85:43655] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:10.187803 2025] [:error] [pid 44043:tid 44082] [client 194.5.82.85:43655] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSeD5g0PpxU03KTHPD9-sQAAAMk"]
[Thu Nov 27 06:49:12.452087 2025] [:error] [pid 44163:tid 44217] [client 194.5.82.168:61787] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSeD6DLR7VfT6uYLqrjMrwAAAAM"]
[Thu Nov 27 06:49:12.984516 2025] [proxy_fcgi:error] [pid 44163:tid 44220] [client 194.5.82.83:64169] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:13.187852 2025] [:error] [pid 44163:tid 44221] [client 194.5.82.83:64169] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSeD6TLR7VfT6uYLqrjMsgAAAAc"]
[Thu Nov 27 06:49:13.481834 2025] [:error] [pid 44163:tid 44223] [client 194.5.82.104:27617] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSeD6TLR7VfT6uYLqrjMswAAAAk"]
[Thu Nov 27 06:49:14.022133 2025] [proxy_fcgi:error] [pid 44163:tid 44227] [client 194.5.82.82:38445] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:14.147258 2025] [proxy_fcgi:error] [pid 44163:tid 44228] [client 194.5.82.82:38445] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:14.409039 2025] [proxy_fcgi:error] [pid 44163:tid 44230] [client 194.5.82.82:38445] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:14.733135 2025] [:error] [pid 44163:tid 44233] [client 194.5.82.82:38445] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSeD6jLR7VfT6uYLqrjMuwAAABM"]
[Thu Nov 27 06:49:15.020327 2025] [:error] [pid 44044:tid 44110] [client 194.5.82.87:30259] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSeD6_B9x6WxOi5BJjkBdgAAAYo"]
[Thu Nov 27 06:49:15.237890 2025] [proxy_fcgi:error] [pid 44163:tid 44235] [client 194.5.82.99:42979] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:15.606801 2025] [proxy_fcgi:error] [pid 44163:tid 44215] [client 194.5.82.99:42979] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:15.827599 2025] [proxy_fcgi:error] [pid 44163:tid 44217] [client 194.5.82.99:42979] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:15.946077 2025] [:error] [pid 44163:tid 44218] [client 194.5.82.99:42979] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSeD6zLR7VfT6uYLqrjMxAAAAAQ"]
[Thu Nov 27 06:49:17.253824 2025] [:error] [pid 44044:tid 44119] [client 194.5.82.93:21217] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSeD7fB9x6WxOi5BJjkBewAAAZM"]
[Thu Nov 27 06:49:17.505812 2025] [:error] [pid 44043:tid 44087] [client 194.5.82.101:50815] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSeD7Q0PpxU03KTHPD9-swAAAM4"]
[Thu Nov 27 06:49:18.394301 2025] [proxy_fcgi:error] [pid 44043:tid 44094] [client 194.5.82.98:54687] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:18.548487 2025] [:error] [pid 44043:tid 44095] [client 194.5.82.98:54687] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSeD7g0PpxU03KTHPD9-uQAAANY"]
[Thu Nov 27 06:49:22.650759 2025] [:error] [pid 45645:tid 45676] [client 194.5.82.78:33149] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSeD8mqzs-CS2pwZbI4IvAAAANc"]
[Thu Nov 27 06:49:24.026587 2025] [proxy_fcgi:error] [pid 45645:tid 45665] [client 194.5.82.93:31939] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:24.142511 2025] [proxy_fcgi:error] [pid 45645:tid 45676] [client 194.5.82.93:31939] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:24.385044 2025] [proxy_fcgi:error] [pid 45645:tid 45657] [client 194.5.82.93:31939] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:25.125346 2025] [:error] [pid 45645:tid 45659] [client 194.5.82.93:31939] [client 194.5.82.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.93, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "aSeD9Wqzs-CS2pwZbI4I0QAAAMY"]
[Thu Nov 27 06:49:25.527269 2025] [:error] [pid 45645:tid 45662] [client 194.5.82.93:31939] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Thu Nov 27 06:49:25.727239 2025] [proxy_fcgi:error] [pid 45645:tid 45663] [client 194.5.82.93:31939] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:25.890739 2025] [proxy_fcgi:error] [pid 45645:tid 45657] [client 194.5.82.93:31939] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:26.001453 2025] [proxy_fcgi:error] [pid 45645:tid 45675] [client 194.5.82.93:31939] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:26.134885 2025] [:error] [pid 45645:tid 45653] [client 194.5.82.93:31939] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSeD9mqzs-CS2pwZbI4I2wAAAMA"]
[Thu Nov 27 06:49:26.385170 2025] [:error] [pid 45737:tid 45743] [client 194.5.82.55:33579] [client 194.5.82.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.55, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSeD9uzqkRyjP9vDewBhWAAAAEQ"]
[Thu Nov 27 06:49:26.646167 2025] [proxy_fcgi:error] [pid 45737:tid 45745] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:26.898131 2025] [proxy_fcgi:error] [pid 45737:tid 45749] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:27.038221 2025] [proxy_fcgi:error] [pid 45737:tid 45750] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:27.298676 2025] [proxy_fcgi:error] [pid 45737:tid 45754] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:29.278642 2025] [proxy_fcgi:error] [pid 45737:tid 45739] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:29.988277 2025] [proxy_fcgi:error] [pid 45737:tid 45743] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:32.367102 2025] [proxy_fcgi:error] [pid 45737:tid 45754] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:32.530648 2025] [proxy_fcgi:error] [pid 45737:tid 45763] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:33.107914 2025] [proxy_fcgi:error] [pid 45737:tid 45744] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:33.372904 2025] [proxy_fcgi:error] [pid 45737:tid 45745] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:33.541293 2025] [proxy_fcgi:error] [pid 45737:tid 45742] [client 194.5.82.55:33579] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:33.704420 2025] [:error] [pid 45737:tid 45751] [client 194.5.82.55:33579] [client 194.5.82.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSeD_ezqkRyjP9vDewBhgAAAAEw"]
[Thu Nov 27 06:49:34.139746 2025] [proxy_fcgi:error] [pid 45649:tid 45716] [client 194.5.82.88:50453] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:38.292185 2025] [proxy_fcgi:error] [pid 47327:tid 47336] [client 194.5.82.59:48549] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:38.420908 2025] [:error] [pid 47327:tid 47343] [client 194.5.82.59:48549] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSeEAvxnObqrOQwqzqpbpQAAAMo"]
[Thu Nov 27 06:49:38.799150 2025] [proxy_fcgi:error] [pid 47328:tid 47360] [client 194.5.82.103:26341] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:38.929510 2025] [:error] [pid 47328:tid 47363] [client 194.5.82.103:26341] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSeEAoWzQFYJKSETo5vagAAAAEM"]
[Thu Nov 27 06:49:39.608488 2025] [proxy_fcgi:error] [pid 47328:tid 47369] [client 194.5.82.98:55175] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:39.844690 2025] [proxy_fcgi:error] [pid 47328:tid 47371] [client 194.5.82.98:55175] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:39.994879 2025] [proxy_fcgi:error] [pid 47328:tid 47372] [client 194.5.82.98:55175] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:40.164266 2025] [proxy_fcgi:error] [pid 47328:tid 47373] [client 194.5.82.98:55175] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:40.306605 2025] [proxy_fcgi:error] [pid 47328:tid 47374] [client 194.5.82.98:55175] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:40.568114 2025] [:error] [pid 47328:tid 47377] [client 194.5.82.98:55175] [client 194.5.82.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSeEBIWzQFYJKSETo5vajAAAAFE"]
[Thu Nov 27 06:49:40.848591 2025] [proxy_fcgi:error] [pid 47328:tid 47379] [client 194.5.82.69:57065] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:42.336462 2025] [proxy_fcgi:error] [pid 47328:tid 47380] [client 194.5.82.69:57065] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:42.460110 2025] [:error] [pid 47328:tid 47381] [client 194.5.82.69:57065] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSeEBoWzQFYJKSETo5vakAAAAFU"]
[Thu Nov 27 06:49:42.888950 2025] [:error] [pid 47327:tid 47355] [client 194.5.82.69:47985] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSeEBvxnObqrOQwqzqpbqwAAANY"]
[Thu Nov 27 06:49:43.305243 2025] [proxy_fcgi:error] [pid 47327:tid 47335] [client 194.5.82.70:28177] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:43.729382 2025] [proxy_fcgi:error] [pid 47327:tid 47347] [client 194.5.82.70:28177] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:43.854680 2025] [proxy_fcgi:error] [pid 47327:tid 47346] [client 194.5.82.70:28177] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:45.417142 2025] [:error] [pid 47327:tid 47341] [client 194.5.82.70:28177] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSeECfxnObqrOQwqzqpbtAAAAMg"]
[Thu Nov 27 06:49:45.719325 2025] [:error] [pid 47328:tid 47361] [client 194.5.82.70:53737] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSeECYWzQFYJKSETo5vakgAAAEE"]
[Thu Nov 27 06:49:46.703082 2025] [proxy_fcgi:error] [pid 47327:tid 47344] [client 194.5.82.76:57849] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:46.948158 2025] [:error] [pid 47327:tid 47345] [client 194.5.82.76:57849] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSeECvxnObqrOQwqzqpbvgAAAMw"]
[Thu Nov 27 06:49:47.305810 2025] [:error] [pid 47330:tid 47392] [client 194.5.82.99:33297] [client 194.5.82.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aSeEC4hIax2RJqss_cBY3AAAAIU"]
[Thu Nov 27 06:49:47.784011 2025] [proxy_fcgi:error] [pid 47330:tid 47395] [client 194.5.82.93:25367] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:47.947686 2025] [proxy_fcgi:error] [pid 47330:tid 47397] [client 194.5.82.93:25367] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:48.122969 2025] [:error] [pid 47330:tid 47398] [client 194.5.82.93:25367] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSeEDIhIax2RJqss_cBY4QAAAIs"]
[Thu Nov 27 06:49:48.542209 2025] [proxy_fcgi:error] [pid 47327:tid 47350] [client 194.5.82.92:20997] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:48.702060 2025] [proxy_fcgi:error] [pid 47327:tid 47353] [client 194.5.82.92:20997] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:52.903646 2025] [proxy_fcgi:error] [pid 48928:tid 48941] [client 194.5.82.97:49781] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:53.381459 2025] [:error] [pid 48928:tid 48956] [client 194.5.82.97:49781] [client 194.5.82.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSeEEXzpQoF8PVTquqYpaQAAAFE"]
[Thu Nov 27 06:49:53.648262 2025] [proxy_fcgi:error] [pid 48928:tid 48963] [client 194.5.82.63:29369] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:54.017616 2025] [:error] [pid 48928:tid 48952] [client 194.5.82.63:29369] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSeEEnzpQoF8PVTquqYplQAAAE0"]
[Thu Nov 27 06:49:54.508983 2025] [proxy_fcgi:error] [pid 48930:tid 49001] [client 194.5.82.96:59047] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:54.992426 2025] [proxy_fcgi:error] [pid 48930:tid 49004] [client 194.5.82.96:59047] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:55.124453 2025] [proxy_fcgi:error] [pid 48930:tid 49005] [client 194.5.82.96:59047] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:55.455454 2025] [:error] [pid 48930:tid 49007] [client 194.5.82.96:59047] [client 194.5.82.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.96, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSeEExmk-RHlIhli7t-NuwAAAQo"]
[Thu Nov 27 06:49:55.694151 2025] [proxy_fcgi:error] [pid 48930:tid 49009] [client 194.5.82.96:59047] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:56.216346 2025] [:error] [pid 48930:tid 49012] [client 194.5.82.96:59047] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSeEFBmk-RHlIhli7t-NwAAAAQ8"]
[Thu Nov 27 06:49:56.487639 2025] [proxy_fcgi:error] [pid 49025:tid 49033] [client 194.5.82.104:27423] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:56.585565 2025] [:error] [pid 49025:tid 49034] [client 194.5.82.104:27423] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSeEFOZVTPh2XIK9-y_zFQAAAUY"]
[Thu Nov 27 06:49:56.835018 2025] [proxy_fcgi:error] [pid 48930:tid 49015] [client 194.5.82.100:62607] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:57.198597 2025] [proxy_fcgi:error] [pid 48930:tid 49017] [client 194.5.82.100:62607] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:57.447245 2025] [:error] [pid 48930:tid 49019] [client 194.5.82.100:62607] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSeEFRmk-RHlIhli7t-NxgAAARY"]
[Thu Nov 27 06:49:57.962023 2025] [proxy_fcgi:error] [pid 49025:tid 49043] [client 194.5.82.86:49425] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:58.133722 2025] [proxy_fcgi:error] [pid 49025:tid 49045] [client 194.5.82.86:49425] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:49:58.417557 2025] [:error] [pid 49025:tid 49047] [client 194.5.82.86:49425] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSeEFuZVTPh2XIK9-y_zHwAAAVM"]
[Thu Nov 27 06:49:58.799238 2025] [:error] [pid 48930:tid 48994] [client 194.5.82.81:41025] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSeEFhmk-RHlIhli7t-NyAAAAQA"]
[Thu Nov 27 06:50:00.142609 2025] [proxy_fcgi:error] [pid 49025:tid 49051] [client 194.5.82.167:30901] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:00.283352 2025] [proxy_fcgi:error] [pid 49025:tid 49029] [client 194.5.82.167:30901] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:00.596326 2025] [:error] [pid 49025:tid 49033] [client 194.5.82.167:30901] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSeEGOZVTPh2XIK9-y_zJAAAAUU"]
[Thu Nov 27 06:50:00.853996 2025] [proxy_fcgi:error] [pid 49025:tid 49035] [client 194.5.82.67:40635] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:01.226153 2025] [proxy_fcgi:error] [pid 49025:tid 49037] [client 194.5.82.67:40635] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:01.356951 2025] [:error] [pid 49025:tid 49038] [client 194.5.82.67:40635] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSeEGeZVTPh2XIK9-y_zKAAAAUo"]
[Thu Nov 27 06:50:01.909520 2025] [:error] [pid 49025:tid 49042] [client 194.5.82.72:41945] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSeEGeZVTPh2XIK9-y_zKgAAAU4"]
[Thu Nov 27 06:50:02.433327 2025] [:error] [pid 49025:tid 49044] [client 194.5.82.59:38153] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSeEGuZVTPh2XIK9-y_zLAAAAVA"]
[Thu Nov 27 06:50:02.956175 2025] [:error] [pid 48930:tid 49001] [client 194.5.82.79:52603] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSeEGhmk-RHlIhli7t-NyQAAAQQ"]
[Thu Nov 27 06:50:03.193958 2025] [:error] [pid 48929:tid 48988] [client 194.5.82.67:56779] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSeEGxsXTHq9V_4xD5TeDgAAAJU"]
[Thu Nov 27 06:50:03.469433 2025] [:error] [pid 48929:tid 48967] [client 194.5.82.58:63995] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSeEGxsXTHq9V_4xD5TeEAAAAIA"]
[Thu Nov 27 06:50:03.784029 2025] [:error] [pid 48928:tid 48941] [client 194.5.82.80:20871] [client 194.5.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSeEG3zpQoF8PVTquqYprgAAAEI"]
[Thu Nov 27 06:50:04.362708 2025] [:error] [pid 48929:tid 48972] [client 194.5.82.88:36873] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSeEHBsXTHq9V_4xD5TeEwAAAIU"]
[Thu Nov 27 06:50:04.615039 2025] [:error] [pid 48930:tid 49004] [client 194.5.82.92:58919] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSeEHBmk-RHlIhli7t-NywAAAQc"]
[Thu Nov 27 06:50:04.877609 2025] [:error] [pid 48928:tid 48959] [client 194.5.82.167:63333] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSeEHHzpQoF8PVTquqYprwAAAFQ"]
[Thu Nov 27 06:50:05.456090 2025] [:error] [pid 49025:tid 49048] [client 194.5.82.70:30745] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSeEHeZVTPh2XIK9-y_zLgAAAVQ"]
[Thu Nov 27 06:50:06.165612 2025] [:error] [pid 48930:tid 49011] [client 194.5.82.82:62183] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSeEHhmk-RHlIhli7t-NzwAAAQ4"]
[Thu Nov 27 06:50:06.439962 2025] [proxy_fcgi:error] [pid 49025:tid 49051] [client 194.5.82.103:29569] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:07.273029 2025] [:error] [pid 49025:tid 49034] [client 194.5.82.103:29569] [client 194.5.82.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.103, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSeEH-ZVTPh2XIK9-y_zMwAAAUY"]
[Thu Nov 27 06:50:08.002375 2025] [proxy_fcgi:error] [pid 49025:tid 49039] [client 194.5.82.103:29569] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:08.115007 2025] [:error] [pid 49025:tid 49041] [client 194.5.82.103:29569] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSeEIOZVTPh2XIK9-y_zOQAAAU0"]
[Thu Nov 27 06:50:08.332793 2025] [:error] [pid 48930:tid 49013] [client 194.5.82.87:42075] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSeEIBmk-RHlIhli7t-N0AAAARA"]
[Thu Nov 27 06:50:08.987352 2025] [proxy_fcgi:error] [pid 49025:tid 49044] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:09.112404 2025] [proxy_fcgi:error] [pid 49025:tid 49045] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:09.786343 2025] [proxy_fcgi:error] [pid 49025:tid 49047] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:09.908005 2025] [proxy_fcgi:error] [pid 49025:tid 49051] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:10.540233 2025] [proxy_fcgi:error] [pid 49025:tid 49034] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:10.980568 2025] [proxy_fcgi:error] [pid 49025:tid 49035] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:11.096427 2025] [proxy_fcgi:error] [pid 49025:tid 49037] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:11.618454 2025] [proxy_fcgi:error] [pid 49025:tid 49039] [client 194.5.82.88:22463] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:11.739194 2025] [:error] [pid 49025:tid 49041] [client 194.5.82.88:22463] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSeEI-ZVTPh2XIK9-y_zTQAAAU0"]
[Thu Nov 27 06:50:12.027068 2025] [:error] [pid 49025:tid 49028] [client 194.5.82.69:35169] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSeEJOZVTPh2XIK9-y_zTgAAAUA"]
[Thu Nov 27 06:50:12.399976 2025] [:error] [pid 49025:tid 49043] [client 194.5.82.70:25699] [client 194.5.82.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSeEJOZVTPh2XIK9-y_zTwAAAU8"]
[Thu Nov 27 06:50:12.862392 2025] [proxy_fcgi:error] [pid 49025:tid 49040] [client 194.5.82.63:44575] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:12.979151 2025] [proxy_fcgi:error] [pid 49025:tid 49046] [client 194.5.82.63:44575] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:13.324876 2025] [proxy_fcgi:error] [pid 49025:tid 49052] [client 194.5.82.63:44575] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:13.674915 2025] [:error] [pid 49025:tid 49049] [client 194.5.82.63:44575] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSeEJeZVTPh2XIK9-y_zVwAAAVU"]
[Thu Nov 27 06:50:13.976069 2025] [:error] [pid 48930:tid 49002] [client 194.5.82.78:30897] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSeEJRmk-RHlIhli7t-N0wAAAQU"]
[Thu Nov 27 06:50:14.326981 2025] [:error] [pid 48930:tid 49004] [client 194.5.82.167:32343] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSeEJhmk-RHlIhli7t-N1AAAAQc"]
[Thu Nov 27 06:50:16.363720 2025] [:error] [pid 48930:tid 49001] [client 194.5.82.90:41733] [client 194.5.82.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSeEKBmk-RHlIhli7t-N6AAAAQQ"]
[Thu Nov 27 06:50:17.073544 2025] [:error] [pid 49025:tid 49029] [client 194.5.82.71:56347] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSeEKeZVTPh2XIK9-y_zWQAAAUE"]
[Thu Nov 27 06:50:17.579953 2025] [:error] [pid 49025:tid 49035] [client 194.5.82.167:60365] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSeEKeZVTPh2XIK9-y_zXAAAAUc"]
[Thu Nov 27 06:50:18.080592 2025] [proxy_fcgi:error] [pid 48929:tid 48991] [client 194.5.82.82:31223] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:18.389367 2025] [proxy_fcgi:error] [pid 48929:tid 48969] [client 194.5.82.82:31223] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:19.410775 2025] [:error] [pid 48929:tid 48984] [client 194.5.82.82:31223] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSeEKxsXTHq9V_4xD5TeRAAAAJE"]
[Thu Nov 27 06:50:19.646407 2025] [proxy_fcgi:error] [pid 48929:tid 48989] [client 194.5.82.94:21693] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:20.041147 2025] [:error] [pid 48929:tid 48981] [client 194.5.82.94:21693] [client 194.5.82.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSeELBsXTHq9V_4xD5TeTQAAAI4"]
[Thu Nov 27 06:50:20.738784 2025] [proxy_fcgi:error] [pid 48930:tid 49015] [client 194.5.82.67:22757] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:21.162036 2025] [proxy_fcgi:error] [pid 48930:tid 49014] [client 194.5.82.67:22757] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:21.274340 2025] [:error] [pid 48930:tid 49001] [client 194.5.82.67:22757] [client 194.5.82.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSeELRmk-RHlIhli7t-OLAAAAQQ"]
[Thu Nov 27 06:50:21.828693 2025] [:error] [pid 49025:tid 49043] [client 194.5.82.91:62675] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSeELeZVTPh2XIK9-y_zYgAAAU8"]
[Thu Nov 27 06:50:22.227449 2025] [proxy_fcgi:error] [pid 48929:tid 48968] [client 194.5.82.102:59551] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:24.242603 2025] [:error] [pid 48929:tid 48977] [client 194.5.82.102:59551] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSeEMBsXTHq9V_4xD5TebAAAAIo"]
[Thu Nov 27 06:50:25.264508 2025] [:error] [pid 49025:tid 49033] [client 194.5.82.58:52093] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSeEMeZVTPh2XIK9-y_zawAAAUU"]
[Thu Nov 27 06:50:25.531449 2025] [proxy_fcgi:error] [pid 48930:tid 49014] [client 194.5.82.78:46797] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:25.677639 2025] [proxy_fcgi:error] [pid 48930:tid 48995] [client 194.5.82.78:46797] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:25.834673 2025] [:error] [pid 48930:tid 48999] [client 194.5.82.78:46797] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSeEMRmk-RHlIhli7t-OVwAAAQI"]
[Thu Nov 27 06:50:26.187252 2025] [:error] [pid 49025:tid 49037] [client 194.5.82.71:60901] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSeEMuZVTPh2XIK9-y_zbQAAAUk"]
[Thu Nov 27 06:50:26.853887 2025] [proxy_fcgi:error] [pid 49025:tid 49032] [client 194.5.82.85:34583] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:27.189737 2025] [:error] [pid 49025:tid 49044] [client 194.5.82.85:34583] [client 194.5.82.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSeEM-ZVTPh2XIK9-y_zdAAAAVA"]
[Thu Nov 27 06:50:27.400741 2025] [proxy_fcgi:error] [pid 48929:tid 48987] [client 194.5.82.87:49419] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:27.940900 2025] [proxy_fcgi:error] [pid 48929:tid 48978] [client 194.5.82.87:49419] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:28.051184 2025] [:error] [pid 48929:tid 48969] [client 194.5.82.87:49419] [client 194.5.82.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSeENBsXTHq9V_4xD5TeewAAAII"]
[Thu Nov 27 06:50:28.703914 2025] [proxy_fcgi:error] [pid 49025:tid 49051] [client 194.5.82.77:22569] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:30.497436 2025] [:error] [pid 49025:tid 49032] [client 194.5.82.77:22569] [client 194.5.82.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSeENuZVTPh2XIK9-y_zhQAAAUQ"]
[Thu Nov 27 06:50:30.806704 2025] [:error] [pid 49025:tid 49045] [client 194.5.82.89:29523] [client 194.5.82.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSeENuZVTPh2XIK9-y_zhwAAAVE"]
[Thu Nov 27 06:50:32.906811 2025] [:error] [pid 49025:tid 49036] [client 194.5.82.69:63205] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSeEOOZVTPh2XIK9-y_zlgAAAUg"]
[Thu Nov 27 06:50:33.648480 2025] [:error] [pid 49025:tid 49050] [client 194.5.82.95:22601] [client 194.5.82.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSeEOeZVTPh2XIK9-y_znwAAAVY"]
[Thu Nov 27 06:50:33.907146 2025] [:error] [pid 48929:tid 48979] [client 194.5.82.100:44003] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSeEORsXTHq9V_4xD5TergAAAIw"]
[Thu Nov 27 06:50:34.401300 2025] [proxy_fcgi:error] [pid 49025:tid 49039] [client 194.5.82.61:40033] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:35.420873 2025] [:error] [pid 49025:tid 49031] [client 194.5.82.61:40033] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSeEO-ZVTPh2XIK9-y_zrgAAAUM"]
[Thu Nov 27 06:50:35.987786 2025] [:error] [pid 49025:tid 49033] [client 194.5.82.58:64073] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSeEO-ZVTPh2XIK9-y_ztAAAAUU"]
[Thu Nov 27 06:50:36.234023 2025] [:error] [pid 48930:tid 49018] [client 194.5.82.76:20137] [client 194.5.82.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSeEPBmk-RHlIhli7t-OiAAAARU"]
[Thu Nov 27 06:50:36.876257 2025] [proxy_fcgi:error] [pid 48929:tid 48990] [client 194.5.82.64:64069] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:37.344119 2025] [:error] [pid 48929:tid 48969] [client 194.5.82.64:64069] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSeEPRsXTHq9V_4xD5TevgAAAII"]
[Thu Nov 27 06:50:37.853852 2025] [:error] [pid 49025:tid 49042] [client 194.5.82.65:64093] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSeEPeZVTPh2XIK9-y_zuAAAAU4"]
[Thu Nov 27 06:50:38.844501 2025] [:error] [pid 48929:tid 48988] [client 194.5.82.82:57139] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSeEPhsXTHq9V_4xD5TexAAAAJU"]
[Thu Nov 27 06:50:39.348769 2025] [proxy_fcgi:error] [pid 48928:tid 48942] [client 194.5.82.56:26037] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:39.494124 2025] [:error] [pid 48928:tid 48941] [client 194.5.82.56:26037] [client 194.5.82.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSeEP3zpQoF8PVTquqYqOAAAAEI"]
[Thu Nov 27 06:50:40.020684 2025] [:error] [pid 49025:tid 49033] [client 194.5.82.78:60475] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSeEQOZVTPh2XIK9-y_zwAAAAUU"]
[Thu Nov 27 06:50:40.447153 2025] [:error] [pid 49025:tid 49034] [client 194.5.82.101:51565] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSeEQOZVTPh2XIK9-y_zwwAAAUY"]
[Thu Nov 27 06:50:40.935738 2025] [:error] [pid 48928:tid 48947] [client 194.5.82.62:54499] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSeEQHzpQoF8PVTquqYqOwAAAEg"]
[Thu Nov 27 06:50:41.254744 2025] [:error] [pid 48930:tid 49010] [client 194.5.82.96:29231] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSeEQRmk-RHlIhli7t-OjwAAAQ0"]
[Thu Nov 27 06:50:41.647448 2025] [:error] [pid 48930:tid 49008] [client 194.5.82.86:22585] [client 194.5.82.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSeEQRmk-RHlIhli7t-OkAAAAQs"]
[Thu Nov 27 06:50:42.833963 2025] [:error] [pid 49025:tid 49043] [client 194.5.82.101:49581] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSeEQuZVTPh2XIK9-y_z2QAAAU8"]
[Thu Nov 27 06:50:43.644318 2025] [:error] [pid 48930:tid 49015] [client 194.5.82.103:51499] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSeEQxmk-RHlIhli7t-OmwAAARI"]
[Thu Nov 27 06:50:44.121263 2025] [proxy_fcgi:error] [pid 48930:tid 49020] [client 194.5.82.82:31671] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:44.250113 2025] [proxy_fcgi:error] [pid 48930:tid 49013] [client 194.5.82.82:31671] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:44.417641 2025] [:error] [pid 48930:tid 49007] [client 194.5.82.82:31671] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSeERBmk-RHlIhli7t-OnwAAAQo"]
[Thu Nov 27 06:50:45.157434 2025] [:error] [pid 48929:tid 48985] [client 194.5.82.78:24727] [client 194.5.82.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSeERRsXTHq9V_4xD5Te1wAAAJI"]
[Thu Nov 27 06:50:46.985274 2025] [proxy_fcgi:error] [pid 48929:tid 48973] [client 194.5.82.63:24953] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:50:48.138724 2025] [:error] [pid 48929:tid 48967] [client 194.5.82.63:24953] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSeESBsXTHq9V_4xD5Te6QAAAIA"]
[Thu Nov 27 08:01:13.213438 2025] [:error] [pid 62796:tid 62819] [client 187.19.156.213:16448] [client 187.19.156.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.156.213, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aSeUySyxnLVc0v3tqdUoAgAAAZU"]
[Thu Nov 27 08:01:13.224898 2025] [proxy_fcgi:error] [pid 62796:tid 62819] [client 187.19.156.213:16448] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 16:32:14.185773 2026] [autoindex:error] [pid 21317:tid 21361] [client 139.59.32.166:61981] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 19:36:59.916108 2026] [autoindex:error] [pid 14508:tid 14589] [client 139.59.32.166:36194] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 22:44:52.557329 2026] [:error] [pid 3965:tid 3970] [client 49.47.128.26:58792] [client 49.47.128.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abAuZJN2nrVwtq9b0rbcIAAAAMM"]
[Tue Mar 10 22:44:52.568881 2026] [proxy_fcgi:error] [pid 3965:tid 3970] [client 49.47.128.26:58792] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 22:50:11.640524 2026] [:error] [pid 3965:tid 3988] [client 2.51.25.49:34806] [client 2.51.25.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abAvo5N2nrVwtq9b0rbfMAAAANU"]
[Tue Mar 10 22:50:11.652135 2026] [proxy_fcgi:error] [pid 3965:tid 3988] [client 2.51.25.49:34806] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 05:41:28.767909 2026] [:error] [pid 6222:tid 6231] [client 117.102.63.48:59690] [client 117.102.63.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abCQCHs7MIv-0SYBFu2MZAAAAMc"]
[Wed Mar 11 05:41:28.781085 2026] [proxy_fcgi:error] [pid 6222:tid 6231] [client 117.102.63.48:59690] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 05:45:15.401396 2026] [:error] [pid 6119:tid 6200] [client 124.120.218.112:34548] [client 124.120.218.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abCQ629mEGP4iomVkSY0qQAAAIk"]
[Wed Mar 11 05:45:15.415323 2026] [proxy_fcgi:error] [pid 6119:tid 6200] [client 124.120.218.112:34548] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:48:35.908009 2026] [:error] [pid 11751:tid 11755] [client 209.87.169.80:40362] [client 209.87.169.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abCt03KeU7OoUEz26eXGPgAAAUI"]
[Wed Mar 11 07:48:35.938334 2026] [proxy_fcgi:error] [pid 11751:tid 11755] [client 209.87.169.80:40362] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 11:40:57.715807 2026] [:error] [pid 54045:tid 54052] [client 165.245.186.120:56820] [client 165.245.186.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "abDkSSRcKzQ1f-N8TgQq0AAAAMU"]
[Wed Mar 11 15:01:39.957853 2026] [:error] [pid 53955:tid 54035] [client 38.188.238.31:45098] [client 38.188.238.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abETU9P1Uf6qBkbxZg_CFAAAAJA"]
[Wed Mar 11 15:01:39.970055 2026] [proxy_fcgi:error] [pid 53955:tid 54035] [client 38.188.238.31:45098] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 04:02:15.338686 2026] [:error] [pid 63147:tid 63172] [client 172.98.33.17:42888] [client 172.98.33.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abHKR2NUKt1CWUFbzBdteQAAAAo"]
[Thu Mar 12 04:59:13.966737 2026] [:error] [pid 63149:tid 63225] [client 172.98.33.14:43358] [client 172.98.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abHXoXo4UdkUSJRpS0wUKQAAAIg"]
[Thu Mar 12 11:12:04.490715 2026] [:error] [pid 51455:tid 51466] [client 180.242.7.132:50874] [client 180.242.7.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.7.132, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abIvBJE0YyNxdg6PL_BK4QAAAAY"]
[Thu Mar 12 11:12:04.503046 2026] [proxy_fcgi:error] [pid 51455:tid 51466] [client 180.242.7.132:50874] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 14:03:57.599838 2026] [:error] [pid 22063:tid 22075] [client 136.144.33.45:58461] [client 136.144.33.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.45, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abJXTa0RUhS-MJyHWLTQbwAAAgo"]
[Thu Mar 12 14:03:57.612816 2026] [proxy_fcgi:error] [pid 22063:tid 22075] [client 136.144.33.45:58461] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 15:37:07.990201 2026] [:error] [pid 51540:tid 51560] [client 34.28.249.34:51066] [client 34.28.249.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.249.34, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abJtI2OFFjotMIN2UD3FlwAAANI"]
[Thu Mar 12 15:37:08.001986 2026] [proxy_fcgi:error] [pid 51540:tid 51560] [client 34.28.249.34:51066] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 15:37:09.084052 2026] [:error] [pid 51540:tid 51557] [client 34.28.249.34:51066] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "abJtJWOFFjotMIN2UD3FpAAAAM8"]
[Thu Mar 12 15:37:09.529169 2026] [:error] [pid 22063:tid 22082] [client 34.28.249.34:50618] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "abJtJa0RUhS-MJyHWLTujQAAAhE"]
[Thu Mar 12 15:37:09.951004 2026] [:error] [pid 51457:tid 51520] [client 34.28.249.34:57741] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "abJtJSjknw2FvT4H3Dai4wAAAIY"]
[Thu Mar 12 15:37:10.356901 2026] [:error] [pid 22063:tid 22068] [client 34.28.249.34:55569] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "abJtJq0RUhS-MJyHWLTukAAAAgM"]
[Thu Mar 12 15:37:10.760268 2026] [:error] [pid 11953:tid 11958] [client 34.28.249.34:56640] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abJtJpudzqsnq3bvtDYQ9AAAAUM"]
[Thu Mar 12 15:37:11.216198 2026] [:error] [pid 11985:tid 12007] [client 34.28.249.34:59105] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abJtJ3cAcNujsOssVDcBRwAAAZA"]
[Thu Mar 12 15:37:11.671301 2026] [:error] [pid 51456:tid 51487] [client 34.28.249.34:59638] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abJtJxXu8LzVixNGr0tRyQAAAEA"]
[Thu Mar 12 15:37:12.070971 2026] [:error] [pid 51455:tid 51482] [client 34.28.249.34:53425] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abJtKJE0YyNxdg6PL_DtZwAAABY"]
[Thu Mar 12 15:37:12.502310 2026] [:error] [pid 51455:tid 51480] [client 34.28.249.34:55586] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abJtKJE0YyNxdg6PL_DtaQAAABQ"]
[Thu Mar 12 15:37:12.951215 2026] [:error] [pid 22063:tid 22074] [client 34.28.249.34:52699] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abJtKK0RUhS-MJyHWLTukgAAAgk"]
[Thu Mar 12 15:37:13.416128 2026] [:error] [pid 22063:tid 22084] [client 34.28.249.34:55468] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abJtKa0RUhS-MJyHWLTulAAAAhM"]
[Thu Mar 12 15:37:13.865165 2026] [:error] [pid 8249:tid 8268] [client 34.28.249.34:55227] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abJtKSK5dL3-8Jdf0M26ggAAARE"]
[Thu Mar 12 15:37:14.280575 2026] [:error] [pid 51540:tid 51565] [client 34.28.249.34:55488] [client 34.28.249.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abJtKmOFFjotMIN2UD3FqAAAANc"]
[Thu Mar 12 18:25:45.226690 2026] [:error] [pid 11986:tid 12027] [client 103.65.236.149:54342] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "abKUqTKqY2w-DVCrxTDsagAAAck"]
[Thu Mar 12 18:25:45.448100 2026] [:error] [pid 11986:tid 12035] [client 103.65.236.149:54358] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUqTKqY2w-DVCrxTDsbgAAAdE"]
[Thu Mar 12 18:51:43.864247 2026] [:error] [pid 51455:tid 51481] [client 106.219.65.210:12159] [client 106.219.65.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.65.210, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abKav5E0YyNxdg6PL_A31AAAABU"]
[Thu Mar 12 18:51:43.876452 2026] [proxy_fcgi:error] [pid 51455:tid 51481] [client 106.219.65.210:12159] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:47.942634 2026] [proxy_fcgi:error] [pid 8249:tid 8272] [client 20.151.7.111:58982] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:48.153484 2026] [proxy_fcgi:error] [pid 8249:tid 8259] [client 20.151.7.111:58982] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:48.596674 2026] [proxy_fcgi:error] [pid 8249:tid 8265] [client 20.151.7.111:58982] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:48.807643 2026] [proxy_fcgi:error] [pid 8249:tid 8254] [client 20.151.7.111:58982] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:49.397068 2026] [proxy_fcgi:error] [pid 8249:tid 8270] [client 20.151.7.111:58982] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:49.668035 2026] [proxy_fcgi:error] [pid 8249:tid 8258] [client 20.151.7.111:58982] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:49.880991 2026] [proxy_fcgi:error] [pid 8249:tid 8263] [client 20.151.7.111:58982] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 19:11:50.298132 2026] [:error] [pid 8249:tid 8260] [client 20.151.7.111:58982] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKfdiK5dL3-8Jdf0M0jCAAAAQk"]
[Thu Mar 12 19:11:51.923689 2026] [:error] [pid 8249:tid 8265] [client 20.151.7.111:58957] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKfdyK5dL3-8Jdf0M0jDgAAAQ4"]
[Thu Mar 12 19:11:53.641519 2026] [:error] [pid 8249:tid 8268] [client 20.151.7.111:58940] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKfeSK5dL3-8Jdf0M0jEQAAARE"]
[Thu Mar 12 19:12:00.756841 2026] [:error] [pid 11986:tid 12035] [client 20.151.7.111:58885] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKfgDKqY2w-DVCrxTD1CQAAAdE"]
[Thu Mar 12 22:37:47.442025 2026] [:error] [pid 11953:tid 11962] [client 27.34.68.3:2430] [client 27.34.68.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.3, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abLPu5udzqsnq3bvtDZrswAAAUc"]
[Thu Mar 12 22:37:47.455910 2026] [proxy_fcgi:error] [pid 11953:tid 11962] [client 27.34.68.3:2430] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 22:38:35.199756 2026] [:error] [pid 11953:tid 11956] [client 103.89.57.106:58009] [client 103.89.57.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.89.57.106, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abLP65udzqsnq3bvtDZsSwAAAUE"]
[Thu Mar 12 22:38:35.214605 2026] [proxy_fcgi:error] [pid 11953:tid 11956] [client 103.89.57.106:58009] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 22:40:23.093249 2026] [:error] [pid 20530:tid 20606] [client 27.34.64.149:28287] [client 27.34.64.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.64.149, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abLQVwkNGxMzPO-s9qcV3AAAA5E"]
[Thu Mar 12 22:40:23.105648 2026] [proxy_fcgi:error] [pid 20530:tid 20606] [client 27.34.64.149:28287] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 23:41:35.660545 2026] [:error] [pid 20529:tid 20586] [client 104.28.214.113:18581] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "abLer24BhuYHZriajQ-L4wAAA1A"]
[Fri Mar 13 00:45:50.897369 2026] [proxy_fcgi:error] [pid 56003:tid 56017] [client 13.70.40.215:21622] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:45:51.022299 2026] [proxy_fcgi:error] [pid 56003:tid 56019] [client 13.70.40.215:21622] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:45:51.146349 2026] [proxy_fcgi:error] [pid 56003:tid 56018] [client 13.70.40.215:21622] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:45:51.272114 2026] [proxy_fcgi:error] [pid 56003:tid 56020] [client 13.70.40.215:21622] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:45:51.401815 2026] [proxy_fcgi:error] [pid 56003:tid 56016] [client 13.70.40.215:21622] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:45:51.526168 2026] [proxy_fcgi:error] [pid 56003:tid 56015] [client 13.70.40.215:21622] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 00:45:51.646809 2026] [:error] [pid 56003:tid 56010] [client 13.70.40.215:21622] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "abLtvxQtM0oeMdFWe6VQOgAAAMU"]
[Fri Mar 13 00:45:52.128507 2026] [:error] [pid 47893:tid 47998] [client 13.70.40.215:26109] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "abLtwAYSdu6aqxO_YucXwgAAAJc"]
[Fri Mar 13 00:45:52.609278 2026] [:error] [pid 48029:tid 48055] [client 13.70.40.215:28474] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "abLtwG7cFKMmtdGhPH-xxgAAABg"]
[Fri Mar 13 00:45:53.092859 2026] [:error] [pid 47892:tid 47960] [client 13.70.40.215:6244] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "abLtwTNdN5Yd7YcKfyX7hQAAAEw"]
[Fri Mar 13 04:01:58.594770 2026] [:error] [pid 61929:tid 62026] [client 193.36.225.87:45315] [client 193.36.225.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.87, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abMbtjGGsow2jgUjLtwpTgAAAJY"]
[Fri Mar 13 04:01:58.605776 2026] [proxy_fcgi:error] [pid 61929:tid 62026] [client 193.36.225.87:45315] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:24.717311 2026] [proxy_fcgi:error] [pid 62036:tid 62048] [client 4.205.39.42:49537] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:24.931515 2026] [proxy_fcgi:error] [pid 62036:tid 62053] [client 4.205.39.42:49537] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:25.442368 2026] [proxy_fcgi:error] [pid 62036:tid 62058] [client 4.205.39.42:49537] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:25.690988 2026] [proxy_fcgi:error] [pid 62036:tid 62044] [client 4.205.39.42:49537] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:26.177219 2026] [proxy_fcgi:error] [pid 62036:tid 62056] [client 4.205.39.42:49537] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:26.750802 2026] [proxy_fcgi:error] [pid 62036:tid 62054] [client 4.205.39.42:49537] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:26.966371 2026] [proxy_fcgi:error] [pid 62036:tid 62050] [client 4.205.39.42:49537] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:00:27.383535 2026] [:error] [pid 62036:tid 62052] [client 4.205.39.42:49537] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMpa7ce6g9kILuh_R7UOQAAAMk"]
[Fri Mar 13 05:00:31.368561 2026] [:error] [pid 62036:tid 62046] [client 4.205.39.42:52833] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMpb7ce6g9kILuh_R7UVAAAAMM"]
[Fri Mar 13 05:00:41.846335 2026] [:error] [pid 62036:tid 62048] [client 4.205.39.42:55077] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMpebce6g9kILuh_R7UpQAAAMU"]
[Fri Mar 13 08:05:46.439122 2026] [:error] [pid 55077:tid 55099] [client 2.69.155.78:52449] [client 2.69.155.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.69.155.78, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abNU2t9Ul5ym4M-PlQIhEAAAAVQ"]
[Fri Mar 13 08:05:46.454545 2026] [proxy_fcgi:error] [pid 55077:tid 55099] [client 2.69.155.78:52449] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 08:13:35.208411 2026] [:error] [pid 62036:tid 62051] [client 195.178.110.159:34144] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "abNWr7ce6g9kILuh_R4pmwAAAMg"]
[Fri Mar 13 09:03:50.941395 2026] [:error] [pid 62036:tid 62059] [client 195.178.110.159:60954] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "abNidrce6g9kILuh_R48agAAANA"]
[Fri Mar 13 09:50:27.628300 2026] [:error] [pid 61928:tid 61977] [client 209.87.169.145:38793] [client 209.87.169.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.145, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abNtYwod66AHekJJZipPqQAAAEA"]
[Fri Mar 13 09:50:27.655602 2026] [proxy_fcgi:error] [pid 61928:tid 61977] [client 209.87.169.145:38793] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 22:38:17.873297 2026] [:error] [pid 60436:tid 60489] [client 189.136.148.174:23915] [client 189.136.148.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.136.148.174, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abQhWYI3PEddCArY1AanWAAAAxQ"]
[Fri Mar 13 22:38:17.885092 2026] [proxy_fcgi:error] [pid 60436:tid 60489] [client 189.136.148.174:23915] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 23:50:51.615881 2026] [:error] [pid 60497:tid 60538] [client 20.151.4.179:12016] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQyWxjNYgapWlkb4ljX1QAAA4c"]
[Fri Mar 13 23:50:52.443130 2026] [:error] [pid 60496:tid 60518] [client 20.151.4.179:11994] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQyXAb67oGiJ3jaL8wqzQAAA04"]
[Fri Mar 13 23:50:53.272493 2026] [:error] [pid 60496:tid 60514] [client 20.151.4.179:12000] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQyXQb67oGiJ3jaL8wq5gAAA0o"]
[Fri Mar 13 23:50:54.105217 2026] [:error] [pid 60436:tid 60476] [client 20.151.4.179:11532] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQyXoI3PEddCArY1Aa1qgAAAwc"]
[Sat Mar 14 05:14:43.042082 2026] [:error] [pid 3912:tid 3943] [client 185.137.164.12:54971] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "abR-Q8XFZBK-jpdCvTHEIwAAABA"]
[Sat Mar 14 05:14:43.803482 2026] [:error] [pid 35801:tid 35813] [client 185.137.164.13:31749] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "abR-Q28tVFelXGsqbU-hxQAAAQk"]
[Sat Mar 14 06:34:07.970698 2026] [proxy_fcgi:error] [pid 3912:tid 3928] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:08.220874 2026] [proxy_fcgi:error] [pid 3912:tid 3935] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:08.466739 2026] [proxy_fcgi:error] [pid 3912:tid 3937] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:08.709954 2026] [proxy_fcgi:error] [pid 3912:tid 3930] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:08.962408 2026] [proxy_fcgi:error] [pid 3912:tid 3942] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:09.220659 2026] [proxy_fcgi:error] [pid 3912:tid 3931] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:09.466791 2026] [proxy_fcgi:error] [pid 3912:tid 3939] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:09.709928 2026] [proxy_fcgi:error] [pid 3912:tid 3949] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:09.952527 2026] [proxy_fcgi:error] [pid 3912:tid 3941] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:10.213464 2026] [proxy_fcgi:error] [pid 3912:tid 3951] [client 68.221.131.20:41263] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:34:10.453380 2026] [:error] [pid 3912:tid 3932] [client 68.221.131.20:41263] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "abSQ4sXFZBK-jpdCvTHOkwAAAAU"]
[Sat Mar 14 06:34:12.249548 2026] [:error] [pid 57226:tid 57242] [client 68.221.131.20:25983] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "abSQ5GxFlXQvNewjeI8srgAAAUw"]
[Sat Mar 14 06:34:13.487852 2026] [:error] [pid 3913:tid 3962] [client 68.221.131.20:25934] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "abSQ5R9qvQd4GQHUp68OUgAAAEU"]
[Sat Mar 14 06:34:16.060225 2026] [:error] [pid 4018:tid 4048] [client 68.221.131.20:27546] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "abSQ6AEk1fxdMMkDDaLerQAAANc"]
[Sat Mar 14 06:34:16.887088 2026] [:error] [pid 3912:tid 3937] [client 68.221.131.20:30009] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "abSQ6MXFZBK-jpdCvTHOnAAAAAo"]
[Sat Mar 14 06:34:19.016762 2026] [:error] [pid 57226:tid 57234] [client 68.221.131.20:29307] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "abSQ62xFlXQvNewjeI8ssgAAAUQ"]
[Sat Mar 14 06:34:20.747974 2026] [:error] [pid 57226:tid 57247] [client 68.221.131.20:27530] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "abSQ7GxFlXQvNewjeI8stAAAAVE"]
[Sat Mar 14 06:34:22.038407 2026] [:error] [pid 3913:tid 3961] [client 68.221.131.20:27572] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "abSQ7h9qvQd4GQHUp68OYgAAAEQ"]
[Sat Mar 14 06:34:26.727886 2026] [:error] [pid 3913:tid 3976] [client 68.221.131.20:26311] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "abSQ8h9qvQd4GQHUp68OcAAAAFM"]
[Sat Mar 14 06:34:27.941175 2026] [:error] [pid 3913:tid 3980] [client 68.221.131.20:26357] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "abSQ8x9qvQd4GQHUp68OdAAAAFc"]
[Sat Mar 14 06:34:32.001813 2026] [:error] [pid 57226:tid 57243] [client 68.221.131.20:27531] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "abSQ-GxFlXQvNewjeI8sygAAAU0"]
[Sat Mar 14 06:34:33.723811 2026] [:error] [pid 3913:tid 3979] [client 68.221.131.20:36385] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "abSQ-R9qvQd4GQHUp68OfAAAAFY"]
[Sat Mar 14 06:34:34.832176 2026] [:error] [pid 3913:tid 3974] [client 68.221.131.20:36361] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "abSQ-h9qvQd4GQHUp68OfwAAAFE"]
[Sat Mar 14 06:34:35.797816 2026] [:error] [pid 3913:tid 3962] [client 68.221.131.20:26361] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "abSQ-x9qvQd4GQHUp68OgwAAAEU"]
[Sat Mar 14 06:34:37.457926 2026] [:error] [pid 3913:tid 3961] [client 68.221.131.20:29996] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "abSQ_R9qvQd4GQHUp68OhwAAAEQ"]
[Sat Mar 14 06:34:38.435173 2026] [:error] [pid 57226:tid 57231] [client 68.221.131.20:25515] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "abSQ_mxFlXQvNewjeI8s0wAAAUE"]
[Sat Mar 14 06:34:48.600253 2026] [:error] [pid 4018:tid 4033] [client 68.221.131.20:29953] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "abSRCAEk1fxdMMkDDaLeygAAAMg"]
[Sat Mar 14 06:34:49.699099 2026] [:error] [pid 4018:tid 4047] [client 68.221.131.20:40406] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "abSRCQEk1fxdMMkDDaLezAAAANY"]
[Sat Mar 14 06:34:51.429908 2026] [:error] [pid 3913:tid 3968] [client 68.221.131.20:29974] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "abSRCx9qvQd4GQHUp68OngAAAEs"]
[Sat Mar 14 06:34:53.432864 2026] [:error] [pid 57226:tid 57249] [client 68.221.131.20:25480] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "abSRDWxFlXQvNewjeI8s5QAAAVM"]
[Sat Mar 14 06:34:58.948017 2026] [:error] [pid 57226:tid 57233] [client 68.221.131.20:31095] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "abSREmxFlXQvNewjeI8s9QAAAUM"]
[Sat Mar 14 06:35:01.336599 2026] [:error] [pid 3913:tid 3963] [client 68.221.131.20:27560] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "abSRFR9qvQd4GQHUp68OsQAAAEY"]
[Sat Mar 14 06:35:04.231285 2026] [:error] [pid 3913:tid 3966] [client 68.221.131.20:40386] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "abSRGB9qvQd4GQHUp68OtQAAAEk"]
[Sat Mar 14 06:35:06.198670 2026] [:error] [pid 3912:tid 3933] [client 68.221.131.20:29287] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "abSRGsXFZBK-jpdCvTHOpwAAAAY"]
[Sat Mar 14 06:35:07.716316 2026] [:error] [pid 3913:tid 3980] [client 68.221.131.20:32514] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test.php"] [unique_id "abSRGx9qvQd4GQHUp68OvQAAAFc"]
[Sat Mar 14 06:35:08.581414 2026] [:error] [pid 57226:tid 57245] [client 68.221.131.20:32534] [client 68.221.131.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test.php"] [unique_id "abSRHGxFlXQvNewjeI8s_AAAAU8"]
[Sat Mar 14 06:35:11.633813 2026] [proxy_fcgi:error] [pid 35801:tid 35827] [client 68.221.131.20:36363] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:35:12.169636 2026] [proxy_fcgi:error] [pid 35801:tid 35825] [client 68.221.131.20:36363] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:35:12.414456 2026] [proxy_fcgi:error] [pid 35801:tid 35805] [client 68.221.131.20:36363] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 06:35:12.660685 2026] [proxy_fcgi:error] [pid 35801:tid 35820] [client 68.221.131.20:36363] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 22:52:48.454562 2026] [:error] [pid 58680:tid 58703] [client 223.181.28.47:8335] [client 223.181.28.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.28.47, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abV2QJesvz6ml-XzsmVcaAAAAVU"]
[Sat Mar 14 22:52:48.467040 2026] [proxy_fcgi:error] [pid 58680:tid 58703] [client 223.181.28.47:8335] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 22:55:05.837559 2026] [:error] [pid 13151:tid 13172] [client 103.84.56.36:23797] [client 103.84.56.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.84.56.36, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abV2ydbXrXQxFzrsw42BGgAAAJM"]
[Sat Mar 14 22:55:05.849801 2026] [proxy_fcgi:error] [pid 13151:tid 13172] [client 103.84.56.36:23797] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:08:31.266533 2026] [:error] [pid 19671:tid 19978] [client 152.233.20.55:13539] [client 152.233.20.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "abWWD1u8gYYbnWVq3mUVzwAAAQ0"]
[Sun Mar 15 04:48:06.177625 2026] [:error] [pid 38540:tid 38609] [client 72.143.217.18:28994] [client 72.143.217.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.143.217.18, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abXJhl8bnHsJ1dE90bLeqwAAAFc"]
[Sun Mar 15 04:48:06.188735 2026] [proxy_fcgi:error] [pid 38540:tid 38609] [client 72.143.217.18:28994] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 04:48:06.723773 2026] [:error] [pid 38541:tid 38624] [client 191.177.191.213:3932] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abXJhnuOpex8jIO0jt7HuwAAAIs"]
[Sun Mar 15 04:48:06.728985 2026] [proxy_fcgi:error] [pid 38541:tid 38624] [client 191.177.191.213:3932] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:25.175037 2026] [proxy_fcgi:error] [pid 38540:tid 38596] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:25.320997 2026] [proxy_fcgi:error] [pid 38540:tid 38609] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:25.467520 2026] [proxy_fcgi:error] [pid 38540:tid 38610] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:25.636123 2026] [proxy_fcgi:error] [pid 38540:tid 38604] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:25.778839 2026] [proxy_fcgi:error] [pid 38540:tid 38595] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:25.922967 2026] [proxy_fcgi:error] [pid 38540:tid 38592] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:26.067507 2026] [proxy_fcgi:error] [pid 38540:tid 38594] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:26.210787 2026] [proxy_fcgi:error] [pid 38540:tid 38603] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:26.355012 2026] [proxy_fcgi:error] [pid 38540:tid 38598] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:26.499645 2026] [proxy_fcgi:error] [pid 38540:tid 38590] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:26.657831 2026] [proxy_fcgi:error] [pid 38540:tid 38597] [client 20.219.138.187:10394] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 05:27:26.798331 2026] [:error] [pid 38540:tid 38586] [client 20.219.138.187:10394] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "abXSvl8bnHsJ1dE90bLmbgAAAEA"]
[Sun Mar 15 05:27:27.378575 2026] [:error] [pid 38541:tid 38616] [client 20.219.138.187:29077] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "abXSv3uOpex8jIO0jt7T_wAAAIM"]
[Sun Mar 15 05:27:27.939904 2026] [:error] [pid 38536:tid 38566] [client 20.219.138.187:15766] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "abXSv_pTEqkVJ0rBEWuAkgAAAA0"]
[Sun Mar 15 05:27:28.588407 2026] [:error] [pid 9995:tid 10015] [client 20.219.138.187:21708] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "abXSwAa8xkcaSmgTbwjhugAAARE"]
[Sun Mar 15 08:08:45.833321 2026] [:error] [pid 38540:tid 38605] [client 34.13.229.134:54758] [client 34.13.229.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "abX4jV8bnHsJ1dE90bIBfgAAAFM"]
[Sun Mar 15 21:43:15.643631 2026] [:error] [pid 38540:tid 38593] [client 98.192.152.136:55701] [client 98.192.152.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.192.152.136, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aba3c18bnHsJ1dE90bJ5jQAAAEc"]
[Sun Mar 15 21:43:15.657411 2026] [proxy_fcgi:error] [pid 38540:tid 38593] [client 98.192.152.136:55701] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 00:06:05.095012 2026] [:error] [pid 38645:tid 38659] [client 104.28.214.113:9899] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "abbY7RFPHtsDUuVrWDYNJwAAAMw"]
[Mon Mar 16 00:06:05.737559 2026] [:error] [pid 45974:tid 45977] [client 104.28.214.113:9904] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/style.php"] [unique_id "abbY7RWn4R6u72Segejt2QAAAgE"]
[Mon Mar 16 07:02:26.625878 2026] [:error] [pid 62429:tid 62510] [client 203.188.168.28:21045] [client 203.188.168.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.28, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abc6glewIPukhLCowEHc8AAAAI4"]
[Mon Mar 16 07:02:26.650302 2026] [proxy_fcgi:error] [pid 62429:tid 62510] [client 203.188.168.28:21045] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 08:28:16.561345 2026] [:error] [pid 62427:tid 62465] [client 103.65.237.124:51484] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "abdOoMUPP8fzo6XzJCUpIgAAABg"]
[Mon Mar 16 08:28:16.830958 2026] [:error] [pid 12822:tid 12844] [client 103.65.237.124:51518] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abdOoIG9Ft4WPo7r7sRo7wAAAck"]
[Mon Mar 16 11:05:11.472823 2026] [:error] [pid 62119:tid 62144] [client 173.239.236.158:62563] [client 173.239.236.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.158, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzZz-Co-Fir-PyAwfR9gAAANY"]
[Mon Mar 16 11:05:11.484284 2026] [proxy_fcgi:error] [pid 62119:tid 62144] [client 173.239.236.158:62563] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 11:05:12.478992 2026] [:error] [pid 62119:tid 62134] [client 173.239.236.158:62563] [client 173.239.236.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abdzaD-Co-Fir-PyAwfSHAAAAMw"]
[Mon Mar 16 13:24:53.412562 2026] [:error] [pid 62025:tid 62060] [client 98.97.49.55:21994] [client 98.97.49.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.97.49.55, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abeUJeimBfLmKh7zLXNNPgAAAEE"]
[Mon Mar 16 13:24:53.425402 2026] [proxy_fcgi:error] [pid 62025:tid 62060] [client 98.97.49.55:21994] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 15:08:40.637729 2026] [:error] [pid 62025:tid 62078] [client 162.158.95.227:12052] [client 162.158.95.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "abeseOimBfLmKh7zLXNsvgAAAFM"]
[Mon Mar 16 15:08:40.639848 2026] [:error] [pid 62119:tid 62126] [client 162.158.95.228:14004] [client 162.158.95.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "abeseD-Co-Fir-PyAwfjzQAAAMQ"]
[Mon Mar 16 15:08:40.666856 2026] [:error] [pid 9354:tid 9379] [client 162.158.95.228:14010] [client 162.158.95.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "abeseHBF0M4d8CifbJ5XMwAAAdA"]
[Mon Mar 16 15:22:12.341134 2026] [:error] [pid 9354:tid 9371] [client 180.73.184.47:65124] [client 180.73.184.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.73.184.47, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abevpHBF0M4d8CifbJ5Y3wAAAcg"]
[Mon Mar 16 15:22:12.360353 2026] [proxy_fcgi:error] [pid 9354:tid 9371] [client 180.73.184.47:65124] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:10.963975 2026] [proxy_fcgi:error] [pid 35838:tid 35863] [client 20.120.91.203:28722] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:11.186881 2026] [proxy_fcgi:error] [pid 35838:tid 35852] [client 20.120.91.203:28722] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:11.798936 2026] [proxy_fcgi:error] [pid 35838:tid 35857] [client 20.120.91.203:28722] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:12.019751 2026] [proxy_fcgi:error] [pid 35838:tid 35864] [client 20.120.91.203:28722] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:12.463369 2026] [proxy_fcgi:error] [pid 35838:tid 35847] [client 20.120.91.203:28722] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:12.714182 2026] [proxy_fcgi:error] [pid 35838:tid 35859] [client 20.120.91.203:28722] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:12.938655 2026] [proxy_fcgi:error] [pid 35838:tid 35858] [client 20.120.91.203:28722] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 18:30:13.384340 2026] [:error] [pid 35838:tid 35850] [client 20.120.91.203:28722] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abfbtRroTe-x3JLtmo6AQQAAAAg"]
[Mon Mar 16 18:30:18.730825 2026] [:error] [pid 39154:tid 39174] [client 20.120.91.203:8164] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abfbuhgq1_qjm7J1Lqv-RwAAAVE"]
[Mon Mar 16 18:30:25.418161 2026] [:error] [pid 35840:tid 35910] [client 20.120.91.203:22816] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abfbwUJFzfEsmtPx-M356AAAAI0"]
[Mon Mar 16 18:30:27.512678 2026] [:error] [pid 39154:tid 39181] [client 20.120.91.203:20098] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abfbwxgq1_qjm7J1Lqv-VQAAAVg"]
[Mon Mar 16 19:54:33.201162 2026] [:error] [pid 36198:tid 36203] [client 64.89.163.113:63968] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abfveelL1GNckmsdWlMzwwAAAQI"]
[Mon Mar 16 19:54:33.684770 2026] [:error] [pid 39154:tid 39177] [client 64.89.163.113:65503] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abfveRgq1_qjm7J1LqsiPgAAAVQ"]
[Mon Mar 16 19:54:34.194317 2026] [:error] [pid 1871:tid 1881] [client 64.89.163.113:63821] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6agAAAYg"]
[Mon Mar 16 19:54:34.694673 2026] [:error] [pid 35838:tid 35857] [client 64.89.163.113:51451] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abfvehroTe-x3JLtmo6WMQAAAA8"]
[Mon Mar 16 19:54:35.333083 2026] [:error] [pid 35839:tid 35871] [client 64.89.163.113:64267] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abfve6xyv6h8-aZrncsI9QAAAEE"]
[Mon Mar 16 21:42:22.891478 2026] [:error] [pid 35929:tid 35948] [client 173.239.224.115:59847] [client 173.239.224.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.115, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abgIvtW47dGpmA63hwSiowAAANE"]
[Mon Mar 16 21:42:22.900954 2026] [proxy_fcgi:error] [pid 35929:tid 35948] [client 173.239.224.115:59847] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:15.559595 2026] [proxy_fcgi:error] [pid 45404:tid 45522] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:15.778461 2026] [proxy_fcgi:error] [pid 45404:tid 45520] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:15.997139 2026] [proxy_fcgi:error] [pid 45404:tid 45536] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:16.213947 2026] [proxy_fcgi:error] [pid 45404:tid 45518] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:16.431490 2026] [proxy_fcgi:error] [pid 45404:tid 45541] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:16.787526 2026] [proxy_fcgi:error] [pid 45404:tid 45517] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:17.227486 2026] [proxy_fcgi:error] [pid 45404:tid 45532] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:17.447683 2026] [proxy_fcgi:error] [pid 45404:tid 45537] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:17.723092 2026] [proxy_fcgi:error] [pid 45404:tid 45531] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:17.944699 2026] [proxy_fcgi:error] [pid 45404:tid 45530] [client 20.120.91.203:7914] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 01:43:18.157565 2026] [:error] [pid 45404:tid 45523] [client 20.120.91.203:7914] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "abhBNmcrPifELUd8UWAKEgAAAAY"]
[Tue Mar 17 01:43:25.505929 2026] [:error] [pid 45404:tid 45533] [client 20.120.91.203:8174] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "abhBPWcrPifELUd8UWAKFwAAABA"]
[Tue Mar 17 01:43:26.997810 2026] [:error] [pid 45652:tid 45662] [client 20.120.91.203:62693] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "abhBPveWZ4w4tc07R6lN7wAAAMc"]
[Tue Mar 17 01:43:28.794122 2026] [:error] [pid 45424:tid 45546] [client 20.120.91.203:8147] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "abhBQIBy2Qv_YY3oWK68NwAAAEI"]
[Tue Mar 17 03:38:38.029347 2026] [:error] [pid 46020:tid 46045] [client 88.176.24.19:17410] [client 88.176.24.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.176.24.19, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abhcPn-nCcd9BdzGdLedSgAAANc"]
[Tue Mar 17 03:38:38.041831 2026] [proxy_fcgi:error] [pid 46020:tid 46045] [client 88.176.24.19:17410] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 03:40:32.052972 2026] [:error] [pid 46020:tid 46023] [client 171.48.98.113:61617] [client 171.48.98.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.98.113, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abhcsH-nCcd9BdzGdLeeiAAAAME"]
[Tue Mar 17 03:40:32.070456 2026] [proxy_fcgi:error] [pid 46020:tid 46023] [client 171.48.98.113:61617] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 05:50:55.801968 2026] [:error] [pid 45916:tid 45966] [client 34.173.158.11:60176] [client 34.173.158.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "abh7P7iS53PnClk_C9DvOQAAAEQ"]
[Tue Mar 17 07:56:12.613106 2026] [:error] [pid 45916:tid 45982] [client 185.223.152.134:35329] [client 185.223.152.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.134, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abiYnLiS53PnClk_C9ATQwAAAFQ"]
[Tue Mar 17 07:56:12.640288 2026] [proxy_fcgi:error] [pid 45916:tid 45982] [client 185.223.152.134:35329] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 09:09:05.603764 2026] [:error] [pid 22541:tid 22553] [client 120.62.26.38:62301] [client 120.62.26.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.62.26.38, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abipsaS6JNY1-CTsTA9A0wAAAQc"]
[Tue Mar 17 09:09:05.615584 2026] [proxy_fcgi:error] [pid 22541:tid 22553] [client 120.62.26.38:62301] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 18:01:46.612013 2026] [:error] [pid 45915:tid 45947] [client 104.28.161.186:58127] [client 104.28.161.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "abkmiph7U84ydzcrcndEGAAAABI"]
[Tue Mar 17 19:45:58.147745 2026] [:error] [pid 15162:tid 15174] [client 161.248.46.210:65217] [client 161.248.46.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.248.46.210, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abk-9rkCW4399PnBfYT4VAAAAkc"]
[Tue Mar 17 19:45:58.159587 2026] [proxy_fcgi:error] [pid 15162:tid 15174] [client 161.248.46.210:65217] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 19:46:33.224252 2026] [:error] [pid 15162:tid 15189] [client 103.12.123.52:25397] [client 103.12.123.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.12.123.52, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abk_GbkCW4399PnBfYT4ZwAAAlY"]
[Tue Mar 17 19:46:33.235315 2026] [proxy_fcgi:error] [pid 15162:tid 15189] [client 103.12.123.52:25397] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:41:36.848062 2026] [:error] [pid 63412:tid 63429] [client 124.123.100.130:51470] [client 124.123.100.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.100.130, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abmEQDKUzzFOGoXRLQ-rUAAAAM0"]
[Wed Mar 18 00:41:36.862204 2026] [proxy_fcgi:error] [pid 63412:tid 63429] [client 124.123.100.130:51470] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 00:41:37.876965 2026] [:error] [pid 40715:tid 40942] [client 220.158.156.222:49669] [client 220.158.156.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.156.222, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abmEQWcms0rUPgdkLiH8XwAAAAQ"]
[Wed Mar 18 00:41:37.885277 2026] [proxy_fcgi:error] [pid 40715:tid 40942] [client 220.158.156.222:49669] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:09.688892 2026] [proxy_fcgi:error] [pid 40716:tid 41021] [client 20.151.110.211:34538] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:09.897867 2026] [proxy_fcgi:error] [pid 40716:tid 41025] [client 20.151.110.211:34538] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:10.320156 2026] [proxy_fcgi:error] [pid 40716:tid 41030] [client 20.151.110.211:34538] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:10.529450 2026] [proxy_fcgi:error] [pid 40716:tid 41045] [client 20.151.110.211:34538] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:10.964952 2026] [proxy_fcgi:error] [pid 40716:tid 41021] [client 20.151.110.211:34538] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:11.183502 2026] [proxy_fcgi:error] [pid 40716:tid 41042] [client 20.151.110.211:34538] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:11.414312 2026] [proxy_fcgi:error] [pid 40716:tid 41024] [client 20.151.110.211:34538] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:06:11.881322 2026] [:error] [pid 40716:tid 41036] [client 20.151.110.211:34538] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmYExR6i4ByUuhUBASEXgAAAE8"]
[Wed Mar 18 02:06:13.238596 2026] [:error] [pid 63612:tid 63627] [client 20.151.110.211:34003] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmYFe7vPBSR8vo387M-NwAAAY0"]
[Wed Mar 18 02:06:14.446699 2026] [:error] [pid 63412:tid 63416] [client 20.151.110.211:34503] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmYFjKUzzFOGoXRLQ_EDQAAAMA"]
[Wed Mar 18 02:06:20.950818 2026] [:error] [pid 41165:tid 41191] [client 20.151.110.211:34497] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmYHHEHb7dujURQaRbdYgAAARg"]
[Wed Mar 18 06:20:46.208381 2026] [proxy_fcgi:error] [pid 13676:tid 13686] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:46.350173 2026] [proxy_fcgi:error] [pid 13676:tid 13691] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:46.493061 2026] [proxy_fcgi:error] [pid 13676:tid 13678] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:46.745731 2026] [proxy_fcgi:error] [pid 13676:tid 13693] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:47.038080 2026] [proxy_fcgi:error] [pid 13676:tid 13690] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:47.512613 2026] [proxy_fcgi:error] [pid 13676:tid 13684] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:47.656013 2026] [proxy_fcgi:error] [pid 13676:tid 13683] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:47.801279 2026] [proxy_fcgi:error] [pid 13676:tid 13685] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:47.943483 2026] [proxy_fcgi:error] [pid 13676:tid 13694] [client 52.140.125.218:35004] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 06:20:48.082252 2026] [:error] [pid 13676:tid 13702] [client 52.140.125.218:35004] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abnTwGxDEHR5lvAEVIjulgAAARg"]
[Wed Mar 18 06:20:48.669317 2026] [:error] [pid 45069:tid 45093] [client 52.140.125.218:3655] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abnTwDNzUMBULZVa94zrpgAAANY"]
[Wed Mar 18 06:20:49.227701 2026] [:error] [pid 13716:tid 13739] [client 52.140.125.218:3657] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abnTwWWKzQVHkZkUHaQGLQAAAVU"]
[Wed Mar 18 06:20:49.789570 2026] [:error] [pid 13716:tid 13736] [client 52.140.125.218:34915] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abnTwWWKzQVHkZkUHaQGMQAAAVI"]
[Wed Mar 18 08:13:18.371031 2026] [:error] [pid 13716:tid 13735] [client 20.2.90.103:39122] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "abnuHmWKzQVHkZkUHaRT8QAAAVE"]
[Wed Mar 18 18:49:59.020584 2026] [:error] [pid 53755:tid 53760] [client 20.120.18.145:30976] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "abqDV6qw5ZSRshmIhWn4pgAAAUM"]
[Wed Mar 18 18:50:00.337600 2026] [:error] [pid 53755:tid 53767] [client 20.120.18.145:31409] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "abqDWKqw5ZSRshmIhWn4qQAAAUo"]
[Wed Mar 18 18:50:03.114274 2026] [:error] [pid 42870:tid 42896] [client 20.120.18.145:31372] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "abqDW56axlAooiuYyUwW_gAAAAs"]
[Wed Mar 18 18:50:07.090897 2026] [:error] [pid 43009:tid 43030] [client 20.120.18.145:31371] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "abqDX38aUp4Sm6m3nmMntwAAARM"]
[Wed Mar 18 22:56:44.846534 2026] [:error] [pid 31232:tid 31259] [client 177.12.9.255:24032] [client 177.12.9.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.12.9.255, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abq9LGX6HV7dqh3BQD00mAAAAFg"]
[Wed Mar 18 22:56:44.859155 2026] [proxy_fcgi:error] [pid 31232:tid 31259] [client 177.12.9.255:24032] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:47.767065 2026] [proxy_fcgi:error] [pid 42871:tid 42929] [client 20.120.18.145:30766] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:47.983055 2026] [proxy_fcgi:error] [pid 42871:tid 42936] [client 20.120.18.145:30766] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:48.416890 2026] [proxy_fcgi:error] [pid 42871:tid 42924] [client 20.120.18.145:30766] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:48.642508 2026] [proxy_fcgi:error] [pid 42871:tid 42931] [client 20.120.18.145:30766] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:49.135753 2026] [proxy_fcgi:error] [pid 42871:tid 42930] [client 20.120.18.145:30766] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:49.353285 2026] [proxy_fcgi:error] [pid 42871:tid 42938] [client 20.120.18.145:30766] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:49.572521 2026] [proxy_fcgi:error] [pid 42871:tid 42933] [client 20.120.18.145:30766] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:42:50.000400 2026] [:error] [pid 42871:tid 42915] [client 20.120.18.145:30766] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrH-WPUS0lM1M9nUaKgvQAAAIE"]
[Wed Mar 18 23:42:53.708975 2026] [:error] [pid 42970:tid 42994] [client 20.120.18.145:31055] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrH_Y5YFUj4vBJI0KRMXwAAANY"]
[Wed Mar 18 23:42:55.728401 2026] [:error] [pid 31232:tid 31243] [client 20.120.18.145:31727] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrH_2X6HV7dqh3BQD1HJgAAAEg"]
[Wed Mar 18 23:42:59.800152 2026] [:error] [pid 31232:tid 31238] [client 20.120.18.145:31713] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrIA2X6HV7dqh3BQD1HMwAAAEM"]
[Thu Mar 19 06:17:47.407183 2026] [:error] [pid 23883:tid 23933] [client 212.105.142.222:16027] [client 212.105.142.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.105.142.222, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abski9Ni-EnEAH4abz18OgAAAEQ"]
[Thu Mar 19 06:17:47.430608 2026] [proxy_fcgi:error] [pid 23883:tid 23933] [client 212.105.142.222:16027] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 06:31:04.197382 2026] [:error] [pid 3278:tid 3298] [client 31.171.130.40:39453] [client 31.171.130.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.40, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "absnqAC2T_lM6ZgvfcQ0pAAAARE"]
[Thu Mar 19 06:31:04.232053 2026] [proxy_fcgi:error] [pid 3278:tid 3298] [client 31.171.130.40:39453] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 07:28:15.403247 2026] [:error] [pid 31447:tid 31457] [client 91.99.181.46:59520] [client 91.99.181.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abs1DxmVNRDSLnGvghhJFQAAAgI"]
[Thu Mar 19 07:28:15.622771 2026] [:error] [pid 31447:tid 31465] [client 91.99.187.182:35472] [client 91.99.187.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "abs1DxmVNRDSLnGvghhJFgAAAgo"]
[Thu Mar 19 10:01:54.128565 2026] [proxy_fcgi:error] [pid 3278:tid 3288] [client 209.87.169.243:53941] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 10:03:45.421289 2026] [:error] [pid 23883:tid 23933] [client 209.87.169.70:45571] [client 209.87.169.70] ModSecurity: collection_store: Failed to exclusivly lock DBM file "/tmp/ip": Resource deadlock avoided [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/olympus-google-fonts/assets/images/"] [unique_id "abtZgdNi-EnEAH4abz2XLwAAAEQ"]
[Thu Mar 19 10:03:52.824054 2026] [:error] [pid 24925:tid 24944] [client 209.87.169.217:28781] [client 209.87.169.217] ModSecurity: collection_store: Failed to exclusivly lock DBM file "/tmp/ip": Resource deadlock avoided [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp/"] [unique_id "abtZh_UZEHbnUgjEbWNCoQAAAY8"]
[Thu Mar 19 10:04:14.898357 2026] [:error] [pid 24925:tid 24943] [client 209.87.169.217:28781] [client 209.87.169.217] ModSecurity: collection_store: Failed to exclusivly lock DBM file "/tmp/ip": Resource deadlock avoided [hostname "stratapluswa.com.au"] [uri "/themes/twenty/"] [unique_id "abtZnfUZEHbnUgjEbWNEDAAAAY4"]
[Thu Mar 19 10:04:20.126144 2026] [autoindex:error] [pid 24925:tid 24930] [client 209.87.169.217:28781] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:04:20.359917 2026] [autoindex:error] [pid 24925:tid 24945] [client 209.87.169.217:28781] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:04:21.105652 2026] [autoindex:error] [pid 24925:tid 24930] [client 209.87.169.217:28781] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 12:54:13.209432 2026] [:error] [pid 23882:tid 23920] [client 154.16.49.101:6522] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abuBdbWnClbtbN12M7-UEgAAABI"]
[Thu Mar 19 12:54:13.703588 2026] [:error] [pid 25269:tid 25283] [client 154.16.49.101:6678] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdcU9ntriqNcU-b7DbwAAA8s"]
[Thu Mar 19 12:54:14.197647 2026] [:error] [pid 23883:tid 23929] [client 154.16.49.101:6862] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/feed/"] [unique_id "abuBdtNi-EnEAH4abz2wbQAAAEA"]
[Thu Mar 19 16:02:19.413253 2026] [:error] [pid 11014:tid 11031] [client 35.229.82.140:58208] [client 35.229.82.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.82.140, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abutizBVizvrAl0DfCDnHwAAAEw"]
[Thu Mar 19 16:02:19.422785 2026] [proxy_fcgi:error] [pid 11014:tid 11031] [client 35.229.82.140:58208] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 16:02:21.138420 2026] [:error] [pid 11014:tid 11021] [client 35.229.82.140:58208] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "abutjTBVizvrAl0DfCDnKQAAAEI"]
[Thu Mar 19 16:02:21.605681 2026] [:error] [pid 11016:tid 11081] [client 35.229.82.140:59276] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abutjRPK94J9G19C6uUoeQAAAQg"]
[Thu Mar 19 16:02:22.094223 2026] [:error] [pid 11016:tid 11078] [client 35.229.82.140:59502] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abutjhPK94J9G19C6uUofwAAAQU"]
[Thu Mar 19 16:02:22.561113 2026] [:error] [pid 11014:tid 11029] [client 35.229.82.140:59747] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abutjjBVizvrAl0DfCDnKwAAAEo"]
[Thu Mar 19 16:02:23.026358 2026] [:error] [pid 11014:tid 11040] [client 35.229.82.140:59991] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abutjzBVizvrAl0DfCDnLwAAAFU"]
[Thu Mar 19 16:02:23.491648 2026] [:error] [pid 11110:tid 11125] [client 35.229.82.140:60197] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abutjwSNPqGfikw7k8JvMgAAAAo"]
[Thu Mar 19 16:02:23.957090 2026] [:error] [pid 11110:tid 11134] [client 35.229.82.140:60347] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abutjwSNPqGfikw7k8JvNAAAABM"]
[Thu Mar 19 16:02:24.376035 2026] [:error] [pid 11014:tid 11023] [client 35.229.82.140:60512] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abutkDBVizvrAl0DfCDnMAAAAEQ"]
[Thu Mar 19 16:02:24.866639 2026] [:error] [pid 11014:tid 11041] [client 35.229.82.140:60659] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abutkDBVizvrAl0DfCDnMgAAAFY"]
[Thu Mar 19 16:02:25.376255 2026] [:error] [pid 11016:tid 11082] [client 35.229.82.140:60856] [client 35.229.82.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abutkRPK94J9G19C6uUohgAAAQk"]
[Thu Mar 19 18:58:45.850822 2026] [:error] [pid 1285:tid 1293] [client 163.61.1.2:62644] [client 163.61.1.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.1.2, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abvW5VE95r3zR75X1HoBRwAAAgY"]
[Thu Mar 19 18:58:45.861928 2026] [proxy_fcgi:error] [pid 1285:tid 1293] [client 163.61.1.2:62644] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:08:51.153169 2026] [autoindex:error] [pid 1285:tid 1298] [client 167.172.93.181:49937] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Mar 19 23:56:10.123176 2026] [proxy_fcgi:error] [pid 51091:tid 51129] [client 20.104.192.115:24184] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 23:56:10.569638 2026] [:error] [pid 51091:tid 51125] [client 20.104.192.115:24184] [client 20.104.192.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.192.115, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abwcmr7LZKhdJPD9CBvxyAAAAU4"]
[Thu Mar 19 23:56:10.783657 2026] [proxy_fcgi:error] [pid 51091:tid 51112] [client 20.104.192.115:24184] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 23:56:11.641061 2026] [proxy_fcgi:error] [pid 51091:tid 51130] [client 20.104.192.115:24184] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 23:56:12.352410 2026] [proxy_fcgi:error] [pid 51091:tid 51117] [client 20.104.192.115:24184] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 23:56:12.619422 2026] [:error] [pid 51091:tid 51118] [client 20.104.192.115:24184] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abwcnL7LZKhdJPD9CBvx0gAAAUc"]
[Thu Mar 19 23:56:21.745561 2026] [:error] [pid 1247:tid 1272] [client 20.104.192.115:23987] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abwcpQ5tmeOr-yI4XNEulQAAAdc"]
[Fri Mar 20 00:05:58.390376 2026] [:error] [pid 1247:tid 1261] [client 41.62.40.202:57811] [client 41.62.40.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.62.40.202, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abwe5g5tmeOr-yI4XNEyIwAAAcw"]
[Fri Mar 20 00:05:58.402044 2026] [proxy_fcgi:error] [pid 1247:tid 1261] [client 41.62.40.202:57811] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 00:10:28.046210 2026] [:error] [pid 1397:tid 1415] [client 115.178.237.70:55900] [client 115.178.237.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.178.237.70, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abwf9Hptc6vBjy-kgOMxPgAAAtA"]
[Fri Mar 20 00:10:28.057933 2026] [proxy_fcgi:error] [pid 1397:tid 1415] [client 115.178.237.70:55900] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:16.226554 2026] [proxy_fcgi:error] [pid 46124:tid 46200] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:17.265945 2026] [proxy_fcgi:error] [pid 46124:tid 46193] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:17.526064 2026] [proxy_fcgi:error] [pid 46124:tid 46184] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:17.732338 2026] [proxy_fcgi:error] [pid 46124:tid 46181] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:17.825076 2026] [proxy_fcgi:error] [pid 46124:tid 46190] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:18.117103 2026] [proxy_fcgi:error] [pid 46124:tid 46202] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:18.210670 2026] [proxy_fcgi:error] [pid 46124:tid 46198] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:18.302641 2026] [proxy_fcgi:error] [pid 46124:tid 46189] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:18.405033 2026] [proxy_fcgi:error] [pid 46124:tid 46196] [client 20.212.48.224:5847] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:02:18.493733 2026] [:error] [pid 46124:tid 46183] [client 20.212.48.224:5847] [client 20.212.48.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abwsGkzMrlLOY6zyCjJxNQAAAEM"]
[Fri Mar 20 01:02:18.858759 2026] [:error] [pid 46126:tid 46222] [client 20.212.48.224:5874] [client 20.212.48.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abwsGqQ44YePbsZz3j7H2wAAAQY"]
[Fri Mar 20 01:02:19.240110 2026] [:error] [pid 46126:tid 46218] [client 20.212.48.224:2219] [client 20.212.48.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abwsG6Q44YePbsZz3j7H3QAAAQQ"]
[Fri Mar 20 01:02:19.626316 2026] [:error] [pid 46126:tid 46220] [client 20.212.48.224:5887] [client 20.212.48.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "abwsG6Q44YePbsZz3j7H4QAAAQU"]
[Fri Mar 20 01:14:32.467505 2026] [:error] [pid 11258:tid 11281] [client 209.97.171.56:63579] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abwu-JPHb95f6xzHJOcPoAAAANU"]
[Fri Mar 20 01:14:32.566381 2026] [:error] [pid 11258:tid 11284] [client 209.97.171.56:62844] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abwu-JPHb95f6xzHJOcPoQAAANg"]
[Fri Mar 20 07:39:40.359992 2026] [:error] [pid 55452:tid 55495] [client 181.103.1.206:52263] [client 181.103.1.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.103.1.206, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "abyJPIlFvOIliSP0R2BPuQAAA4w"]
[Fri Mar 20 07:39:40.370967 2026] [proxy_fcgi:error] [pid 55452:tid 55495] [client 181.103.1.206:52263] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:54.182945 2026] [proxy_fcgi:error] [pid 55301:tid 55395] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:54.301363 2026] [proxy_fcgi:error] [pid 55301:tid 55401] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:54.427691 2026] [proxy_fcgi:error] [pid 55301:tid 55373] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:54.546577 2026] [proxy_fcgi:error] [pid 55301:tid 55405] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:54.666777 2026] [proxy_fcgi:error] [pid 55301:tid 55383] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:54.784142 2026] [proxy_fcgi:error] [pid 55301:tid 55367] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:54.904278 2026] [proxy_fcgi:error] [pid 55301:tid 55376] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:55.025446 2026] [proxy_fcgi:error] [pid 55301:tid 55381] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:55.145024 2026] [proxy_fcgi:error] [pid 55301:tid 55365] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:55.265010 2026] [proxy_fcgi:error] [pid 55301:tid 55403] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:55.386038 2026] [proxy_fcgi:error] [pid 55301:tid 55371] [client 52.243.57.116:12118] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 08:17:55.500784 2026] [:error] [pid 55301:tid 55368] [client 52.243.57.116:12118] [client 52.243.57.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ds.php"] [unique_id "abySM8KP1x4sgmjd3xSOawAAAoY"]
[Fri Mar 20 08:17:55.978027 2026] [:error] [pid 55301:tid 55369] [client 52.243.57.116:7168] [client 52.243.57.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ds.php"] [unique_id "abySM8KP1x4sgmjd3xSOcAAAAoc"]
[Fri Mar 20 08:17:56.440146 2026] [:error] [pid 43163:tid 43187] [client 52.243.57.116:12152] [client 52.243.57.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ds.php"] [unique_id "abySNJ_n4JP_ko9XUswikgAAARQ"]
[Fri Mar 20 08:17:56.901611 2026] [:error] [pid 58126:tid 58187] [client 52.243.57.116:7186] [client 52.243.57.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ds.php"] [unique_id "abySNKKAmdXQSS0Y5KByuQAAAE8"]
[Fri Mar 20 09:38:58.033555 2026] [:error] [pid 49170:tid 49175] [client 13.238.69.11:42329] [client 13.238.69.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "abylMs-c8ctLVDCqUJWfkgAAAAE"]
[Fri Mar 20 13:17:36.814612 2026] [:error] [pid 49170:tid 49189] [client 45.131.195.48:50547] [client 45.131.195.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.48, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "abzYcM-c8ctLVDCqUJUI-wAAAA8"]
[Fri Mar 20 13:17:36.823957 2026] [proxy_fcgi:error] [pid 49170:tid 49189] [client 45.131.195.48:50547] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 20:09:53.196850 2026] [:error] [pid 49170:tid 49185] [client 209.87.169.116:52647] [client 209.87.169.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.116, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "ab05Ec-c8ctLVDCqUJV9aQAAAAs"]
[Fri Mar 20 20:09:53.206474 2026] [proxy_fcgi:error] [pid 49170:tid 49185] [client 209.87.169.116:52647] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 20:13:30.067200 2026] [:error] [pid 49082:tid 49144] [client 216.24.212.17:53563] [client 216.24.212.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.17, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "ab056qpllYJI1LUIdL-4QwAAAUI"]
[Fri Mar 20 20:13:30.071135 2026] [proxy_fcgi:error] [pid 49082:tid 49144] [client 216.24.212.17:53563] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 02:30:00.920686 2026] [autoindex:error] [pid 62754:tid 62824] [client 141.98.11.17:65516] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Mar 21 11:54:17.976305 2026] [:error] [pid 42886:tid 42902] [client 45.190.158.64:24556] [client 45.190.158.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.158.64, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ab4WaV452dC6nbNWav0R9QAAAw4"]
[Sat Mar 21 11:54:17.987579 2026] [proxy_fcgi:error] [pid 42886:tid 42902] [client 45.190.158.64:24556] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 15:30:08.609806 2026] [:error] [pid 1489:tid 1519] [client 181.215.182.124:52782] [client 181.215.182.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "ab5JAFRvnvBO_DG9kxupSwAAAA8"]
[Sat Mar 21 15:52:58.075636 2026] [:error] [pid 1491:tid 1568] [client 104.28.163.82:40941] [client 104.28.163.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "ab5OWq3VfHftzE9w9t47OQAAAIU"]
[Sun Mar 22 01:40:15.969791 2026] [proxy_fcgi:error] [pid 41061:tid 41077] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:16.179440 2026] [proxy_fcgi:error] [pid 41061:tid 41064] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:16.389165 2026] [proxy_fcgi:error] [pid 41061:tid 41087] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:16.598644 2026] [proxy_fcgi:error] [pid 41061:tid 41074] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:16.813057 2026] [proxy_fcgi:error] [pid 41061:tid 41072] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:17.231600 2026] [proxy_fcgi:error] [pid 41061:tid 41078] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:17.447300 2026] [proxy_fcgi:error] [pid 41061:tid 41077] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:17.870332 2026] [proxy_fcgi:error] [pid 41061:tid 41087] [client 52.138.39.105:28355] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 01:40:18.286115 2026] [:error] [pid 41061:tid 41072] [client 52.138.39.105:28355] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7YAqksT6woy-Od6iHNPAAAAMg"]
[Sun Mar 22 01:40:19.125802 2026] [:error] [pid 40780:tid 40951] [client 52.138.39.105:28405] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7YAyZDsmYIjKpJe4NWRgAAAAQ"]
[Sun Mar 22 01:40:19.972282 2026] [:error] [pid 40780:tid 40966] [client 52.138.39.105:28300] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7YAyZDsmYIjKpJe4NWSgAAABI"]
[Sun Mar 22 01:40:20.822087 2026] [:error] [pid 40780:tid 40960] [client 52.138.39.105:27737] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7YBCZDsmYIjKpJe4NWTAAAAAw"]
[Sun Mar 22 04:25:31.972378 2026] [:error] [pid 51361:tid 51389] [client 203.81.236.154:15404] [client 203.81.236.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.81.236.154, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ab7-uxXYUsdvKC9YWpUYrgAAABE"]
[Sun Mar 22 04:25:31.983541 2026] [proxy_fcgi:error] [pid 51361:tid 51389] [client 203.81.236.154:15404] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:55:56.546541 2026] [proxy_fcgi:error] [pid 51362:tid 51424] [client 20.102.53.32:8160] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:55:56.963954 2026] [:error] [pid 51362:tid 51420] [client 20.102.53.32:8160] [client 20.102.53.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.102.53.32, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_KvMOwPm3DXzTDjUeZAwAAAFM"]
[Sun Mar 22 18:55:57.245468 2026] [proxy_fcgi:error] [pid 51362:tid 51414] [client 20.102.53.32:8160] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:55:58.380302 2026] [proxy_fcgi:error] [pid 51362:tid 51400] [client 20.102.53.32:8160] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:55:59.086416 2026] [proxy_fcgi:error] [pid 51362:tid 51418] [client 20.102.53.32:8160] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 18:55:59.350644 2026] [:error] [pid 51362:tid 51419] [client 20.102.53.32:8160] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_Kv8OwPm3DXzTDjUeZEAAAAFI"]
[Sun Mar 22 18:56:00.979482 2026] [:error] [pid 51363:tid 51433] [client 20.102.53.32:8179] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_KwFwa9x6OCTRkhl2AdgAAAIU"]
[Sun Mar 22 18:56:13.453532 2026] [:error] [pid 51362:tid 51414] [client 20.102.53.32:8154] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_KzcOwPm3DXzTDjUeZMAAAAE0"]
[Sun Mar 22 21:35:38.093394 2026] [:error] [pid 51363:tid 51441] [client 49.205.147.5:8073] [client 49.205.147.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.147.5, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_wKlwa9x6OCTRkhl3IfwAAAIw"]
[Sun Mar 22 21:35:38.105207 2026] [proxy_fcgi:error] [pid 51363:tid 51441] [client 49.205.147.5:8073] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 23:11:58.217761 2026] [:error] [pid 51361:tid 51381] [client 158.140.209.0:55202] [client 158.140.209.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "acAGvhXYUsdvKC9YWpU31wAAAAo"]
[Mon Mar 23 04:59:39.520432 2026] [:error] [pid 23539:tid 23557] [client 49.150.103.39:42466] [client 49.150.103.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.103.39, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acBYO37Dh3qWGSpIAZUw1QAAAMk"]
[Mon Mar 23 04:59:39.532056 2026] [proxy_fcgi:error] [pid 23539:tid 23557] [client 49.150.103.39:42466] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 05:00:07.329754 2026] [:error] [pid 23441:tid 23516] [client 5.155.108.155:19343] [client 5.155.108.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.155.108.155, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acBYVxq7S-oOqSXZEr5I7wAAAI0"]
[Mon Mar 23 05:00:07.345418 2026] [proxy_fcgi:error] [pid 23441:tid 23516] [client 5.155.108.155:19343] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 05:00:15.793468 2026] [:error] [pid 57265:tid 57278] [client 203.205.113.208:55893] [client 203.205.113.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.205.113.208, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acBYX2NLjPJJkhuqCsicigAAAQs"]
[Mon Mar 23 05:00:15.800214 2026] [proxy_fcgi:error] [pid 57265:tid 57278] [client 203.205.113.208:55893] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 14:10:09.051288 2026] [:error] [pid 14573:tid 14598] [client 94.205.36.188:58441] [client 94.205.36.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.36.188, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acDZQe-oSmHn3q4_J1Fd-QAAAVc"]
[Mon Mar 23 14:10:09.065472 2026] [proxy_fcgi:error] [pid 14573:tid 14598] [client 94.205.36.188:58441] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 14:10:21.548951 2026] [:error] [pid 35165:tid 35174] [client 154.57.223.47:48587] [client 154.57.223.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.223.47, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acDZTc6udpN6Esk7JKtipgAAAYY"]
[Mon Mar 23 14:10:21.557660 2026] [proxy_fcgi:error] [pid 35165:tid 35174] [client 154.57.223.47:48587] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:33:49.329693 2026] [:error] [pid 52341:tid 52344] [client 196.187.148.125:21722] [client 196.187.148.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.187.148.125, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acFBPaPKTBDR2u47Gb3cpwAAAUE"]
[Mon Mar 23 21:33:49.355085 2026] [proxy_fcgi:error] [pid 52341:tid 52344] [client 196.187.148.125:21722] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:49:44.984464 2026] [:error] [pid 38276:tid 38284] [client 103.76.47.108:65047] [client 103.76.47.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.76.47.108, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acFTCJoKGiI-a7oME3INwwAAAMU"]
[Mon Mar 23 22:49:44.996800 2026] [proxy_fcgi:error] [pid 38276:tid 38284] [client 103.76.47.108:65047] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:52.635665 2026] [proxy_fcgi:error] [pid 56236:tid 56300] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:52.893554 2026] [proxy_fcgi:error] [pid 56236:tid 56312] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:53.157173 2026] [proxy_fcgi:error] [pid 56236:tid 56314] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:53.411957 2026] [proxy_fcgi:error] [pid 56236:tid 56293] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:53.666520 2026] [proxy_fcgi:error] [pid 56236:tid 56305] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:53.932606 2026] [proxy_fcgi:error] [pid 56236:tid 56296] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:54.191280 2026] [proxy_fcgi:error] [pid 56236:tid 56311] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:54.483687 2026] [proxy_fcgi:error] [pid 56236:tid 56303] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:54.738435 2026] [proxy_fcgi:error] [pid 56236:tid 56294] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:55.018027 2026] [proxy_fcgi:error] [pid 56236:tid 56313] [client 65.52.65.130:45754] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:08:55.277980 2026] [:error] [pid 56236:tid 56316] [client 65.52.65.130:45754] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acFzp3apFgYp0uZ8twAe_QAAAFc"]
[Tue Mar 24 01:08:57.162907 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:27073] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acFzqcrwr-l5A-s9ryBwiQAAARU"]
[Tue Mar 24 01:08:58.437625 2026] [:error] [pid 56435:tid 56514] [client 65.52.65.130:20967] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acFzqsrwr-l5A-s9ryBwjgAAAQ0"]
[Tue Mar 24 01:08:59.532061 2026] [:error] [pid 56238:tid 56370] [client 65.52.65.130:57021] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acFzq1SqceFAZRgPDq6XAwAAANY"]
[Tue Mar 24 01:09:00.576519 2026] [:error] [pid 56236:tid 56299] [client 65.52.65.130:41363] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acFzrHapFgYp0uZ8twAe_wAAAEY"]
[Tue Mar 24 01:09:01.760073 2026] [:error] [pid 56236:tid 56312] [client 65.52.65.130:44615] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acFzrXapFgYp0uZ8twAfBQAAAFM"]
[Tue Mar 24 01:09:03.080109 2026] [:error] [pid 56435:tid 56504] [client 65.52.65.130:20949] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acFzr8rwr-l5A-s9ryBwlwAAAQU"]
[Tue Mar 24 01:09:04.246580 2026] [:error] [pid 56435:tid 56505] [client 65.52.65.130:17431] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acFzsMrwr-l5A-s9ryBwnwAAAQY"]
[Tue Mar 24 01:09:05.265960 2026] [:error] [pid 56435:tid 56516] [client 65.52.65.130:33691] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acFzscrwr-l5A-s9ryBwpgAAAQ8"]
[Tue Mar 24 01:09:06.178130 2026] [:error] [pid 56236:tid 56304] [client 65.52.65.130:56964] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acFzsnapFgYp0uZ8twAfDwAAAEs"]
[Tue Mar 24 01:09:07.016863 2026] [:error] [pid 56238:tid 56352] [client 65.52.65.130:2104] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acFzs1SqceFAZRgPDq6XEAAAAMQ"]
[Tue Mar 24 01:09:07.962018 2026] [:error] [pid 56238:tid 56369] [client 65.52.65.130:41360] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acFzs1SqceFAZRgPDq6XEwAAANU"]
[Tue Mar 24 01:09:09.730748 2026] [:error] [pid 56238:tid 56352] [client 65.52.65.130:20928] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "acFztVSqceFAZRgPDq6XHgAAAMQ"]
[Tue Mar 24 01:09:10.680946 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:41391] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "acFztsrwr-l5A-s9ryBwtwAAARU"]
[Tue Mar 24 01:09:11.477764 2026] [:error] [pid 56435:tid 56525] [client 65.52.65.130:56991] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "acFzt8rwr-l5A-s9ryBwvgAAARg"]
[Tue Mar 24 01:09:12.412573 2026] [:error] [pid 56238:tid 56371] [client 65.52.65.130:17448] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "acFzuFSqceFAZRgPDq6XKQAAANc"]
[Tue Mar 24 01:09:13.142731 2026] [:error] [pid 56236:tid 56311] [client 65.52.65.130:37081] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acFzuXapFgYp0uZ8twAfMgAAAFI"]
[Tue Mar 24 01:09:14.272451 2026] [:error] [pid 56237:tid 56331] [client 65.52.65.130:27037] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acFzugymO0MnzQb90MMiBgAAAIo"]
[Tue Mar 24 01:09:15.809462 2026] [:error] [pid 56435:tid 56505] [client 65.52.65.130:18734] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acFzu8rwr-l5A-s9ryBwzAAAAQY"]
[Tue Mar 24 01:09:16.897579 2026] [:error] [pid 56236:tid 56297] [client 65.52.65.130:2079] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acFzvHapFgYp0uZ8twAfNQAAAEQ"]
[Tue Mar 24 01:09:18.506604 2026] [:error] [pid 56435:tid 56513] [client 65.52.65.130:56996] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/settings.php"] [unique_id "acFzvsrwr-l5A-s9ryBw3QAAAQw"]
[Tue Mar 24 01:09:19.791418 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:20938] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/settings.php"] [unique_id "acFzv8rwr-l5A-s9ryBw6QAAARE"]
[Tue Mar 24 01:09:20.705896 2026] [:error] [pid 56236:tid 56309] [client 65.52.65.130:20930] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/settings.php"] [unique_id "acFzwHapFgYp0uZ8twAfOwAAAFA"]
[Tue Mar 24 01:09:21.565597 2026] [:error] [pid 56237:tid 56332] [client 65.52.65.130:27057] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/settings.php"] [unique_id "acFzwQymO0MnzQb90MMiFwAAAIs"]
[Tue Mar 24 01:09:22.822150 2026] [:error] [pid 56435:tid 56509] [client 65.52.65.130:27009] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acFzwsrwr-l5A-s9ryBw7gAAAQk"]
[Tue Mar 24 01:09:24.128031 2026] [:error] [pid 56237:tid 56326] [client 65.52.65.130:33704] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acFzxAymO0MnzQb90MMiHwAAAIU"]
[Tue Mar 24 01:09:25.103312 2026] [:error] [pid 56236:tid 56312] [client 65.52.65.130:44636] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acFzxXapFgYp0uZ8twAfRAAAAFM"]
[Tue Mar 24 01:09:26.294533 2026] [:error] [pid 56236:tid 56314] [client 65.52.65.130:20961] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acFzxnapFgYp0uZ8twAfRgAAAFU"]
[Tue Mar 24 01:09:27.499566 2026] [:error] [pid 56237:tid 56323] [client 65.52.65.130:41395] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acFzxwymO0MnzQb90MMiKAAAAII"]
[Tue Mar 24 01:09:29.724077 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:18692] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acFzyVSqceFAZRgPDq6XTwAAAM4"]
[Tue Mar 24 01:09:30.922301 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:45735] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acFzysrwr-l5A-s9ryBxAwAAARU"]
[Tue Mar 24 01:09:32.489481 2026] [:error] [pid 56236:tid 56311] [client 65.52.65.130:58252] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acFzzHapFgYp0uZ8twAfUQAAAFI"]
[Tue Mar 24 01:09:33.601204 2026] [:error] [pid 56238:tid 56366] [client 65.52.65.130:20289] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "acFzzVSqceFAZRgPDq6XXAAAANI"]
[Tue Mar 24 01:09:34.803151 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:22479] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "acFzzlSqceFAZRgPDq6XYAAAANM"]
[Tue Mar 24 01:09:35.932002 2026] [:error] [pid 56435:tid 56503] [client 65.52.65.130:20960] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "acFzz8rwr-l5A-s9ryBxDwAAAQQ"]
[Tue Mar 24 01:09:37.363961 2026] [:error] [pid 56236:tid 56294] [client 65.52.65.130:43752] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "acFz0XapFgYp0uZ8twAfVwAAAEE"]
[Tue Mar 24 01:09:38.636093 2026] [:error] [pid 56435:tid 56501] [client 65.52.65.130:42608] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "acFz0srwr-l5A-s9ryBxGgAAAQI"]
[Tue Mar 24 01:09:39.803730 2026] [:error] [pid 56435:tid 56500] [client 65.52.65.130:30983] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "acFz08rwr-l5A-s9ryBxIwAAAQE"]
[Tue Mar 24 01:09:40.672645 2026] [:error] [pid 56237:tid 56339] [client 65.52.65.130:27132] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "acFz1AymO0MnzQb90MMiQwAAAJI"]
[Tue Mar 24 01:09:41.421062 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:20951] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "acFz1crwr-l5A-s9ryBxKgAAARE"]
[Tue Mar 24 01:09:42.485761 2026] [:error] [pid 56238:tid 56368] [client 65.52.65.130:41388] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/swallowable.php"] [unique_id "acFz1lSqceFAZRgPDq6XcwAAANQ"]
[Tue Mar 24 01:09:43.678046 2026] [:error] [pid 56237:tid 56337] [client 65.52.65.130:20982] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/swallowable.php"] [unique_id "acFz1wymO0MnzQb90MMiSQAAAJA"]
[Tue Mar 24 01:09:45.246142 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:17425] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/swallowable.php"] [unique_id "acFz2VSqceFAZRgPDq6XeAAAAM4"]
[Tue Mar 24 01:09:46.440422 2026] [:error] [pid 56236:tid 56316] [client 65.52.65.130:56987] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/swallowable.php"] [unique_id "acFz2napFgYp0uZ8twAfYQAAAFc"]
[Tue Mar 24 01:09:47.189031 2026] [:error] [pid 56435:tid 56515] [client 65.52.65.130:22591] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "acFz28rwr-l5A-s9ryBxOwAAAQ4"]
[Tue Mar 24 01:09:48.375460 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:33690] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "acFz3FSqceFAZRgPDq6XhgAAAM4"]
[Tue Mar 24 01:09:49.356498 2026] [:error] [pid 56238:tid 56368] [client 65.52.65.130:20320] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "acFz3VSqceFAZRgPDq6XjwAAANQ"]
[Tue Mar 24 01:09:50.102131 2026] [:error] [pid 56435:tid 56516] [client 65.52.65.130:58295] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "acFz3srwr-l5A-s9ryBxQwAAAQ8"]
[Tue Mar 24 01:09:50.992568 2026] [:error] [pid 56435:tid 56507] [client 65.52.65.130:42615] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acFz3srwr-l5A-s9ryBxSQAAAQc"]
[Tue Mar 24 01:09:52.577842 2026] [:error] [pid 56435:tid 56513] [client 65.52.65.130:58275] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acFz4Mrwr-l5A-s9ryBxVAAAAQw"]
[Tue Mar 24 01:09:53.870557 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:47164] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acFz4crwr-l5A-s9ryBxWwAAARE"]
[Tue Mar 24 01:09:55.238734 2026] [proxy_fcgi:error] [pid 56435:tid 56523] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:55.493690 2026] [proxy_fcgi:error] [pid 56435:tid 56511] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:55.791464 2026] [proxy_fcgi:error] [pid 56435:tid 56504] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:56.213711 2026] [proxy_fcgi:error] [pid 56435:tid 56509] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:56.473978 2026] [proxy_fcgi:error] [pid 56435:tid 56500] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:56.987868 2026] [proxy_fcgi:error] [pid 56435:tid 56505] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:57.243715 2026] [proxy_fcgi:error] [pid 56435:tid 56511] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:57.632026 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:22563] [client 65.52.65.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.52.65.130, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acFz5crwr-l5A-s9ryBxeQAAAQg"]
[Tue Mar 24 01:09:57.635398 2026] [proxy_fcgi:error] [pid 56435:tid 56508] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:57.898987 2026] [proxy_fcgi:error] [pid 56435:tid 56504] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:58.158119 2026] [proxy_fcgi:error] [pid 56435:tid 56502] [client 65.52.65.130:22563] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:09:58.413634 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:22563] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acFz5srwr-l5A-s9ryBxgQAAARU"]
[Tue Mar 24 01:09:59.444557 2026] [:error] [pid 56238:tid 56361] [client 65.52.65.130:18732] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acFz51SqceFAZRgPDq6XmQAAAM0"]
[Tue Mar 24 01:10:00.457962 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:20322] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acFz6FSqceFAZRgPDq6XmwAAAM4"]
[Tue Mar 24 01:10:01.786862 2026] [:error] [pid 56238:tid 56357] [client 65.52.65.130:33717] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acFz6VSqceFAZRgPDq6XoQAAAMk"]
[Tue Mar 24 01:10:03.181897 2026] [:error] [pid 56238:tid 56349] [client 65.52.65.130:42578] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "acFz61SqceFAZRgPDq6XpgAAAME"]
[Tue Mar 24 01:10:04.432615 2026] [:error] [pid 56237:tid 56341] [client 65.52.65.130:2077] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "acFz7AymO0MnzQb90MMiXwAAAJQ"]
[Tue Mar 24 01:10:05.506409 2026] [:error] [pid 56238:tid 56361] [client 65.52.65.130:31028] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "acFz7VSqceFAZRgPDq6XrwAAAM0"]
[Tue Mar 24 01:10:06.628790 2026] [:error] [pid 56238:tid 56365] [client 65.52.65.130:33725] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "acFz7lSqceFAZRgPDq6XsgAAANE"]
[Tue Mar 24 01:10:07.843478 2026] [:error] [pid 56237:tid 56323] [client 65.52.65.130:58285] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acFz7wymO0MnzQb90MMiZgAAAII"]
[Tue Mar 24 01:10:09.017322 2026] [:error] [pid 56236:tid 56316] [client 65.52.65.130:2111] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acFz8XapFgYp0uZ8twAfcAAAAFc"]
[Tue Mar 24 01:10:10.178171 2026] [:error] [pid 56435:tid 56501] [client 65.52.65.130:2103] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acFz8srwr-l5A-s9ryBxnAAAAQI"]
[Tue Mar 24 01:10:11.787058 2026] [:error] [pid 56238:tid 56363] [client 65.52.65.130:45730] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acFz81SqceFAZRgPDq6XygAAAM8"]
[Tue Mar 24 01:10:12.805966 2026] [:error] [pid 56237:tid 56330] [client 65.52.65.130:45751] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acFz9AymO0MnzQb90MMiawAAAIk"]
[Tue Mar 24 01:10:13.915700 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:27091] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acFz9crwr-l5A-s9ryBxoAAAARE"]
[Tue Mar 24 01:10:14.851261 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:22474] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acFz9srwr-l5A-s9ryBxpAAAARQ"]
[Tue Mar 24 01:10:15.627467 2026] [:error] [pid 56435:tid 56523] [client 65.52.65.130:27044] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acFz98rwr-l5A-s9ryBxqQAAARY"]
[Tue Mar 24 01:10:17.043311 2026] [:error] [pid 56236:tid 56306] [client 65.52.65.130:22525] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acFz-XapFgYp0uZ8twAfeAAAAE0"]
[Tue Mar 24 01:10:18.227472 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:20396] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acFz-srwr-l5A-s9ryBxrgAAARU"]
[Tue Mar 24 01:10:19.625966 2026] [:error] [pid 56238:tid 56369] [client 65.52.65.130:41081] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acFz-1SqceFAZRgPDq6X2wAAANU"]
[Tue Mar 24 01:10:20.869003 2026] [:error] [pid 56435:tid 56524] [client 65.52.65.130:17421] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acFz_Mrwr-l5A-s9ryBxuQAAARc"]
[Tue Mar 24 01:10:22.416865 2026] [:error] [pid 56237:tid 56329] [client 65.52.65.130:22427] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acFz_gymO0MnzQb90MMiewAAAIg"]
[Tue Mar 24 01:10:23.293344 2026] [:error] [pid 56435:tid 56523] [client 65.52.65.130:49228] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acFz_8rwr-l5A-s9ryBxwwAAARY"]
[Tue Mar 24 01:10:24.261732 2026] [:error] [pid 56435:tid 56502] [client 65.52.65.130:49236] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acF0AMrwr-l5A-s9ryBxzAAAAQM"]
[Tue Mar 24 01:10:26.291424 2026] [:error] [pid 56435:tid 56503] [client 65.52.65.130:51216] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acF0Asrwr-l5A-s9ryBx2gAAAQQ"]
[Tue Mar 24 01:10:28.011740 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:22418] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acF0BFSqceFAZRgPDq6X6AAAANM"]
[Tue Mar 24 01:10:29.001958 2026] [:error] [pid 56238:tid 56350] [client 65.52.65.130:19817] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acF0BVSqceFAZRgPDq6X7AAAAMI"]
[Tue Mar 24 01:10:30.462797 2026] [:error] [pid 56238:tid 56359] [client 65.52.65.130:41038] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acF0BlSqceFAZRgPDq6X7QAAAMs"]
[Tue Mar 24 01:10:31.662352 2026] [:error] [pid 56238:tid 56369] [client 65.52.65.130:19813] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acF0B1SqceFAZRgPDq6X9wAAANU"]
[Tue Mar 24 01:10:32.604770 2026] [:error] [pid 56238:tid 56353] [client 65.52.65.130:51322] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "acF0CFSqceFAZRgPDq6YAAAAAMU"]
[Tue Mar 24 01:10:33.564989 2026] [:error] [pid 56238:tid 56350] [client 65.52.65.130:44973] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "acF0CVSqceFAZRgPDq6YBwAAAMI"]
[Tue Mar 24 01:10:34.554101 2026] [:error] [pid 56236:tid 56305] [client 65.52.65.130:44949] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "acF0CnapFgYp0uZ8twAfjQAAAEw"]
[Tue Mar 24 01:10:36.367630 2026] [:error] [pid 56435:tid 56499] [client 65.52.65.130:43004] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "acF0DMrwr-l5A-s9ryBx9QAAAQA"]
[Tue Mar 24 01:10:37.081470 2026] [:error] [pid 56238:tid 56364] [client 65.52.65.130:46821] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "acF0DVSqceFAZRgPDq6YFwAAANA"]
[Tue Mar 24 01:10:38.466995 2026] [:error] [pid 56435:tid 56501] [client 65.52.65.130:21695] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "acF0Dsrwr-l5A-s9ryByAgAAAQI"]
[Tue Mar 24 01:10:39.368871 2026] [:error] [pid 56238:tid 56360] [client 65.52.65.130:23706] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "acF0D1SqceFAZRgPDq6YIQAAAMw"]
[Tue Mar 24 01:10:40.517960 2026] [:error] [pid 56435:tid 56520] [client 65.52.65.130:21687] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "acF0EMrwr-l5A-s9ryByCAAAARM"]
[Tue Mar 24 01:10:42.842814 2026] [:error] [pid 56238:tid 56350] [client 65.52.65.130:21660] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acF0ElSqceFAZRgPDq6YJwAAAMI"]
[Tue Mar 24 01:10:43.856163 2026] [:error] [pid 56238:tid 56364] [client 65.52.65.130:29938] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acF0E1SqceFAZRgPDq6YKwAAANA"]
[Tue Mar 24 01:10:45.132632 2026] [:error] [pid 56238:tid 56351] [client 65.52.65.130:40249] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acF0FVSqceFAZRgPDq6YMQAAAMM"]
[Tue Mar 24 01:10:46.259833 2026] [:error] [pid 56238:tid 56352] [client 65.52.65.130:23235] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acF0FlSqceFAZRgPDq6YNQAAAMQ"]
[Tue Mar 24 01:10:47.431362 2026] [:error] [pid 56236:tid 56301] [client 65.52.65.130:18485] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "acF0F3apFgYp0uZ8twAfogAAAEg"]
[Tue Mar 24 01:10:48.707631 2026] [:error] [pid 56237:tid 56339] [client 65.52.65.130:40653] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "acF0GAymO0MnzQb90MMitAAAAJI"]
[Tue Mar 24 01:10:49.943614 2026] [:error] [pid 56236:tid 56305] [client 65.52.65.130:15008] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "acF0GXapFgYp0uZ8twAfqAAAAEw"]
[Tue Mar 24 01:10:50.994001 2026] [:error] [pid 56238:tid 56353] [client 65.52.65.130:37038] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "acF0GlSqceFAZRgPDq6YSQAAAMU"]
[Tue Mar 24 01:10:52.913083 2026] [:error] [pid 56238:tid 56348] [client 65.52.65.130:23274] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "acF0HFSqceFAZRgPDq6YVQAAAMA"]
[Tue Mar 24 01:10:54.140966 2026] [:error] [pid 56237:tid 56344] [client 65.52.65.130:40684] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "acF0HgymO0MnzQb90MMiygAAAJc"]
[Tue Mar 24 01:10:55.048141 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:51723] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "acF0H8rwr-l5A-s9ryByKwAAARQ"]
[Tue Mar 24 01:10:56.288503 2026] [:error] [pid 56238:tid 56360] [client 65.52.65.130:29939] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "acF0IFSqceFAZRgPDq6YYQAAAMw"]
[Tue Mar 24 01:10:57.178655 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:29453] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "acF0Icrwr-l5A-s9ryByNwAAARQ"]
[Tue Mar 24 01:10:58.406935 2026] [proxy_fcgi:error] [pid 56435:tid 56522] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:58.672309 2026] [proxy_fcgi:error] [pid 56435:tid 56502] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:59.190747 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:59.451988 2026] [proxy_fcgi:error] [pid 56435:tid 56522] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:59.706149 2026] [proxy_fcgi:error] [pid 56435:tid 56519] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:10:59.961565 2026] [proxy_fcgi:error] [pid 56435:tid 56499] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:00.219071 2026] [proxy_fcgi:error] [pid 56435:tid 56510] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:00.475667 2026] [proxy_fcgi:error] [pid 56435:tid 56517] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:00.985940 2026] [proxy_fcgi:error] [pid 56435:tid 56500] [client 65.52.65.130:35440] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:11:01.243260 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:35440] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acF0Jcrwr-l5A-s9ryByXgAAAQg"]
[Tue Mar 24 01:11:03.066416 2026] [:error] [pid 56435:tid 56520] [client 65.52.65.130:39943] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acF0J8rwr-l5A-s9ryByaAAAARM"]
[Tue Mar 24 01:11:04.279536 2026] [:error] [pid 56238:tid 56366] [client 65.52.65.130:15531] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acF0KFSqceFAZRgPDq6YdQAAANI"]
[Tue Mar 24 01:11:06.042331 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:40675] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acF0KlSqceFAZRgPDq6YgAAAAM4"]
[Tue Mar 24 01:11:07.526308 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:35425] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0K1SqceFAZRgPDq6YjAAAAM4"]
[Tue Mar 24 01:11:09.000012 2026] [:error] [pid 56236:tid 56314] [client 65.52.65.130:15495] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0LHapFgYp0uZ8twAftQAAAFU"]
[Tue Mar 24 01:11:09.911205 2026] [:error] [pid 56236:tid 56317] [client 65.52.65.130:39941] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0LXapFgYp0uZ8twAftwAAAFg"]
[Tue Mar 24 01:11:11.808025 2026] [:error] [pid 56435:tid 56524] [client 65.52.65.130:23219] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0L8rwr-l5A-s9ryBydwAAARc"]
[Tue Mar 24 01:11:13.184045 2026] [:error] [pid 56238:tid 56359] [client 65.52.65.130:51726] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acF0MVSqceFAZRgPDq6YoQAAAMs"]
[Tue Mar 24 01:11:14.408272 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:21642] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acF0Msrwr-l5A-s9ryByhAAAAQg"]
[Tue Mar 24 01:11:15.587855 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:21650] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acF0M8rwr-l5A-s9ryByjAAAARQ"]
[Tue Mar 24 01:11:16.894205 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:2248] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acF0NFSqceFAZRgPDq6YqQAAANM"]
[Tue Mar 24 01:11:18.212046 2026] [:error] [pid 56238:tid 56361] [client 65.52.65.130:39990] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acF0NlSqceFAZRgPDq6YrAAAAM0"]
[Tue Mar 24 01:11:19.225489 2026] [:error] [pid 56236:tid 56307] [client 65.52.65.130:42131] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acF0N3apFgYp0uZ8twAfwQAAAE4"]
[Tue Mar 24 01:11:20.108031 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:10648] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acF0OMrwr-l5A-s9ryByoQAAARE"]
[Tue Mar 24 01:11:21.321085 2026] [:error] [pid 56435:tid 56511] [client 65.52.65.130:40671] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acF0Ocrwr-l5A-s9ryBypgAAAQs"]
[Tue Mar 24 01:11:22.270442 2026] [:error] [pid 56237:tid 56341] [client 65.52.65.130:40207] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0OgymO0MnzQb90MMi7AAAAJQ"]
[Tue Mar 24 01:11:23.394495 2026] [:error] [pid 56435:tid 56509] [client 65.52.65.130:59214] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0O8rwr-l5A-s9ryByrgAAAQk"]
[Tue Mar 24 01:11:24.242866 2026] [:error] [pid 56237:tid 56331] [client 65.52.65.130:51299] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0PAymO0MnzQb90MMi8gAAAIo"]
[Tue Mar 24 01:11:25.421362 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:29467] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acF0Pcrwr-l5A-s9ryByuAAAARE"]
[Tue Mar 24 01:11:26.814760 2026] [:error] [pid 56238:tid 56353] [client 65.52.65.130:2356] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acF0PlSqceFAZRgPDq6YwwAAAMU"]
[Tue Mar 24 01:11:28.240499 2026] [:error] [pid 56238:tid 56355] [client 65.52.65.130:23715] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acF0QFSqceFAZRgPDq6YxgAAAMc"]
[Tue Mar 24 01:11:29.393017 2026] [:error] [pid 56238:tid 56360] [client 65.52.65.130:46805] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acF0QVSqceFAZRgPDq6YygAAAMw"]
[Tue Mar 24 01:11:30.467650 2026] [:error] [pid 56236:tid 56296] [client 65.52.65.130:34680] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acF0QnapFgYp0uZ8twAfxgAAAEM"]
[Tue Mar 24 01:11:31.605344 2026] [:error] [pid 56435:tid 56509] [client 65.52.65.130:3032] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acF0Q8rwr-l5A-s9ryByygAAAQk"]
[Tue Mar 24 01:11:32.577604 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:3050] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acF0RFSqceFAZRgPDq6YzwAAANM"]
[Tue Mar 24 01:11:34.581772 2026] [:error] [pid 56435:tid 56519] [client 65.52.65.130:2433] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acF0Rsrwr-l5A-s9ryBy2gAAARI"]
[Tue Mar 24 01:11:36.878397 2026] [:error] [pid 56236:tid 56299] [client 65.52.65.130:42620] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acF0SHapFgYp0uZ8twAfyAAAAEY"]
[Tue Mar 24 01:11:38.920176 2026] [:error] [pid 56237:tid 56341] [client 65.52.65.130:47105] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "acF0SgymO0MnzQb90MMjEAAAAJQ"]
[Tue Mar 24 01:11:40.071513 2026] [:error] [pid 56237:tid 56321] [client 65.52.65.130:14763] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "acF0TAymO0MnzQb90MMjFwAAAIA"]
[Tue Mar 24 01:11:40.883094 2026] [:error] [pid 56236:tid 56315] [client 65.52.65.130:27030] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "acF0THapFgYp0uZ8twAfzAAAAFY"]
[Tue Mar 24 01:11:43.333710 2026] [:error] [pid 56435:tid 56520] [client 65.52.65.130:47156] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "acF0T8rwr-l5A-s9ryBy7AAAARM"]
[Tue Mar 24 01:11:44.720350 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:42610] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "acF0UFSqceFAZRgPDq6Y3AAAANM"]
[Tue Mar 24 01:11:45.789450 2026] [:error] [pid 56236:tid 56297] [client 65.52.65.130:17415] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "acF0UXapFgYp0uZ8twAf0gAAAEQ"]
[Tue Mar 24 01:11:46.529124 2026] [:error] [pid 56236:tid 56294] [client 65.52.65.130:31036] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "acF0UnapFgYp0uZ8twAf1AAAAEE"]
[Tue Mar 24 01:11:47.399702 2026] [:error] [pid 56237:tid 56333] [client 65.52.65.130:18736] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "acF0UwymO0MnzQb90MMjJQAAAIw"]
[Tue Mar 24 01:11:48.430549 2026] [:error] [pid 56435:tid 56511] [client 65.52.65.130:37060] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acF0VMrwr-l5A-s9ryBy8wAAAQs"]
[Tue Mar 24 01:11:49.747579 2026] [:error] [pid 56435:tid 56509] [client 65.52.65.130:37061] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acF0Vcrwr-l5A-s9ryBy9wAAAQk"]
[Tue Mar 24 01:11:50.524385 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:48029] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acF0Vsrwr-l5A-s9ryBy-gAAARQ"]
[Tue Mar 24 01:11:52.391491 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:18497] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acF0WMrwr-l5A-s9ryBzAgAAAQg"]
[Tue Mar 24 01:11:53.400496 2026] [:error] [pid 56435:tid 56524] [client 65.52.65.130:56905] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acF0Wcrwr-l5A-s9ryBzCgAAARc"]
[Tue Mar 24 01:11:54.747013 2026] [:error] [pid 56238:tid 56370] [client 65.52.65.130:2963] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acF0WlSqceFAZRgPDq6Y5wAAANY"]
[Tue Mar 24 01:11:56.100334 2026] [:error] [pid 56237:tid 56325] [client 65.52.65.130:32863] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acF0XAymO0MnzQb90MMjNAAAAIQ"]
[Tue Mar 24 01:11:57.413612 2026] [:error] [pid 56238:tid 56356] [client 65.52.65.130:19291] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acF0XVSqceFAZRgPDq6Y6wAAAMg"]
[Tue Mar 24 01:11:58.747939 2026] [:error] [pid 56238:tid 56366] [client 65.52.65.130:44615] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "acF0XlSqceFAZRgPDq6Y8AAAANI"]
[Tue Mar 24 01:12:00.334870 2026] [proxy_fcgi:error] [pid 56237:tid 56326] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:00.594189 2026] [proxy_fcgi:error] [pid 56237:tid 56321] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:00.972857 2026] [proxy_fcgi:error] [pid 56237:tid 56327] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:01.233576 2026] [proxy_fcgi:error] [pid 56237:tid 56324] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:01.488993 2026] [proxy_fcgi:error] [pid 56237:tid 56329] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:02.002210 2026] [proxy_fcgi:error] [pid 56237:tid 56334] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:02.520533 2026] [proxy_fcgi:error] [pid 56237:tid 56332] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:03.113120 2026] [proxy_fcgi:error] [pid 56237:tid 56338] [client 65.52.65.130:28687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:12:03.618033 2026] [:error] [pid 56237:tid 56325] [client 65.52.65.130:28687] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acF0YwymO0MnzQb90MMjRAAAAIQ"]
[Tue Mar 24 01:12:04.360566 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:43670] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acF0ZMrwr-l5A-s9ryBzQgAAAQg"]
[Tue Mar 24 01:12:05.610848 2026] [:error] [pid 56435:tid 56524] [client 65.52.65.130:45804] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acF0Zcrwr-l5A-s9ryBzTAAAARc"]
[Tue Mar 24 01:12:06.692705 2026] [:error] [pid 56435:tid 56513] [client 65.52.65.130:43351] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "acF0Zsrwr-l5A-s9ryBzVgAAAQw"]
[Tue Mar 24 01:12:07.405914 2026] [:error] [pid 56236:tid 56300] [client 65.52.65.130:22235] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acF0Z3apFgYp0uZ8twAf9gAAAEc"]
[Tue Mar 24 01:12:08.603944 2026] [:error] [pid 56236:tid 56302] [client 65.52.65.130:49744] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acF0aHapFgYp0uZ8twAf-QAAAEk"]
[Tue Mar 24 01:12:09.885429 2026] [:error] [pid 56237:tid 56331] [client 65.52.65.130:19313] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acF0aQymO0MnzQb90MMjRgAAAIo"]
[Tue Mar 24 01:12:11.213736 2026] [:error] [pid 56237:tid 56326] [client 65.52.65.130:22259] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acF0awymO0MnzQb90MMjSQAAAIU"]
[Tue Mar 24 01:12:13.337442 2026] [:error] [pid 56237:tid 56323] [client 65.52.65.130:52454] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acF0bQymO0MnzQb90MMjTAAAAII"]
[Tue Mar 24 01:12:14.999363 2026] [:error] [pid 56236:tid 56307] [client 65.52.65.130:2966] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acF0bnapFgYp0uZ8twAgDAAAAE4"]
[Tue Mar 24 01:12:17.316443 2026] [:error] [pid 56435:tid 56504] [client 65.52.65.130:30375] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acF0ccrwr-l5A-s9ryBziwAAAQU"]
[Tue Mar 24 01:12:18.357709 2026] [:error] [pid 56236:tid 56305] [client 65.52.65.130:45820] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acF0cnapFgYp0uZ8twAgEwAAAEw"]
[Tue Mar 24 01:12:20.085905 2026] [:error] [pid 56237:tid 56333] [client 65.52.65.130:21144] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acF0dAymO0MnzQb90MMjVwAAAIw"]
[Tue Mar 24 01:12:21.428357 2026] [:error] [pid 56238:tid 56356] [client 65.52.65.130:52466] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acF0dVSqceFAZRgPDq6ZEQAAAMg"]
[Tue Mar 24 01:12:22.633591 2026] [:error] [pid 56237:tid 56337] [client 65.52.65.130:24559] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acF0dgymO0MnzQb90MMjWwAAAJA"]
[Tue Mar 24 01:12:23.706165 2026] [:error] [pid 56435:tid 56515] [client 65.52.65.130:17773] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acF0d8rwr-l5A-s9ryBztwAAAQ4"]
[Tue Mar 24 01:12:24.855447 2026] [:error] [pid 56238:tid 56364] [client 65.52.65.130:47527] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acF0eFSqceFAZRgPDq6ZFgAAANA"]
[Tue Mar 24 01:12:26.436160 2026] [:error] [pid 56435:tid 56514] [client 65.52.65.130:36667] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acF0esrwr-l5A-s9ryBzyAAAAQ0"]
[Tue Mar 24 01:12:27.257456 2026] [:error] [pid 56435:tid 56499] [client 65.52.65.130:36174] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acF0e8rwr-l5A-s9ryBzyQAAAQA"]
[Tue Mar 24 01:12:28.444108 2026] [:error] [pid 56237:tid 56343] [client 65.52.65.130:42205] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acF0fAymO0MnzQb90MMjXgAAAJY"]
[Tue Mar 24 01:12:29.460424 2026] [:error] [pid 56435:tid 56503] [client 65.52.65.130:38745] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acF0fcrwr-l5A-s9ryBzzgAAAQQ"]
[Tue Mar 24 01:12:31.484621 2026] [:error] [pid 56435:tid 56504] [client 65.52.65.130:42238] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acF0f8rwr-l5A-s9ryBz2AAAAQU"]
[Tue Mar 24 01:12:32.743323 2026] [:error] [pid 56237:tid 56330] [client 65.52.65.130:47538] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acF0gAymO0MnzQb90MMjZQAAAIk"]
[Tue Mar 24 01:12:34.627895 2026] [:error] [pid 56236:tid 56317] [client 65.52.65.130:47531] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acF0gnapFgYp0uZ8twAgRAAAAFg"]
[Tue Mar 24 01:12:35.645962 2026] [:error] [pid 56237:tid 56322] [client 65.52.65.130:42546] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "acF0gwymO0MnzQb90MMjaAAAAIE"]
[Tue Mar 24 01:12:37.120618 2026] [:error] [pid 56435:tid 56514] [client 65.52.65.130:45754] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "acF0hcrwr-l5A-s9ryBz7AAAAQ0"]
[Tue Mar 24 01:12:38.340959 2026] [:error] [pid 56435:tid 56507] [client 65.52.65.130:45762] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "acF0hsrwr-l5A-s9ryBz8gAAAQc"]
[Tue Mar 24 01:12:39.410844 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:20649] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "acF0h8rwr-l5A-s9ryBz-QAAAQg"]
[Tue Mar 24 01:12:41.523459 2026] [:error] [pid 56238:tid 56370] [client 65.52.65.130:42223] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acF0iVSqceFAZRgPDq6ZMAAAANY"]
[Tue Mar 24 01:12:42.545427 2026] [:error] [pid 56238:tid 56371] [client 65.52.65.130:28673] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acF0ilSqceFAZRgPDq6ZNQAAANc"]
[Tue Mar 24 01:12:43.706114 2026] [:error] [pid 56236:tid 56315] [client 65.52.65.130:42225] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acF0i3apFgYp0uZ8twAgZwAAAFY"]
[Tue Mar 24 01:12:45.212310 2026] [:error] [pid 56237:tid 56341] [client 65.52.65.130:42213] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acF0jQymO0MnzQb90MMjeAAAAJQ"]
[Tue Mar 24 01:12:46.860124 2026] [:error] [pid 56435:tid 56504] [client 65.52.65.130:43340] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "acF0jsrwr-l5A-s9ryB0GQAAAQU"]
[Tue Mar 24 01:12:48.729813 2026] [:error] [pid 56237:tid 56324] [client 65.52.65.130:43681] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "acF0kAymO0MnzQb90MMjhAAAAIM"]
[Tue Mar 24 01:12:49.910009 2026] [:error] [pid 56236:tid 56308] [client 65.52.65.130:35781] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "acF0kXapFgYp0uZ8twAgawAAAE8"]
[Tue Mar 24 01:12:50.994354 2026] [:error] [pid 56237:tid 56344] [client 65.52.65.130:2881] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "acF0kgymO0MnzQb90MMjiwAAAJc"]
[Tue Mar 24 01:12:51.859522 2026] [:error] [pid 56435:tid 56499] [client 65.52.65.130:43367] [client 65.52.65.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acF0k8rwr-l5A-s9ryB0LwAAAQA"]
[Tue Mar 24 01:12:53.506416 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:21139] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acF0lVSqceFAZRgPDq6ZTAAAANM"]
[Tue Mar 24 01:12:54.760754 2026] [:error] [pid 56237:tid 56326] [client 65.52.65.130:47524] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acF0lgymO0MnzQb90MMjkgAAAIU"]
[Tue Mar 24 01:12:55.859320 2026] [:error] [pid 56238:tid 56348] [client 65.52.65.130:32474] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acF0l1SqceFAZRgPDq6ZTwAAAMA"]
[Tue Mar 24 01:12:57.355933 2026] [:error] [pid 56236:tid 56305] [client 65.52.65.130:43365] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acF0mXapFgYp0uZ8twAgfgAAAEw"]
[Tue Mar 24 01:12:58.193319 2026] [:error] [pid 56435:tid 56520] [client 65.52.65.130:33739] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acF0msrwr-l5A-s9ryB0SwAAARM"]
[Tue Mar 24 01:12:59.155247 2026] [:error] [pid 56237:tid 56343] [client 65.52.65.130:31103] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acF0mwymO0MnzQb90MMjmgAAAJY"]
[Tue Mar 24 01:13:00.293606 2026] [:error] [pid 56237:tid 56333] [client 65.52.65.130:27818] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acF0nAymO0MnzQb90MMjnwAAAIw"]
[Tue Mar 24 01:13:01.360181 2026] [:error] [pid 56238:tid 56368] [client 65.52.65.130:31101] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acF0nVSqceFAZRgPDq6ZXwAAANQ"]
[Tue Mar 24 01:13:02.858397 2026] [:error] [pid 56237:tid 56345] [client 65.52.65.130:31064] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acF0ngymO0MnzQb90MMjqgAAAJg"]
[Tue Mar 24 01:13:04.147284 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:04.488864 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:04.743990 2026] [proxy_fcgi:error] [pid 56238:tid 56352] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:06.342067 2026] [proxy_fcgi:error] [pid 56238:tid 56368] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:06.599774 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:06.933794 2026] [proxy_fcgi:error] [pid 56238:tid 56366] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:07.197621 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:07.450904 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:07.755933 2026] [proxy_fcgi:error] [pid 56238:tid 56359] [client 65.52.65.130:43654] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:13:08.350054 2026] [:error] [pid 56238:tid 56352] [client 65.52.65.130:43654] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "acF0pFSqceFAZRgPDq6ZkAAAAMQ"]
[Tue Mar 24 01:13:09.686868 2026] [:error] [pid 56237:tid 56330] [client 65.52.65.130:38769] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "acF0pQymO0MnzQb90MMjsQAAAIk"]
[Tue Mar 24 01:13:11.058044 2026] [:error] [pid 56435:tid 56523] [client 65.52.65.130:20725] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "acF0p8rwr-l5A-s9ryB0hQAAARY"]
[Tue Mar 24 01:13:12.374811 2026] [:error] [pid 56435:tid 56499] [client 65.52.65.130:42206] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "acF0qMrwr-l5A-s9ryB0kAAAAQA"]
[Tue Mar 24 01:13:13.576987 2026] [:error] [pid 56237:tid 56338] [client 65.52.65.130:42224] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "acF0qQymO0MnzQb90MMjuQAAAJE"]
[Tue Mar 24 01:13:14.560079 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:47490] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "acF0qsrwr-l5A-s9ryB0nwAAARQ"]
[Tue Mar 24 01:13:15.391958 2026] [:error] [pid 56237:tid 56339] [client 65.52.65.130:32395] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "acF0qwymO0MnzQb90MMjvwAAAJI"]
[Tue Mar 24 01:13:16.454289 2026] [:error] [pid 56238:tid 56365] [client 65.52.65.130:43345] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "acF0rFSqceFAZRgPDq6ZqgAAANE"]
[Tue Mar 24 01:13:18.545282 2026] [:error] [pid 56236:tid 56313] [client 65.52.65.130:35732] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "acF0rnapFgYp0uZ8twAgpgAAAFQ"]
[Tue Mar 24 01:13:19.671093 2026] [:error] [pid 56435:tid 56502] [client 65.52.65.130:17758] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "acF0r8rwr-l5A-s9ryB0sgAAAQM"]
[Tue Mar 24 01:13:20.548233 2026] [:error] [pid 56435:tid 56505] [client 65.52.65.130:31529] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "acF0sMrwr-l5A-s9ryB0vQAAAQY"]
[Tue Mar 24 01:13:21.773494 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:42206] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "acF0sVSqceFAZRgPDq6ZugAAAM4"]
[Tue Mar 24 01:13:22.896413 2026] [:error] [pid 56236:tid 56302] [client 65.52.65.130:20689] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "acF0snapFgYp0uZ8twAgrgAAAEk"]
[Tue Mar 24 01:13:24.320196 2026] [:error] [pid 56238:tid 56353] [client 65.52.65.130:20707] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "acF0tFSqceFAZRgPDq6Z0QAAAMU"]
[Tue Mar 24 01:13:25.414066 2026] [:error] [pid 56435:tid 56507] [client 65.52.65.130:24550] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "acF0tcrwr-l5A-s9ryB01QAAAQc"]
[Tue Mar 24 01:13:26.576852 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:52430] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "acF0tsrwr-l5A-s9ryB02wAAARE"]
[Tue Mar 24 01:13:27.484764 2026] [:error] [pid 56237:tid 56339] [client 65.52.65.130:26736] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "acF0twymO0MnzQb90MMj0gAAAJI"]
[Tue Mar 24 01:13:28.177137 2026] [:error] [pid 56435:tid 56501] [client 65.52.65.130:38760] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "acF0uMrwr-l5A-s9ryB05QAAAQI"]
[Tue Mar 24 01:13:29.479571 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:42212] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "acF0uVSqceFAZRgPDq6Z_QAAANM"]
[Tue Mar 24 01:13:30.691162 2026] [:error] [pid 56237:tid 56344] [client 65.52.65.130:52437] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "acF0ugymO0MnzQb90MMj4wAAAJc"]
[Tue Mar 24 01:13:32.426165 2026] [:error] [pid 56237:tid 56335] [client 65.52.65.130:38702] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "acF0vAymO0MnzQb90MMj5AAAAI4"]
[Tue Mar 24 01:13:33.575339 2026] [:error] [pid 56238:tid 56356] [client 65.52.65.130:35752] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "acF0vVSqceFAZRgPDq6aFwAAAMg"]
[Tue Mar 24 01:13:34.752313 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:42239] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "acF0vsrwr-l5A-s9ryB1FgAAARQ"]
[Tue Mar 24 01:13:35.875313 2026] [:error] [pid 56238:tid 56372] [client 65.52.65.130:31545] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "acF0v1SqceFAZRgPDq6aKQAAANg"]
[Tue Mar 24 01:13:37.003871 2026] [:error] [pid 56237:tid 56342] [client 65.52.65.130:20708] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sdm.php"] [unique_id "acF0wQymO0MnzQb90MMj6wAAAJU"]
[Tue Mar 24 01:13:38.545250 2026] [:error] [pid 56238:tid 56353] [client 65.52.65.130:52428] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sdm.php"] [unique_id "acF0wlSqceFAZRgPDq6aOgAAAMU"]
[Tue Mar 24 01:13:39.351880 2026] [:error] [pid 56435:tid 56520] [client 65.52.65.130:30360] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sdm.php"] [unique_id "acF0w8rwr-l5A-s9ryB1LgAAARM"]
[Tue Mar 24 01:13:40.643600 2026] [:error] [pid 56237:tid 56332] [client 65.52.65.130:15495] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sdm.php"] [unique_id "acF0xAymO0MnzQb90MMj-AAAAIs"]
[Tue Mar 24 01:13:42.027212 2026] [:error] [pid 56236:tid 56299] [client 65.52.65.130:20702] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file52.php"] [unique_id "acF0xnapFgYp0uZ8twAgvgAAAEY"]
[Tue Mar 24 01:13:43.321662 2026] [:error] [pid 56238:tid 56350] [client 65.52.65.130:36212] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file52.php"] [unique_id "acF0x1SqceFAZRgPDq6aXgAAAMI"]
[Tue Mar 24 01:13:45.464590 2026] [:error] [pid 56237:tid 56325] [client 65.52.65.130:30364] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file52.php"] [unique_id "acF0yQymO0MnzQb90MMkBwAAAIQ"]
[Tue Mar 24 01:13:46.392926 2026] [:error] [pid 56435:tid 56523] [client 65.52.65.130:17772] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file52.php"] [unique_id "acF0ysrwr-l5A-s9ryB1OgAAARY"]
[Tue Mar 24 01:13:47.669200 2026] [:error] [pid 56435:tid 56507] [client 65.52.65.130:17744] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "acF0y8rwr-l5A-s9ryB1QQAAAQc"]
[Tue Mar 24 01:13:48.585532 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:42230] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "acF0zFSqceFAZRgPDq6ajAAAAM4"]
[Tue Mar 24 01:13:49.717188 2026] [:error] [pid 56238:tid 56361] [client 65.52.65.130:20705] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "acF0zVSqceFAZRgPDq6anwAAAM0"]
[Tue Mar 24 01:13:50.585281 2026] [:error] [pid 56238:tid 56356] [client 65.52.65.130:15569] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "acF0zlSqceFAZRgPDq6apwAAAMg"]
[Tue Mar 24 01:13:51.673003 2026] [:error] [pid 56236:tid 56294] [client 65.52.65.130:27776] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acF0z3apFgYp0uZ8twAgxgAAAEE"]
[Tue Mar 24 01:13:54.405208 2026] [:error] [pid 56238:tid 56359] [client 65.52.65.130:19467] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acF00lSqceFAZRgPDq6azQAAAMs"]
[Tue Mar 24 01:13:55.658169 2026] [:error] [pid 56237:tid 56345] [client 65.52.65.130:24276] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acF00wymO0MnzQb90MMkHgAAAJg"]
[Tue Mar 24 01:13:56.713915 2026] [:error] [pid 56238:tid 56368] [client 65.52.65.130:15598] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acF01FSqceFAZRgPDq6a4AAAANQ"]
[Tue Mar 24 01:13:57.889154 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:42203] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acF01VSqceFAZRgPDq6a6wAAANM"]
[Tue Mar 24 01:13:59.992016 2026] [:error] [pid 56238:tid 56372] [client 65.52.65.130:14325] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acF011SqceFAZRgPDq6bAQAAANg"]
[Tue Mar 24 01:14:01.496616 2026] [:error] [pid 56237:tid 56331] [client 65.52.65.130:14315] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acF02QymO0MnzQb90MMkJQAAAIo"]
[Tue Mar 24 01:14:02.271573 2026] [:error] [pid 56237:tid 56323] [client 65.52.65.130:32499] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acF02gymO0MnzQb90MMkKgAAAII"]
[Tue Mar 24 01:14:03.796049 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:56002] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acF028rwr-l5A-s9ryB1cQAAAQg"]
[Tue Mar 24 01:14:05.347442 2026] [:error] [pid 56237:tid 56326] [client 65.52.65.130:53125] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acF03QymO0MnzQb90MMkMQAAAIU"]
[Tue Mar 24 01:14:07.175359 2026] [:error] [pid 56238:tid 56354] [client 65.52.65.130:14292] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acF031SqceFAZRgPDq6bMQAAAMY"]
[Tue Mar 24 01:14:08.522462 2026] [proxy_fcgi:error] [pid 56236:tid 56306] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:08.825992 2026] [proxy_fcgi:error] [pid 56236:tid 56295] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:09.082411 2026] [proxy_fcgi:error] [pid 56236:tid 56312] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:09.348536 2026] [proxy_fcgi:error] [pid 56236:tid 56294] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:09.662010 2026] [proxy_fcgi:error] [pid 56236:tid 56297] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:09.920108 2026] [proxy_fcgi:error] [pid 56236:tid 56298] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:10.237006 2026] [proxy_fcgi:error] [pid 56236:tid 56307] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:10.506893 2026] [proxy_fcgi:error] [pid 56236:tid 56301] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:10.764339 2026] [proxy_fcgi:error] [pid 56236:tid 56303] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:11.035001 2026] [proxy_fcgi:error] [pid 56236:tid 56310] [client 65.52.65.130:31506] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:14:11.287018 2026] [:error] [pid 56236:tid 56299] [client 65.52.65.130:31506] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "acF043apFgYp0uZ8twAg7gAAAEY"]
[Tue Mar 24 01:14:12.576507 2026] [:error] [pid 56238:tid 56365] [client 65.52.65.130:34284] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "acF05FSqceFAZRgPDq6bVQAAANE"]
[Tue Mar 24 01:14:13.965189 2026] [:error] [pid 56435:tid 56520] [client 65.52.65.130:49681] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "acF05crwr-l5A-s9ryB1hAAAARM"]
[Tue Mar 24 01:14:15.026637 2026] [:error] [pid 56237:tid 56344] [client 65.52.65.130:19498] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "acF05wymO0MnzQb90MMkTQAAAJc"]
[Tue Mar 24 01:14:16.327450 2026] [:error] [pid 56236:tid 56314] [client 65.52.65.130:27811] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acF06HapFgYp0uZ8twAg-gAAAFU"]
[Tue Mar 24 01:14:17.549320 2026] [:error] [pid 56435:tid 56513] [client 65.52.65.130:21489] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acF06crwr-l5A-s9ryB1kgAAAQw"]
[Tue Mar 24 01:14:19.462018 2026] [:error] [pid 56237:tid 56331] [client 65.52.65.130:15605] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acF06wymO0MnzQb90MMkYQAAAIo"]
[Tue Mar 24 01:14:20.825359 2026] [:error] [pid 56237:tid 56335] [client 65.52.65.130:17748] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acF07AymO0MnzQb90MMkbgAAAI4"]
[Tue Mar 24 01:14:23.097350 2026] [:error] [pid 56237:tid 56336] [client 65.52.65.130:31494] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acF07wymO0MnzQb90MMkdAAAAI8"]
[Tue Mar 24 01:14:24.348767 2026] [:error] [pid 56435:tid 56508] [client 65.52.65.130:26626] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acF08Mrwr-l5A-s9ryB1pwAAAQg"]
[Tue Mar 24 01:14:25.036246 2026] [:error] [pid 56435:tid 56501] [client 65.52.65.130:38656] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acF08crwr-l5A-s9ryB1rAAAAQI"]
[Tue Mar 24 01:14:26.600596 2026] [:error] [pid 56238:tid 56360] [client 65.52.65.130:17728] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acF08lSqceFAZRgPDq6bawAAAMw"]
[Tue Mar 24 01:14:27.886971 2026] [:error] [pid 56236:tid 56309] [client 65.52.65.130:31503] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thh.php"] [unique_id "acF083apFgYp0uZ8twAhGQAAAFA"]
[Tue Mar 24 01:14:29.748825 2026] [:error] [pid 56237:tid 56322] [client 65.52.65.130:49686] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thh.php"] [unique_id "acF09QymO0MnzQb90MMklwAAAIE"]
[Tue Mar 24 01:14:30.729483 2026] [:error] [pid 56435:tid 56511] [client 65.52.65.130:34279] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thh.php"] [unique_id "acF09srwr-l5A-s9ryB10gAAAQs"]
[Tue Mar 24 01:14:31.509911 2026] [:error] [pid 56237:tid 56341] [client 65.52.65.130:32495] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thh.php"] [unique_id "acF09wymO0MnzQb90MMknQAAAJQ"]
[Tue Mar 24 01:14:32.883178 2026] [:error] [pid 56435:tid 56525] [client 65.52.65.130:44212] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "acF0-Mrwr-l5A-s9ryB13QAAARg"]
[Tue Mar 24 01:14:33.954197 2026] [:error] [pid 56238:tid 56371] [client 65.52.65.130:19490] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "acF0-VSqceFAZRgPDq6bfAAAANc"]
[Tue Mar 24 01:14:35.478770 2026] [:error] [pid 56435:tid 56511] [client 65.52.65.130:32466] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "acF0-8rwr-l5A-s9ryB16wAAAQs"]
[Tue Mar 24 01:14:36.650174 2026] [:error] [pid 56236:tid 56301] [client 65.52.65.130:24271] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "acF0_HapFgYp0uZ8twAhKQAAAEg"]
[Tue Mar 24 01:14:38.141447 2026] [:error] [pid 56238:tid 56355] [client 65.52.65.130:15590] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acF0_lSqceFAZRgPDq6biwAAAMc"]
[Tue Mar 24 01:14:39.183415 2026] [:error] [pid 56435:tid 56516] [client 65.52.65.130:17786] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acF0_8rwr-l5A-s9ryB1_AAAAQ8"]
[Tue Mar 24 01:14:40.400652 2026] [:error] [pid 56236:tid 56314] [client 65.52.65.130:18005] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acF1AHapFgYp0uZ8twAhMgAAAFU"]
[Tue Mar 24 01:14:41.351093 2026] [:error] [pid 56237:tid 56344] [client 65.52.65.130:21484] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acF1AQymO0MnzQb90MMktgAAAJc"]
[Tue Mar 24 01:14:42.421307 2026] [:error] [pid 56435:tid 56510] [client 65.52.65.130:63501] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acF1Asrwr-l5A-s9ryB2EgAAAQo"]
[Tue Mar 24 01:14:43.865773 2026] [:error] [pid 56238:tid 56355] [client 65.52.65.130:32086] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acF1A1SqceFAZRgPDq6bmgAAAMc"]
[Tue Mar 24 01:14:44.885171 2026] [:error] [pid 56435:tid 56521] [client 65.52.65.130:63529] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acF1BMrwr-l5A-s9ryB2KgAAARQ"]
[Tue Mar 24 01:14:46.034998 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:53174] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acF1Bsrwr-l5A-s9ryB2MQAAARU"]
[Tue Mar 24 01:14:47.147916 2026] [:error] [pid 56236:tid 56310] [client 65.52.65.130:24466] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "acF1B3apFgYp0uZ8twAhPwAAAFE"]
[Tue Mar 24 01:14:48.772094 2026] [:error] [pid 56435:tid 56517] [client 65.52.65.130:24518] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "acF1CMrwr-l5A-s9ryB2SwAAARA"]
[Tue Mar 24 01:14:49.994290 2026] [:error] [pid 56435:tid 56517] [client 65.52.65.130:14288] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "acF1Ccrwr-l5A-s9ryB2WAAAARA"]
[Tue Mar 24 01:14:50.629664 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:29069] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/build.php"] [unique_id "acF1Csrwr-l5A-s9ryB2XwAAARU"]
[Tue Mar 24 01:14:52.064980 2026] [:error] [pid 56237:tid 56339] [client 65.52.65.130:49671] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "acF1DAymO0MnzQb90MMkyQAAAJI"]
[Tue Mar 24 01:14:53.286593 2026] [:error] [pid 56435:tid 56518] [client 65.52.65.130:39475] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "acF1Dcrwr-l5A-s9ryB2bQAAARE"]
[Tue Mar 24 01:14:54.784254 2026] [:error] [pid 56435:tid 56509] [client 65.52.65.130:51817] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "acF1Dsrwr-l5A-s9ryB2cgAAAQk"]
[Tue Mar 24 01:14:56.334823 2026] [:error] [pid 56435:tid 56501] [client 65.52.65.130:27473] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "acF1EMrwr-l5A-s9ryB2ewAAAQI"]
[Tue Mar 24 01:14:57.495228 2026] [:error] [pid 56238:tid 56360] [client 65.52.65.130:38688] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/520.php"] [unique_id "acF1EVSqceFAZRgPDq6bxwAAAMw"]
[Tue Mar 24 01:14:58.505959 2026] [:error] [pid 56435:tid 56517] [client 65.52.65.130:29096] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/520.php"] [unique_id "acF1Esrwr-l5A-s9ryB2fwAAARA"]
[Tue Mar 24 01:14:59.340032 2026] [:error] [pid 56236:tid 56305] [client 65.52.65.130:17765] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/520.php"] [unique_id "acF1E3apFgYp0uZ8twAhVAAAAEw"]
[Tue Mar 24 01:15:00.572395 2026] [:error] [pid 56435:tid 56502] [client 65.52.65.130:32506] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/520.php"] [unique_id "acF1FMrwr-l5A-s9ryB2jAAAAQM"]
[Tue Mar 24 01:15:01.764026 2026] [:error] [pid 56238:tid 56371] [client 65.52.65.130:22270] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "acF1FVSqceFAZRgPDq6b2AAAANc"]
[Tue Mar 24 01:15:03.216794 2026] [:error] [pid 56435:tid 56515] [client 65.52.65.130:24305] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "acF1F8rwr-l5A-s9ryB2mQAAAQ4"]
[Tue Mar 24 01:15:04.124963 2026] [:error] [pid 56435:tid 56517] [client 65.52.65.130:14306] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "acF1GMrwr-l5A-s9ryB2nwAAARA"]
[Tue Mar 24 01:15:05.571197 2026] [:error] [pid 56237:tid 56340] [client 65.52.65.130:38661] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "acF1GQymO0MnzQb90MMk5gAAAJM"]
[Tue Mar 24 01:15:06.451201 2026] [:error] [pid 56237:tid 56345] [client 65.52.65.130:49672] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "acF1GgymO0MnzQb90MMk7gAAAJg"]
[Tue Mar 24 01:15:07.999319 2026] [:error] [pid 56237:tid 56337] [client 65.52.65.130:19506] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "acF1GwymO0MnzQb90MMk-QAAAJA"]
[Tue Mar 24 01:15:09.516352 2026] [:error] [pid 56238:tid 56351] [client 65.52.65.130:26648] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "acF1HVSqceFAZRgPDq6b7QAAAMM"]
[Tue Mar 24 01:15:12.005456 2026] [proxy_fcgi:error] [pid 56236:tid 56310] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:12.263308 2026] [proxy_fcgi:error] [pid 56236:tid 56296] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:12.519730 2026] [proxy_fcgi:error] [pid 56236:tid 56317] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:12.862485 2026] [proxy_fcgi:error] [pid 56236:tid 56303] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:13.118493 2026] [proxy_fcgi:error] [pid 56236:tid 56313] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:13.670467 2026] [proxy_fcgi:error] [pid 56236:tid 56302] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:13.929680 2026] [proxy_fcgi:error] [pid 56236:tid 56316] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:14.210113 2026] [proxy_fcgi:error] [pid 56236:tid 56294] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:14.463966 2026] [proxy_fcgi:error] [pid 56236:tid 56304] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:14.724878 2026] [proxy_fcgi:error] [pid 56236:tid 56311] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:14.981901 2026] [proxy_fcgi:error] [pid 56236:tid 56300] [client 65.52.65.130:38657] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:15:15.237875 2026] [:error] [pid 56236:tid 56301] [client 65.52.65.130:38657] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acF1I3apFgYp0uZ8twAhggAAAEg"]
[Tue Mar 24 01:15:17.062716 2026] [:error] [pid 56238:tid 56351] [client 65.52.65.130:22613] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acF1JVSqceFAZRgPDq6b-QAAAMM"]
[Tue Mar 24 01:15:18.636418 2026] [:error] [pid 56435:tid 56516] [client 65.52.65.130:53122] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acF1Jsrwr-l5A-s9ryB22gAAAQ8"]
[Tue Mar 24 01:15:20.627825 2026] [:error] [pid 56238:tid 56351] [client 65.52.65.130:16346] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acF1KFSqceFAZRgPDq6cBgAAAMM"]
[Tue Mar 24 01:15:22.311646 2026] [:error] [pid 56236:tid 56300] [client 65.52.65.130:22649] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filesss.php"] [unique_id "acF1KnapFgYp0uZ8twAhjAAAAEc"]
[Tue Mar 24 01:15:23.119606 2026] [:error] [pid 56237:tid 56323] [client 65.52.65.130:22653] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filesss.php"] [unique_id "acF1KwymO0MnzQb90MMlNAAAAII"]
[Tue Mar 24 01:15:24.154826 2026] [:error] [pid 56435:tid 56519] [client 65.52.65.130:32400] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filesss.php"] [unique_id "acF1LMrwr-l5A-s9ryB27wAAARI"]
[Tue Mar 24 01:15:25.550223 2026] [:error] [pid 56238:tid 56349] [client 65.52.65.130:46201] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filesss.php"] [unique_id "acF1LVSqceFAZRgPDq6cGQAAAME"]
[Tue Mar 24 01:15:27.815461 2026] [:error] [pid 56435:tid 56510] [client 65.52.65.130:18032] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acF1L8rwr-l5A-s9ryB3CAAAAQo"]
[Tue Mar 24 01:15:28.742824 2026] [:error] [pid 56237:tid 56341] [client 65.52.65.130:20887] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acF1MAymO0MnzQb90MMlQgAAAJQ"]
[Tue Mar 24 01:15:29.780583 2026] [:error] [pid 56236:tid 56300] [client 65.52.65.130:42175] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acF1MXapFgYp0uZ8twAhmwAAAEc"]
[Tue Mar 24 01:15:31.275884 2026] [:error] [pid 56435:tid 56507] [client 65.52.65.130:21465] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acF1M8rwr-l5A-s9ryB3GgAAAQc"]
[Tue Mar 24 01:15:32.398920 2026] [:error] [pid 56238:tid 56355] [client 65.52.65.130:63544] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acF1NFSqceFAZRgPDq6cPwAAAMc"]
[Tue Mar 24 01:15:33.508072 2026] [:error] [pid 56237:tid 56343] [client 65.52.65.130:18041] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acF1NQymO0MnzQb90MMlVgAAAJY"]
[Tue Mar 24 01:15:35.993728 2026] [:error] [pid 56238:tid 56362] [client 65.52.65.130:15542] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acF1N1SqceFAZRgPDq6cUwAAAM4"]
[Tue Mar 24 01:15:36.876173 2026] [:error] [pid 56238:tid 56370] [client 65.52.65.130:18020] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acF1OFSqceFAZRgPDq6cWQAAANY"]
[Tue Mar 24 01:15:39.165377 2026] [:error] [pid 56435:tid 56505] [client 65.52.65.130:23232] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "acF1O8rwr-l5A-s9ryB3PgAAAQY"]
[Tue Mar 24 01:15:41.417018 2026] [:error] [pid 56237:tid 56331] [client 65.52.65.130:44178] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "acF1PQymO0MnzQb90MMleAAAAIo"]
[Tue Mar 24 01:15:43.286445 2026] [:error] [pid 56238:tid 56366] [client 65.52.65.130:37419] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "acF1P1SqceFAZRgPDq6cZwAAANI"]
[Tue Mar 24 01:15:44.952399 2026] [:error] [pid 56236:tid 56313] [client 65.52.65.130:15604] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "acF1QHapFgYp0uZ8twAhyQAAAFQ"]
[Tue Mar 24 01:15:46.104213 2026] [:error] [pid 56435:tid 56507] [client 65.52.65.130:39430] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "acF1Qsrwr-l5A-s9ryB3VQAAAQc"]
[Tue Mar 24 01:15:47.228166 2026] [:error] [pid 56435:tid 56513] [client 65.52.65.130:21468] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "acF1Q8rwr-l5A-s9ryB3XgAAAQw"]
[Tue Mar 24 01:15:48.721536 2026] [:error] [pid 56435:tid 56522] [client 65.52.65.130:22414] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "acF1RMrwr-l5A-s9ryB3cAAAARU"]
[Tue Mar 24 01:15:50.051996 2026] [:error] [pid 56236:tid 56301] [client 65.52.65.130:45437] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "acF1RnapFgYp0uZ8twAh0QAAAEg"]
[Tue Mar 24 01:15:51.286025 2026] [:error] [pid 56435:tid 56514] [client 65.52.65.130:45412] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acF1R8rwr-l5A-s9ryB3ggAAAQ0"]
[Tue Mar 24 01:15:52.293854 2026] [:error] [pid 56435:tid 56504] [client 65.52.65.130:16984] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acF1SMrwr-l5A-s9ryB3jQAAAQU"]
[Tue Mar 24 01:15:53.497400 2026] [:error] [pid 56435:tid 56503] [client 65.52.65.130:56056] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acF1Scrwr-l5A-s9ryB3lgAAAQQ"]
[Tue Mar 24 01:15:54.829516 2026] [:error] [pid 56435:tid 56499] [client 65.52.65.130:29460] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acF1Ssrwr-l5A-s9ryB3nwAAAQA"]
[Tue Mar 24 01:15:56.346805 2026] [:error] [pid 56435:tid 56505] [client 65.52.65.130:22536] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acF1TMrwr-l5A-s9ryB3tAAAAQY"]
[Tue Mar 24 01:15:58.496105 2026] [:error] [pid 56236:tid 56304] [client 65.52.65.130:41352] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acF1TnapFgYp0uZ8twAh3gAAAEs"]
[Tue Mar 24 01:16:00.400830 2026] [:error] [pid 56236:tid 56310] [client 65.52.65.130:43743] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acF1UHapFgYp0uZ8twAh5QAAAFE"]
[Tue Mar 24 01:16:01.696901 2026] [:error] [pid 56236:tid 56313] [client 65.52.65.130:3009] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acF1UXapFgYp0uZ8twAh6AAAAFQ"]
[Tue Mar 24 01:16:03.299761 2026] [:error] [pid 56238:tid 56352] [client 65.52.65.130:13993] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/des.php"] [unique_id "acF1U1SqceFAZRgPDq6cuAAAAMQ"]
[Tue Mar 24 01:16:04.298073 2026] [:error] [pid 56238:tid 56372] [client 65.52.65.130:48095] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/des.php"] [unique_id "acF1VFSqceFAZRgPDq6cwQAAANg"]
[Tue Mar 24 01:16:06.227085 2026] [:error] [pid 56238:tid 56358] [client 65.52.65.130:37087] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/des.php"] [unique_id "acF1VlSqceFAZRgPDq6c0gAAAMo"]
[Tue Mar 24 01:16:07.504848 2026] [:error] [pid 56435:tid 56516] [client 65.52.65.130:13963] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/des.php"] [unique_id "acF1V8rwr-l5A-s9ryB4AgAAAQ8"]
[Tue Mar 24 01:16:08.614278 2026] [:error] [pid 56236:tid 56310] [client 65.52.65.130:32861] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kaza.php"] [unique_id "acF1WHapFgYp0uZ8twAh-QAAAFE"]
[Tue Mar 24 01:16:10.475301 2026] [:error] [pid 56238:tid 56367] [client 65.52.65.130:41833] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kaza.php"] [unique_id "acF1WlSqceFAZRgPDq6c-wAAANM"]
[Tue Mar 24 01:16:12.032160 2026] [:error] [pid 56237:tid 56327] [client 65.52.65.130:29946] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kaza.php"] [unique_id "acF1XAymO0MnzQb90MMlywAAAIY"]
[Tue Mar 24 01:16:13.419651 2026] [:error] [pid 56238:tid 56353] [client 65.52.65.130:13990] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kaza.php"] [unique_id "acF1XVSqceFAZRgPDq6dDAAAAMU"]
[Tue Mar 24 01:16:14.430014 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 65.52.65.130:25884] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:14.701487 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 65.52.65.130:25884] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:14.963441 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 65.52.65.130:25884] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:15.218668 2026] [proxy_fcgi:error] [pid 56238:tid 56348] [client 65.52.65.130:25884] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:15.489762 2026] [proxy_fcgi:error] [pid 56238:tid 56357] [client 65.52.65.130:25884] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:15.815170 2026] [proxy_fcgi:error] [pid 56238:tid 56368] [client 65.52.65.130:25884] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:16:16.081581 2026] [proxy_fcgi:error] [pid 56238:tid 56372] [client 65.52.65.130:25884] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:28.469109 2026] [proxy_fcgi:error] [pid 3137:tid 3156] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:28.711853 2026] [proxy_fcgi:error] [pid 3137:tid 3163] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:28.963765 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:29.200323 2026] [proxy_fcgi:error] [pid 3137:tid 3139] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:29.442697 2026] [proxy_fcgi:error] [pid 3137:tid 3146] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:29.678373 2026] [proxy_fcgi:error] [pid 3137:tid 3160] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:29.942739 2026] [proxy_fcgi:error] [pid 3137:tid 3148] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:30.179560 2026] [proxy_fcgi:error] [pid 3137:tid 3151] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:30.424801 2026] [proxy_fcgi:error] [pid 3137:tid 3139] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:30.664249 2026] [proxy_fcgi:error] [pid 3137:tid 3146] [client 172.213.236.250:31059] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:35:30.935497 2026] [:error] [pid 3137:tid 3158] [client 172.213.236.250:31059] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acGkEpdZesutm6dfYM-6PQAAANM"]
[Tue Mar 24 04:35:31.443918 2026] [:error] [pid 38767:tid 38777] [client 172.213.236.250:14738] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acGkE_wkUqN4GJAI5oVAHAAAAQc"]
[Tue Mar 24 04:35:32.461154 2026] [:error] [pid 3137:tid 3139] [client 172.213.236.250:8163] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acGkFJdZesutm6dfYM-6QQAAAMA"]
[Tue Mar 24 04:35:33.326941 2026] [:error] [pid 3137:tid 3141] [client 172.213.236.250:1273] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acGkFZdZesutm6dfYM-6SQAAAMI"]
[Tue Mar 24 04:35:34.342907 2026] [:error] [pid 38767:tid 38784] [client 172.213.236.250:31053] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acGkFvwkUqN4GJAI5oVAKAAAAQ4"]
[Tue Mar 24 04:35:35.556983 2026] [:error] [pid 38767:tid 38794] [client 172.213.236.250:31056] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acGkF_wkUqN4GJAI5oVALQAAARg"]
[Tue Mar 24 04:35:36.298924 2026] [:error] [pid 3031:tid 3097] [client 172.213.236.250:14804] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acGkGKJBKytnG47nuibC6wAAAFU"]
[Tue Mar 24 04:35:36.925471 2026] [:error] [pid 3032:tid 3112] [client 172.213.236.250:12124] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "acGkGCa_-JXXD03-JNyqvQAAAIk"]
[Tue Mar 24 04:35:37.559697 2026] [:error] [pid 3030:tid 3071] [client 172.213.236.250:19819] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acGkGQyOuILyynfcqfnikwAAABY"]
[Tue Mar 24 04:35:38.431916 2026] [:error] [pid 38767:tid 38780] [client 172.213.236.250:8151] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acGkGvwkUqN4GJAI5oVANAAAAQo"]
[Tue Mar 24 04:35:39.342319 2026] [:error] [pid 3032:tid 3124] [client 172.213.236.250:12118] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acGkGya_-JXXD03-JNyqyQAAAJU"]
[Tue Mar 24 04:35:40.093447 2026] [:error] [pid 3032:tid 3104] [client 172.213.236.250:12858] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acGkHCa_-JXXD03-JNyqzQAAAIE"]
[Tue Mar 24 04:35:41.461025 2026] [:error] [pid 38767:tid 38780] [client 172.213.236.250:50522] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "acGkHfwkUqN4GJAI5oVAPwAAAQo"]
[Tue Mar 24 04:35:42.089129 2026] [:error] [pid 3032:tid 3109] [client 172.213.236.250:1239] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "acGkHia_-JXXD03-JNyq1wAAAIY"]
[Tue Mar 24 04:35:42.923827 2026] [:error] [pid 3031:tid 3086] [client 172.213.236.250:14783] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "acGkHqJBKytnG47nuibC9gAAAEo"]
[Tue Mar 24 04:35:43.837369 2026] [:error] [pid 3032:tid 3105] [client 172.213.236.250:8187] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "acGkHya_-JXXD03-JNyq2wAAAII"]
[Tue Mar 24 04:35:44.617946 2026] [:error] [pid 3032:tid 3125] [client 172.213.236.250:19784] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acGkICa_-JXXD03-JNyq3wAAAJY"]
[Tue Mar 24 04:35:45.461534 2026] [:error] [pid 3137:tid 3139] [client 172.213.236.250:31439] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acGkIZdZesutm6dfYM-6XAAAAMA"]
[Tue Mar 24 04:35:46.029414 2026] [:error] [pid 3030:tid 3052] [client 172.213.236.250:8145] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acGkIgyOuILyynfcqfniowAAAAM"]
[Tue Mar 24 04:35:46.769091 2026] [:error] [pid 3030:tid 3051] [client 172.213.236.250:16585] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "acGkIgyOuILyynfcqfniqQAAAAI"]
[Tue Mar 24 04:35:48.358090 2026] [:error] [pid 3032:tid 3111] [client 172.213.236.250:12156] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGkJCa_-JXXD03-JNyq4QAAAIg"]
[Tue Mar 24 04:35:48.998679 2026] [:error] [pid 38767:tid 38776] [client 172.213.236.250:14757] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGkJPwkUqN4GJAI5oVAVwAAAQY"]
[Tue Mar 24 04:35:49.935064 2026] [:error] [pid 38767:tid 38784] [client 172.213.236.250:51226] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGkJfwkUqN4GJAI5oVAXQAAAQ4"]
[Tue Mar 24 04:35:50.603907 2026] [:error] [pid 38767:tid 38785] [client 172.213.236.250:14841] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGkJvwkUqN4GJAI5oVAYAAAAQ8"]
[Tue Mar 24 04:35:52.294401 2026] [:error] [pid 3137:tid 3158] [client 172.213.236.250:31050] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "acGkKJdZesutm6dfYM-6bwAAANM"]
[Tue Mar 24 04:35:53.279609 2026] [:error] [pid 38767:tid 38787] [client 172.213.236.250:7990] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "acGkKfwkUqN4GJAI5oVAawAAARE"]
[Tue Mar 24 04:35:54.171436 2026] [:error] [pid 38767:tid 38789] [client 172.213.236.250:8408] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "acGkKvwkUqN4GJAI5oVAdAAAARM"]
[Tue Mar 24 04:35:55.374377 2026] [:error] [pid 38767:tid 38789] [client 172.213.236.250:12852] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "acGkK_wkUqN4GJAI5oVAgQAAARM"]
[Tue Mar 24 04:35:56.144021 2026] [:error] [pid 3031:tid 3079] [client 172.213.236.250:12096] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acGkLKJBKytnG47nuibDBAAAAEM"]
[Tue Mar 24 04:35:57.381358 2026] [:error] [pid 38767:tid 38794] [client 172.213.236.250:7980] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acGkLfwkUqN4GJAI5oVAnwAAARg"]
[Tue Mar 24 04:35:58.911556 2026] [:error] [pid 3032:tid 3123] [client 172.213.236.250:1236] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acGkLia_-JXXD03-JNyq6wAAAJQ"]
[Tue Mar 24 04:36:00.217533 2026] [:error] [pid 3032:tid 3106] [client 172.213.236.250:14789] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acGkMCa_-JXXD03-JNyq7QAAAIM"]
[Tue Mar 24 04:36:01.444309 2026] [:error] [pid 3031:tid 3096] [client 172.213.236.250:8142] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "acGkMaJBKytnG47nuibDEgAAAFQ"]
[Tue Mar 24 04:36:02.558750 2026] [:error] [pid 3031:tid 3079] [client 172.213.236.250:12845] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "acGkMqJBKytnG47nuibDGwAAAEM"]
[Tue Mar 24 04:36:03.622073 2026] [:error] [pid 38767:tid 38779] [client 172.213.236.250:19803] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "acGkM_wkUqN4GJAI5oVArQAAAQk"]
[Tue Mar 24 04:36:04.262561 2026] [:error] [pid 3031:tid 3095] [client 172.213.236.250:8171] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "acGkNKJBKytnG47nuibDIgAAAFM"]
[Tue Mar 24 04:36:05.507499 2026] [:error] [pid 3137:tid 3150] [client 172.213.236.250:7948] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acGkNZdZesutm6dfYM-6lAAAAMs"]
[Tue Mar 24 04:36:06.476890 2026] [:error] [pid 38767:tid 38792] [client 172.213.236.250:8444] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acGkNvwkUqN4GJAI5oVAsAAAARY"]
[Tue Mar 24 04:36:07.330037 2026] [:error] [pid 38767:tid 38786] [client 172.213.236.250:1217] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acGkN_wkUqN4GJAI5oVAugAAARA"]
[Tue Mar 24 04:36:08.081873 2026] [:error] [pid 38767:tid 38780] [client 172.213.236.250:8389] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acGkOPwkUqN4GJAI5oVAwAAAAQo"]
[Tue Mar 24 04:36:08.863708 2026] [:error] [pid 3032:tid 3113] [client 172.213.236.250:29429] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "acGkOCa_-JXXD03-JNyrDwAAAIo"]
[Tue Mar 24 04:36:09.705855 2026] [:error] [pid 3137:tid 3145] [client 172.213.236.250:8387] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "acGkOZdZesutm6dfYM-6mQAAAMY"]
[Tue Mar 24 04:36:10.540332 2026] [:error] [pid 3032:tid 3121] [client 172.213.236.250:12132] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "acGkOia_-JXXD03-JNyrHAAAAJI"]
[Tue Mar 24 04:36:11.468311 2026] [:error] [pid 3031:tid 3076] [client 172.213.236.250:7993] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "acGkO6JBKytnG47nuibDMAAAAEA"]
[Tue Mar 24 04:36:12.636117 2026] [:error] [pid 3031:tid 3082] [client 172.213.236.250:12139] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acGkPKJBKytnG47nuibDNAAAAEY"]
[Tue Mar 24 04:36:13.691185 2026] [:error] [pid 38767:tid 38789] [client 172.213.236.250:14731] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acGkPfwkUqN4GJAI5oVA3gAAARM"]
[Tue Mar 24 04:36:14.539657 2026] [:error] [pid 3137:tid 3142] [client 172.213.236.250:39610] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acGkPpdZesutm6dfYM-6nQAAAMM"]
[Tue Mar 24 04:36:15.355128 2026] [:error] [pid 3032:tid 3109] [client 172.213.236.250:39593] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acGkPya_-JXXD03-JNyrKQAAAIY"]
[Tue Mar 24 04:36:17.779596 2026] [:error] [pid 3032:tid 3118] [client 172.213.236.250:7994] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acGkQSa_-JXXD03-JNyrLAAAAI8"]
[Tue Mar 24 04:36:19.675724 2026] [:error] [pid 3137:tid 3154] [client 172.213.236.250:39579] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acGkQ5dZesutm6dfYM-6qgAAAM8"]
[Tue Mar 24 04:36:23.127876 2026] [:error] [pid 3031:tid 3084] [client 172.213.236.250:31438] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acGkR6JBKytnG47nuibDRgAAAEg"]
[Tue Mar 24 04:36:24.691341 2026] [:error] [pid 3030:tid 3067] [client 172.213.236.250:7956] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acGkSAyOuILyynfcqfni3AAAABI"]
[Tue Mar 24 04:36:25.517548 2026] [:error] [pid 3030:tid 3070] [client 172.213.236.250:7533] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acGkSQyOuILyynfcqfni5AAAABU"]
[Tue Mar 24 04:36:26.131854 2026] [:error] [pid 3031:tid 3096] [client 172.213.236.250:34112] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acGkSqJBKytnG47nuibDVQAAAFQ"]
[Tue Mar 24 04:36:26.790598 2026] [:error] [pid 38767:tid 38772] [client 172.213.236.250:14729] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acGkSvwkUqN4GJAI5oVBEgAAAQI"]
[Tue Mar 24 04:36:27.604929 2026] [:error] [pid 3032:tid 3127] [client 172.213.236.250:31452] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acGkSya_-JXXD03-JNyrPgAAAJc"]
[Tue Mar 24 04:36:28.515727 2026] [:error] [pid 38767:tid 38783] [client 172.213.236.250:8139] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acGkTPwkUqN4GJAI5oVBGgAAAQ0"]
[Tue Mar 24 04:36:29.254344 2026] [:error] [pid 3030:tid 3052] [client 172.213.236.250:51291] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acGkTQyOuILyynfcqfni9gAAAAM"]
[Tue Mar 24 04:36:29.995613 2026] [:error] [pid 3032:tid 3114] [client 172.213.236.250:39555] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acGkTSa_-JXXD03-JNyrSgAAAIs"]
[Tue Mar 24 04:36:31.458811 2026] [proxy_fcgi:error] [pid 3031:tid 3082] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:31.694838 2026] [proxy_fcgi:error] [pid 3031:tid 3081] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:31.934896 2026] [proxy_fcgi:error] [pid 3031:tid 3090] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:32.172078 2026] [proxy_fcgi:error] [pid 3031:tid 3078] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:32.460001 2026] [proxy_fcgi:error] [pid 3031:tid 3093] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:32.701320 2026] [proxy_fcgi:error] [pid 3031:tid 3092] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:32.955127 2026] [proxy_fcgi:error] [pid 3031:tid 3089] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:33.264030 2026] [proxy_fcgi:error] [pid 3031:tid 3091] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:33.541956 2026] [proxy_fcgi:error] [pid 3031:tid 3100] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:33.873304 2026] [proxy_fcgi:error] [pid 3031:tid 3094] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:34.135392 2026] [proxy_fcgi:error] [pid 3031:tid 3086] [client 172.213.236.250:12122] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:36:34.368102 2026] [:error] [pid 3031:tid 3099] [client 172.213.236.250:12122] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acGkUqJBKytnG47nuibDcwAAAFc"]
[Tue Mar 24 04:36:35.041670 2026] [:error] [pid 38767:tid 38788] [client 172.213.236.250:7515] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acGkU_wkUqN4GJAI5oVBJQAAARI"]
[Tue Mar 24 04:36:35.769741 2026] [:error] [pid 38767:tid 38781] [client 172.213.236.250:7545] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acGkU_wkUqN4GJAI5oVBKwAAAQs"]
[Tue Mar 24 04:36:36.476075 2026] [:error] [pid 38767:tid 38793] [client 172.213.236.250:51596] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acGkVPwkUqN4GJAI5oVBMAAAARc"]
[Tue Mar 24 04:36:37.107828 2026] [:error] [pid 38767:tid 38789] [client 172.213.236.250:34153] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acGkVfwkUqN4GJAI5oVBNwAAARM"]
[Tue Mar 24 04:36:39.226400 2026] [:error] [pid 3137:tid 3155] [client 172.213.236.250:28370] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acGkV5dZesutm6dfYM-6wAAAANA"]
[Tue Mar 24 04:36:40.411873 2026] [:error] [pid 3031:tid 3080] [client 172.213.236.250:8150] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acGkWKJBKytnG47nuibDfwAAAEQ"]
[Tue Mar 24 04:36:41.431278 2026] [:error] [pid 38767:tid 38778] [client 172.213.236.250:14843] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acGkWfwkUqN4GJAI5oVBSgAAAQg"]
[Tue Mar 24 04:36:42.928437 2026] [:error] [pid 38767:tid 38776] [client 172.213.236.250:14813] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acGkWvwkUqN4GJAI5oVBTwAAAQY"]
[Tue Mar 24 04:36:44.295478 2026] [:error] [pid 3137:tid 3160] [client 172.213.236.250:8214] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acGkXJdZesutm6dfYM-6zgAAANU"]
[Tue Mar 24 04:36:45.556965 2026] [:error] [pid 3031:tid 3089] [client 172.213.236.250:31471] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acGkXaJBKytnG47nuibDhwAAAE0"]
[Tue Mar 24 04:36:46.464380 2026] [:error] [pid 3030:tid 3057] [client 172.213.236.250:52130] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acGkXgyOuILyynfcqfnjAQAAAAg"]
[Tue Mar 24 04:36:47.492875 2026] [:error] [pid 3031:tid 3080] [client 172.213.236.250:51293] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acGkX6JBKytnG47nuibDkwAAAEQ"]
[Tue Mar 24 04:36:48.707466 2026] [:error] [pid 3032:tid 3122] [client 172.213.236.250:51247] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acGkYCa_-JXXD03-JNyrfwAAAJM"]
[Tue Mar 24 04:36:50.742674 2026] [:error] [pid 3031:tid 3081] [client 172.213.236.250:14733] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acGkYqJBKytnG47nuibDoAAAAEU"]
[Tue Mar 24 04:36:51.468814 2026] [:error] [pid 3031:tid 3084] [client 172.213.236.250:16905] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acGkY6JBKytnG47nuibDogAAAEg"]
[Tue Mar 24 04:36:52.285159 2026] [:error] [pid 38767:tid 38773] [client 172.213.236.250:51650] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "acGkZPwkUqN4GJAI5oVBXgAAAQM"]
[Tue Mar 24 04:36:53.218075 2026] [:error] [pid 3030:tid 3069] [client 172.213.236.250:28368] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "acGkZQyOuILyynfcqfnjDQAAABQ"]
[Tue Mar 24 04:36:53.897706 2026] [:error] [pid 38767:tid 38772] [client 172.213.236.250:8407] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "acGkZfwkUqN4GJAI5oVBYQAAAQI"]
[Tue Mar 24 04:36:54.735984 2026] [:error] [pid 38767:tid 38775] [client 172.213.236.250:28368] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "acGkZvwkUqN4GJAI5oVBbAAAAQU"]
[Tue Mar 24 04:36:55.452565 2026] [:error] [pid 3030:tid 3050] [client 172.213.236.250:12115] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "acGkZwyOuILyynfcqfnjEgAAAAE"]
[Tue Mar 24 04:36:56.575819 2026] [:error] [pid 3137:tid 3152] [client 172.213.236.250:7527] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "acGkaJdZesutm6dfYM-63wAAAM0"]
[Tue Mar 24 04:36:57.426941 2026] [:error] [pid 38767:tid 38773] [client 172.213.236.250:39574] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "acGkafwkUqN4GJAI5oVBegAAAQM"]
[Tue Mar 24 04:36:59.030304 2026] [:error] [pid 3137:tid 3153] [client 172.213.236.250:7518] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "acGka5dZesutm6dfYM-65AAAAM4"]
[Tue Mar 24 04:37:01.346298 2026] [:error] [pid 3030:tid 3064] [client 172.213.236.250:7546] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/wp-blog.php"] [unique_id "acGkbQyOuILyynfcqfnjIwAAAA8"]
[Tue Mar 24 04:37:02.593459 2026] [:error] [pid 3030:tid 3062] [client 172.213.236.250:51666] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/wp-blog.php"] [unique_id "acGkbgyOuILyynfcqfnjJQAAAA0"]
[Tue Mar 24 04:37:04.654053 2026] [:error] [pid 3137:tid 3141] [client 172.213.236.250:1370] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/wp-blog.php"] [unique_id "acGkcJdZesutm6dfYM-7BQAAAMI"]
[Tue Mar 24 04:37:06.532968 2026] [:error] [pid 3030:tid 3057] [client 172.213.236.250:39578] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/wp-blog.php"] [unique_id "acGkcgyOuILyynfcqfnjNQAAAAg"]
[Tue Mar 24 04:37:13.567470 2026] [:error] [pid 3137:tid 3157] [client 172.213.236.250:34154] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGkeZdZesutm6dfYM-7MgAAANI"]
[Tue Mar 24 04:37:15.055002 2026] [:error] [pid 38767:tid 38785] [client 172.213.236.250:8194] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGke_wkUqN4GJAI5oVBygAAAQ8"]
[Tue Mar 24 04:37:15.928034 2026] [:error] [pid 3032:tid 3104] [client 172.213.236.250:7338] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGkeya_-JXXD03-JNyrtAAAAIE"]
[Tue Mar 24 04:37:17.883618 2026] [:error] [pid 3032:tid 3114] [client 172.213.236.250:34114] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acGkfSa_-JXXD03-JNyruQAAAIs"]
[Tue Mar 24 04:37:18.985410 2026] [:error] [pid 3032:tid 3108] [client 172.213.236.250:51681] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "acGkfia_-JXXD03-JNyrvQAAAIU"]
[Tue Mar 24 04:37:20.398185 2026] [:error] [pid 3137:tid 3145] [client 172.213.236.250:52188] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "acGkgJdZesutm6dfYM-7QwAAAMY"]
[Tue Mar 24 04:37:21.785559 2026] [:error] [pid 3137:tid 3144] [client 172.213.236.250:7504] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "acGkgZdZesutm6dfYM-7TAAAAMU"]
[Tue Mar 24 04:37:23.522998 2026] [:error] [pid 38767:tid 38782] [client 172.213.236.250:21270] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "acGkg_wkUqN4GJAI5oVB6QAAAQw"]
[Tue Mar 24 04:37:25.195671 2026] [:error] [pid 38767:tid 38787] [client 172.213.236.250:15886] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drhunthq.php"] [unique_id "acGkhfwkUqN4GJAI5oVB9gAAARE"]
[Tue Mar 24 04:37:26.673352 2026] [:error] [pid 3031:tid 3077] [client 172.213.236.250:11725] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drhunthq.php"] [unique_id "acGkhqJBKytnG47nuibD1QAAAEE"]
[Tue Mar 24 04:37:27.443593 2026] [:error] [pid 3032:tid 3109] [client 172.213.236.250:28838] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drhunthq.php"] [unique_id "acGkhya_-JXXD03-JNyr3wAAAIY"]
[Tue Mar 24 04:37:31.140647 2026] [:error] [pid 3137:tid 3157] [client 172.213.236.250:21361] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drhunthq.php"] [unique_id "acGki5dZesutm6dfYM-7bgAAANI"]
[Tue Mar 24 04:37:32.543503 2026] [:error] [pid 3137:tid 3152] [client 172.213.236.250:24384] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/index.php"] [unique_id "acGkjJdZesutm6dfYM-7cgAAAM0"]
[Tue Mar 24 04:37:33.672489 2026] [:error] [pid 38767:tid 38781] [client 172.213.236.250:14450] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/index.php"] [unique_id "acGkjfwkUqN4GJAI5oVCOAAAAQs"]
[Tue Mar 24 04:37:34.701032 2026] [proxy_fcgi:error] [pid 3031:tid 3082] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:34.940085 2026] [proxy_fcgi:error] [pid 3031:tid 3099] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:35.177827 2026] [proxy_fcgi:error] [pid 3031:tid 3093] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:35.454748 2026] [proxy_fcgi:error] [pid 3031:tid 3079] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:35.694787 2026] [proxy_fcgi:error] [pid 3031:tid 3097] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:35.936166 2026] [proxy_fcgi:error] [pid 3031:tid 3092] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:36.175547 2026] [proxy_fcgi:error] [pid 3031:tid 3083] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:37.074998 2026] [proxy_fcgi:error] [pid 3031:tid 3078] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:37.397969 2026] [proxy_fcgi:error] [pid 3031:tid 3095] [client 172.213.236.250:42794] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:37:37.876052 2026] [:error] [pid 3031:tid 3081] [client 172.213.236.250:42794] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acGkkaJBKytnG47nuibD9QAAAEU"]
[Tue Mar 24 04:37:38.457673 2026] [:error] [pid 3030:tid 3058] [client 172.213.236.250:42785] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acGkkgyOuILyynfcqfnjYgAAAAk"]
[Tue Mar 24 04:37:39.149035 2026] [:error] [pid 38767:tid 38772] [client 172.213.236.250:40940] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acGkk_wkUqN4GJAI5oVCSwAAAQI"]
[Tue Mar 24 04:37:39.837600 2026] [:error] [pid 3032:tid 3118] [client 172.213.236.250:1148] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acGkkya_-JXXD03-JNyr9wAAAI8"]
[Tue Mar 24 04:37:40.688519 2026] [:error] [pid 3137:tid 3158] [client 172.213.236.250:1737] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acGklJdZesutm6dfYM-7gwAAANM"]
[Tue Mar 24 04:37:41.310949 2026] [:error] [pid 38767:tid 38784] [client 172.213.236.250:7698] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acGklfwkUqN4GJAI5oVCVwAAAQ4"]
[Tue Mar 24 04:37:42.293459 2026] [:error] [pid 38767:tid 38782] [client 172.213.236.250:1118] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acGklvwkUqN4GJAI5oVCYAAAAQw"]
[Tue Mar 24 04:37:43.687060 2026] [:error] [pid 3031:tid 3078] [client 172.213.236.250:22329] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acGkl6JBKytnG47nuibEAQAAAEI"]
[Tue Mar 24 04:37:44.481731 2026] [:error] [pid 3030:tid 3062] [client 172.213.236.250:15161] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acGkmAyOuILyynfcqfnjawAAAA0"]
[Tue Mar 24 04:37:45.094628 2026] [:error] [pid 3032:tid 3118] [client 172.213.236.250:22798] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acGkmSa_-JXXD03-JNysBAAAAI8"]
[Tue Mar 24 04:37:46.618255 2026] [:error] [pid 38767:tid 38792] [client 172.213.236.250:1479] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acGkmvwkUqN4GJAI5oVCcwAAARY"]
[Tue Mar 24 04:37:47.474174 2026] [:error] [pid 3030:tid 3054] [client 172.213.236.250:9101] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acGkmwyOuILyynfcqfnjcwAAAAU"]
[Tue Mar 24 04:37:48.289309 2026] [:error] [pid 38767:tid 38788] [client 172.213.236.250:22791] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acGknPwkUqN4GJAI5oVCgQAAARI"]
[Tue Mar 24 04:37:50.652457 2026] [:error] [pid 3030:tid 3053] [client 172.213.236.250:40010] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acGkngyOuILyynfcqfnjewAAAAQ"]
[Tue Mar 24 04:37:52.117030 2026] [:error] [pid 3030:tid 3060] [client 172.213.236.250:23365] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acGkoAyOuILyynfcqfnjgwAAAAs"]
[Tue Mar 24 04:37:53.779967 2026] [:error] [pid 38767:tid 38785] [client 172.213.236.250:1555] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acGkofwkUqN4GJAI5oVClgAAAQ8"]
[Tue Mar 24 04:37:55.123691 2026] [:error] [pid 38767:tid 38791] [client 172.213.236.250:51293] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "acGko_wkUqN4GJAI5oVCnQAAARU"]
[Tue Mar 24 04:37:56.332183 2026] [:error] [pid 38767:tid 38790] [client 172.213.236.250:21863] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "acGkpPwkUqN4GJAI5oVCqwAAARQ"]
[Tue Mar 24 04:37:57.253691 2026] [:error] [pid 3030:tid 3069] [client 172.213.236.250:31421] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "acGkpQyOuILyynfcqfnjkAAAABQ"]
[Tue Mar 24 04:37:58.181992 2026] [:error] [pid 3137:tid 3161] [client 172.213.236.250:1591] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "acGkppdZesutm6dfYM-7uQAAANY"]
[Tue Mar 24 04:37:58.750771 2026] [:error] [pid 3032:tid 3128] [client 172.213.236.250:10212] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acGkpia_-JXXD03-JNysFQAAAJg"]
[Tue Mar 24 04:38:00.038923 2026] [:error] [pid 38767:tid 38773] [client 172.213.236.250:26274] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acGkqPwkUqN4GJAI5oVCuQAAAQM"]
[Tue Mar 24 04:38:00.855462 2026] [:error] [pid 3031:tid 3096] [client 172.213.236.250:1579] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acGkqKJBKytnG47nuibEKQAAAFQ"]
[Tue Mar 24 04:38:02.010675 2026] [:error] [pid 38767:tid 38781] [client 172.213.236.250:34671] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acGkqvwkUqN4GJAI5oVCwAAAAQs"]
[Tue Mar 24 04:38:02.787100 2026] [:error] [pid 3030:tid 3060] [client 172.213.236.250:23382] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "acGkqgyOuILyynfcqfnjmwAAAAs"]
[Tue Mar 24 04:38:03.398839 2026] [:error] [pid 3032:tid 3114] [client 172.213.236.250:20269] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "acGkqya_-JXXD03-JNysIgAAAIs"]
[Tue Mar 24 04:38:04.000838 2026] [:error] [pid 3031:tid 3094] [client 172.213.236.250:10238] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "acGkq6JBKytnG47nuibEMAAAAFI"]
[Tue Mar 24 04:38:05.212994 2026] [:error] [pid 3137:tid 3158] [client 172.213.236.250:20258] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "acGkrZdZesutm6dfYM-70QAAANM"]
[Tue Mar 24 04:38:05.862575 2026] [:error] [pid 3031:tid 3097] [client 172.213.236.250:26853] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "acGkraJBKytnG47nuibENAAAAFU"]
[Tue Mar 24 04:38:07.514572 2026] [:error] [pid 3032:tid 3114] [client 172.213.236.250:34645] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "acGkrya_-JXXD03-JNysLAAAAIs"]
[Tue Mar 24 04:38:08.413979 2026] [:error] [pid 3137:tid 3140] [client 172.213.236.250:10191] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "acGksJdZesutm6dfYM-73AAAAME"]
[Tue Mar 24 04:38:15.096675 2026] [:error] [pid 38767:tid 38780] [client 172.213.236.250:20247] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "acGkt_wkUqN4GJAI5oVC_gAAAQo"]
[Tue Mar 24 04:38:17.247006 2026] [:error] [pid 3032:tid 3113] [client 172.213.236.250:53664] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acGkuSa_-JXXD03-JNysOwAAAIo"]
[Tue Mar 24 04:38:21.518978 2026] [:error] [pid 38767:tid 38775] [client 172.213.236.250:9600] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acGkvfwkUqN4GJAI5oVDKAAAAQU"]
[Tue Mar 24 04:38:23.363602 2026] [:error] [pid 3137:tid 3145] [client 172.213.236.250:52728] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acGkv5dZesutm6dfYM-7_wAAAMY"]
[Tue Mar 24 04:38:25.300571 2026] [:error] [pid 3137:tid 3150] [client 172.213.236.250:25254] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acGkwZdZesutm6dfYM-8BgAAAMs"]
[Tue Mar 24 04:38:26.850681 2026] [:error] [pid 3137:tid 3156] [client 172.213.236.250:9606] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acGkwpdZesutm6dfYM-8CwAAANE"]
[Tue Mar 24 04:38:28.112319 2026] [:error] [pid 3137:tid 3147] [client 172.213.236.250:20277] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acGkxJdZesutm6dfYM-8DgAAAMg"]
[Tue Mar 24 04:38:29.888084 2026] [:error] [pid 3137:tid 3141] [client 172.213.236.250:8778] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acGkxZdZesutm6dfYM-8EwAAAMI"]
[Tue Mar 24 04:38:30.852308 2026] [:error] [pid 38767:tid 38778] [client 172.213.236.250:53655] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acGkxvwkUqN4GJAI5oVDUAAAAQg"]
[Tue Mar 24 04:38:31.483780 2026] [:error] [pid 3137:tid 3159] [client 172.213.236.250:7277] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acGkx5dZesutm6dfYM-8HAAAANQ"]
[Tue Mar 24 04:38:32.193014 2026] [:error] [pid 38767:tid 38783] [client 172.213.236.250:9624] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acGkyPwkUqN4GJAI5oVDUgAAAQ0"]
[Tue Mar 24 04:38:32.728522 2026] [:error] [pid 3137:tid 3144] [client 172.213.236.250:39956] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acGkyJdZesutm6dfYM-8JAAAAMU"]
[Tue Mar 24 04:38:33.279053 2026] [:error] [pid 38767:tid 38776] [client 172.213.236.250:8769] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acGkyfwkUqN4GJAI5oVDWwAAAQY"]
[Tue Mar 24 04:38:33.810104 2026] [:error] [pid 3032:tid 3125] [client 172.213.236.250:52733] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "acGkySa_-JXXD03-JNysWAAAAJY"]
[Tue Mar 24 04:38:34.995374 2026] [:error] [pid 3032:tid 3107] [client 172.213.236.250:1911] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "acGkyia_-JXXD03-JNysXAAAAIQ"]
[Tue Mar 24 04:38:35.868802 2026] [:error] [pid 3030:tid 3072] [client 172.213.236.250:53653] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "acGkywyOuILyynfcqfnjvwAAABc"]
[Tue Mar 24 04:38:37.196073 2026] [proxy_fcgi:error] [pid 3137:tid 3150] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:37.434863 2026] [proxy_fcgi:error] [pid 3137:tid 3145] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:37.674005 2026] [proxy_fcgi:error] [pid 3137:tid 3152] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:37.911833 2026] [proxy_fcgi:error] [pid 3137:tid 3146] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:38.149825 2026] [proxy_fcgi:error] [pid 3137:tid 3151] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:38.414407 2026] [proxy_fcgi:error] [pid 3137:tid 3156] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:38.714637 2026] [proxy_fcgi:error] [pid 3137:tid 3158] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:38.952892 2026] [proxy_fcgi:error] [pid 3137:tid 3162] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:39.211895 2026] [proxy_fcgi:error] [pid 3137:tid 3159] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:39.452067 2026] [proxy_fcgi:error] [pid 3137:tid 3145] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:39.766658 2026] [proxy_fcgi:error] [pid 3137:tid 3144] [client 172.213.236.250:1064] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:38:40.000489 2026] [:error] [pid 3137:tid 3148] [client 172.213.236.250:1064] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acGkz5dZesutm6dfYM-8RQAAAMk"]
[Tue Mar 24 04:38:40.858387 2026] [:error] [pid 38767:tid 38788] [client 172.213.236.250:10908] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acGk0PwkUqN4GJAI5oVDcgAAARI"]
[Tue Mar 24 04:38:41.769440 2026] [:error] [pid 3030:tid 3051] [client 172.213.236.250:53726] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acGk0QyOuILyynfcqfnjxgAAAAI"]
[Tue Mar 24 04:38:42.501687 2026] [:error] [pid 38767:tid 38775] [client 172.213.236.250:10937] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acGk0vwkUqN4GJAI5oVDfgAAAQU"]
[Tue Mar 24 04:38:43.312846 2026] [:error] [pid 3137:tid 3146] [client 172.213.236.250:8017] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "acGk05dZesutm6dfYM-8TwAAAMc"]
[Tue Mar 24 04:38:43.937745 2026] [:error] [pid 3032:tid 3104] [client 172.213.236.250:23876] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "acGk0ya_-JXXD03-JNyseQAAAIE"]
[Tue Mar 24 04:38:44.751137 2026] [:error] [pid 38767:tid 38783] [client 172.213.236.250:8264] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "acGk1PwkUqN4GJAI5oVDiQAAAQ0"]
[Tue Mar 24 04:38:45.774583 2026] [:error] [pid 38767:tid 38786] [client 172.213.236.250:53750] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "acGk1fwkUqN4GJAI5oVDjQAAARA"]
[Tue Mar 24 04:38:46.648338 2026] [:error] [pid 38767:tid 38783] [client 172.213.236.250:49382] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acGk1vwkUqN4GJAI5oVDlAAAAQ0"]
[Tue Mar 24 04:38:47.152179 2026] [:error] [pid 38767:tid 38781] [client 172.213.236.250:28911] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acGk1_wkUqN4GJAI5oVDmwAAAQs"]
[Tue Mar 24 04:38:47.759199 2026] [:error] [pid 38767:tid 38788] [client 172.213.236.250:10904] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acGk1_wkUqN4GJAI5oVDnwAAARI"]
[Tue Mar 24 04:38:48.790510 2026] [:error] [pid 3030:tid 3071] [client 172.213.236.250:7933] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acGk2AyOuILyynfcqfnj0QAAABY"]
[Tue Mar 24 04:38:49.557485 2026] [:error] [pid 38767:tid 38782] [client 172.213.236.250:8664] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog-header.php"] [unique_id "acGk2fwkUqN4GJAI5oVDogAAAQw"]
[Tue Mar 24 04:38:50.581323 2026] [:error] [pid 38767:tid 38788] [client 172.213.236.250:39046] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog-header.php"] [unique_id "acGk2vwkUqN4GJAI5oVDpwAAARI"]
[Tue Mar 24 04:39:26.427473 2026] [:error] [pid 3030:tid 3073] [client 172.213.236.250:11681] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acGk_gyOuILyynfcqfnkIAAAABg"]
[Tue Mar 24 04:39:28.093427 2026] [:error] [pid 3137:tid 3155] [client 172.213.236.250:1446] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acGlAJdZesutm6dfYM-9SQAAANA"]
[Tue Mar 24 04:39:28.851550 2026] [:error] [pid 3032:tid 3108] [client 172.213.236.250:10584] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acGlACa_-JXXD03-JNys7AAAAIU"]
[Tue Mar 24 04:39:31.811882 2026] [:error] [pid 38767:tid 38790] [client 172.213.236.250:11288] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acGlA_wkUqN4GJAI5oVEiQAAARQ"]
[Tue Mar 24 04:39:32.549152 2026] [:error] [pid 38767:tid 38770] [client 172.213.236.250:12490] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "acGlBPwkUqN4GJAI5oVEjgAAAQA"]
[Tue Mar 24 04:39:33.146637 2026] [:error] [pid 3032:tid 3127] [client 172.213.236.250:54483] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "acGlBSa_-JXXD03-JNys8wAAAJc"]
[Tue Mar 24 04:39:34.000030 2026] [:error] [pid 3032:tid 3123] [client 172.213.236.250:24364] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "acGlBSa_-JXXD03-JNys9AAAAJQ"]
[Tue Mar 24 04:39:35.087762 2026] [:error] [pid 3137:tid 3163] [client 172.213.236.250:1408] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "acGlB5dZesutm6dfYM-9YAAAANg"]
[Tue Mar 24 04:39:35.916404 2026] [:error] [pid 3137:tid 3142] [client 172.213.236.250:44148] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/callback.php"] [unique_id "acGlB5dZesutm6dfYM-9YwAAAMM"]
[Tue Mar 24 04:39:36.661479 2026] [:error] [pid 38767:tid 38776] [client 172.213.236.250:39119] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/callback.php"] [unique_id "acGlCPwkUqN4GJAI5oVEmgAAAQY"]
[Tue Mar 24 04:39:37.443308 2026] [:error] [pid 3137:tid 3148] [client 172.213.236.250:30992] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/callback.php"] [unique_id "acGlCZdZesutm6dfYM-9ZwAAAMk"]
[Tue Mar 24 04:39:38.454598 2026] [:error] [pid 3032:tid 3114] [client 172.213.236.250:9951] [client 172.213.236.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/callback.php"] [unique_id "acGlCia_-JXXD03-JNytAAAAAIs"]
[Tue Mar 24 04:39:39.286354 2026] [proxy_fcgi:error] [pid 3137:tid 3146] [client 172.213.236.250:24327] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:39:39.579819 2026] [proxy_fcgi:error] [pid 3137:tid 3161] [client 172.213.236.250:24327] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 04:39:39.817664 2026] [proxy_fcgi:error] [pid 3137:tid 3158] [client 172.213.236.250:24327] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 06:00:04.734368 2026] [:error] [pid 38767:tid 38781] [client 119.157.171.206:58286] [client 119.157.171.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.157.171.206, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acG35PwkUqN4GJAI5oWAwwAAAQs"]
[Tue Mar 24 06:00:04.747663 2026] [proxy_fcgi:error] [pid 38767:tid 38781] [client 119.157.171.206:58286] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 09:02:44.782345 2026] [:error] [pid 3032:tid 3104] [client 185.223.152.144:37687] [client 185.223.152.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.144, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acHitCa_-JXXD03-JNz3-QAAAIE"]
[Tue Mar 24 09:02:44.792337 2026] [proxy_fcgi:error] [pid 3032:tid 3104] [client 185.223.152.144:37687] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 19:00:52.143560 2026] [:error] [pid 48214:tid 48261] [client 103.138.223.129:56335] [client 103.138.223.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.138.223.129, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acJu5LeshLWZ3uUDHKlgZQAAAck"]
[Tue Mar 24 19:00:52.155758 2026] [proxy_fcgi:error] [pid 48214:tid 48261] [client 103.138.223.129:56335] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 21:42:10.210173 2026] [:error] [pid 64198:tid 64203] [client 136.117.193.247:62235] [client 136.117.193.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.193.247, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acKUsnVzJqf6OS_oSZ3R0wAAAUM"]
[Tue Mar 24 21:42:10.221024 2026] [proxy_fcgi:error] [pid 64198:tid 64203] [client 136.117.193.247:62235] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 21:42:12.486630 2026] [:error] [pid 64198:tid 64209] [client 136.117.193.247:62235] [client 136.117.193.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acKUtHVzJqf6OS_oSZ3R5AAAAUk"]
[Tue Mar 24 21:42:13.032897 2026] [:error] [pid 38767:tid 38777] [client 136.117.193.247:53174] [client 136.117.193.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acKUtfwkUqN4GJAI5oVbOAAAAQc"]
[Tue Mar 24 21:42:13.477336 2026] [:error] [pid 38767:tid 38780] [client 136.117.193.247:52205] [client 136.117.193.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acKUtfwkUqN4GJAI5oVbOQAAAQo"]
[Tue Mar 24 21:42:13.975311 2026] [:error] [pid 48219:tid 48298] [client 136.117.193.247:54664] [client 136.117.193.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acKUtShf3b4R_lAIyv-PiQAAAhE"]
[Tue Mar 24 21:42:14.563652 2026] [:error] [pid 38767:tid 38786] [client 136.117.193.247:52262] [client 136.117.193.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acKUtvwkUqN4GJAI5oVbPwAAARA"]
[Tue Mar 24 21:42:15.062310 2026] [:error] [pid 38767:tid 38782] [client 136.117.193.247:58803] [client 136.117.193.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acKUt_wkUqN4GJAI5oVbQwAAAQw"]
[Tue Mar 24 21:42:15.537904 2026] [:error] [pid 48214:tid 48273] [client 136.117.193.247:63795] [client 136.117.193.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acKUt7eshLWZ3uUDHKl5-AAAAdU"]
[Tue Mar 24 21:59:13.076874 2026] [:error] [pid 38767:tid 38776] [client 38.246.33.133:64212] [client 38.246.33.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.133, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acKYsfwkUqN4GJAI5oVjEgAAAQY"]
[Tue Mar 24 21:59:13.086322 2026] [proxy_fcgi:error] [pid 38767:tid 38776] [client 38.246.33.133:64212] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 22:35:00.845527 2026] [:error] [pid 38767:tid 38773] [client 185.92.25.20:46637] [client 185.92.25.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.20, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acKhFPwkUqN4GJAI5oVtvAAAAQM"]
[Tue Mar 24 22:35:00.855768 2026] [proxy_fcgi:error] [pid 38767:tid 38773] [client 185.92.25.20:46637] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 03:21:37.368451 2026] [:error] [pid 57711:tid 58050] [client 27.34.64.25:19373] [client 27.34.64.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.64.25, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acLkQaLdPFdeRRktTdN6MwAAAIA"]
[Wed Mar 25 03:21:37.381084 2026] [proxy_fcgi:error] [pid 57711:tid 58050] [client 27.34.64.25:19373] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:34:32.621268 2026] [:error] [pid 754:tid 784] [client 148.72.173.218:52693] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acMDaDisL3asPbA3Cti3swAAABM"]
[Wed Mar 25 05:34:32.621354 2026] [:error] [pid 754:tid 784] [client 148.72.173.218:52693] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 53"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acMDaDisL3asPbA3Cti3swAAABM"]
[Wed Mar 25 08:21:40.143425 2026] [:error] [pid 47989:tid 47994] [client 38.252.34.162:56064] [client 38.252.34.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.252.34.162, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acMqlCWKdJMhIccROjmutwAAAUM"]
[Wed Mar 25 08:21:40.155085 2026] [proxy_fcgi:error] [pid 47989:tid 47994] [client 38.252.34.162:56064] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:20.280128 2026] [proxy_fcgi:error] [pid 25967:tid 25978] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:20.543483 2026] [proxy_fcgi:error] [pid 25967:tid 25975] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:20.807882 2026] [proxy_fcgi:error] [pid 25967:tid 25977] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:21.073496 2026] [proxy_fcgi:error] [pid 25967:tid 25983] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:21.340708 2026] [proxy_fcgi:error] [pid 25967:tid 25984] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:21.605808 2026] [proxy_fcgi:error] [pid 25967:tid 25986] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:21.870703 2026] [proxy_fcgi:error] [pid 25967:tid 25976] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:22.148812 2026] [proxy_fcgi:error] [pid 25967:tid 25995] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:22.412728 2026] [proxy_fcgi:error] [pid 25967:tid 25989] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:22.675059 2026] [proxy_fcgi:error] [pid 25967:tid 25980] [client 20.251.200.74:54003] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:23:22.934351 2026] [:error] [pid 25967:tid 25981] [client 20.251.200.74:54003] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acNxSvg8Qtq7ZM4mSFmzYwAAA0k"]
[Wed Mar 25 13:23:23.832754 2026] [:error] [pid 892:tid 911] [client 20.251.200.74:53985] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acNxSyT_G8WMU3T3yxqiPAAAAM0"]
[Wed Mar 25 13:23:24.465173 2026] [:error] [pid 892:tid 894] [client 20.251.200.74:53247] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acNxTCT_G8WMU3T3yxqiPQAAAMA"]
[Wed Mar 25 13:23:25.115040 2026] [:error] [pid 25967:tid 25974] [client 20.251.200.74:53968] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acNxTfg8Qtq7ZM4mSFmzaAAAA0I"]
[Wed Mar 25 13:23:25.782730 2026] [:error] [pid 26449:tid 26470] [client 20.251.200.74:25136] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acNxTdpZ2T15NDqzAjE_kwAAAlE"]
[Wed Mar 25 13:23:26.398739 2026] [:error] [pid 47989:tid 48005] [client 20.251.200.74:36611] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acNxTiWKdJMhIccROjki6QAAAU4"]
[Wed Mar 25 13:23:26.961940 2026] [:error] [pid 25967:tid 25981] [client 20.251.200.74:53994] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acNxTvg8Qtq7ZM4mSFmzcAAAA0k"]
[Wed Mar 25 13:23:27.691734 2026] [:error] [pid 26321:tid 26350] [client 20.251.200.74:36005] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acNxT_KO65qqGZCSPZr1awAAAgk"]
[Wed Mar 25 13:23:28.320649 2026] [:error] [pid 47946:tid 47949] [client 20.251.200.74:36651] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acNxUDipQTqBMSeKYhdo_QAAAQE"]
[Wed Mar 25 13:23:28.950793 2026] [:error] [pid 25875:tid 25897] [client 20.251.200.74:62302] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acNxUBJ38QkS3NyfshyLAAAAApA"]
[Wed Mar 25 13:23:29.603451 2026] [:error] [pid 47989:tid 47995] [client 20.251.200.74:62334] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acNxUSWKdJMhIccROjki7wAAAUQ"]
[Wed Mar 25 13:23:30.306157 2026] [:error] [pid 47989:tid 48000] [client 20.251.200.74:63381] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acNxUiWKdJMhIccROjki8wAAAUk"]
[Wed Mar 25 13:23:30.872430 2026] [:error] [pid 47989:tid 47998] [client 20.251.200.74:25099] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acNxUiWKdJMhIccROjki9wAAAUc"]
[Wed Mar 25 13:23:31.499411 2026] [:error] [pid 26449:tid 26471] [client 20.251.200.74:35370] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acNxU9pZ2T15NDqzAjE_lgAAAlI"]
[Wed Mar 25 13:23:32.208214 2026] [:error] [pid 25967:tid 25989] [client 20.251.200.74:36608] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acNxVPg8Qtq7ZM4mSFmzgQAAA1E"]
[Wed Mar 25 13:23:32.927353 2026] [:error] [pid 47946:tid 47948] [client 20.251.200.74:36667] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acNxVDipQTqBMSeKYhdo_gAAAQA"]
[Wed Mar 25 13:23:33.541101 2026] [:error] [pid 25967:tid 25981] [client 20.251.200.74:49020] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acNxVfg8Qtq7ZM4mSFmzgwAAA0k"]
[Wed Mar 25 13:23:34.110564 2026] [:error] [pid 25967:tid 25974] [client 20.251.200.74:46526] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acNxVvg8Qtq7ZM4mSFmziAAAA0I"]
[Wed Mar 25 13:23:34.654907 2026] [:error] [pid 25967:tid 25989] [client 20.251.200.74:36017] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acNxVvg8Qtq7ZM4mSFmzigAAA1E"]
[Wed Mar 25 13:23:35.255998 2026] [:error] [pid 47989:tid 48008] [client 20.251.200.74:35335] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acNxVyWKdJMhIccROjki-wAAAVE"]
[Wed Mar 25 13:23:35.809900 2026] [:error] [pid 25967:tid 25992] [client 20.251.200.74:53200] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acNxV_g8Qtq7ZM4mSFmzkQAAA1Q"]
[Wed Mar 25 13:23:36.390175 2026] [:error] [pid 26449:tid 26453] [client 20.251.200.74:36000] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acNxWNpZ2T15NDqzAjE_mwAAAkA"]
[Wed Mar 25 13:23:36.931338 2026] [:error] [pid 25967:tid 25989] [client 20.251.200.74:45858] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acNxWPg8Qtq7ZM4mSFmzkwAAA1E"]
[Wed Mar 25 13:23:37.645628 2026] [:error] [pid 26269:tid 26279] [client 20.251.200.74:45864] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acNxWUn7e-ZQbaIs7qyZ3QAAAYM"]
[Wed Mar 25 13:23:38.222464 2026] [:error] [pid 26449:tid 26467] [client 20.251.200.74:46495] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acNxWtpZ2T15NDqzAjE_ngAAAk4"]
[Wed Mar 25 13:23:38.825082 2026] [:error] [pid 47989:tid 48005] [client 20.251.200.74:62285] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acNxWiWKdJMhIccROjki_gAAAU4"]
[Wed Mar 25 13:23:39.526094 2026] [:error] [pid 47989:tid 48000] [client 20.251.200.74:35979] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acNxWyWKdJMhIccROjki_wAAAUk"]
[Wed Mar 25 13:23:40.346981 2026] [:error] [pid 47989:tid 47998] [client 20.251.200.74:25114] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acNxXCWKdJMhIccROjkjAQAAAUc"]
[Wed Mar 25 13:23:41.799326 2026] [:error] [pid 47989:tid 48012] [client 20.251.200.74:36639] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acNxXSWKdJMhIccROjkjBwAAAVU"]
[Wed Mar 25 13:23:42.443860 2026] [:error] [pid 25969:tid 26032] [client 20.251.200.74:25133] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acNxXhd3aEUmOfdKja_idQAAA8Y"]
[Wed Mar 25 13:23:43.214247 2026] [:error] [pid 25875:tid 25901] [client 20.251.200.74:36011] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acNxXxJ38QkS3NyfshyLBQAAApQ"]
[Wed Mar 25 13:23:43.986454 2026] [:error] [pid 47989:tid 47991] [client 20.251.200.74:35994] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acNxXyWKdJMhIccROjkjCgAAAUA"]
[Wed Mar 25 13:23:44.769961 2026] [:error] [pid 47989:tid 47997] [client 20.251.200.74:33547] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acNxYCWKdJMhIccROjkjDgAAAUY"]
[Wed Mar 25 13:23:45.300745 2026] [:error] [pid 25875:tid 25891] [client 20.251.200.74:36634] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acNxYRJ38QkS3NyfshyLDgAAAoo"]
[Wed Mar 25 13:23:45.889538 2026] [:error] [pid 26321:tid 26353] [client 20.251.200.74:51931] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acNxYfKO65qqGZCSPZr1cQAAAgw"]
[Wed Mar 25 13:23:46.463095 2026] [:error] [pid 47989:tid 48001] [client 20.251.200.74:54008] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acNxYiWKdJMhIccROjkjFwAAAUo"]
[Wed Mar 25 13:23:47.142083 2026] [:error] [pid 47989:tid 47997] [client 20.251.200.74:45867] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "acNxYyWKdJMhIccROjkjHAAAAUY"]
[Wed Mar 25 13:23:47.670640 2026] [:error] [pid 47989:tid 47994] [client 20.251.200.74:45855] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "acNxYyWKdJMhIccROjkjIQAAAUM"]
[Wed Mar 25 13:23:48.224683 2026] [:error] [pid 47989:tid 48012] [client 20.251.200.74:53225] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "acNxZCWKdJMhIccROjkjIwAAAVU"]
[Wed Mar 25 13:23:48.768874 2026] [:error] [pid 47989:tid 47998] [client 20.251.200.74:53186] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "acNxZCWKdJMhIccROjkjKQAAAUc"]
[Wed Mar 25 13:23:49.348998 2026] [:error] [pid 756:tid 870] [client 20.251.200.74:33551] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNxZTOaW6oylMIDBCQGsAAAAJI"]
[Wed Mar 25 13:23:49.868250 2026] [:error] [pid 892:tid 895] [client 20.251.200.74:45882] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNxZST_G8WMU3T3yxqiTQAAAME"]
[Wed Mar 25 13:23:50.423729 2026] [:error] [pid 25969:tid 26039] [client 20.251.200.74:25126] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNxZhd3aEUmOfdKja_ifAAAA80"]
[Wed Mar 25 13:23:50.952636 2026] [:error] [pid 25875:tid 25884] [client 20.251.200.74:49010] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNxZhJ38QkS3NyfshyLEQAAAoM"]
[Wed Mar 25 13:23:51.504193 2026] [:error] [pid 892:tid 904] [client 20.251.200.74:25109] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acNxZyT_G8WMU3T3yxqiUgAAAMY"]
[Wed Mar 25 13:23:52.046485 2026] [:error] [pid 26321:tid 26351] [client 20.251.200.74:53241] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acNxaPKO65qqGZCSPZr1dQAAAgo"]
[Wed Mar 25 13:23:52.630896 2026] [:error] [pid 25969:tid 26043] [client 20.251.200.74:53999] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acNxaBd3aEUmOfdKja_ifgAAA9E"]
[Wed Mar 25 13:23:53.161124 2026] [:error] [pid 25969:tid 26040] [client 20.251.200.74:54000] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acNxaRd3aEUmOfdKja_ifwAAA84"]
[Wed Mar 25 13:23:53.703468 2026] [:error] [pid 25967:tid 25996] [client 20.251.200.74:36649] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acNxafg8Qtq7ZM4mSFmzowAAA1g"]
[Wed Mar 25 13:23:54.259069 2026] [:error] [pid 25967:tid 25995] [client 20.251.200.74:53955] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acNxavg8Qtq7ZM4mSFmzpgAAA1c"]
[Wed Mar 25 13:23:54.785942 2026] [:error] [pid 26269:tid 26288] [client 20.251.200.74:54404] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acNxakn7e-ZQbaIs7qyZ4QAAAYw"]
[Wed Mar 25 13:23:55.352357 2026] [:error] [pid 26269:tid 26296] [client 20.251.200.74:25121] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acNxa0n7e-ZQbaIs7qyZ5AAAAZQ"]
[Wed Mar 25 13:23:55.917557 2026] [:error] [pid 26449:tid 26458] [client 20.251.200.74:25108] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acNxa9pZ2T15NDqzAjE_oQAAAkU"]
[Wed Mar 25 13:23:56.523768 2026] [:error] [pid 47989:tid 48012] [client 20.251.200.74:35379] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acNxbCWKdJMhIccROjkjLAAAAVU"]
[Wed Mar 25 13:23:57.147230 2026] [:error] [pid 25967:tid 25974] [client 20.251.200.74:51964] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acNxbfg8Qtq7ZM4mSFmztQAAA0I"]
[Wed Mar 25 13:23:57.699312 2026] [:error] [pid 25967:tid 25990] [client 20.251.200.74:54439] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acNxbfg8Qtq7ZM4mSFmztwAAA1I"]
[Wed Mar 25 13:23:58.293130 2026] [:error] [pid 47946:tid 47969] [client 20.251.200.74:33595] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "acNxbjipQTqBMSeKYhdpCQAAARU"]
[Wed Mar 25 13:23:58.881220 2026] [:error] [pid 25967:tid 25984] [client 20.251.200.74:45876] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "acNxbvg8Qtq7ZM4mSFmzuwAAA0w"]
[Wed Mar 25 13:23:59.701876 2026] [:error] [pid 26449:tid 26466] [client 20.251.200.74:51955] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "acNxb9pZ2T15NDqzAjE_pwAAAk0"]
[Wed Mar 25 13:24:00.780196 2026] [:error] [pid 26449:tid 26467] [client 20.251.200.74:54457] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "acNxcNpZ2T15NDqzAjE_qgAAAk4"]
[Wed Mar 25 13:24:01.453682 2026] [:error] [pid 25967:tid 25987] [client 20.251.200.74:51923] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acNxcfg8Qtq7ZM4mSFmzwwAAA08"]
[Wed Mar 25 13:24:02.190162 2026] [:error] [pid 25875:tid 25890] [client 20.251.200.74:48969] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acNxchJ38QkS3NyfshyLGAAAAok"]
[Wed Mar 25 13:24:02.916336 2026] [:error] [pid 892:tid 894] [client 20.251.200.74:54416] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acNxciT_G8WMU3T3yxqiVgAAAMA"]
[Wed Mar 25 13:24:03.460892 2026] [:error] [pid 25967:tid 25996] [client 20.251.200.74:25144] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acNxc_g8Qtq7ZM4mSFmzyQAAA1g"]
[Wed Mar 25 13:24:04.044354 2026] [:error] [pid 25967:tid 25988] [client 20.251.200.74:49018] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "acNxdPg8Qtq7ZM4mSFmzzgAAA1A"]
[Wed Mar 25 13:24:04.590755 2026] [:error] [pid 25967:tid 25984] [client 20.251.200.74:51915] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "acNxdPg8Qtq7ZM4mSFmz1AAAA0w"]
[Wed Mar 25 13:24:05.169711 2026] [:error] [pid 892:tid 905] [client 20.251.200.74:25102] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "acNxdST_G8WMU3T3yxqiWAAAAMc"]
[Wed Mar 25 13:24:05.789835 2026] [:error] [pid 25875:tid 25889] [client 20.251.200.74:53199] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "acNxdRJ38QkS3NyfshyLJAAAAog"]
[Wed Mar 25 13:24:06.423074 2026] [:error] [pid 25875:tid 25881] [client 20.251.200.74:62281] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acNxdhJ38QkS3NyfshyLUwAAAoA"]
[Wed Mar 25 13:24:06.955449 2026] [:error] [pid 892:tid 913] [client 20.251.200.74:51924] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acNxdiT_G8WMU3T3yxqiWgAAAM8"]
[Wed Mar 25 13:24:07.563809 2026] [:error] [pid 47989:tid 48007] [client 20.251.200.74:33555] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acNxdyWKdJMhIccROjkjLgAAAVA"]
[Wed Mar 25 13:24:08.100166 2026] [:error] [pid 26321:tid 26342] [client 20.251.200.74:51960] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acNxePKO65qqGZCSPZr1fgAAAgM"]
[Wed Mar 25 13:24:08.646315 2026] [:error] [pid 756:tid 861] [client 20.251.200.74:54434] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acNxeDOaW6oylMIDBCQGvAAAAIk"]
[Wed Mar 25 13:24:09.174896 2026] [:error] [pid 26269:tid 26296] [client 20.251.200.74:62283] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acNxeUn7e-ZQbaIs7qyZ9AAAAZQ"]
[Wed Mar 25 13:24:09.710971 2026] [:error] [pid 25875:tid 25885] [client 20.251.200.74:33543] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acNxeRJ38QkS3NyfshyLdQAAAoQ"]
[Wed Mar 25 13:24:10.238943 2026] [:error] [pid 25875:tid 25890] [client 20.251.200.74:46497] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acNxehJ38QkS3NyfshyLdwAAAok"]
[Wed Mar 25 13:24:10.780037 2026] [:error] [pid 47989:tid 48011] [client 20.251.200.74:33545] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "acNxeiWKdJMhIccROjkjOgAAAVQ"]
[Wed Mar 25 13:24:11.314185 2026] [:error] [pid 26321:tid 26341] [client 20.251.200.74:33583] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "acNxe_KO65qqGZCSPZr1gAAAAgI"]
[Wed Mar 25 13:24:11.867479 2026] [:error] [pid 25967:tid 25991] [client 20.251.200.74:54420] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "acNxe_g8Qtq7ZM4mSFm0EAAAA1M"]
[Wed Mar 25 13:24:12.390680 2026] [:error] [pid 25875:tid 25895] [client 20.251.200.74:53194] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "acNxfBJ38QkS3NyfshyLeQAAAo4"]
[Wed Mar 25 13:24:12.942842 2026] [:error] [pid 47989:tid 48014] [client 20.251.200.74:46501] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acNxfCWKdJMhIccROjkjQgAAAVc"]
[Wed Mar 25 13:24:13.552424 2026] [:error] [pid 47989:tid 47998] [client 20.251.200.74:51942] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acNxfSWKdJMhIccROjkjRAAAAUc"]
[Wed Mar 25 13:24:14.128296 2026] [:error] [pid 25969:tid 26034] [client 20.251.200.74:36001] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acNxfhd3aEUmOfdKja_iiQAAA8g"]
[Wed Mar 25 13:24:14.700063 2026] [:error] [pid 25967:tid 25993] [client 20.251.200.74:54007] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acNxfvg8Qtq7ZM4mSFm0GAAAA1U"]
[Wed Mar 25 13:24:15.237476 2026] [:error] [pid 25967:tid 25973] [client 20.251.200.74:35332] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "acNxf_g8Qtq7ZM4mSFm0GgAAA0E"]
[Wed Mar 25 13:24:15.778108 2026] [:error] [pid 47946:tid 47954] [client 20.251.200.74:45830] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "acNxfzipQTqBMSeKYhdpJAAAAQY"]
[Wed Mar 25 13:24:16.326476 2026] [:error] [pid 25967:tid 25978] [client 20.251.200.74:36020] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "acNxgPg8Qtq7ZM4mSFm0IwAAA0Y"]
[Wed Mar 25 13:24:16.901647 2026] [:error] [pid 25967:tid 25983] [client 20.251.200.74:53210] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "acNxgPg8Qtq7ZM4mSFm0KQAAA0s"]
[Wed Mar 25 13:24:17.586062 2026] [:error] [pid 25875:tid 25884] [client 20.251.200.74:62282] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acNxgRJ38QkS3NyfshyLfQAAAoM"]
[Wed Mar 25 13:24:18.202144 2026] [:error] [pid 47989:tid 48011] [client 20.251.200.74:35997] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acNxgiWKdJMhIccROjkjSAAAAVQ"]
[Wed Mar 25 13:24:18.776952 2026] [:error] [pid 47989:tid 47999] [client 20.251.200.74:35384] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acNxgiWKdJMhIccROjkjSgAAAUg"]
[Wed Mar 25 13:24:19.467725 2026] [:error] [pid 47989:tid 47993] [client 20.251.200.74:35975] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acNxgyWKdJMhIccROjkjTQAAAUI"]
[Wed Mar 25 13:24:20.268754 2026] [:error] [pid 47946:tid 47950] [client 20.251.200.74:53953] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bjfl.php"] [unique_id "acNxhDipQTqBMSeKYhdpJgAAAQI"]
[Wed Mar 25 13:24:20.817978 2026] [:error] [pid 47946:tid 47951] [client 20.251.200.74:51411] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bjfl.php"] [unique_id "acNxhDipQTqBMSeKYhdpJwAAAQM"]
[Wed Mar 25 13:24:21.417335 2026] [:error] [pid 47989:tid 47997] [client 20.251.200.74:53974] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bjfl.php"] [unique_id "acNxhSWKdJMhIccROjkjUAAAAUY"]
[Wed Mar 25 13:24:22.080439 2026] [proxy_fcgi:error] [pid 47989:tid 47998] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:22.346627 2026] [proxy_fcgi:error] [pid 47989:tid 47996] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:22.611991 2026] [proxy_fcgi:error] [pid 47989:tid 48000] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:22.875626 2026] [proxy_fcgi:error] [pid 47989:tid 47991] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:23.145350 2026] [proxy_fcgi:error] [pid 47989:tid 48011] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:23.413043 2026] [proxy_fcgi:error] [pid 47989:tid 47999] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:23.680744 2026] [proxy_fcgi:error] [pid 47989:tid 48002] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:23.951979 2026] [proxy_fcgi:error] [pid 47989:tid 48009] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:24.222609 2026] [proxy_fcgi:error] [pid 47989:tid 48004] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:24.812136 2026] [proxy_fcgi:error] [pid 47989:tid 47997] [client 20.251.200.74:54453] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:24:25.114894 2026] [:error] [pid 47989:tid 48015] [client 20.251.200.74:54453] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "acNxiSWKdJMhIccROjkjYQAAAVg"]
[Wed Mar 25 13:24:25.961362 2026] [:error] [pid 47989:tid 48014] [client 20.251.200.74:51394] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "acNxiSWKdJMhIccROjkjYgAAAVc"]
[Wed Mar 25 13:24:27.594120 2026] [:error] [pid 25875:tid 25891] [client 20.251.200.74:51437] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "acNxixJ38QkS3NyfshyLjwAAAoo"]
[Wed Mar 25 13:24:30.960263 2026] [:error] [pid 25967:tid 25985] [client 20.251.200.74:51959] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "acNxjvg8Qtq7ZM4mSFm0NgAAA00"]
[Wed Mar 25 13:24:46.698763 2026] [:error] [pid 26321:tid 26339] [client 20.251.200.74:58934] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acNxnvKO65qqGZCSPZr1gwAAAgA"]
[Wed Mar 25 13:24:47.266710 2026] [:error] [pid 25875:tid 25902] [client 20.251.200.74:40890] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acNxnxJ38QkS3NyfshyLngAAApU"]
[Wed Mar 25 13:24:47.959656 2026] [:error] [pid 47989:tid 48014] [client 20.251.200.74:27016] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acNxnyWKdJMhIccROjkjcgAAAVc"]
[Wed Mar 25 13:24:48.548581 2026] [:error] [pid 25875:tid 25881] [client 20.251.200.74:37929] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acNxoBJ38QkS3NyfshyLpwAAAoA"]
[Wed Mar 25 13:24:49.190554 2026] [:error] [pid 25967:tid 25979] [client 20.251.200.74:27019] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acNxofg8Qtq7ZM4mSFm0WAAAA0c"]
[Wed Mar 25 13:24:49.777762 2026] [:error] [pid 47989:tid 48013] [client 20.251.200.74:29934] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acNxoSWKdJMhIccROjkjfgAAAVY"]
[Wed Mar 25 13:24:50.520517 2026] [:error] [pid 25969:tid 26050] [client 20.251.200.74:2212] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acNxohd3aEUmOfdKja_ilgAAA9g"]
[Wed Mar 25 13:24:51.145024 2026] [:error] [pid 47946:tid 47955] [client 20.251.200.74:48337] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acNxozipQTqBMSeKYhdpKAAAAQc"]
[Wed Mar 25 13:24:51.884926 2026] [:error] [pid 47989:tid 48015] [client 20.251.200.74:26382] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acNxoyWKdJMhIccROjkjgQAAAVg"]
[Wed Mar 25 13:24:52.833331 2026] [:error] [pid 47989:tid 48006] [client 20.251.200.74:2465] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acNxpCWKdJMhIccROjkjhAAAAU8"]
[Wed Mar 25 13:24:53.416098 2026] [:error] [pid 47989:tid 47994] [client 20.251.200.74:51850] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acNxpSWKdJMhIccROjkjhwAAAUM"]
[Wed Mar 25 13:24:54.119886 2026] [:error] [pid 25967:tid 25981] [client 20.251.200.74:2435] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acNxpvg8Qtq7ZM4mSFm0XwAAA0k"]
[Wed Mar 25 13:24:54.747658 2026] [:error] [pid 25967:tid 25982] [client 20.251.200.74:55014] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acNxpvg8Qtq7ZM4mSFm0YQAAA0o"]
[Wed Mar 25 13:24:55.291821 2026] [:error] [pid 25967:tid 25983] [client 20.251.200.74:26428] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acNxp_g8Qtq7ZM4mSFm0YwAAA0s"]
[Wed Mar 25 13:24:55.835733 2026] [:error] [pid 892:tid 919] [client 20.251.200.74:63339] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acNxpyT_G8WMU3T3yxqiZQAAANQ"]
[Wed Mar 25 13:24:56.479105 2026] [:error] [pid 25969:tid 26044] [client 20.251.200.74:45297] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acNxqBd3aEUmOfdKja_ilwAAA9I"]
[Wed Mar 25 13:24:57.035932 2026] [:error] [pid 25875:tid 25882] [client 20.251.200.74:45251] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acNxqRJ38QkS3NyfshyLsgAAAoE"]
[Wed Mar 25 13:24:57.563805 2026] [:error] [pid 25875:tid 25896] [client 20.251.200.74:60813] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acNxqRJ38QkS3NyfshyLtwAAAo8"]
[Wed Mar 25 13:24:58.090399 2026] [:error] [pid 25875:tid 25887] [client 20.251.200.74:58192] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acNxqhJ38QkS3NyfshyLuAAAAoY"]
[Wed Mar 25 13:24:58.660738 2026] [:error] [pid 25967:tid 25989] [client 20.251.200.74:32404] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acNxqvg8Qtq7ZM4mSFm0ZAAAA1E"]
[Wed Mar 25 13:24:59.222590 2026] [:error] [pid 47946:tid 47970] [client 20.251.200.74:48378] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acNxqzipQTqBMSeKYhdpKQAAARY"]
[Wed Mar 25 13:24:59.920167 2026] [:error] [pid 25967:tid 25986] [client 20.251.200.74:2464] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acNxq_g8Qtq7ZM4mSFm0bgAAA04"]
[Wed Mar 25 13:25:00.562626 2026] [:error] [pid 26321:tid 26364] [client 20.251.200.74:50156] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acNxrPKO65qqGZCSPZr1jAAAAhc"]
[Wed Mar 25 13:25:01.143738 2026] [:error] [pid 47946:tid 47967] [client 20.251.200.74:50906] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acNxrTipQTqBMSeKYhdpKwAAARM"]
[Wed Mar 25 13:25:01.798299 2026] [:error] [pid 756:tid 857] [client 20.251.200.74:37192] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acNxrTOaW6oylMIDBCQGxAAAAIU"]
[Wed Mar 25 13:25:02.410977 2026] [:error] [pid 25875:tid 25890] [client 20.251.200.74:58214] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acNxrhJ38QkS3NyfshyLwQAAAok"]
[Wed Mar 25 13:25:03.171042 2026] [:error] [pid 25967:tid 25987] [client 20.251.200.74:55072] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acNxr_g8Qtq7ZM4mSFm0cwAAA08"]
[Wed Mar 25 13:25:03.801462 2026] [:error] [pid 25969:tid 26026] [client 20.251.200.74:32507] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acNxrxd3aEUmOfdKja_inAAAA8A"]
[Wed Mar 25 13:25:04.413677 2026] [:error] [pid 756:tid 874] [client 20.251.200.74:50134] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acNxsDOaW6oylMIDBCQGxQAAAJY"]
[Wed Mar 25 13:25:04.998052 2026] [:error] [pid 26449:tid 26468] [client 20.251.200.74:37205] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acNxsNpZ2T15NDqzAjE_yAAAAk8"]
[Wed Mar 25 13:25:05.673591 2026] [:error] [pid 26449:tid 26475] [client 20.251.200.74:52549] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acNxsdpZ2T15NDqzAjE_yQAAAlY"]
[Wed Mar 25 13:25:06.255411 2026] [:error] [pid 47989:tid 48002] [client 20.251.200.74:60125] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acNxsiWKdJMhIccROjkjkAAAAUs"]
[Wed Mar 25 13:25:06.818758 2026] [:error] [pid 47989:tid 48001] [client 20.251.200.74:42085] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "acNxsiWKdJMhIccROjkjlAAAAUo"]
[Wed Mar 25 13:25:07.368967 2026] [:error] [pid 25967:tid 25974] [client 20.251.200.74:44547] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "acNxs_g8Qtq7ZM4mSFm0eQAAA0I"]
[Wed Mar 25 13:25:07.909673 2026] [:error] [pid 25967:tid 25991] [client 20.251.200.74:42082] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "acNxs_g8Qtq7ZM4mSFm0fAAAA1M"]
[Wed Mar 25 13:25:08.476770 2026] [:error] [pid 25967:tid 25989] [client 20.251.200.74:2698] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "acNxtPg8Qtq7ZM4mSFm0fwAAA1E"]
[Wed Mar 25 13:25:09.010503 2026] [:error] [pid 25967:tid 25994] [client 20.251.200.74:58277] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acNxtfg8Qtq7ZM4mSFm0gwAAA1Y"]
[Wed Mar 25 13:25:09.589113 2026] [:error] [pid 25967:tid 25981] [client 20.251.200.74:44545] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acNxtfg8Qtq7ZM4mSFm0hQAAA0k"]
[Wed Mar 25 13:25:10.191169 2026] [:error] [pid 47989:tid 48007] [client 20.251.200.74:52566] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acNxtiWKdJMhIccROjkjmwAAAVA"]
[Wed Mar 25 13:25:10.767809 2026] [:error] [pid 47989:tid 47991] [client 20.251.200.74:25797] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "acNxtiWKdJMhIccROjkjoQAAAUA"]
[Wed Mar 25 13:25:11.348970 2026] [:error] [pid 47989:tid 48001] [client 20.251.200.74:2063] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acNxtyWKdJMhIccROjkjpAAAAUo"]
[Wed Mar 25 13:25:11.936427 2026] [:error] [pid 47989:tid 48008] [client 20.251.200.74:44602] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acNxtyWKdJMhIccROjkjpQAAAVE"]
[Wed Mar 25 13:25:12.487651 2026] [:error] [pid 26321:tid 26351] [client 20.251.200.74:57312] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acNxuPKO65qqGZCSPZr1kgAAAgo"]
[Wed Mar 25 13:25:13.111375 2026] [:error] [pid 25875:tid 25883] [client 20.251.200.74:65302] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acNxuRJ38QkS3NyfshyLzAAAAoI"]
[Wed Mar 25 13:25:13.780378 2026] [:error] [pid 25967:tid 25973] [client 20.251.200.74:50924] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acNxufg8Qtq7ZM4mSFm0jAAAA0E"]
[Wed Mar 25 13:25:14.651201 2026] [:error] [pid 25967:tid 25992] [client 20.251.200.74:2172] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acNxuvg8Qtq7ZM4mSFm0jQAAA1Q"]
[Wed Mar 25 13:25:15.284501 2026] [:error] [pid 892:tid 922] [client 20.251.200.74:2117] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acNxuyT_G8WMU3T3yxqiagAAANc"]
[Wed Mar 25 13:25:15.892876 2026] [:error] [pid 25967:tid 25986] [client 20.251.200.74:2142] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "acNxu_g8Qtq7ZM4mSFm0kAAAA04"]
[Wed Mar 25 13:25:16.961538 2026] [:error] [pid 25967:tid 25996] [client 20.251.200.74:57281] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buc.php"] [unique_id "acNxvPg8Qtq7ZM4mSFm0lAAAA1g"]
[Wed Mar 25 13:25:17.732492 2026] [:error] [pid 25967:tid 25989] [client 20.251.200.74:2134] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buc.php"] [unique_id "acNxvfg8Qtq7ZM4mSFm0lgAAA1E"]
[Wed Mar 25 13:25:18.769156 2026] [:error] [pid 25967:tid 25979] [client 20.251.200.74:57338] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buc.php"] [unique_id "acNxvvg8Qtq7ZM4mSFm0mAAAA0c"]
[Wed Mar 25 13:25:19.737074 2026] [:error] [pid 26269:tid 26276] [client 20.251.200.74:44574] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buc.php"] [unique_id "acNxv0n7e-ZQbaIs7qyaCAAAAYA"]
[Wed Mar 25 13:25:21.611129 2026] [:error] [pid 26449:tid 26460] [client 20.251.200.74:25837] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "acNxwdpZ2T15NDqzAjE_zQAAAkc"]
[Wed Mar 25 13:25:23.685687 2026] [:error] [pid 26449:tid 26462] [client 20.251.200.74:25153] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "acNxw9pZ2T15NDqzAjE_zgAAAkk"]
[Wed Mar 25 13:25:24.721544 2026] [proxy_fcgi:error] [pid 26449:tid 26465] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:24.986758 2026] [proxy_fcgi:error] [pid 26449:tid 26473] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:25.252103 2026] [proxy_fcgi:error] [pid 26449:tid 26463] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:25.517749 2026] [proxy_fcgi:error] [pid 26449:tid 26469] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:25.783631 2026] [proxy_fcgi:error] [pid 26449:tid 26477] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:26.047575 2026] [proxy_fcgi:error] [pid 26449:tid 26456] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:26.323014 2026] [proxy_fcgi:error] [pid 26449:tid 26461] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:26.609226 2026] [proxy_fcgi:error] [pid 26449:tid 26470] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:26.872268 2026] [proxy_fcgi:error] [pid 26449:tid 26464] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:27.140975 2026] [proxy_fcgi:error] [pid 26449:tid 26471] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:27.578363 2026] [proxy_fcgi:error] [pid 26449:tid 26468] [client 20.251.200.74:2564] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 13:25:27.841998 2026] [:error] [pid 26449:tid 26454] [client 20.251.200.74:2564] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acNxx9pZ2T15NDqzAjE_3AAAAkE"]
[Wed Mar 25 13:25:28.496435 2026] [:error] [pid 47989:tid 48008] [client 20.251.200.74:25784] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acNxyCWKdJMhIccROjkjrQAAAVE"]
[Wed Mar 25 13:25:29.617434 2026] [:error] [pid 25875:tid 25891] [client 20.251.200.74:2847] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acNxyRJ38QkS3NyfshyLzQAAAoo"]
[Wed Mar 25 13:25:30.261628 2026] [:error] [pid 25875:tid 25898] [client 20.251.200.74:44659] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acNxyhJ38QkS3NyfshyL0AAAApE"]
[Wed Mar 25 13:25:31.185443 2026] [:error] [pid 47989:tid 47998] [client 20.251.200.74:2356] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acNxyyWKdJMhIccROjkjrgAAAUc"]
[Wed Mar 25 13:25:31.893533 2026] [:error] [pid 26269:tid 26279] [client 20.251.200.74:2842] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acNxy0n7e-ZQbaIs7qyaCQAAAYM"]
[Wed Mar 25 13:25:32.604303 2026] [:error] [pid 756:tid 873] [client 20.251.200.74:2818] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acNxzDOaW6oylMIDBCQGxwAAAJU"]
[Wed Mar 25 13:25:33.212900 2026] [:error] [pid 756:tid 852] [client 20.251.200.74:2312] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acNxzTOaW6oylMIDBCQGyAAAAII"]
[Wed Mar 25 13:25:33.899467 2026] [:error] [pid 25967:tid 25979] [client 20.251.200.74:41511] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acNxzfg8Qtq7ZM4mSFm06QAAA0c"]
[Wed Mar 25 13:25:34.462469 2026] [:error] [pid 25967:tid 25995] [client 20.251.200.74:2357] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acNxzvg8Qtq7ZM4mSFm07QAAA1c"]
[Wed Mar 25 13:25:35.142642 2026] [:error] [pid 892:tid 909] [client 20.251.200.74:61393] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acNxzyT_G8WMU3T3yxqicAAAAMs"]
[Wed Mar 25 13:25:35.694789 2026] [:error] [pid 26449:tid 26462] [client 20.251.200.74:24461] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acNxz9pZ2T15NDqzAjE_4AAAAkk"]
[Wed Mar 25 13:25:36.240701 2026] [:error] [pid 25967:tid 25980] [client 20.251.200.74:56758] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cu.php"] [unique_id "acNx0Pg8Qtq7ZM4mSFm09gAAA0g"]
[Wed Mar 25 13:25:36.820351 2026] [:error] [pid 25967:tid 25977] [client 20.251.200.74:29368] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cu.php"] [unique_id "acNx0Pg8Qtq7ZM4mSFm09wAAA0U"]
[Wed Mar 25 13:25:37.509710 2026] [:error] [pid 25967:tid 25984] [client 20.251.200.74:46997] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cu.php"] [unique_id "acNx0fg8Qtq7ZM4mSFm0-gAAA0w"]
[Wed Mar 25 13:25:38.059139 2026] [:error] [pid 25967:tid 25972] [client 20.251.200.74:2334] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cu.php"] [unique_id "acNx0vg8Qtq7ZM4mSFm0-wAAA0A"]
[Wed Mar 25 13:25:38.605080 2026] [:error] [pid 756:tid 865] [client 20.251.200.74:41487] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "acNx0jOaW6oylMIDBCQGyQAAAI0"]
[Wed Mar 25 13:25:39.182988 2026] [:error] [pid 25969:tid 26045] [client 20.251.200.74:63911] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "acNx0xd3aEUmOfdKja_iogAAA9M"]
[Wed Mar 25 13:25:39.893177 2026] [:error] [pid 892:tid 895] [client 20.251.200.74:2332] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "acNx0yT_G8WMU3T3yxqidQAAAME"]
[Wed Mar 25 13:25:40.530396 2026] [:error] [pid 25967:tid 25995] [client 20.251.200.74:43931] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "acNx1Pg8Qtq7ZM4mSFm0_gAAA1c"]
[Wed Mar 25 13:25:41.104580 2026] [:error] [pid 47989:tid 47997] [client 20.251.200.74:47039] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acNx1SWKdJMhIccROjkjtgAAAUY"]
[Wed Mar 25 13:25:41.796891 2026] [:error] [pid 47989:tid 48013] [client 20.251.200.74:57732] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acNx1SWKdJMhIccROjkjuAAAAVY"]
[Wed Mar 25 13:25:42.417106 2026] [:error] [pid 47989:tid 48008] [client 20.251.200.74:50110] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acNx1iWKdJMhIccROjkjugAAAVE"]
[Wed Mar 25 13:25:43.375495 2026] [:error] [pid 47989:tid 47991] [client 20.251.200.74:35324] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "acNx1yWKdJMhIccROjkjvAAAAUA"]
[Wed Mar 25 13:25:43.950067 2026] [:error] [pid 25875:tid 25888] [client 20.251.200.74:38565] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "acNx1xJ38QkS3NyfshyL1gAAAoc"]
[Wed Mar 25 13:25:44.588821 2026] [:error] [pid 25875:tid 25883] [client 20.251.200.74:29346] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "acNx2BJ38QkS3NyfshyL2AAAAoI"]
[Wed Mar 25 13:25:45.717568 2026] [:error] [pid 26449:tid 26473] [client 20.251.200.74:57748] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "acNx2dpZ2T15NDqzAjE_4QAAAlQ"]
[Wed Mar 25 13:25:46.369210 2026] [:error] [pid 25969:tid 26030] [client 20.251.200.74:57752] [client 20.251.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "acNx2hd3aEUmOfdKja_iowAAA8Q"]
[Wed Mar 25 15:03:17.289091 2026] [:error] [pid 47989:tid 47992] [client 103.154.64.131:53764] [client 103.154.64.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.154.64.131, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acOItSWKdJMhIccROjlJrAAAAUE"]
[Wed Mar 25 15:03:17.299959 2026] [proxy_fcgi:error] [pid 47989:tid 47992] [client 103.154.64.131:53764] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 15:08:33.416938 2026] [:error] [pid 25967:tid 25994] [client 202.180.20.138:62843] [client 202.180.20.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.180.20.138, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acOJ8fg8Qtq7ZM4mSFnrtgAAA1Y"]
[Wed Mar 25 15:08:33.429524 2026] [proxy_fcgi:error] [pid 25967:tid 25994] [client 202.180.20.138:62843] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:00:27.065792 2026] [proxy_fcgi:error] [pid 25875:tid 25886] [client 51.103.36.25:14164] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:00:27.311800 2026] [proxy_fcgi:error] [pid 25875:tid 25887] [client 51.103.36.25:14164] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:00:28.031311 2026] [:error] [pid 25875:tid 25895] [client 51.103.36.25:14164] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lfm.php"] [unique_id "acOkLBJ38QkS3NyfshzHCQAAAo4"]
[Wed Mar 25 17:00:28.663385 2026] [:error] [pid 25875:tid 25881] [client 51.103.36.25:14555] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h2.php"] [unique_id "acOkLBJ38QkS3NyfshzHDQAAAoA"]
[Wed Mar 25 17:00:29.345324 2026] [:error] [pid 25875:tid 25905] [client 51.103.36.25:14590] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjde.php"] [unique_id "acOkLRJ38QkS3NyfshzHEgAAApg"]
[Wed Mar 25 17:00:29.862670 2026] [:error] [pid 25969:tid 26037] [client 51.103.36.25:14154] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjde.php"] [unique_id "acOkLRd3aEUmOfdKja_4xQAAA8s"]
[Wed Mar 25 17:00:30.395599 2026] [:error] [pid 25875:tid 25894] [client 51.103.36.25:14480] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjde.php"] [unique_id "acOkLhJ38QkS3NyfshzHFwAAAo0"]
[Wed Mar 25 17:00:31.033603 2026] [:error] [pid 25969:tid 26039] [client 51.103.36.25:14588] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjde.php"] [unique_id "acOkLxd3aEUmOfdKja_4xgAAA80"]
[Wed Mar 25 17:00:31.636140 2026] [:error] [pid 25875:tid 25900] [client 51.103.36.25:14507] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gin.php"] [unique_id "acOkLxJ38QkS3NyfshzHIAAAApM"]
[Wed Mar 25 17:00:32.117015 2026] [:error] [pid 47989:tid 48012] [client 51.103.36.25:14516] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gin.php"] [unique_id "acOkMCWKdJMhIccROjmAJAAAAVU"]
[Wed Mar 25 17:00:32.624704 2026] [:error] [pid 25875:tid 25893] [client 51.103.36.25:14178] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gin.php"] [unique_id "acOkMBJ38QkS3NyfshzHJgAAAow"]
[Wed Mar 25 17:00:33.103656 2026] [:error] [pid 26449:tid 26470] [client 51.103.36.25:14147] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gin.php"] [unique_id "acOkMdpZ2T15NDqzAjFhmAAAAlE"]
[Wed Mar 25 17:00:33.807359 2026] [:error] [pid 47989:tid 48011] [client 51.103.36.25:14552] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acOkMSWKdJMhIccROjmAJwAAAVQ"]
[Wed Mar 25 17:00:34.279392 2026] [:error] [pid 47989:tid 48006] [client 51.103.36.25:14568] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acOkMiWKdJMhIccROjmALQAAAU8"]
[Wed Mar 25 17:00:34.770152 2026] [:error] [pid 25967:tid 25988] [client 51.103.36.25:14504] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acOkMvg8Qtq7ZM4mSFkXSAAAA1A"]
[Wed Mar 25 17:00:35.242815 2026] [:error] [pid 26449:tid 26473] [client 51.103.36.25:14489] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acOkM9pZ2T15NDqzAjFhmgAAAlQ"]
[Wed Mar 25 20:19:08.935009 2026] [proxy_fcgi:error] [pid 25875:tid 25898] [client 4.223.157.191:13912] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:19:09.202742 2026] [proxy_fcgi:error] [pid 25875:tid 25895] [client 4.223.157.191:13912] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:19:10.006758 2026] [proxy_fcgi:error] [pid 25875:tid 25899] [client 4.223.157.191:13912] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:19:10.269706 2026] [:error] [pid 25875:tid 25905] [client 4.223.157.191:13912] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abca.php"] [unique_id "acPSvhJ38QkS3NyfshwKzwAAApg"]
[Wed Mar 25 20:19:10.798849 2026] [:error] [pid 25875:tid 25890] [client 4.223.157.191:13950] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abca.php"] [unique_id "acPSvhJ38QkS3NyfshwK0gAAAok"]
[Wed Mar 25 20:19:11.341993 2026] [:error] [pid 25875:tid 25892] [client 4.223.157.191:13904] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h2.php"] [unique_id "acPSvxJ38QkS3NyfshwK1AAAAos"]
[Wed Mar 25 20:19:11.871898 2026] [:error] [pid 25969:tid 26050] [client 4.223.157.191:13834] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h2.php"] [unique_id "acPSvxd3aEUmOfdKja8M7wAAA9g"]
[Wed Mar 25 20:19:12.408585 2026] [:error] [pid 25969:tid 26047] [client 4.223.157.191:13943] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h2.php"] [unique_id "acPSwBd3aEUmOfdKja8M8AAAA9U"]
[Wed Mar 25 20:19:12.933456 2026] [:error] [pid 25875:tid 25905] [client 4.223.157.191:13918] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h2.php"] [unique_id "acPSwBJ38QkS3NyfshwK2wAAApg"]
[Wed Mar 25 20:19:14.463889 2026] [:error] [pid 25875:tid 25890] [client 4.223.157.191:13898] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddd.php"] [unique_id "acPSwhJ38QkS3NyfshwK3QAAAok"]
[Wed Mar 25 20:19:14.989465 2026] [:error] [pid 25969:tid 26044] [client 4.223.157.191:13843] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddd.php"] [unique_id "acPSwhd3aEUmOfdKja8M9gAAA9I"]
[Wed Mar 25 20:19:15.517802 2026] [:error] [pid 47989:tid 47996] [client 4.223.157.191:13942] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddd.php"] [unique_id "acPSwyWKdJMhIccROjnqAwAAAUU"]
[Wed Mar 25 20:19:16.052152 2026] [:error] [pid 26321:tid 26349] [client 4.223.157.191:4568] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddd.php"] [unique_id "acPSxPKO65qqGZCSPZpQYgAAAgg"]
[Wed Mar 25 20:19:16.578676 2026] [:error] [pid 26269:tid 26286] [client 4.223.157.191:13853] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl2024.php"] [unique_id "acPSxEn7e-ZQbaIs7qy9BwAAAYo"]
[Wed Mar 25 20:19:17.107282 2026] [:error] [pid 47946:tid 47955] [client 4.223.157.191:13895] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fde.php"] [unique_id "acPSxTipQTqBMSeKYheGCAAAAQc"]
[Wed Mar 25 20:19:17.635549 2026] [:error] [pid 756:tid 862] [client 4.223.157.191:13939] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acPSxTOaW6oylMIDBCQhNAAAAIo"]
[Wed Mar 25 20:19:18.161798 2026] [:error] [pid 26449:tid 26457] [client 4.223.157.191:13908] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acPSxtpZ2T15NDqzAjGANAAAAkQ"]
[Wed Mar 25 20:19:18.686723 2026] [:error] [pid 25875:tid 25884] [client 4.223.157.191:13872] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acPSxhJ38QkS3NyfshwK4wAAAoM"]
[Wed Mar 25 20:19:19.217731 2026] [:error] [pid 25967:tid 25981] [client 4.223.157.191:13867] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta.php"] [unique_id "acPSx_g8Qtq7ZM4mSFljAwAAA0k"]
[Wed Mar 25 20:19:19.745400 2026] [:error] [pid 26449:tid 26469] [client 4.223.157.191:13924] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bays.php"] [unique_id "acPSx9pZ2T15NDqzAjGANQAAAlA"]
[Wed Mar 25 20:19:20.276676 2026] [:error] [pid 25875:tid 25885] [client 4.223.157.191:13935] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bays.php"] [unique_id "acPSyBJ38QkS3NyfshwK6wAAAoQ"]
[Wed Mar 25 20:19:20.804690 2026] [:error] [pid 26449:tid 26475] [client 4.223.157.191:13934] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bays.php"] [unique_id "acPSyNpZ2T15NDqzAjGAOwAAAlY"]
[Wed Mar 25 20:19:21.330220 2026] [:error] [pid 26449:tid 26474] [client 4.223.157.191:13919] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bays.php"] [unique_id "acPSydpZ2T15NDqzAjGAPwAAAlU"]
[Wed Mar 25 20:19:21.861994 2026] [:error] [pid 25967:tid 25993] [client 4.223.157.191:13840] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x0rg.php"] [unique_id "acPSyfg8Qtq7ZM4mSFljBgAAA1U"]
[Wed Mar 25 20:19:22.393009 2026] [:error] [pid 892:tid 919] [client 4.223.157.191:13876] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x0rg.php"] [unique_id "acPSyiT_G8WMU3T3yxrWzQAAANQ"]
[Wed Mar 25 20:19:22.918015 2026] [:error] [pid 26321:tid 26344] [client 4.223.157.191:13830] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x0rg.php"] [unique_id "acPSyvKO65qqGZCSPZpQZQAAAgU"]
[Wed Mar 25 20:19:23.444194 2026] [:error] [pid 25969:tid 26041] [client 4.223.157.191:13945] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x0rg.php"] [unique_id "acPSyxd3aEUmOfdKja8M-QAAA88"]
[Wed Mar 25 20:19:23.969459 2026] [:error] [pid 26269:tid 26281] [client 4.223.157.191:13889] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "acPSy0n7e-ZQbaIs7qy9DQAAAYU"]
[Wed Mar 25 20:19:24.503282 2026] [:error] [pid 26321:tid 26357] [client 4.223.157.191:13850] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "acPSzPKO65qqGZCSPZpQZgAAAhA"]
[Wed Mar 25 22:44:01.813365 2026] [proxy_fcgi:error] [pid 26321:tid 26359] [client 51.103.36.25:38602] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:44:02.052907 2026] [proxy_fcgi:error] [pid 26321:tid 26356] [client 51.103.36.25:38602] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 22:44:02.769467 2026] [:error] [pid 26321:tid 26350] [client 51.103.36.25:38602] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lfm.php"] [unique_id "acP0svKO65qqGZCSPZppMwAAAgk"]
[Wed Mar 25 22:44:03.281026 2026] [:error] [pid 25875:tid 25883] [client 51.103.36.25:65106] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lfm.php"] [unique_id "acP0sxJ38QkS3NyfshxK0QAAAoI"]
[Wed Mar 25 22:44:03.766707 2026] [:error] [pid 26449:tid 26474] [client 51.103.36.25:38620] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lfm.php"] [unique_id "acP0s9pZ2T15NDqzAjGTqgAAAlU"]
[Wed Mar 25 22:44:04.264339 2026] [:error] [pid 25875:tid 25897] [client 51.103.36.25:26218] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xl2024.php"] [unique_id "acP0tBJ38QkS3NyfshxK1QAAApA"]
[Wed Mar 25 22:44:04.743783 2026] [:error] [pid 25875:tid 25892] [client 51.103.36.25:65202] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gin.php"] [unique_id "acP0tBJ38QkS3NyfshxK2AAAAos"]
[Wed Mar 25 22:44:05.264583 2026] [:error] [pid 25875:tid 25902] [client 51.103.36.25:65176] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yawa.php"] [unique_id "acP0tRJ38QkS3NyfshxK2wAAApU"]
[Wed Mar 25 22:44:05.737047 2026] [:error] [pid 47946:tid 47954] [client 51.103.36.25:64540] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yawa.php"] [unique_id "acP0tTipQTqBMSeKYheOEQAAAQY"]
[Thu Mar 26 00:13:49.671172 2026] [:error] [pid 25875:tid 25903] [client 92.246.207.130:51402] [client 92.246.207.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.246.207.130, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acQJvRJ38QkS3NyfshxsGQAAApY"]
[Thu Mar 26 00:13:49.682296 2026] [proxy_fcgi:error] [pid 25875:tid 25903] [client 92.246.207.130:51402] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 00:17:28.159040 2026] [:error] [pid 26321:tid 26351] [client 125.21.124.18:56003] [client 125.21.124.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.21.124.18, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acQKmPKO65qqGZCSPZp3YQAAAgo"]
[Thu Mar 26 00:17:28.171617 2026] [proxy_fcgi:error] [pid 26321:tid 26351] [client 125.21.124.18:56003] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:27.494883 2026] [proxy_fcgi:error] [pid 56131:tid 56149] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:27.731790 2026] [proxy_fcgi:error] [pid 56131:tid 56141] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:27.968838 2026] [proxy_fcgi:error] [pid 56131:tid 56157] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:28.253680 2026] [proxy_fcgi:error] [pid 56131:tid 56143] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:28.490092 2026] [proxy_fcgi:error] [pid 56131:tid 56145] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:28.726925 2026] [proxy_fcgi:error] [pid 56131:tid 56151] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:28.962928 2026] [proxy_fcgi:error] [pid 56131:tid 56144] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:29.200137 2026] [proxy_fcgi:error] [pid 56131:tid 56147] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:29.543143 2026] [proxy_fcgi:error] [pid 56131:tid 56146] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:29.959407 2026] [proxy_fcgi:error] [pid 56131:tid 56155] [client 172.213.225.120:23267] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:18:30.192562 2026] [:error] [pid 56131:tid 56148] [client 172.213.225.120:23267] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQm9kg5t1V4ZYPCUhw5dQAAAAk"]
[Thu Mar 26 02:18:31.626552 2026] [:error] [pid 55734:tid 55839] [client 172.213.225.120:7688] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQm98_x4fL7PCmNzkCJnQAAAM0"]
[Thu Mar 26 02:18:32.948489 2026] [:error] [pid 55733:tid 55758] [client 172.213.225.120:40954] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQm-KMzUauzYCgMHcnnuQAAAIs"]
[Thu Mar 26 02:18:33.730294 2026] [:error] [pid 55735:tid 55867] [client 172.213.225.120:4242] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQm-UhXsYCMQZKUd5O2EgAAAQw"]
[Thu Mar 26 02:18:34.370978 2026] [:error] [pid 32829:tid 32854] [client 172.213.225.120:42509] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acQm-nFEeazI9mYaKsz29AAAAFc"]
[Thu Mar 26 02:18:35.645917 2026] [:error] [pid 55734:tid 55837] [client 172.213.225.120:4239] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acQm-8_x4fL7PCmNzkCJnwAAAMs"]
[Thu Mar 26 02:18:36.669214 2026] [:error] [pid 56131:tid 56143] [client 172.213.225.120:8947] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acQm_Eg5t1V4ZYPCUhw5ewAAAAQ"]
[Thu Mar 26 02:18:37.474306 2026] [:error] [pid 55735:tid 55879] [client 172.213.225.120:42511] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acQm_UhXsYCMQZKUd5O2FAAAARc"]
[Thu Mar 26 02:18:38.279520 2026] [:error] [pid 55733:tid 55752] [client 172.213.225.120:23279] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acQm_qMzUauzYCgMHcnnvAAAAIU"]
[Thu Mar 26 02:18:39.148538 2026] [:error] [pid 56131:tid 56148] [client 172.213.225.120:29709] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acQm_0g5t1V4ZYPCUhw5fgAAAAk"]
[Thu Mar 26 02:18:41.008697 2026] [:error] [pid 32829:tid 32832] [client 172.213.225.120:40080] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acQnAXFEeazI9mYaKsz3BwAAAEE"]
[Thu Mar 26 02:18:42.469772 2026] [:error] [pid 56131:tid 56153] [client 172.213.225.120:22432] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acQnAkg5t1V4ZYPCUhw5hgAAAA4"]
[Thu Mar 26 02:18:44.600954 2026] [:error] [pid 56131:tid 56152] [client 172.213.225.120:4250] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/init.php"] [unique_id "acQnBEg5t1V4ZYPCUhw5jgAAAA0"]
[Thu Mar 26 02:18:46.785325 2026] [:error] [pid 56131:tid 56162] [client 172.213.225.120:14574] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/init.php"] [unique_id "acQnBkg5t1V4ZYPCUhw5lQAAABc"]
[Thu Mar 26 02:18:48.644642 2026] [:error] [pid 32829:tid 32836] [client 172.213.225.120:14556] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/init.php"] [unique_id "acQnCHFEeazI9mYaKsz3EwAAAEU"]
[Thu Mar 26 02:18:50.350749 2026] [:error] [pid 56131:tid 56148] [client 172.213.225.120:21412] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/init.php"] [unique_id "acQnCkg5t1V4ZYPCUhw5oQAAAAk"]
[Thu Mar 26 02:18:51.996427 2026] [:error] [pid 55734:tid 55833] [client 172.213.225.120:21491] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acQnC8_x4fL7PCmNzkCJpQAAAMc"]
[Thu Mar 26 02:18:53.342444 2026] [:error] [pid 55733:tid 55769] [client 172.213.225.120:14860] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acQnDaMzUauzYCgMHcnnxwAAAJQ"]
[Thu Mar 26 02:18:54.913071 2026] [:error] [pid 55735:tid 55867] [client 172.213.225.120:40904] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acQnDkhXsYCMQZKUd5O2HQAAAQw"]
[Thu Mar 26 02:18:56.426474 2026] [:error] [pid 55735:tid 55868] [client 172.213.225.120:14855] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acQnEEhXsYCMQZKUd5O2IQAAAQ0"]
[Thu Mar 26 02:18:57.618507 2026] [:error] [pid 55733:tid 55765] [client 172.213.225.120:14870] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acQnEaMzUauzYCgMHcnnzAAAAJE"]
[Thu Mar 26 02:19:01.411474 2026] [:error] [pid 55735:tid 55875] [client 172.213.225.120:8896] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acQnFUhXsYCMQZKUd5O2KgAAARM"]
[Thu Mar 26 02:19:04.720356 2026] [:error] [pid 55735:tid 55876] [client 172.213.225.120:13121] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acQnGEhXsYCMQZKUd5O2MAAAARQ"]
[Thu Mar 26 02:19:06.602546 2026] [:error] [pid 32829:tid 32836] [client 172.213.225.120:30799] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acQnGnFEeazI9mYaKsz3HQAAAEU"]
[Thu Mar 26 02:19:08.792742 2026] [:error] [pid 55735:tid 55859] [client 172.213.225.120:13166] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acQnHEhXsYCMQZKUd5O2NQAAAQQ"]
[Thu Mar 26 02:19:12.323688 2026] [:error] [pid 55734:tid 55836] [client 172.213.225.120:40344] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acQnIM_x4fL7PCmNzkCJvAAAAMo"]
[Thu Mar 26 02:19:13.272117 2026] [:error] [pid 55734:tid 55838] [client 172.213.225.120:4242] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acQnIc_x4fL7PCmNzkCJvwAAAMw"]
[Thu Mar 26 02:19:15.746840 2026] [:error] [pid 32829:tid 32837] [client 172.213.225.120:22498] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acQnI3FEeazI9mYaKsz3IAAAAEY"]
[Thu Mar 26 02:19:17.417979 2026] [:error] [pid 32829:tid 32843] [client 172.213.225.120:4530] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acQnJXFEeazI9mYaKsz3JgAAAEw"]
[Thu Mar 26 02:19:33.783669 2026] [proxy_fcgi:error] [pid 32829:tid 32836] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:34.063713 2026] [proxy_fcgi:error] [pid 32829:tid 32834] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:34.329298 2026] [proxy_fcgi:error] [pid 32829:tid 32844] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:34.876652 2026] [proxy_fcgi:error] [pid 32829:tid 32849] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:35.128066 2026] [proxy_fcgi:error] [pid 32829:tid 32852] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:35.395037 2026] [proxy_fcgi:error] [pid 32829:tid 32850] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:35.660018 2026] [proxy_fcgi:error] [pid 32829:tid 32855] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:35.934287 2026] [proxy_fcgi:error] [pid 32829:tid 32842] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:36.213294 2026] [proxy_fcgi:error] [pid 32829:tid 32832] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:36.488046 2026] [proxy_fcgi:error] [pid 32829:tid 32853] [client 172.213.225.120:37629] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:19:36.754890 2026] [:error] [pid 32829:tid 32839] [client 172.213.225.120:37629] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acQnOHFEeazI9mYaKsz3YQAAAEg"]
[Thu Mar 26 02:19:47.990043 2026] [:error] [pid 32829:tid 32855] [client 172.213.225.120:38300] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acQnQ3FEeazI9mYaKsz3fgAAAFg"]
[Thu Mar 26 02:19:50.634451 2026] [:error] [pid 32829:tid 32844] [client 172.213.225.120:16849] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acQnRnFEeazI9mYaKsz3iAAAAE0"]
[Thu Mar 26 02:19:51.515130 2026] [:error] [pid 32829:tid 32853] [client 172.213.225.120:45819] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws83.php"] [unique_id "acQnR3FEeazI9mYaKsz3jQAAAFY"]
[Thu Mar 26 02:19:53.957054 2026] [:error] [pid 55735:tid 55855] [client 172.213.225.120:25389] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "acQnSUhXsYCMQZKUd5O2aAAAAQE"]
[Thu Mar 26 02:19:56.139021 2026] [:error] [pid 32829:tid 32843] [client 172.213.225.120:19146] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "acQnTHFEeazI9mYaKsz3rAAAAEw"]
[Thu Mar 26 02:19:57.647767 2026] [:error] [pid 32829:tid 32838] [client 172.213.225.120:26214] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "acQnTXFEeazI9mYaKsz31wAAAEc"]
[Thu Mar 26 02:19:58.510626 2026] [:error] [pid 56131:tid 56157] [client 172.213.225.120:45817] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "acQnTkg5t1V4ZYPCUhw55AAAABI"]
[Thu Mar 26 02:19:59.619069 2026] [:error] [pid 55733:tid 55768] [client 172.213.225.120:19197] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/s.php"] [unique_id "acQnT6MzUauzYCgMHcnoAwAAAJM"]
[Thu Mar 26 02:20:00.601883 2026] [:error] [pid 55733:tid 55752] [client 172.213.225.120:45822] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/s.php"] [unique_id "acQnUKMzUauzYCgMHcnoBgAAAIU"]
[Thu Mar 26 02:20:01.835026 2026] [:error] [pid 55735:tid 55858] [client 172.213.225.120:19551] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/s.php"] [unique_id "acQnUUhXsYCMQZKUd5O2cQAAAQM"]
[Thu Mar 26 02:20:03.770889 2026] [:error] [pid 55733:tid 55759] [client 172.213.225.120:37569] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/s.php"] [unique_id "acQnU6MzUauzYCgMHcnoCwAAAIw"]
[Thu Mar 26 02:20:05.987852 2026] [:error] [pid 32829:tid 32841] [client 172.213.225.120:24019] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "acQnVXFEeazI9mYaKsz36QAAAEo"]
[Thu Mar 26 02:20:11.587776 2026] [:error] [pid 32829:tid 32834] [client 172.213.225.120:45712] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "acQnW3FEeazI9mYaKsz37gAAAEM"]
[Thu Mar 26 02:20:13.305418 2026] [:error] [pid 55735:tid 55871] [client 172.213.225.120:18026] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "acQnXUhXsYCMQZKUd5O2dwAAAQ8"]
[Thu Mar 26 02:20:14.325078 2026] [:error] [pid 56131:tid 56155] [client 172.213.225.120:18339] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "acQnXkg5t1V4ZYPCUhw6BAAAABA"]
[Thu Mar 26 02:20:23.028060 2026] [:error] [pid 56131:tid 56154] [client 172.213.225.120:45472] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQnZ0g5t1V4ZYPCUhw6HAAAAA8"]
[Thu Mar 26 02:20:24.479782 2026] [:error] [pid 56131:tid 56160] [client 172.213.225.120:30847] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQnaEg5t1V4ZYPCUhw6JQAAABU"]
[Thu Mar 26 02:20:25.555025 2026] [:error] [pid 55733:tid 55766] [client 172.213.225.120:4533] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQnaaMzUauzYCgMHcnoNQAAAJI"]
[Thu Mar 26 02:20:27.162975 2026] [:error] [pid 56131:tid 56159] [client 172.213.225.120:14852] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQna0g5t1V4ZYPCUhw6KAAAABQ"]
[Thu Mar 26 02:20:27.980171 2026] [:error] [pid 32829:tid 32855] [client 172.213.225.120:44769] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bjfl.php"] [unique_id "acQna3FEeazI9mYaKsz4AgAAAFg"]
[Thu Mar 26 02:20:29.216358 2026] [:error] [pid 56131:tid 56141] [client 172.213.225.120:40102] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bjfl.php"] [unique_id "acQnbUg5t1V4ZYPCUhw6LgAAAAI"]
[Thu Mar 26 02:20:31.475924 2026] [:error] [pid 55735:tid 55861] [client 172.213.225.120:30821] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bjfl.php"] [unique_id "acQnb0hXsYCMQZKUd5O2jAAAAQY"]
[Thu Mar 26 02:20:33.514926 2026] [:error] [pid 55733:tid 55758] [client 172.213.225.120:18407] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bjfl.php"] [unique_id "acQncaMzUauzYCgMHcnoQwAAAIs"]
[Thu Mar 26 02:20:35.112356 2026] [:error] [pid 32829:tid 32852] [client 172.213.225.120:32519] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQnc3FEeazI9mYaKsz4CQAAAFU"]
[Thu Mar 26 02:20:37.679430 2026] [proxy_fcgi:error] [pid 56131:tid 56148] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:37.925800 2026] [proxy_fcgi:error] [pid 56131:tid 56144] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:38.163961 2026] [proxy_fcgi:error] [pid 56131:tid 56157] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:38.410898 2026] [proxy_fcgi:error] [pid 56131:tid 56154] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:38.849141 2026] [proxy_fcgi:error] [pid 56131:tid 56162] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:39.084708 2026] [proxy_fcgi:error] [pid 56131:tid 56143] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:39.322703 2026] [proxy_fcgi:error] [pid 56131:tid 56140] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:39.599781 2026] [proxy_fcgi:error] [pid 56131:tid 56153] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:40.201873 2026] [proxy_fcgi:error] [pid 56131:tid 56145] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:40.459437 2026] [proxy_fcgi:error] [pid 56131:tid 56161] [client 172.213.225.120:15648] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:20:40.692179 2026] [:error] [pid 56131:tid 56147] [client 172.213.225.120:15648] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/155.php"] [unique_id "acQneEg5t1V4ZYPCUhw6QAAAAAg"]
[Thu Mar 26 02:20:42.101162 2026] [:error] [pid 55735:tid 55875] [client 172.213.225.120:42554] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/155.php"] [unique_id "acQnekhXsYCMQZKUd5O2lAAAARM"]
[Thu Mar 26 02:20:43.182039 2026] [:error] [pid 56131:tid 56151] [client 172.213.225.120:11635] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/155.php"] [unique_id "acQne0g5t1V4ZYPCUhw6QQAAAAw"]
[Thu Mar 26 02:20:44.966594 2026] [:error] [pid 55733:tid 55761] [client 172.213.225.120:7220] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/155.php"] [unique_id "acQnfKMzUauzYCgMHcnoRwAAAI4"]
[Thu Mar 26 02:20:47.473737 2026] [:error] [pid 32829:tid 32834] [client 172.213.225.120:37883] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acQnf3FEeazI9mYaKsz4KgAAAEM"]
[Thu Mar 26 02:20:48.557738 2026] [:error] [pid 56131:tid 56146] [client 172.213.225.120:16411] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acQngEg5t1V4ZYPCUhw6RwAAAAc"]
[Thu Mar 26 02:20:50.858805 2026] [:error] [pid 32829:tid 32836] [client 172.213.225.120:25069] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acQngnFEeazI9mYaKsz4MQAAAEU"]
[Thu Mar 26 02:20:53.767535 2026] [:error] [pid 32829:tid 32845] [client 172.213.225.120:37785] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acQnhXFEeazI9mYaKsz4PwAAAE4"]
[Thu Mar 26 02:20:55.831063 2026] [:error] [pid 32829:tid 32842] [client 172.213.225.120:33682] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acQnh3FEeazI9mYaKsz4QwAAAEs"]
[Thu Mar 26 02:20:57.334844 2026] [:error] [pid 55734:tid 55850] [client 172.213.225.120:44714] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acQnic_x4fL7PCmNzkCJ9gAAANg"]
[Thu Mar 26 02:21:00.427699 2026] [:error] [pid 55735:tid 55875] [client 172.213.225.120:13101] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acQnjEhXsYCMQZKUd5O2oAAAARM"]
[Thu Mar 26 02:21:10.377263 2026] [:error] [pid 55733:tid 55747] [client 172.213.225.120:41825] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acQnlqMzUauzYCgMHcnoZAAAAIE"]
[Thu Mar 26 02:21:13.462739 2026] [:error] [pid 32829:tid 32853] [client 172.213.225.120:41097] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acQnmXFEeazI9mYaKsz4YAAAAFY"]
[Thu Mar 26 02:21:18.633167 2026] [:error] [pid 55734:tid 55849] [client 172.213.225.120:41101] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acQnns_x4fL7PCmNzkCKFAAAANc"]
[Thu Mar 26 02:21:21.489442 2026] [:error] [pid 56131:tid 56153] [client 172.213.225.120:5016] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acQnoUg5t1V4ZYPCUhw6ewAAAA4"]
[Thu Mar 26 02:21:23.305093 2026] [:error] [pid 55733:tid 55771] [client 172.213.225.120:24367] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acQno6MzUauzYCgMHcnocwAAAJU"]
[Thu Mar 26 02:21:24.126248 2026] [:error] [pid 56131:tid 56155] [client 172.213.225.120:27579] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acQnpEg5t1V4ZYPCUhw6jQAAABA"]
[Thu Mar 26 02:21:24.887310 2026] [:error] [pid 56131:tid 56161] [client 172.213.225.120:44704] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acQnpEg5t1V4ZYPCUhw6jwAAABY"]
[Thu Mar 26 02:21:25.665499 2026] [:error] [pid 55733:tid 55768] [client 172.213.225.120:34804] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acQnpaMzUauzYCgMHcnoeQAAAJM"]
[Thu Mar 26 02:21:26.697722 2026] [:error] [pid 55733:tid 55761] [client 172.213.225.120:41096] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acQnpqMzUauzYCgMHcnofQAAAI4"]
[Thu Mar 26 02:21:27.557380 2026] [:error] [pid 55733:tid 55746] [client 172.213.225.120:5027] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acQnp6MzUauzYCgMHcnofwAAAIA"]
[Thu Mar 26 02:21:28.683371 2026] [:error] [pid 32829:tid 32838] [client 172.213.225.120:41823] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acQnqHFEeazI9mYaKsz4bQAAAEc"]
[Thu Mar 26 02:21:29.465581 2026] [:error] [pid 32829:tid 32852] [client 172.213.225.120:38529] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acQnqXFEeazI9mYaKsz4cQAAAFU"]
[Thu Mar 26 02:21:30.938345 2026] [:error] [pid 56131:tid 56144] [client 172.213.225.120:33665] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acQnqkg5t1V4ZYPCUhw6mgAAAAU"]
[Thu Mar 26 02:21:33.368454 2026] [:error] [pid 32829:tid 32849] [client 172.213.225.120:34798] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acQnrXFEeazI9mYaKsz4fwAAAFI"]
[Thu Mar 26 02:21:34.515834 2026] [:error] [pid 32829:tid 32831] [client 172.213.225.120:28571] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acQnrnFEeazI9mYaKsz4gwAAAEA"]
[Thu Mar 26 02:21:35.534873 2026] [:error] [pid 55735:tid 55865] [client 172.213.225.120:44696] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acQnr0hXsYCMQZKUd5O2twAAAQo"]
[Thu Mar 26 02:21:39.072886 2026] [:error] [pid 56131:tid 56160] [client 172.213.225.120:5033] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acQns0g5t1V4ZYPCUhw6pAAAABU"]
[Thu Mar 26 02:21:41.074291 2026] [proxy_fcgi:error] [pid 32829:tid 32836] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:41.313069 2026] [proxy_fcgi:error] [pid 32829:tid 32846] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:41.551172 2026] [proxy_fcgi:error] [pid 32829:tid 32850] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:41.796807 2026] [proxy_fcgi:error] [pid 32829:tid 32833] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:42.048566 2026] [proxy_fcgi:error] [pid 32829:tid 32852] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:42.543480 2026] [proxy_fcgi:error] [pid 32829:tid 32846] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:42.782165 2026] [proxy_fcgi:error] [pid 32829:tid 32850] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:43.019037 2026] [proxy_fcgi:error] [pid 32829:tid 32849] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:44.655548 2026] [proxy_fcgi:error] [pid 32829:tid 32839] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:45.252820 2026] [proxy_fcgi:error] [pid 32829:tid 32845] [client 172.213.225.120:28601] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:21:45.787144 2026] [:error] [pid 32829:tid 32846] [client 172.213.225.120:28601] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acQnuXFEeazI9mYaKsz4uAAAAE8"]
[Thu Mar 26 02:21:48.574868 2026] [:error] [pid 55734:tid 55849] [client 172.213.225.120:44689] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nw.php"] [unique_id "acQnvM_x4fL7PCmNzkCKNgAAANc"]
[Thu Mar 26 02:22:14.417645 2026] [:error] [pid 56131:tid 56141] [client 172.213.225.120:27551] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/44.php"] [unique_id "acQn1kg5t1V4ZYPCUhw68gAAAAI"]
[Thu Mar 26 02:22:16.594387 2026] [:error] [pid 55735:tid 55879] [client 172.213.225.120:28558] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/44.php"] [unique_id "acQn2EhXsYCMQZKUd5O24gAAARc"]
[Thu Mar 26 02:22:18.761195 2026] [:error] [pid 32829:tid 32854] [client 172.213.225.120:34764] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/44.php"] [unique_id "acQn2nFEeazI9mYaKsz4-AAAAFc"]
[Thu Mar 26 02:22:19.680628 2026] [:error] [pid 32829:tid 32849] [client 172.213.225.120:41845] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/44.php"] [unique_id "acQn23FEeazI9mYaKsz4-wAAAFI"]
[Thu Mar 26 02:22:20.740800 2026] [:error] [pid 55733:tid 55755] [client 172.213.225.120:38097] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acQn3KMzUauzYCgMHcnouQAAAIg"]
[Thu Mar 26 02:22:22.381444 2026] [:error] [pid 55735:tid 55878] [client 172.213.225.120:34762] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acQn3khXsYCMQZKUd5O27AAAARY"]
[Thu Mar 26 02:22:24.811203 2026] [:error] [pid 56131:tid 56156] [client 172.213.225.120:19509] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acQn4Eg5t1V4ZYPCUhw7CQAAABE"]
[Thu Mar 26 02:22:25.961649 2026] [:error] [pid 32829:tid 32851] [client 172.213.225.120:34791] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws49.php"] [unique_id "acQn4XFEeazI9mYaKsz5BgAAAFQ"]
[Thu Mar 26 02:22:27.346005 2026] [:error] [pid 32829:tid 32834] [client 172.213.225.120:41147] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acQn43FEeazI9mYaKsz5CwAAAEM"]
[Thu Mar 26 02:22:28.435509 2026] [:error] [pid 55733:tid 55749] [client 172.213.225.120:40595] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acQn5KMzUauzYCgMHcnowQAAAIM"]
[Thu Mar 26 02:22:30.132942 2026] [:error] [pid 32829:tid 32841] [client 172.213.225.120:16107] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acQn5nFEeazI9mYaKsz5EgAAAEo"]
[Thu Mar 26 02:22:32.196146 2026] [:error] [pid 32829:tid 32832] [client 172.213.225.120:41102] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acQn6HFEeazI9mYaKsz5FQAAAEE"]
[Thu Mar 26 02:22:33.745137 2026] [:error] [pid 55733:tid 55752] [client 172.213.225.120:4447] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/install.php"] [unique_id "acQn6aMzUauzYCgMHcnoxQAAAIU"]
[Thu Mar 26 02:22:36.018936 2026] [:error] [pid 55733:tid 55775] [client 172.213.225.120:41121] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/install.php"] [unique_id "acQn7KMzUauzYCgMHcnoxgAAAJg"]
[Thu Mar 26 02:22:37.500301 2026] [:error] [pid 55735:tid 55880] [client 172.213.225.120:19514] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/install.php"] [unique_id "acQn7UhXsYCMQZKUd5O3CAAAARg"]
[Thu Mar 26 02:22:40.401733 2026] [:error] [pid 55733:tid 55757] [client 172.213.225.120:38090] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/install.php"] [unique_id "acQn8KMzUauzYCgMHcnozwAAAIo"]
[Thu Mar 26 02:22:41.208973 2026] [:error] [pid 56131:tid 56148] [client 172.213.225.120:33702] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "acQn8Ug5t1V4ZYPCUhw7JQAAAAk"]
[Thu Mar 26 02:22:43.102465 2026] [:error] [pid 32829:tid 32849] [client 172.213.225.120:38116] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "acQn83FEeazI9mYaKsz5NAAAAFI"]
[Thu Mar 26 02:22:44.799284 2026] [:error] [pid 32829:tid 32853] [client 172.213.225.120:4434] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "acQn9HFEeazI9mYaKsz5OwAAAFY"]
[Thu Mar 26 02:22:48.029250 2026] [proxy_fcgi:error] [pid 32829:tid 32846] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:48.338570 2026] [proxy_fcgi:error] [pid 32829:tid 32839] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:48.672139 2026] [proxy_fcgi:error] [pid 32829:tid 32847] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:48.909515 2026] [proxy_fcgi:error] [pid 32829:tid 32845] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:49.146903 2026] [proxy_fcgi:error] [pid 32829:tid 32841] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:49.417009 2026] [proxy_fcgi:error] [pid 32829:tid 32837] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:49.696464 2026] [proxy_fcgi:error] [pid 32829:tid 32846] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:50.070940 2026] [proxy_fcgi:error] [pid 32829:tid 32848] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:22:50.307161 2026] [proxy_fcgi:error] [pid 32829:tid 32839] [client 172.213.225.120:44619] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:31:43.048538 2026] [proxy_fcgi:error] [pid 55735:tid 55868] [client 20.104.199.149:4049] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:31:43.679115 2026] [proxy_fcgi:error] [pid 55735:tid 55875] [client 20.104.199.149:4049] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:31:43.974298 2026] [proxy_fcgi:error] [pid 55735:tid 55856] [client 20.104.199.149:4049] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:31:44.404866 2026] [proxy_fcgi:error] [pid 55735:tid 55855] [client 20.104.199.149:4049] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:31:44.820759 2026] [:error] [pid 55735:tid 55866] [client 20.104.199.149:4049] [client 20.104.199.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.199.149, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acQqEEhXsYCMQZKUd5O5FAAAAQs"]
[Thu Mar 26 02:31:44.824532 2026] [proxy_fcgi:error] [pid 55735:tid 55866] [client 20.104.199.149:4049] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:31:45.044250 2026] [proxy_fcgi:error] [pid 55735:tid 55876] [client 20.104.199.149:4049] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:31:45.251274 2026] [:error] [pid 55735:tid 55865] [client 20.104.199.149:4049] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acQqEUhXsYCMQZKUd5O5FwAAAQo"]
[Thu Mar 26 02:31:45.686338 2026] [:error] [pid 55733:tid 55750] [client 20.104.199.149:4079] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acQqEaMzUauzYCgMHcnrKwAAAIQ"]
[Thu Mar 26 02:31:46.104425 2026] [:error] [pid 55735:tid 55870] [client 20.104.199.149:3979] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acQqEkhXsYCMQZKUd5O5GAAAAQ4"]
[Thu Mar 26 02:31:46.977181 2026] [:error] [pid 55735:tid 55863] [client 20.104.199.149:4068] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acQqEkhXsYCMQZKUd5O5GgAAAQg"]
[Thu Mar 26 02:31:47.415851 2026] [:error] [pid 56131:tid 56157] [client 20.104.199.149:4078] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqE0g5t1V4ZYPCUhw-fwAAABI"]
[Thu Mar 26 02:31:48.089725 2026] [:error] [pid 32829:tid 32849] [client 20.104.199.149:4067] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqFHFEeazI9mYaKsz-sQAAAFI"]
[Thu Mar 26 02:31:48.597749 2026] [:error] [pid 55734:tid 55833] [client 20.104.199.149:4035] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqFM_x4fL7PCmNzkCMGgAAAMc"]
[Thu Mar 26 02:31:49.061556 2026] [:error] [pid 32829:tid 32831] [client 20.104.199.149:4070] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqFXFEeazI9mYaKsz-tgAAAEA"]
[Thu Mar 26 02:31:49.547296 2026] [:error] [pid 32829:tid 32852] [client 20.104.199.149:3980] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "acQqFXFEeazI9mYaKsz-twAAAFU"]
[Thu Mar 26 02:31:50.094383 2026] [:error] [pid 32829:tid 32845] [client 20.104.199.149:4080] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "acQqFnFEeazI9mYaKsz-uQAAAE4"]
[Thu Mar 26 02:31:50.627517 2026] [:error] [pid 32829:tid 32833] [client 20.104.199.149:3986] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "acQqFnFEeazI9mYaKsz-vgAAAEI"]
[Thu Mar 26 02:31:51.652383 2026] [:error] [pid 55733:tid 55772] [client 20.104.199.149:3984] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "acQqF6MzUauzYCgMHcnrLQAAAJY"]
[Thu Mar 26 02:31:52.485601 2026] [:error] [pid 55735:tid 55862] [client 20.104.199.149:4087] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqGEhXsYCMQZKUd5O5HgAAAQc"]
[Thu Mar 26 02:31:53.009887 2026] [:error] [pid 55735:tid 55875] [client 20.104.199.149:3978] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqGUhXsYCMQZKUd5O5IAAAARM"]
[Thu Mar 26 02:31:54.288957 2026] [:error] [pid 32829:tid 32845] [client 20.104.199.149:3970] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqGnFEeazI9mYaKsz-xgAAAE4"]
[Thu Mar 26 02:31:54.846974 2026] [:error] [pid 32829:tid 32837] [client 20.104.199.149:4019] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqGnFEeazI9mYaKsz-ywAAAEY"]
[Thu Mar 26 02:31:55.537377 2026] [:error] [pid 32829:tid 32832] [client 20.104.199.149:4033] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acQqG3FEeazI9mYaKsz-zQAAAEE"]
[Thu Mar 26 02:31:56.247795 2026] [:error] [pid 32829:tid 32840] [client 20.104.199.149:4038] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acQqHHFEeazI9mYaKsz-0wAAAEk"]
[Thu Mar 26 02:31:56.753732 2026] [:error] [pid 32829:tid 32836] [client 20.104.199.149:4042] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acQqHHFEeazI9mYaKsz-1gAAAEU"]
[Thu Mar 26 02:31:57.429738 2026] [:error] [pid 32829:tid 32839] [client 20.104.199.149:4086] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "acQqHXFEeazI9mYaKsz-2gAAAEg"]
[Thu Mar 26 02:31:57.848835 2026] [:error] [pid 55734:tid 55843] [client 20.104.199.149:4094] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqHc_x4fL7PCmNzkCMHAAAANE"]
[Thu Mar 26 02:31:58.630487 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:4064] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqHnFEeazI9mYaKsz-4QAAAEo"]
[Thu Mar 26 02:31:59.616519 2026] [:error] [pid 32829:tid 32831] [client 20.104.199.149:4059] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqH3FEeazI9mYaKsz-5wAAAEA"]
[Thu Mar 26 02:32:00.264997 2026] [:error] [pid 32829:tid 32839] [client 20.104.199.149:4058] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqIHFEeazI9mYaKsz-6QAAAEg"]
[Thu Mar 26 02:32:01.066134 2026] [:error] [pid 32829:tid 32855] [client 20.104.199.149:4003] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acQqIXFEeazI9mYaKsz-7gAAAFg"]
[Thu Mar 26 02:32:01.623785 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:4007] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acQqIXFEeazI9mYaKsz-8QAAAEo"]
[Thu Mar 26 02:32:02.087907 2026] [:error] [pid 32829:tid 32852] [client 20.104.199.149:4069] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acQqInFEeazI9mYaKsz-8wAAAFU"]
[Thu Mar 26 02:32:02.666258 2026] [:error] [pid 32829:tid 32838] [client 20.104.199.149:4061] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acQqInFEeazI9mYaKsz-9gAAAEc"]
[Thu Mar 26 02:32:03.317079 2026] [:error] [pid 32829:tid 32854] [client 20.104.199.149:3977] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acQqI3FEeazI9mYaKsz--gAAAFc"]
[Thu Mar 26 02:32:03.929338 2026] [:error] [pid 32829:tid 32845] [client 20.104.199.149:4065] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acQqI3FEeazI9mYaKsz-_gAAAE4"]
[Thu Mar 26 02:32:04.494511 2026] [:error] [pid 32829:tid 32836] [client 20.104.199.149:4043] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acQqJHFEeazI9mYaKsz_BAAAAEU"]
[Thu Mar 26 02:32:04.978421 2026] [:error] [pid 32829:tid 32832] [client 20.104.199.149:3968] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acQqJHFEeazI9mYaKsz_CAAAAEE"]
[Thu Mar 26 02:32:05.560828 2026] [:error] [pid 56131:tid 56157] [client 20.104.199.149:4046] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqJUg5t1V4ZYPCUhw-iwAAABI"]
[Thu Mar 26 02:32:06.070463 2026] [:error] [pid 32829:tid 32846] [client 20.104.199.149:4036] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqJnFEeazI9mYaKsz_DQAAAE8"]
[Thu Mar 26 02:32:06.503828 2026] [:error] [pid 32829:tid 32843] [client 20.104.199.149:4081] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqJnFEeazI9mYaKsz_EAAAAEw"]
[Thu Mar 26 02:32:06.919632 2026] [:error] [pid 32829:tid 32839] [client 20.104.199.149:4048] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqJnFEeazI9mYaKsz_EQAAAEg"]
[Thu Mar 26 02:32:07.423878 2026] [:error] [pid 55734:tid 55846] [client 20.104.199.149:3982] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "acQqJ8_x4fL7PCmNzkCMIAAAANQ"]
[Thu Mar 26 02:32:08.196472 2026] [:error] [pid 56131:tid 56161] [client 20.104.199.149:4008] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "acQqKEg5t1V4ZYPCUhw-kQAAABY"]
[Thu Mar 26 02:32:08.609694 2026] [:error] [pid 56131:tid 56160] [client 20.104.199.149:4093] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "acQqKEg5t1V4ZYPCUhw-lAAAABU"]
[Thu Mar 26 02:32:09.023993 2026] [:error] [pid 56131:tid 56141] [client 20.104.199.149:4090] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "acQqKUg5t1V4ZYPCUhw-lwAAAAI"]
[Thu Mar 26 02:32:09.569642 2026] [:error] [pid 56131:tid 56146] [client 20.104.199.149:3981] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acQqKUg5t1V4ZYPCUhw-mwAAAAc"]
[Thu Mar 26 02:32:10.364884 2026] [:error] [pid 55735:tid 55878] [client 20.104.199.149:4025] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acQqKkhXsYCMQZKUd5O5MAAAARY"]
[Thu Mar 26 02:32:11.238346 2026] [:error] [pid 56131:tid 56140] [client 20.104.199.149:3924] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acQqK0g5t1V4ZYPCUhw-rwAAAAE"]
[Thu Mar 26 02:32:11.656566 2026] [:error] [pid 55734:tid 55848] [client 20.104.199.149:4006] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acQqK8_x4fL7PCmNzkCMIgAAANY"]
[Thu Mar 26 02:32:12.077160 2026] [:error] [pid 56131:tid 56161] [client 20.104.199.149:3916] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kbfr.php"] [unique_id "acQqLEg5t1V4ZYPCUhw-tQAAABY"]
[Thu Mar 26 02:32:12.495188 2026] [:error] [pid 32829:tid 32853] [client 20.104.199.149:4041] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kbfr.php"] [unique_id "acQqLHFEeazI9mYaKsz_IgAAAFY"]
[Thu Mar 26 02:32:12.942797 2026] [:error] [pid 55734:tid 55828] [client 20.104.199.149:4024] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kbfr.php"] [unique_id "acQqLM_x4fL7PCmNzkCMJQAAAMI"]
[Thu Mar 26 02:32:13.379713 2026] [:error] [pid 55734:tid 55849] [client 20.104.199.149:4062] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kbfr.php"] [unique_id "acQqLc_x4fL7PCmNzkCMJgAAANc"]
[Thu Mar 26 02:32:13.841069 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3988] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "acQqLXFEeazI9mYaKsz_JwAAAEo"]
[Thu Mar 26 02:32:14.314871 2026] [:error] [pid 32829:tid 32834] [client 20.104.199.149:3976] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "acQqLnFEeazI9mYaKsz_KAAAAEM"]
[Thu Mar 26 02:32:14.779956 2026] [:error] [pid 32829:tid 32849] [client 20.104.199.149:4053] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "acQqLnFEeazI9mYaKsz_KgAAAFI"]
[Thu Mar 26 02:32:15.610727 2026] [:error] [pid 32829:tid 32852] [client 20.104.199.149:4000] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "acQqL3FEeazI9mYaKsz_LgAAAFU"]
[Thu Mar 26 02:32:16.094939 2026] [:error] [pid 56131:tid 56150] [client 20.104.199.149:3973] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "acQqMEg5t1V4ZYPCUhw-wwAAAAs"]
[Thu Mar 26 02:32:16.774515 2026] [:error] [pid 55735:tid 55878] [client 20.104.199.149:4039] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "acQqMEhXsYCMQZKUd5O5RAAAARY"]
[Thu Mar 26 02:32:17.533484 2026] [:error] [pid 56131:tid 56139] [client 20.104.199.149:4063] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "acQqMUg5t1V4ZYPCUhw-xgAAAAA"]
[Thu Mar 26 02:32:18.162269 2026] [:error] [pid 32829:tid 32854] [client 20.104.199.149:4022] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "acQqMnFEeazI9mYaKsz_MgAAAFc"]
[Thu Mar 26 02:32:18.859492 2026] [:error] [pid 56131:tid 56162] [client 20.104.199.149:3995] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqMkg5t1V4ZYPCUhw-ygAAABc"]
[Thu Mar 26 02:32:19.374017 2026] [:error] [pid 55735:tid 55877] [client 20.104.199.149:4083] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqM0hXsYCMQZKUd5O5SAAAARU"]
[Thu Mar 26 02:32:20.163764 2026] [:error] [pid 32829:tid 32837] [client 20.104.199.149:4012] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqNHFEeazI9mYaKsz_NAAAAEY"]
[Thu Mar 26 02:32:20.921461 2026] [:error] [pid 56131:tid 56155] [client 20.104.199.149:4088] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqNEg5t1V4ZYPCUhw-zgAAABA"]
[Thu Mar 26 02:32:22.037758 2026] [:error] [pid 55733:tid 55755] [client 20.104.199.149:4045] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/defaults.php"] [unique_id "acQqNqMzUauzYCgMHcnrRAAAAIg"]
[Thu Mar 26 02:32:23.193119 2026] [:error] [pid 55735:tid 55876] [client 20.104.199.149:4034] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/defaults.php"] [unique_id "acQqN0hXsYCMQZKUd5O5TAAAARQ"]
[Thu Mar 26 02:32:24.141249 2026] [:error] [pid 55733:tid 55772] [client 20.104.199.149:4071] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/defaults.php"] [unique_id "acQqOKMzUauzYCgMHcnrSQAAAJY"]
[Thu Mar 26 02:32:24.920173 2026] [:error] [pid 56131:tid 56159] [client 20.104.199.149:3937] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/defaults.php"] [unique_id "acQqOEg5t1V4ZYPCUhw-1QAAABQ"]
[Thu Mar 26 02:32:25.544370 2026] [:error] [pid 56131:tid 56158] [client 20.104.199.149:3918] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "acQqOUg5t1V4ZYPCUhw-3QAAABM"]
[Thu Mar 26 02:32:25.959794 2026] [:error] [pid 55734:tid 55847] [client 20.104.199.149:4004] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "acQqOc_x4fL7PCmNzkCMNQAAANU"]
[Thu Mar 26 02:32:26.380913 2026] [:error] [pid 32829:tid 32853] [client 20.104.199.149:3842] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "acQqOnFEeazI9mYaKsz_QwAAAFY"]
[Thu Mar 26 02:32:26.834554 2026] [:error] [pid 55734:tid 55846] [client 20.104.199.149:3992] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "acQqOs_x4fL7PCmNzkCMOAAAANQ"]
[Thu Mar 26 02:32:27.364143 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:4084] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/"] [unique_id "acQqO3FEeazI9mYaKsz_RQAAAEo"]
[Thu Mar 26 02:32:27.911646 2026] [:error] [pid 32829:tid 32849] [client 20.104.199.149:4052] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/"] [unique_id "acQqO3FEeazI9mYaKsz_RgAAAFI"]
[Thu Mar 26 02:32:28.432112 2026] [:error] [pid 55733:tid 55756] [client 20.104.199.149:3912] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/"] [unique_id "acQqPKMzUauzYCgMHcnrUQAAAIk"]
[Thu Mar 26 02:32:28.885860 2026] [:error] [pid 55733:tid 55759] [client 20.104.199.149:3920] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/"] [unique_id "acQqPKMzUauzYCgMHcnrUgAAAIw"]
[Thu Mar 26 02:32:29.298270 2026] [:error] [pid 32829:tid 32836] [client 20.104.199.149:3933] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqPXFEeazI9mYaKsz_SwAAAEU"]
[Thu Mar 26 02:32:29.777668 2026] [:error] [pid 56131:tid 56143] [client 20.104.199.149:3864] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqPUg5t1V4ZYPCUhw-6AAAAAQ"]
[Thu Mar 26 02:32:30.327551 2026] [:error] [pid 56131:tid 56162] [client 20.104.199.149:3908] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqPkg5t1V4ZYPCUhw-6wAAABc"]
[Thu Mar 26 02:32:30.895977 2026] [:error] [pid 55735:tid 55880] [client 20.104.199.149:4073] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqPkhXsYCMQZKUd5O5YQAAARg"]
[Thu Mar 26 02:32:31.391845 2026] [:error] [pid 32829:tid 32845] [client 20.104.199.149:4010] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "acQqP3FEeazI9mYaKsz_TgAAAE4"]
[Thu Mar 26 02:32:32.009340 2026] [:error] [pid 56131:tid 56159] [client 20.104.199.149:3943] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "acQqQEg5t1V4ZYPCUhw-8wAAABQ"]
[Thu Mar 26 02:32:32.477384 2026] [:error] [pid 56131:tid 56161] [client 20.104.199.149:3927] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "acQqQEg5t1V4ZYPCUhw-9gAAABY"]
[Thu Mar 26 02:32:33.010317 2026] [:error] [pid 56131:tid 56158] [client 20.104.199.149:3971] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/"] [unique_id "acQqQUg5t1V4ZYPCUhw--gAAABM"]
[Thu Mar 26 02:32:33.423404 2026] [:error] [pid 56131:tid 56163] [client 20.104.199.149:3975] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "acQqQUg5t1V4ZYPCUhw-_AAAABg"]
[Thu Mar 26 02:32:34.101171 2026] [:error] [pid 56131:tid 56139] [client 20.104.199.149:3969] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "acQqQkg5t1V4ZYPCUhw-_QAAAAA"]
[Thu Mar 26 02:32:34.518774 2026] [:error] [pid 56131:tid 56143] [client 20.104.199.149:4091] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "acQqQkg5t1V4ZYPCUhw-_wAAAAQ"]
[Thu Mar 26 02:32:35.059710 2026] [:error] [pid 56131:tid 56142] [client 20.104.199.149:3963] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "acQqQ0g5t1V4ZYPCUhw_AwAAAAM"]
[Thu Mar 26 02:32:35.483645 2026] [:error] [pid 56131:tid 56157] [client 20.104.199.149:4076] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/"] [unique_id "acQqQ0g5t1V4ZYPCUhw_BAAAABI"]
[Thu Mar 26 02:32:35.926600 2026] [:error] [pid 32829:tid 32855] [client 20.104.199.149:4013] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/"] [unique_id "acQqQ3FEeazI9mYaKsz_VAAAAFg"]
[Thu Mar 26 02:32:36.339322 2026] [:error] [pid 56131:tid 56143] [client 20.104.199.149:3994] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/"] [unique_id "acQqREg5t1V4ZYPCUhw_CwAAAAQ"]
[Thu Mar 26 02:32:36.777871 2026] [:error] [pid 56131:tid 56149] [client 20.104.199.149:4005] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/"] [unique_id "acQqREg5t1V4ZYPCUhw_EwAAAAo"]
[Thu Mar 26 02:32:37.219723 2026] [:error] [pid 56131:tid 56147] [client 20.104.199.149:3859] [client 20.104.199.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "acQqRUg5t1V4ZYPCUhw_FwAAAAg"]
[Thu Mar 26 02:32:37.651809 2026] [:error] [pid 56131:tid 56155] [client 20.104.199.149:4028] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/"] [unique_id "acQqRUg5t1V4ZYPCUhw_HAAAABA"]
[Thu Mar 26 02:32:38.079546 2026] [:error] [pid 55733:tid 55758] [client 20.104.199.149:4074] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/"] [unique_id "acQqRqMzUauzYCgMHcnrXwAAAIs"]
[Thu Mar 26 02:32:38.539429 2026] [:error] [pid 32829:tid 32839] [client 20.104.199.149:3998] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/"] [unique_id "acQqRnFEeazI9mYaKsz_WAAAAEg"]
[Thu Mar 26 02:32:38.952844 2026] [:error] [pid 32829:tid 32834] [client 20.104.199.149:4056] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqRnFEeazI9mYaKsz_WgAAAEM"]
[Thu Mar 26 02:32:39.399959 2026] [:error] [pid 55733:tid 55746] [client 20.104.199.149:4014] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqR6MzUauzYCgMHcnrYgAAAIA"]
[Thu Mar 26 02:32:39.914598 2026] [:error] [pid 55734:tid 55833] [client 20.104.199.149:4055] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqR8_x4fL7PCmNzkCMQQAAAMc"]
[Thu Mar 26 02:32:40.453029 2026] [:error] [pid 32829:tid 32831] [client 20.104.199.149:3987] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqSHFEeazI9mYaKsz_XgAAAEA"]
[Thu Mar 26 02:32:40.963312 2026] [:error] [pid 32829:tid 32852] [client 20.104.199.149:4054] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "acQqSHFEeazI9mYaKsz_YQAAAFU"]
[Thu Mar 26 02:32:41.453981 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3904] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "acQqSXFEeazI9mYaKsz_ZAAAAEo"]
[Thu Mar 26 02:32:42.082473 2026] [:error] [pid 55734:tid 55847] [client 20.104.199.149:3948] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "acQqSs_x4fL7PCmNzkCMRAAAANU"]
[Thu Mar 26 02:32:42.504665 2026] [:error] [pid 32829:tid 32848] [client 20.104.199.149:3936] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "acQqSnFEeazI9mYaKsz_ZwAAAFE"]
[Thu Mar 26 02:32:43.316357 2026] [:error] [pid 55735:tid 55865] [client 20.104.199.149:3914] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "acQqS0hXsYCMQZKUd5O5aQAAAQo"]
[Thu Mar 26 02:32:44.091286 2026] [:error] [pid 56131:tid 56148] [client 20.104.199.149:4060] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "acQqTEg5t1V4ZYPCUhw_IgAAAAk"]
[Thu Mar 26 02:32:44.576117 2026] [:error] [pid 56131:tid 56151] [client 20.104.199.149:3985] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "acQqTEg5t1V4ZYPCUhw_KAAAAAw"]
[Thu Mar 26 02:32:46.973355 2026] [proxy_fcgi:error] [pid 32829:tid 32835] [client 20.104.199.149:3934] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:32:47.208190 2026] [proxy_fcgi:error] [pid 32829:tid 32833] [client 20.104.199.149:3934] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:32:47.430126 2026] [proxy_fcgi:error] [pid 32829:tid 32852] [client 20.104.199.149:3934] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:32:47.639459 2026] [proxy_fcgi:error] [pid 32829:tid 32831] [client 20.104.199.149:3934] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:32:47.845186 2026] [:error] [pid 32829:tid 32854] [client 20.104.199.149:3934] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqT3FEeazI9mYaKsz_gAAAAFc"]
[Thu Mar 26 02:32:48.549084 2026] [:error] [pid 56131:tid 56150] [client 20.104.199.149:3993] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqUEg5t1V4ZYPCUhw_KgAAAAs"]
[Thu Mar 26 02:32:48.977768 2026] [:error] [pid 55733:tid 55764] [client 20.104.199.149:4017] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqUKMzUauzYCgMHcnrbQAAAJA"]
[Thu Mar 26 02:32:49.493872 2026] [:error] [pid 55735:tid 55876] [client 20.104.199.149:4082] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqUUhXsYCMQZKUd5O5cgAAARQ"]
[Thu Mar 26 02:32:49.961621 2026] [:error] [pid 56131:tid 56153] [client 20.104.199.149:3906] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqUUg5t1V4ZYPCUhw_KwAAAA4"]
[Thu Mar 26 02:32:50.398012 2026] [:error] [pid 56131:tid 56157] [client 20.104.199.149:3867] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqUkg5t1V4ZYPCUhw_LAAAABI"]
[Thu Mar 26 02:32:50.892340 2026] [:error] [pid 55734:tid 55845] [client 20.104.199.149:4092] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqUs_x4fL7PCmNzkCMTgAAANM"]
[Thu Mar 26 02:32:51.323929 2026] [:error] [pid 55733:tid 55762] [client 20.104.199.149:3917] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acQqU6MzUauzYCgMHcnrcgAAAI8"]
[Thu Mar 26 02:32:51.824710 2026] [:error] [pid 55734:tid 55835] [client 20.104.199.149:4075] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqU8_x4fL7PCmNzkCMUAAAAMk"]
[Thu Mar 26 02:32:52.238801 2026] [:error] [pid 56131:tid 56142] [client 20.104.199.149:3962] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqVEg5t1V4ZYPCUhw_MAAAAAM"]
[Thu Mar 26 02:32:52.661460 2026] [:error] [pid 56131:tid 56145] [client 20.104.199.149:4021] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqVEg5t1V4ZYPCUhw_MwAAAAY"]
[Thu Mar 26 02:32:53.231696 2026] [:error] [pid 55735:tid 55873] [client 20.104.199.149:3997] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqVUhXsYCMQZKUd5O5dgAAARE"]
[Thu Mar 26 02:32:53.724930 2026] [:error] [pid 55734:tid 55847] [client 20.104.199.149:3851] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acQqVc_x4fL7PCmNzkCMUQAAANU"]
[Thu Mar 26 02:32:54.222704 2026] [:error] [pid 55733:tid 55752] [client 20.104.199.149:4037] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acQqVqMzUauzYCgMHcnrdQAAAIU"]
[Thu Mar 26 02:32:54.713399 2026] [:error] [pid 55733:tid 55753] [client 20.104.199.149:3999] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acQqVqMzUauzYCgMHcnrdwAAAIY"]
[Thu Mar 26 02:32:55.133091 2026] [:error] [pid 55735:tid 55872] [client 20.104.199.149:4023] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acQqV0hXsYCMQZKUd5O5egAAARA"]
[Thu Mar 26 02:32:55.544581 2026] [:error] [pid 55733:tid 55764] [client 20.104.199.149:4057] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmrlpc.php"] [unique_id "acQqV6MzUauzYCgMHcnregAAAJA"]
[Thu Mar 26 02:32:55.960863 2026] [:error] [pid 32829:tid 32839] [client 20.104.199.149:3942] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmrlpc.php"] [unique_id "acQqV3FEeazI9mYaKsz_hAAAAEg"]
[Thu Mar 26 02:32:56.422107 2026] [:error] [pid 55733:tid 55746] [client 20.104.199.149:4020] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmrlpc.php"] [unique_id "acQqWKMzUauzYCgMHcnrfQAAAIA"]
[Thu Mar 26 02:32:56.921831 2026] [:error] [pid 56131:tid 56146] [client 20.104.199.149:4066] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmrlpc.php"] [unique_id "acQqWEg5t1V4ZYPCUhw_PAAAAAc"]
[Thu Mar 26 02:32:57.458949 2026] [:error] [pid 32829:tid 32852] [client 20.104.199.149:4077] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acQqWXFEeazI9mYaKsz_igAAAFU"]
[Thu Mar 26 02:32:57.876594 2026] [:error] [pid 32829:tid 32849] [client 20.104.199.149:4015] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acQqWXFEeazI9mYaKsz_jQAAAFI"]
[Thu Mar 26 02:32:58.389539 2026] [:error] [pid 56131:tid 56148] [client 20.104.199.149:4018] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acQqWkg5t1V4ZYPCUhw_PwAAAAk"]
[Thu Mar 26 02:32:58.917737 2026] [:error] [pid 56131:tid 56163] [client 20.104.199.149:3983] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acQqWkg5t1V4ZYPCUhw_QwAAABg"]
[Thu Mar 26 02:32:59.441400 2026] [:error] [pid 56131:tid 56149] [client 20.104.199.149:4026] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqW0g5t1V4ZYPCUhw_RgAAAAo"]
[Thu Mar 26 02:32:59.932935 2026] [:error] [pid 56131:tid 56150] [client 20.104.199.149:4095] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqW0g5t1V4ZYPCUhw_TAAAAAs"]
[Thu Mar 26 02:33:00.354179 2026] [:error] [pid 56131:tid 56156] [client 20.104.199.149:3910] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqXEg5t1V4ZYPCUhw_TgAAABE"]
[Thu Mar 26 02:33:00.884615 2026] [:error] [pid 56131:tid 56163] [client 20.104.199.149:3974] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acQqXEg5t1V4ZYPCUhw_UQAAABg"]
[Thu Mar 26 02:33:01.356194 2026] [:error] [pid 55733:tid 55752] [client 20.104.199.149:3958] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqXaMzUauzYCgMHcnrgwAAAIU"]
[Thu Mar 26 02:33:01.813396 2026] [:error] [pid 56131:tid 56160] [client 20.104.199.149:3845] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqXUg5t1V4ZYPCUhw_VAAAABU"]
[Thu Mar 26 02:33:02.230879 2026] [:error] [pid 55733:tid 55753] [client 20.104.199.149:3919] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqXqMzUauzYCgMHcnrhQAAAIY"]
[Thu Mar 26 02:33:02.641807 2026] [:error] [pid 56131:tid 56146] [client 20.104.199.149:3957] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "acQqXkg5t1V4ZYPCUhw_WQAAAAc"]
[Thu Mar 26 02:33:03.061599 2026] [:error] [pid 56131:tid 56148] [client 20.104.199.149:3915] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqX0g5t1V4ZYPCUhw_XQAAAAk"]
[Thu Mar 26 02:33:03.488768 2026] [:error] [pid 55733:tid 55758] [client 20.104.199.149:3872] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqX6MzUauzYCgMHcnrhwAAAIs"]
[Thu Mar 26 02:33:03.899925 2026] [:error] [pid 56131:tid 56139] [client 20.104.199.149:4089] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqX0g5t1V4ZYPCUhw_ZwAAAAA"]
[Thu Mar 26 02:33:04.312229 2026] [:error] [pid 55733:tid 55750] [client 20.104.199.149:3935] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "acQqYKMzUauzYCgMHcnrmQAAAIQ"]
[Thu Mar 26 02:33:04.925161 2026] [:error] [pid 32829:tid 32842] [client 20.104.199.149:4085] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "acQqYHFEeazI9mYaKsz_kgAAAEs"]
[Thu Mar 26 02:33:05.524877 2026] [:error] [pid 32829:tid 32854] [client 20.104.199.149:4039] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "acQqYXFEeazI9mYaKsz_lgAAAFc"]
[Thu Mar 26 02:33:06.081980 2026] [:error] [pid 32829:tid 32838] [client 20.104.199.149:4027] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "acQqYnFEeazI9mYaKsz_mgAAAEc"]
[Thu Mar 26 02:33:06.528730 2026] [:error] [pid 32829:tid 32837] [client 20.104.199.149:3965] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "acQqYnFEeazI9mYaKsz_mwAAAEY"]
[Thu Mar 26 02:33:06.999610 2026] [:error] [pid 32829:tid 32844] [client 20.104.199.149:3873] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "acQqYnFEeazI9mYaKsz_ngAAAE0"]
[Thu Mar 26 02:33:07.501845 2026] [:error] [pid 32829:tid 32848] [client 20.104.199.149:3996] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "acQqY3FEeazI9mYaKsz_nwAAAFE"]
[Thu Mar 26 02:33:07.937840 2026] [:error] [pid 56131:tid 56157] [client 20.104.199.149:3784] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "acQqY0g5t1V4ZYPCUhw_fgAAABI"]
[Thu Mar 26 02:33:08.557592 2026] [:error] [pid 56131:tid 56141] [client 20.104.199.149:3860] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "acQqZEg5t1V4ZYPCUhw_gQAAAAI"]
[Thu Mar 26 02:33:09.054404 2026] [:error] [pid 55733:tid 55765] [client 20.104.199.149:4011] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqZaMzUauzYCgMHcnrnwAAAJE"]
[Thu Mar 26 02:33:09.497308 2026] [:error] [pid 55735:tid 55879] [client 20.104.199.149:3973] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqZUhXsYCMQZKUd5O5iwAAARc"]
[Thu Mar 26 02:33:09.926849 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3956] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqZXFEeazI9mYaKsz_pQAAAEo"]
[Thu Mar 26 02:33:10.340779 2026] [:error] [pid 32829:tid 32838] [client 20.104.199.149:3950] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acQqZnFEeazI9mYaKsz_pwAAAEc"]
[Thu Mar 26 02:33:10.783620 2026] [:error] [pid 32829:tid 32844] [client 20.104.199.149:3959] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acQqZnFEeazI9mYaKsz_qAAAAE0"]
[Thu Mar 26 02:33:11.256775 2026] [:error] [pid 32829:tid 32843] [client 20.104.199.149:4047] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acQqZ3FEeazI9mYaKsz_qQAAAEw"]
[Thu Mar 26 02:33:11.844820 2026] [:error] [pid 32829:tid 32851] [client 20.104.199.149:3945] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acQqZ3FEeazI9mYaKsz_qwAAAFQ"]
[Thu Mar 26 02:33:12.345695 2026] [:error] [pid 55735:tid 55873] [client 20.104.199.149:3946] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acQqaEhXsYCMQZKUd5O5kwAAARE"]
[Thu Mar 26 02:33:12.802494 2026] [:error] [pid 55735:tid 55874] [client 20.104.199.149:3949] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "acQqaEhXsYCMQZKUd5O5lwAAARI"]
[Thu Mar 26 02:33:13.214592 2026] [:error] [pid 32829:tid 32842] [client 20.104.199.149:3939] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "acQqaXFEeazI9mYaKsz_rQAAAEs"]
[Thu Mar 26 02:33:13.713135 2026] [:error] [pid 55734:tid 55847] [client 20.104.199.149:3923] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "acQqac_x4fL7PCmNzkCMXQAAANU"]
[Thu Mar 26 02:33:14.163481 2026] [:error] [pid 32829:tid 32840] [client 20.104.199.149:4047] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "acQqanFEeazI9mYaKsz_sQAAAEk"]
[Thu Mar 26 02:33:14.591265 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3907] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqanFEeazI9mYaKsz_sgAAAEo"]
[Thu Mar 26 02:33:15.036835 2026] [:error] [pid 32829:tid 32838] [client 20.104.199.149:3952] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqa3FEeazI9mYaKsz_tAAAAEc"]
[Thu Mar 26 02:33:15.460897 2026] [:error] [pid 55734:tid 55830] [client 20.104.199.149:3925] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqa8_x4fL7PCmNzkCMYAAAAMQ"]
[Thu Mar 26 02:33:15.885806 2026] [:error] [pid 55734:tid 55839] [client 20.104.199.149:3855] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acQqa8_x4fL7PCmNzkCMYgAAAM0"]
[Thu Mar 26 02:33:16.314522 2026] [:error] [pid 32829:tid 32847] [client 20.104.199.149:3922] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "acQqbHFEeazI9mYaKsz_tgAAAFA"]
[Thu Mar 26 02:33:16.908010 2026] [:error] [pid 55734:tid 55837] [client 20.104.199.149:4009] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "acQqbM_x4fL7PCmNzkCMZQAAAMs"]
[Thu Mar 26 02:33:17.448842 2026] [:error] [pid 32829:tid 32845] [client 20.104.199.149:3881] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "acQqbXFEeazI9mYaKsz_uwAAAE4"]
[Thu Mar 26 02:33:17.877149 2026] [:error] [pid 55734:tid 55829] [client 20.104.199.149:3810] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "acQqbc_x4fL7PCmNzkCMZgAAAMM"]
[Thu Mar 26 02:33:18.307210 2026] [:error] [pid 32829:tid 32834] [client 20.104.199.149:4001] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fx.php"] [unique_id "acQqbnFEeazI9mYaKsz_vgAAAEM"]
[Thu Mar 26 02:33:18.724126 2026] [:error] [pid 56131:tid 56155] [client 20.104.199.149:3931] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fx.php"] [unique_id "acQqbkg5t1V4ZYPCUhw_qgAAABA"]
[Thu Mar 26 02:33:19.188094 2026] [:error] [pid 56131:tid 56151] [client 20.104.199.149:4031] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fx.php"] [unique_id "acQqb0g5t1V4ZYPCUhw_rgAAAAw"]
[Thu Mar 26 02:33:19.732613 2026] [:error] [pid 56131:tid 56149] [client 20.104.199.149:3846] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fx.php"] [unique_id "acQqb0g5t1V4ZYPCUhw_tQAAAAo"]
[Thu Mar 26 02:33:20.362144 2026] [:error] [pid 56131:tid 56158] [client 20.104.199.149:3848] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelay.php"] [unique_id "acQqcEg5t1V4ZYPCUhw_uQAAABM"]
[Thu Mar 26 02:33:20.873568 2026] [:error] [pid 32829:tid 32837] [client 20.104.199.149:4051] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelay.php"] [unique_id "acQqcHFEeazI9mYaKsz_wQAAAEY"]
[Thu Mar 26 02:33:21.414299 2026] [:error] [pid 32829:tid 32845] [client 20.104.199.149:3961] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelay.php"] [unique_id "acQqcXFEeazI9mYaKsz_xAAAAE4"]
[Thu Mar 26 02:33:21.863524 2026] [:error] [pid 56131:tid 56162] [client 20.104.199.149:3955] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelay.php"] [unique_id "acQqcUg5t1V4ZYPCUhw_wQAAABc"]
[Thu Mar 26 02:33:22.354471 2026] [:error] [pid 55733:tid 55762] [client 20.104.199.149:3926] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/god4m.php"] [unique_id "acQqcqMzUauzYCgMHcnroQAAAI8"]
[Thu Mar 26 02:33:22.796033 2026] [:error] [pid 32829:tid 32853] [client 20.104.199.149:3857] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/god4m.php"] [unique_id "acQqcnFEeazI9mYaKsz_ygAAAFY"]
[Thu Mar 26 02:33:23.354893 2026] [:error] [pid 56131:tid 56146] [client 20.104.199.149:4016] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/god4m.php"] [unique_id "acQqc0g5t1V4ZYPCUhw_yQAAAAc"]
[Thu Mar 26 02:33:23.897957 2026] [:error] [pid 55734:tid 55833] [client 20.104.199.149:3990] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/god4m.php"] [unique_id "acQqc8_x4fL7PCmNzkCMaAAAAMc"]
[Thu Mar 26 02:33:24.451669 2026] [:error] [pid 55734:tid 55836] [client 20.104.199.149:3960] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mari.php"] [unique_id "acQqdM_x4fL7PCmNzkCMagAAAMo"]
[Thu Mar 26 02:33:24.995610 2026] [:error] [pid 55733:tid 55771] [client 20.104.199.149:3841] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mari.php"] [unique_id "acQqdKMzUauzYCgMHcnrpAAAAJU"]
[Thu Mar 26 02:33:25.542272 2026] [:error] [pid 55735:tid 55865] [client 20.104.199.149:4044] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mari.php"] [unique_id "acQqdUhXsYCMQZKUd5O5nAAAAQo"]
[Thu Mar 26 02:33:26.513038 2026] [:error] [pid 55733:tid 55753] [client 20.104.199.149:3889] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mari.php"] [unique_id "acQqdqMzUauzYCgMHcnrpgAAAIY"]
[Thu Mar 26 02:33:26.996014 2026] [:error] [pid 55735:tid 55878] [client 20.104.199.149:3800] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "acQqdkhXsYCMQZKUd5O5nwAAARY"]
[Thu Mar 26 02:33:27.619370 2026] [:error] [pid 56131:tid 56145] [client 20.104.199.149:3850] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "acQqd0g5t1V4ZYPCUhw_1wAAAAY"]
[Thu Mar 26 02:33:28.650052 2026] [:error] [pid 55733:tid 55749] [client 20.104.199.149:3921] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "acQqeKMzUauzYCgMHcnrqAAAAIM"]
[Thu Mar 26 02:33:29.366190 2026] [:error] [pid 56131:tid 56155] [client 20.104.199.149:3868] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "acQqeUg5t1V4ZYPCUhw_3AAAABA"]
[Thu Mar 26 02:33:29.778837 2026] [:error] [pid 55733:tid 55746] [client 20.104.199.149:3954] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "acQqeaMzUauzYCgMHcnrqQAAAIA"]
[Thu Mar 26 02:33:30.199326 2026] [:error] [pid 55734:tid 55839] [client 20.104.199.149:3929] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "acQqes_x4fL7PCmNzkCMcAAAAM0"]
[Thu Mar 26 02:33:30.743624 2026] [:error] [pid 56131:tid 56149] [client 20.104.199.149:3909] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "acQqekg5t1V4ZYPCUhw_3wAAAAo"]
[Thu Mar 26 02:33:31.158014 2026] [:error] [pid 55735:tid 55864] [client 20.104.199.149:4030] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "acQqe0hXsYCMQZKUd5O5ogAAAQk"]
[Thu Mar 26 02:33:31.581362 2026] [:error] [pid 55733:tid 55775] [client 20.104.199.149:3947] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp.php"] [unique_id "acQqe6MzUauzYCgMHcnrqwAAAJg"]
[Thu Mar 26 02:33:32.036045 2026] [:error] [pid 55735:tid 55879] [client 20.104.199.149:3788] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp.php"] [unique_id "acQqfEhXsYCMQZKUd5O5pAAAARc"]
[Thu Mar 26 02:33:32.446840 2026] [:error] [pid 55733:tid 55761] [client 20.104.199.149:3779] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp.php"] [unique_id "acQqfKMzUauzYCgMHcnrrAAAAI4"]
[Thu Mar 26 02:33:32.901378 2026] [:error] [pid 56131:tid 56140] [client 20.104.199.149:3871] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp.php"] [unique_id "acQqfEg5t1V4ZYPCUhw_4QAAAAE"]
[Thu Mar 26 02:33:33.341597 2026] [:error] [pid 55734:tid 55828] [client 20.104.199.149:3863] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/"] [unique_id "acQqfc_x4fL7PCmNzkCMdAAAAMI"]
[Thu Mar 26 02:33:33.756168 2026] [:error] [pid 55735:tid 55860] [client 20.104.199.149:3795] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/"] [unique_id "acQqfUhXsYCMQZKUd5O5pwAAAQU"]
[Thu Mar 26 02:33:34.216583 2026] [:error] [pid 55734:tid 55850] [client 20.104.199.149:3887] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/"] [unique_id "acQqfs_x4fL7PCmNzkCMdwAAANg"]
[Thu Mar 26 02:33:34.627221 2026] [:error] [pid 32829:tid 32833] [client 20.104.199.149:4050] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/"] [unique_id "acQqfnFEeazI9mYaKsz_0gAAAEI"]
[Thu Mar 26 02:33:35.184470 2026] [:error] [pid 56131:tid 56150] [client 20.104.199.149:3901] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "acQqf0g5t1V4ZYPCUhw_4gAAAAs"]
[Thu Mar 26 02:33:35.656681 2026] [:error] [pid 55734:tid 55835] [client 20.104.199.149:3960] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "acQqf8_x4fL7PCmNzkCMeAAAAMk"]
[Thu Mar 26 02:33:36.459987 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3852] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "acQqgHFEeazI9mYaKsz_2gAAAEo"]
[Thu Mar 26 02:33:36.977858 2026] [:error] [pid 32829:tid 32847] [client 20.104.199.149:3953] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfile.php"] [unique_id "acQqgHFEeazI9mYaKsz_3QAAAFA"]
[Thu Mar 26 02:33:37.713874 2026] [:error] [pid 32829:tid 32855] [client 20.104.199.149:3899] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acQqgXFEeazI9mYaKsz_4gAAAFg"]
[Thu Mar 26 02:33:38.364575 2026] [:error] [pid 32829:tid 32837] [client 20.104.199.149:3886] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acQqgnFEeazI9mYaKsz_5QAAAEY"]
[Thu Mar 26 02:33:39.179978 2026] [:error] [pid 32829:tid 32846] [client 20.104.199.149:3897] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acQqg3FEeazI9mYaKsz_6AAAAE8"]
[Thu Mar 26 02:33:39.843155 2026] [:error] [pid 32829:tid 32833] [client 20.104.199.149:3865] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acQqg3FEeazI9mYaKsz_6gAAAEI"]
[Thu Mar 26 02:33:40.273624 2026] [:error] [pid 56131:tid 56156] [client 20.104.199.149:3862] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sty.php"] [unique_id "acQqhEg5t1V4ZYPCUhw_6gAAABE"]
[Thu Mar 26 02:33:40.815774 2026] [:error] [pid 56131:tid 56160] [client 20.104.199.149:3858] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sty.php"] [unique_id "acQqhEg5t1V4ZYPCUhw_7AAAABU"]
[Thu Mar 26 02:33:41.234090 2026] [:error] [pid 32829:tid 32844] [client 20.104.199.149:3791] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sty.php"] [unique_id "acQqhXFEeazI9mYaKsz_7QAAAE0"]
[Thu Mar 26 02:33:42.032945 2026] [:error] [pid 55734:tid 55844] [client 20.104.199.149:3793] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sty.php"] [unique_id "acQqhs_x4fL7PCmNzkCMfQAAANI"]
[Thu Mar 26 02:33:42.485909 2026] [:error] [pid 55733:tid 55753] [client 20.104.199.149:3869] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxxx.php"] [unique_id "acQqhqMzUauzYCgMHcnrtAAAAIY"]
[Thu Mar 26 02:33:47.434404 2026] [proxy_fcgi:error] [pid 32829:tid 32847] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:47.644647 2026] [proxy_fcgi:error] [pid 32829:tid 32855] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:47.908993 2026] [proxy_fcgi:error] [pid 32829:tid 32832] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:48.118627 2026] [proxy_fcgi:error] [pid 32829:tid 32835] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:48.389709 2026] [proxy_fcgi:error] [pid 32829:tid 32843] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:48.599106 2026] [proxy_fcgi:error] [pid 32829:tid 32831] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:48.808527 2026] [proxy_fcgi:error] [pid 32829:tid 32849] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:49.058166 2026] [proxy_fcgi:error] [pid 32829:tid 32836] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:49.283969 2026] [proxy_fcgi:error] [pid 32829:tid 32841] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:49.493821 2026] [proxy_fcgi:error] [pid 32829:tid 32847] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:49.703405 2026] [proxy_fcgi:error] [pid 32829:tid 32842] [client 20.104.199.149:3882] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 02:33:49.913864 2026] [:error] [pid 32829:tid 32850] [client 20.104.199.149:3882] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tem.php"] [unique_id "acQqjXFEeazI9mYaKswAEAAAAFM"]
[Thu Mar 26 02:33:50.903597 2026] [:error] [pid 32829:tid 32834] [client 20.104.199.149:3834] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tem.php"] [unique_id "acQqjnFEeazI9mYaKswAFAAAAEM"]
[Thu Mar 26 02:33:51.570067 2026] [:error] [pid 32829:tid 32836] [client 20.104.199.149:3790] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tem.php"] [unique_id "acQqj3FEeazI9mYaKswAFgAAAEU"]
[Thu Mar 26 02:33:52.510941 2026] [:error] [pid 32829:tid 32855] [client 20.104.199.149:3913] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tem.php"] [unique_id "acQqkHFEeazI9mYaKswAHAAAAFg"]
[Thu Mar 26 02:33:53.278424 2026] [:error] [pid 32829:tid 32831] [client 20.104.199.149:3843] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av6m.php"] [unique_id "acQqkXFEeazI9mYaKswAIQAAAEA"]
[Thu Mar 26 02:33:54.085786 2026] [:error] [pid 55733:tid 55775] [client 20.104.199.149:3885] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av6m.php"] [unique_id "acQqkqMzUauzYCgMHcnrwgAAAJg"]
[Thu Mar 26 02:33:54.910650 2026] [:error] [pid 56131:tid 56144] [client 20.104.199.149:3840] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av6m.php"] [unique_id "acQqkkg5t1V4ZYPCUhw_9QAAAAU"]
[Thu Mar 26 02:33:55.323331 2026] [:error] [pid 55733:tid 55774] [client 20.104.199.149:4072] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av6m.php"] [unique_id "acQqk6MzUauzYCgMHcnrxQAAAJc"]
[Thu Mar 26 02:33:55.835773 2026] [:error] [pid 55733:tid 55765] [client 20.104.199.149:4002] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autogooey.php"] [unique_id "acQqk6MzUauzYCgMHcnrxgAAAJE"]
[Thu Mar 26 02:33:56.276201 2026] [:error] [pid 55733:tid 55747] [client 20.104.199.149:3789] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autogooey.php"] [unique_id "acQqlKMzUauzYCgMHcnrxwAAAIE"]
[Thu Mar 26 02:33:56.763903 2026] [:error] [pid 32829:tid 32849] [client 20.104.199.149:3932] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autogooey.php"] [unique_id "acQqlHFEeazI9mYaKswAKgAAAFI"]
[Thu Mar 26 02:33:57.440120 2026] [:error] [pid 55735:tid 55877] [client 20.104.199.149:3911] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autogooey.php"] [unique_id "acQqlUhXsYCMQZKUd5O5vgAAARU"]
[Thu Mar 26 02:33:57.897527 2026] [:error] [pid 32829:tid 32846] [client 20.104.199.149:3928] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "acQqlXFEeazI9mYaKswALAAAAE8"]
[Thu Mar 26 02:33:58.430971 2026] [:error] [pid 55735:tid 55875] [client 20.104.199.149:3940] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "acQqlkhXsYCMQZKUd5O5wQAAARM"]
[Thu Mar 26 02:33:58.847494 2026] [:error] [pid 55735:tid 55872] [client 20.104.199.149:3778] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "acQqlkhXsYCMQZKUd5O5xAAAARA"]
[Thu Mar 26 02:33:59.260972 2026] [:error] [pid 55735:tid 55878] [client 20.104.199.149:3720] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "acQql0hXsYCMQZKUd5O5xgAAARY"]
[Thu Mar 26 02:33:59.768197 2026] [:error] [pid 56131:tid 56158] [client 20.104.199.149:3853] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mga.php"] [unique_id "acQql0g5t1V4ZYPCUhw_-AAAABM"]
[Thu Mar 26 02:34:00.182862 2026] [:error] [pid 56131:tid 56161] [client 20.104.199.149:3967] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mga.php"] [unique_id "acQqmEg5t1V4ZYPCUhw_-QAAABY"]
[Thu Mar 26 02:34:00.655926 2026] [:error] [pid 55734:tid 55834] [client 20.104.199.149:3893] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mga.php"] [unique_id "acQqmM_x4fL7PCmNzkCMiAAAAMg"]
[Thu Mar 26 02:34:01.072317 2026] [:error] [pid 55734:tid 55837] [client 20.104.199.149:3964] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mga.php"] [unique_id "acQqmc_x4fL7PCmNzkCMiQAAAMs"]
[Thu Mar 26 02:34:01.512640 2026] [:error] [pid 55734:tid 55827] [client 20.104.199.149:3951] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "acQqmc_x4fL7PCmNzkCMjAAAAME"]
[Thu Mar 26 02:34:02.020570 2026] [:error] [pid 55735:tid 55873] [client 20.104.199.149:3894] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "acQqmkhXsYCMQZKUd5O5zQAAARE"]
[Thu Mar 26 02:34:02.456743 2026] [:error] [pid 32829:tid 32844] [client 20.104.199.149:3805] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "acQqmnFEeazI9mYaKswAMAAAAE0"]
[Thu Mar 26 02:34:03.044467 2026] [:error] [pid 55735:tid 55872] [client 20.104.199.149:4029] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "acQqm0hXsYCMQZKUd5O5zwAAARA"]
[Thu Mar 26 02:34:03.528081 2026] [:error] [pid 32829:tid 32853] [client 20.104.199.149:3794] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/agg.php"] [unique_id "acQqm3FEeazI9mYaKswANAAAAFY"]
[Thu Mar 26 02:34:03.964121 2026] [:error] [pid 32829:tid 32849] [client 20.104.199.149:3849] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/agg.php"] [unique_id "acQqm3FEeazI9mYaKswANgAAAFI"]
[Thu Mar 26 02:34:04.463905 2026] [:error] [pid 32829:tid 32837] [client 20.104.199.149:3930] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/agg.php"] [unique_id "acQqnHFEeazI9mYaKswAOAAAAEY"]
[Thu Mar 26 02:34:04.876254 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3890] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/agg.php"] [unique_id "acQqnHFEeazI9mYaKswAOwAAAEo"]
[Thu Mar 26 02:34:05.346297 2026] [:error] [pid 56131:tid 56162] [client 20.104.199.149:3938] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "acQqnUg5t1V4ZYPCUhw_-wAAABc"]
[Thu Mar 26 02:34:05.761116 2026] [:error] [pid 56131:tid 56139] [client 20.104.199.149:3898] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "acQqnUg5t1V4ZYPCUhw__gAAAAA"]
[Thu Mar 26 02:34:06.211374 2026] [:error] [pid 32829:tid 32836] [client 20.104.199.149:4032] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "acQqnnFEeazI9mYaKswAQQAAAEU"]
[Thu Mar 26 02:34:06.624312 2026] [:error] [pid 55733:tid 55766] [client 20.104.199.149:3879] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "acQqnqMzUauzYCgMHcnr0QAAAJI"]
[Thu Mar 26 02:34:07.084520 2026] [:error] [pid 56131:tid 56148] [client 20.104.199.149:3895] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsvvs.php"] [unique_id "acQqn0g5t1V4ZYPCUhxAAgAAAAk"]
[Thu Mar 26 02:34:07.755898 2026] [:error] [pid 55733:tid 55764] [client 20.104.199.149:3714] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsvvs.php"] [unique_id "acQqn6MzUauzYCgMHcnr1QAAAJA"]
[Thu Mar 26 02:34:08.285878 2026] [:error] [pid 55735:tid 55854] [client 20.104.199.149:3814] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsvvs.php"] [unique_id "acQqoEhXsYCMQZKUd5O50gAAAQA"]
[Thu Mar 26 02:34:08.739946 2026] [:error] [pid 56131:tid 56152] [client 20.104.199.149:3821] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsvvs.php"] [unique_id "acQqoEg5t1V4ZYPCUhxACwAAAA0"]
[Thu Mar 26 02:34:09.270876 2026] [:error] [pid 56131:tid 56143] [client 20.104.199.149:4040] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "acQqoUg5t1V4ZYPCUhxADAAAAAQ"]
[Thu Mar 26 02:34:09.995667 2026] [:error] [pid 55734:tid 55831] [client 20.104.199.149:3966] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "acQqoc_x4fL7PCmNzkCMkwAAAMU"]
[Thu Mar 26 02:34:10.667578 2026] [:error] [pid 55734:tid 55839] [client 20.104.199.149:3751] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "acQqos_x4fL7PCmNzkCMlQAAAM0"]
[Thu Mar 26 02:34:11.344060 2026] [:error] [pid 56131:tid 56139] [client 20.104.199.149:3815] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "acQqo0g5t1V4ZYPCUhxAFAAAAAA"]
[Thu Mar 26 02:34:12.169029 2026] [:error] [pid 32829:tid 32848] [client 20.104.199.149:3727] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQqpHFEeazI9mYaKswASwAAAFE"]
[Thu Mar 26 02:34:12.946551 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3781] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQqpHFEeazI9mYaKswATgAAAEo"]
[Thu Mar 26 02:34:13.881094 2026] [:error] [pid 32829:tid 32844] [client 20.104.199.149:3941] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQqpXFEeazI9mYaKswAVQAAAE0"]
[Thu Mar 26 02:34:14.325219 2026] [:error] [pid 32829:tid 32848] [client 20.104.199.149:3803] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acQqpnFEeazI9mYaKswAWwAAAFE"]
[Thu Mar 26 02:34:14.740933 2026] [:error] [pid 55733:tid 55774] [client 20.104.199.149:3661] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqpqMzUauzYCgMHcnr2gAAAJc"]
[Thu Mar 26 02:34:15.151314 2026] [:error] [pid 55734:tid 55838] [client 20.104.199.149:3839] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqp8_x4fL7PCmNzkCMlwAAAMw"]
[Thu Mar 26 02:34:15.638942 2026] [:error] [pid 32829:tid 32855] [client 20.104.199.149:3737] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqp3FEeazI9mYaKswAZQAAAFg"]
[Thu Mar 26 02:34:16.164583 2026] [:error] [pid 55735:tid 55873] [client 20.104.199.149:3972] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acQqqEhXsYCMQZKUd5O51wAAARE"]
[Thu Mar 26 02:34:17.031325 2026] [:error] [pid 55734:tid 55845] [client 20.104.199.149:3787] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqqc_x4fL7PCmNzkCMnQAAANM"]
[Thu Mar 26 02:34:18.897657 2026] [:error] [pid 55735:tid 55874] [client 20.104.199.149:3878] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqqkhXsYCMQZKUd5O53QAAARI"]
[Thu Mar 26 02:34:22.697660 2026] [:error] [pid 55734:tid 55838] [client 20.104.199.149:3728] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqrs_x4fL7PCmNzkCMowAAAMw"]
[Thu Mar 26 02:34:26.349575 2026] [:error] [pid 55733:tid 55757] [client 20.104.199.149:3944] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "acQqsqMzUauzYCgMHcnr6wAAAIo"]
[Thu Mar 26 02:34:27.457891 2026] [:error] [pid 55734:tid 55828] [client 20.104.199.149:3816] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acQqs8_x4fL7PCmNzkCMpgAAAMI"]
[Thu Mar 26 02:34:28.139514 2026] [:error] [pid 55733:tid 55752] [client 20.104.199.149:3776] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acQqtKMzUauzYCgMHcnr7QAAAIU"]
[Thu Mar 26 02:34:28.565413 2026] [:error] [pid 32829:tid 32832] [client 20.104.199.149:3876] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acQqtHFEeazI9mYaKswAqgAAAEE"]
[Thu Mar 26 02:34:29.084432 2026] [:error] [pid 56131:tid 56155] [client 20.104.199.149:3797] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acQqtUg5t1V4ZYPCUhxAIAAAABA"]
[Thu Mar 26 02:34:29.569480 2026] [:error] [pid 56131:tid 56147] [client 20.104.199.149:3978] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acQqtUg5t1V4ZYPCUhxAIQAAAAg"]
[Thu Mar 26 02:34:29.992736 2026] [:error] [pid 56131:tid 56140] [client 20.104.199.149:3783] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acQqtUg5t1V4ZYPCUhxAIwAAAAE"]
[Thu Mar 26 02:34:30.429986 2026] [:error] [pid 55733:tid 55771] [client 20.104.199.149:3991] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acQqtqMzUauzYCgMHcnr7wAAAJU"]
[Thu Mar 26 02:34:30.907061 2026] [:error] [pid 55733:tid 55758] [client 20.104.199.149:3844] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acQqtqMzUauzYCgMHcnr8QAAAIs"]
[Thu Mar 26 02:34:31.324275 2026] [:error] [pid 55734:tid 55847] [client 20.104.199.149:3662] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQqt8_x4fL7PCmNzkCMpwAAANU"]
[Thu Mar 26 02:34:31.786252 2026] [:error] [pid 55734:tid 55830] [client 20.104.199.149:3780] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQqt8_x4fL7PCmNzkCMqgAAAMQ"]
[Thu Mar 26 02:34:32.273979 2026] [:error] [pid 56131:tid 56145] [client 20.104.199.149:3825] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQquEg5t1V4ZYPCUhxAKgAAAAY"]
[Thu Mar 26 02:34:32.742179 2026] [:error] [pid 55735:tid 55859] [client 20.104.199.149:3826] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acQquEhXsYCMQZKUd5O58AAAAQQ"]
[Thu Mar 26 02:34:33.168503 2026] [:error] [pid 56131:tid 56163] [client 20.104.199.149:3861] [client 20.104.199.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acQquUg5t1V4ZYPCUhxAKwAAABg"]
[Thu Mar 26 02:34:33.606945 2026] [:error] [pid 32829:tid 32849] [client 20.104.199.149:3823] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acQquXFEeazI9mYaKswAxQAAAFI"]
[Thu Mar 26 02:34:34.018551 2026] [:error] [pid 55733:tid 55754] [client 20.104.199.149:3884] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acQquqMzUauzYCgMHcnr8wAAAIc"]
[Thu Mar 26 02:34:34.435493 2026] [:error] [pid 32829:tid 32850] [client 20.104.199.149:3731] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acQqunFEeazI9mYaKswAzAAAAFM"]
[Thu Mar 26 02:34:34.859510 2026] [:error] [pid 32829:tid 32834] [client 20.104.199.149:3812] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acQqunFEeazI9mYaKswAzwAAAEM"]
[Thu Mar 26 02:34:35.304439 2026] [:error] [pid 55733:tid 55756] [client 20.104.199.149:3769] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acQqu6MzUauzYCgMHcnr9wAAAIk"]
[Thu Mar 26 02:34:35.716460 2026] [:error] [pid 55733:tid 55750] [client 20.104.199.149:3905] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acQqu6MzUauzYCgMHcnr-AAAAIQ"]
[Thu Mar 26 02:34:36.140786 2026] [:error] [pid 32829:tid 32841] [client 20.104.199.149:3745] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acQqvHFEeazI9mYaKswA2QAAAEo"]
[Thu Mar 26 02:34:36.556848 2026] [:error] [pid 56131:tid 56140] [client 20.104.199.149:3808] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acQqvEg5t1V4ZYPCUhxALwAAAAE"]
[Thu Mar 26 02:34:37.071304 2026] [:error] [pid 55735:tid 55856] [client 20.104.199.149:3994] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/css/index.php"] [unique_id "acQqvUhXsYCMQZKUd5O58QAAAQI"]
[Thu Mar 26 02:34:37.601316 2026] [:error] [pid 55735:tid 55880] [client 20.104.199.149:3721] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/css/index.php"] [unique_id "acQqvUhXsYCMQZKUd5O58gAAARg"]
[Thu Mar 26 02:34:38.015694 2026] [:error] [pid 55734:tid 55849] [client 20.104.199.149:3847] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/css/index.php"] [unique_id "acQqvs_x4fL7PCmNzkCMsQAAANc"]
[Thu Mar 26 02:34:38.460994 2026] [:error] [pid 55734:tid 55829] [client 20.104.199.149:3817] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/css/index.php"] [unique_id "acQqvs_x4fL7PCmNzkCMswAAAMM"]
[Thu Mar 26 02:34:38.872852 2026] [:error] [pid 32829:tid 32832] [client 20.104.199.149:3716] [client 20.104.199.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "acQqvnFEeazI9mYaKswA4wAAAEE"]
[Thu Mar 26 02:34:39.291196 2026] [:error] [pid 55734:tid 55836] [client 20.104.199.149:3854] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer-3.3.4-cs.php"] [unique_id "acQqv8_x4fL7PCmNzkCMtwAAAMo"]
[Thu Mar 26 02:34:39.734156 2026] [:error] [pid 56131:tid 56146] [client 20.104.199.149:3785] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer-3.3.4-cs.php"] [unique_id "acQqv0g5t1V4ZYPCUhxAMQAAAAc"]
[Thu Mar 26 02:34:40.207070 2026] [:error] [pid 55734:tid 55835] [client 20.104.199.149:3875] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer-3.3.4-cs.php"] [unique_id "acQqwM_x4fL7PCmNzkCMuwAAAMk"]
[Thu Mar 26 02:34:40.626330 2026] [:error] [pid 32829:tid 32854] [client 20.104.199.149:3837] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer-3.3.4-cs.php"] [unique_id "acQqwHFEeazI9mYaKswA5gAAAFc"]
[Thu Mar 26 02:34:41.110935 2026] [:error] [pid 55735:tid 55860] [client 20.104.199.149:3806] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "acQqwUhXsYCMQZKUd5O59wAAAQU"]
[Thu Mar 26 02:34:41.550885 2026] [:error] [pid 56131:tid 56144] [client 20.104.199.149:3804] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "acQqwUg5t1V4ZYPCUhxAOAAAAAU"]
[Thu Mar 26 02:34:42.055403 2026] [:error] [pid 55734:tid 55833] [client 20.104.199.149:3782] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "acQqws_x4fL7PCmNzkCMvQAAAMc"]
[Thu Mar 26 02:34:42.476683 2026] [:error] [pid 32829:tid 32838] [client 20.104.199.149:3891] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "acQqwnFEeazI9mYaKswA7QAAAEc"]
[Thu Mar 26 02:34:43.029967 2026] [:error] [pid 55734:tid 55849] [client 20.104.199.149:3770] [client 20.104.199.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/class-wp-sitemaps-data.php"] [unique_id "acQqw8_x4fL7PCmNzkCMwAAAANc"]
[Thu Mar 26 02:34:43.460614 2026] [:error] [pid 32829:tid 32842] [client 20.104.199.149:3741] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fiyhxaae.php"] [unique_id "acQqw3FEeazI9mYaKswA8AAAAEs"]
[Thu Mar 26 02:34:43.872173 2026] [:error] [pid 32829:tid 32840] [client 20.104.199.149:3748] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fiyhxaae.php"] [unique_id "acQqw3FEeazI9mYaKswA8QAAAEk"]
[Thu Mar 26 02:34:44.294936 2026] [:error] [pid 32829:tid 32850] [client 20.104.199.149:3883] [client 20.104.199.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fiyhxaae.php"] [unique_id "acQqxHFEeazI9mYaKswA9AAAAFM"]
[Thu Mar 26 02:52:29.808067 2026] [:error] [pid 32829:tid 32843] [client 2.57.168.14:64695] [client 2.57.168.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.168.14, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acQu7XFEeazI9mYaKswIHQAAAEw"]
[Thu Mar 26 02:52:29.820150 2026] [proxy_fcgi:error] [pid 32829:tid 32843] [client 2.57.168.14:64695] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 04:48:20.403573 2026] [proxy_fcgi:error] [pid 19711:tid 19763] [client 144.225.147.6:56218] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 04:48:21.831128 2026] [:error] [pid 19711:tid 19759] [client 144.225.147.6:56218] [client 144.225.147.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about/contact"] [unique_id "acRKFWj3l1y81GYfluQLNQAAAEo"]
[Thu Mar 26 04:48:22.842790 2026] [:error] [pid 19710:tid 19722] [client 144.225.147.6:54996] [client 144.225.147.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/support"] [unique_id "acRKFgVEWP8Ar68Njk578wAAAAA"]
[Thu Mar 26 07:12:51.622396 2026] [:error] [pid 19712:tid 19787] [client 192.3.207.218:56426] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/artisan"] [unique_id "acRr89WhKhRNqm23vFPd5wAAAIs"]
[Thu Mar 26 07:12:52.050372 2026] [:error] [pid 19818:tid 19836] [client 192.3.207.218:56866] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/artisan"] [unique_id "acRr9MzaSnm3d1BeM5WNXgAAANA"]
[Thu Mar 26 07:12:53.252897 2026] [:error] [pid 19710:tid 19730] [client 192.3.207.218:57346] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/artisan"] [unique_id "acRr9QVEWP8Ar68Njk6ovAAAAAg"]
[Thu Mar 26 07:12:53.675939 2026] [:error] [pid 19712:tid 19790] [client 192.3.207.218:57898] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/artisan"] [unique_id "acRr9dWhKhRNqm23vFPeIAAAAI4"]
[Thu Mar 26 07:12:54.640164 2026] [:error] [pid 19711:tid 19762] [client 192.3.207.218:58208] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "acRr9mj3l1y81GYfluRJoAAAAE0"]
[Thu Mar 26 07:12:55.086745 2026] [:error] [pid 31670:tid 31678] [client 192.3.207.218:58990] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "acRr9zXVthXxCnWjOTQxrgAAAUY"]
[Thu Mar 26 07:12:55.936919 2026] [:error] [pid 19711:tid 19757] [client 192.3.207.218:59439] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "acRr92j3l1y81GYfluRJxAAAAEg"]
[Thu Mar 26 07:12:56.411014 2026] [:error] [pid 19818:tid 19831] [client 192.3.207.218:60365] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "acRr-MzaSnm3d1BeM5WN_AAAAMs"]
[Thu Mar 26 07:59:01.203176 2026] [:error] [pid 31670:tid 31695] [client 160.25.95.171:47060] [client 160.25.95.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.25.95.171, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acR2xTXVthXxCnWjOTRI3AAAAVc"]
[Thu Mar 26 07:59:01.216948 2026] [proxy_fcgi:error] [pid 31670:tid 31695] [client 160.25.95.171:47060] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:32.082362 2026] [proxy_fcgi:error] [pid 19710:tid 19732] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:32.347786 2026] [proxy_fcgi:error] [pid 19710:tid 19737] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:32.619728 2026] [proxy_fcgi:error] [pid 19710:tid 19734] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:32.958168 2026] [proxy_fcgi:error] [pid 19710:tid 19736] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:33.230443 2026] [proxy_fcgi:error] [pid 19710:tid 19738] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:33.495074 2026] [proxy_fcgi:error] [pid 19710:tid 19740] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:33.760543 2026] [proxy_fcgi:error] [pid 19710:tid 19745] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:34.028305 2026] [proxy_fcgi:error] [pid 19710:tid 19729] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:34.314998 2026] [proxy_fcgi:error] [pid 19710:tid 19725] [client 20.251.41.44:3081] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:06:34.576044 2026] [:error] [pid 19710:tid 19741] [client 20.251.41.44:3081] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "acR4igVEWP8Ar68Njk6vYgAAABM"]
[Thu Mar 26 08:06:37.095851 2026] [:error] [pid 31780:tid 31840] [client 20.251.41.44:3074] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "acR4jZJDwZsy5O4ZXEi4dgAAAhM"]
[Thu Mar 26 08:06:37.866830 2026] [:error] [pid 31780:tid 31844] [client 20.251.41.44:62724] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "acR4jZJDwZsy5O4ZXEi4eQAAAhc"]
[Thu Mar 26 08:06:39.479949 2026] [:error] [pid 31717:tid 31744] [client 20.251.41.44:64688] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "acR4j7-SCF7YDISDX495rwAAAZY"]
[Thu Mar 26 08:06:45.154322 2026] [:error] [pid 31780:tid 31839] [client 20.251.41.44:56511] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acR4lZJDwZsy5O4ZXEi4kAAAAhI"]
[Thu Mar 26 08:06:46.900187 2026] [:error] [pid 31780:tid 31831] [client 20.251.41.44:56497] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acR4lpJDwZsy5O4ZXEi4lQAAAgo"]
[Thu Mar 26 08:06:49.426545 2026] [:error] [pid 19711:tid 19766] [client 20.251.41.44:56458] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acR4mWj3l1y81GYfluRPTAAAAFE"]
[Thu Mar 26 08:06:50.069901 2026] [:error] [pid 31778:tid 31806] [client 20.251.41.44:3606] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "acR4mg3kybI2o-xasmBL8gAAAc0"]
[Thu Mar 26 08:06:50.736486 2026] [:error] [pid 31670:tid 31675] [client 20.251.41.44:63812] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acR4mjXVthXxCnWjOTRN1AAAAUM"]
[Thu Mar 26 08:06:52.536082 2026] [:error] [pid 60829:tid 60850] [client 20.251.41.44:65447] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acR4nPTdjHKeZokybaQ32QAAARM"]
[Thu Mar 26 08:06:53.598119 2026] [:error] [pid 19818:tid 19839] [client 20.251.41.44:62770] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acR4nczaSnm3d1BeM5WVNQAAANM"]
[Thu Mar 26 08:06:54.322082 2026] [:error] [pid 31717:tid 31728] [client 20.251.41.44:63528] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "acR4nr-SCF7YDISDX495twAAAYY"]
[Thu Mar 26 08:06:55.325144 2026] [:error] [pid 31670:tid 31676] [client 20.251.41.44:65192] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acR4nzXVthXxCnWjOTRN4gAAAUQ"]
[Thu Mar 26 08:06:55.919930 2026] [:error] [pid 19711:tid 19760] [client 20.251.41.44:63820] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acR4n2j3l1y81GYfluRPTwAAAEs"]
[Thu Mar 26 08:06:56.797233 2026] [:error] [pid 31670:tid 31679] [client 20.251.41.44:62761] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acR4oDXVthXxCnWjOTRN6AAAAUc"]
[Thu Mar 26 08:06:57.570160 2026] [:error] [pid 31670:tid 31686] [client 20.251.41.44:3075] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acR4oTXVthXxCnWjOTRN7QAAAU4"]
[Thu Mar 26 08:06:58.708925 2026] [:error] [pid 31670:tid 31693] [client 20.251.41.44:65194] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acR4ojXVthXxCnWjOTRN9wAAAVU"]
[Thu Mar 26 08:06:59.712604 2026] [:error] [pid 19818:tid 19823] [client 20.251.41.44:64668] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acR4o8zaSnm3d1BeM5WVOgAAAMM"]
[Thu Mar 26 08:07:00.427467 2026] [:error] [pid 31670:tid 31677] [client 20.251.41.44:3640] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acR4pDXVthXxCnWjOTROBQAAAUU"]
[Thu Mar 26 08:07:01.736017 2026] [:error] [pid 31780:tid 31839] [client 20.251.41.44:3119] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "acR4pZJDwZsy5O4ZXEi4qwAAAhI"]
[Thu Mar 26 08:07:03.429590 2026] [:error] [pid 60829:tid 60853] [client 20.251.41.44:63520] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acR4p_TdjHKeZokybaQ34AAAARY"]
[Thu Mar 26 08:07:04.395913 2026] [:error] [pid 31780:tid 31826] [client 20.251.41.44:63813] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acR4qJJDwZsy5O4ZXEi4rgAAAgY"]
[Thu Mar 26 08:07:05.273506 2026] [:error] [pid 60829:tid 60831] [client 20.251.41.44:65210] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acR4qfTdjHKeZokybaQ34gAAAQA"]
[Thu Mar 26 08:07:06.299457 2026] [:error] [pid 31780:tid 31830] [client 20.251.41.44:3586] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acR4qpJDwZsy5O4ZXEi4tAAAAgk"]
[Thu Mar 26 08:07:07.157002 2026] [:error] [pid 31717:tid 31733] [client 20.251.41.44:63549] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acR4q7-SCF7YDISDX495wgAAAYs"]
[Thu Mar 26 08:07:07.871548 2026] [:error] [pid 31778:tid 31812] [client 20.251.41.44:65431] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acR4qw3kybI2o-xasmBMBwAAAdM"]
[Thu Mar 26 08:07:08.546580 2026] [:error] [pid 60829:tid 60839] [client 20.251.41.44:63808] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acR4rPTdjHKeZokybaQ35AAAAQg"]
[Thu Mar 26 08:07:09.426158 2026] [:error] [pid 19818:tid 19831] [client 20.251.41.44:3097] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acR4rczaSnm3d1BeM5WVPgAAAMs"]
[Thu Mar 26 08:07:10.840940 2026] [:error] [pid 60829:tid 60854] [client 20.251.41.44:65418] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acR4rvTdjHKeZokybaQ36AAAARc"]
[Thu Mar 26 08:07:13.659024 2026] [:error] [pid 19818:tid 19834] [client 20.251.41.44:62754] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acR4sczaSnm3d1BeM5WVQAAAAM4"]
[Thu Mar 26 08:07:15.148691 2026] [:error] [pid 60829:tid 60850] [client 20.251.41.44:62745] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acR4s_TdjHKeZokybaQ36gAAARM"]
[Thu Mar 26 08:07:16.033774 2026] [:error] [pid 31670:tid 31695] [client 20.251.41.44:62742] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acR4tDXVthXxCnWjOTROEQAAAVc"]
[Thu Mar 26 08:07:18.120057 2026] [:error] [pid 31778:tid 31807] [client 20.251.41.44:65203] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acR4tg3kybI2o-xasmBMGAAAAc4"]
[Thu Mar 26 08:07:20.794481 2026] [:error] [pid 60829:tid 60836] [client 20.251.41.44:3632] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acR4uPTdjHKeZokybaQ38gAAAQU"]
[Thu Mar 26 08:07:24.649886 2026] [:error] [pid 31717:tid 31729] [client 20.251.41.44:65202] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acR4vL-SCF7YDISDX495zQAAAYc"]
[Thu Mar 26 08:07:26.433175 2026] [:error] [pid 31778:tid 31816] [client 20.251.41.44:56459] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "acR4vg3kybI2o-xasmBMHwAAAdc"]
[Thu Mar 26 08:07:27.791226 2026] [:error] [pid 19711:tid 19758] [client 20.251.41.44:65467] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acR4v2j3l1y81GYfluRPYQAAAEk"]
[Thu Mar 26 08:07:28.789615 2026] [:error] [pid 19710:tid 19734] [client 20.251.41.44:56480] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acR4wAVEWP8Ar68Njk6vcAAAAAw"]
[Thu Mar 26 08:07:30.046955 2026] [:error] [pid 31780:tid 31823] [client 20.251.41.44:63498] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acR4wpJDwZsy5O4ZXEi44AAAAgM"]
[Thu Mar 26 08:07:30.901365 2026] [:error] [pid 31670:tid 31691] [client 20.251.41.44:65177] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acR4wjXVthXxCnWjOTROKAAAAVM"]
[Thu Mar 26 08:07:32.605468 2026] [:error] [pid 60829:tid 60848] [client 20.251.41.44:63537] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "acR4xPTdjHKeZokybaQ3_AAAARE"]
[Thu Mar 26 08:07:33.461898 2026] [:error] [pid 31717:tid 31735] [client 20.251.41.44:62740] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "acR4xb-SCF7YDISDX4951AAAAY0"]
[Thu Mar 26 08:07:34.240040 2026] [proxy_fcgi:error] [pid 31717:tid 31732] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:35.096737 2026] [proxy_fcgi:error] [pid 31717:tid 31730] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:35.421519 2026] [proxy_fcgi:error] [pid 31717:tid 31745] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:35.709575 2026] [proxy_fcgi:error] [pid 31717:tid 31725] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:36.003280 2026] [proxy_fcgi:error] [pid 31717:tid 31743] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:36.276596 2026] [proxy_fcgi:error] [pid 31717:tid 31724] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:36.578781 2026] [proxy_fcgi:error] [pid 31717:tid 31744] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:36.844082 2026] [proxy_fcgi:error] [pid 31717:tid 31734] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:37.110525 2026] [proxy_fcgi:error] [pid 31717:tid 31722] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:37.404166 2026] [proxy_fcgi:error] [pid 31717:tid 31737] [client 20.251.41.44:3116] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:07:37.813139 2026] [:error] [pid 31717:tid 31742] [client 20.251.41.44:3116] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acR4yb-SCF7YDISDX4955AAAAZQ"]
[Thu Mar 26 08:07:48.912790 2026] [:error] [pid 31780:tid 31823] [client 20.251.41.44:3585] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acR41JJDwZsy5O4ZXEi49gAAAgM"]
[Thu Mar 26 08:07:50.444531 2026] [:error] [pid 31670:tid 31677] [client 20.251.41.44:63532] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acR41jXVthXxCnWjOTROYgAAAUU"]
[Thu Mar 26 08:07:51.601160 2026] [:error] [pid 31780:tid 31824] [client 20.251.41.44:65211] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "acR415JDwZsy5O4ZXEi4_QAAAgQ"]
[Thu Mar 26 08:07:54.343341 2026] [:error] [pid 31780:tid 31845] [client 20.251.41.44:3620] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "acR42pJDwZsy5O4ZXEi5BgAAAhg"]
[Thu Mar 26 08:08:04.361700 2026] [:error] [pid 31780:tid 31834] [client 20.251.41.44:63530] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "acR45JJDwZsy5O4ZXEi5FQAAAg0"]
[Thu Mar 26 08:08:05.942403 2026] [:error] [pid 31717:tid 31744] [client 20.251.41.44:63536] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "acR45b-SCF7YDISDX4956AAAAZY"]
[Thu Mar 26 08:08:07.490199 2026] [:error] [pid 19712:tid 19790] [client 20.251.41.44:65178] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acR459WhKhRNqm23vFPjCwAAAI4"]
[Thu Mar 26 08:08:10.264617 2026] [:error] [pid 31670:tid 31674] [client 20.251.41.44:62720] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acR46jXVthXxCnWjOTRObgAAAUI"]
[Thu Mar 26 08:08:15.175970 2026] [:error] [pid 31670:tid 31687] [client 20.251.41.44:3626] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "acR47zXVthXxCnWjOTROegAAAU8"]
[Thu Mar 26 08:08:42.320127 2026] [proxy_fcgi:error] [pid 31670:tid 31680] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:42.612907 2026] [proxy_fcgi:error] [pid 31670:tid 31690] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:43.047921 2026] [proxy_fcgi:error] [pid 31670:tid 31673] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:43.437383 2026] [proxy_fcgi:error] [pid 31670:tid 31686] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:43.701142 2026] [proxy_fcgi:error] [pid 31670:tid 31678] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:44.009756 2026] [proxy_fcgi:error] [pid 31670:tid 31694] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:44.301243 2026] [proxy_fcgi:error] [pid 31670:tid 31688] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:44.586499 2026] [proxy_fcgi:error] [pid 31670:tid 31690] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:45.362783 2026] [proxy_fcgi:error] [pid 31670:tid 31675] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:45.693329 2026] [proxy_fcgi:error] [pid 31670:tid 31679] [client 20.251.41.44:3127] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:08:45.953554 2026] [:error] [pid 31670:tid 31682] [client 20.251.41.44:3127] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acR5DTXVthXxCnWjOTROzwAAAUo"]
[Thu Mar 26 08:08:46.778364 2026] [:error] [pid 31778:tid 31809] [client 20.251.41.44:64684] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acR5Dg3kybI2o-xasmBMlAAAAdA"]
[Thu Mar 26 08:08:47.748934 2026] [:error] [pid 31780:tid 31827] [client 20.251.41.44:64675] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acR5D5JDwZsy5O4ZXEi5RwAAAgc"]
[Thu Mar 26 08:08:50.975119 2026] [:error] [pid 31670:tid 31687] [client 20.251.41.44:65163] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "acR5EjXVthXxCnWjOTRO5gAAAU8"]
[Thu Mar 26 08:08:55.793081 2026] [:error] [pid 31778:tid 31807] [client 20.251.41.44:63535] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acR5Fw3kybI2o-xasmBMnQAAAc4"]
[Thu Mar 26 08:08:58.739058 2026] [:error] [pid 19710:tid 19727] [client 20.251.41.44:63505] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acR5GgVEWP8Ar68Njk6vkgAAAAU"]
[Thu Mar 26 08:09:00.603776 2026] [:error] [pid 31717:tid 31722] [client 20.251.41.44:63545] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acR5HL-SCF7YDISDX496BwAAAYA"]
[Thu Mar 26 08:09:01.724683 2026] [:error] [pid 19710:tid 19724] [client 20.251.41.44:62769] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acR5HQVEWP8Ar68Njk6vlQAAAAI"]
[Thu Mar 26 08:09:02.885233 2026] [:error] [pid 31670:tid 31690] [client 20.251.41.44:62773] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acR5HjXVthXxCnWjOTRO-AAAAVI"]
[Thu Mar 26 08:09:03.801219 2026] [:error] [pid 60829:tid 60847] [client 20.251.41.44:64656] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acR5H_TdjHKeZokybaQ4SwAAARA"]
[Thu Mar 26 08:09:04.866671 2026] [:error] [pid 31670:tid 31689] [client 20.251.41.44:3645] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acR5IDXVthXxCnWjOTRO-QAAAVE"]
[Thu Mar 26 08:09:06.064004 2026] [:error] [pid 31778:tid 31806] [client 20.251.41.44:64685] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "acR5Ig3kybI2o-xasmBMrQAAAc0"]
[Thu Mar 26 08:09:06.838910 2026] [:error] [pid 31670:tid 31688] [client 20.251.41.44:65410] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acR5IjXVthXxCnWjOTRPAwAAAVA"]
[Thu Mar 26 08:09:08.192758 2026] [:error] [pid 19710:tid 19744] [client 20.251.41.44:65501] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acR5JAVEWP8Ar68Njk6voQAAABY"]
[Thu Mar 26 08:09:09.316412 2026] [:error] [pid 31780:tid 31843] [client 20.251.41.44:56485] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acR5JZJDwZsy5O4ZXEi5awAAAhY"]
[Thu Mar 26 08:09:10.855101 2026] [:error] [pid 19818:tid 19829] [client 20.251.41.44:65167] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acR5JszaSnm3d1BeM5WVegAAAMk"]
[Thu Mar 26 08:09:11.629452 2026] [:error] [pid 31717:tid 31728] [client 20.251.41.44:3126] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acR5J7-SCF7YDISDX496CgAAAYY"]
[Thu Mar 26 08:09:12.530874 2026] [:error] [pid 31670:tid 31679] [client 20.251.41.44:65153] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acR5KDXVthXxCnWjOTRPCgAAAUc"]
[Thu Mar 26 08:09:14.035529 2026] [:error] [pid 19710:tid 19735] [client 20.251.41.44:62781] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acR5KgVEWP8Ar68Njk6vpAAAAA0"]
[Thu Mar 26 08:09:14.878788 2026] [:error] [pid 31778:tid 31802] [client 20.251.41.44:3614] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "acR5Kg3kybI2o-xasmBMtwAAAck"]
[Thu Mar 26 08:09:17.148666 2026] [:error] [pid 31670:tid 31677] [client 20.251.41.44:64697] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acR5LTXVthXxCnWjOTRPEgAAAUU"]
[Thu Mar 26 08:09:17.834803 2026] [:error] [pid 31778:tid 31795] [client 20.251.41.44:64686] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acR5LQ3kybI2o-xasmBMvAAAAcI"]
[Thu Mar 26 08:09:18.648969 2026] [:error] [pid 31780:tid 31829] [client 20.251.41.44:63538] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acR5LpJDwZsy5O4ZXEi5dQAAAgg"]
[Thu Mar 26 08:09:19.536733 2026] [:error] [pid 19710:tid 19742] [client 20.251.41.44:65427] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acR5LwVEWP8Ar68Njk6vqgAAABQ"]
[Thu Mar 26 08:09:20.704630 2026] [:error] [pid 60829:tid 60843] [client 20.251.41.44:3621] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acR5MPTdjHKeZokybaQ4YQAAAQw"]
[Thu Mar 26 08:09:24.093572 2026] [:error] [pid 31780:tid 31832] [client 20.251.41.44:65504] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acR5NJJDwZsy5O4ZXEi5gQAAAgs"]
[Thu Mar 26 08:09:25.891212 2026] [:error] [pid 31670:tid 31693] [client 20.251.41.44:3124] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acR5NTXVthXxCnWjOTRPJAAAAVU"]
[Thu Mar 26 08:09:26.874785 2026] [:error] [pid 31670:tid 31696] [client 20.251.41.44:63490] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acR5NjXVthXxCnWjOTRPKgAAAVg"]
[Thu Mar 26 08:09:27.937528 2026] [:error] [pid 31670:tid 31672] [client 20.251.41.44:65444] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acR5NzXVthXxCnWjOTRPMgAAAUA"]
[Thu Mar 26 08:09:28.717539 2026] [:error] [pid 60829:tid 60852] [client 20.251.41.44:4045] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acR5OPTdjHKeZokybaQ4bAAAARU"]
[Thu Mar 26 08:09:29.732658 2026] [:error] [pid 31778:tid 31795] [client 20.251.41.44:65162] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acR5OQ3kybI2o-xasmBM1QAAAcI"]
[Thu Mar 26 08:09:31.999626 2026] [:error] [pid 60829:tid 60841] [client 20.251.41.44:64691] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acR5O_TdjHKeZokybaQ4cQAAAQo"]
[Thu Mar 26 08:09:33.445444 2026] [:error] [pid 31778:tid 31801] [client 20.251.41.44:3618] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acR5PQ3kybI2o-xasmBM1wAAAcg"]
[Thu Mar 26 08:09:34.284470 2026] [:error] [pid 31670:tid 31691] [client 20.251.41.44:3604] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acR5PjXVthXxCnWjOTRPRAAAAVM"]
[Thu Mar 26 08:09:35.028458 2026] [:error] [pid 19711:tid 19760] [client 20.251.41.44:65455] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acR5P2j3l1y81GYfluRPhwAAAEs"]
[Thu Mar 26 08:09:36.013086 2026] [:error] [pid 19711:tid 19769] [client 20.251.41.44:64673] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "acR5QGj3l1y81GYfluRPiwAAAFQ"]
[Thu Mar 26 08:09:38.704826 2026] [:error] [pid 19711:tid 19761] [client 20.251.41.44:63511] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "acR5Qmj3l1y81GYfluRPjwAAAEw"]
[Thu Mar 26 08:10:05.122281 2026] [proxy_fcgi:error] [pid 31780:tid 31820] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:05.387047 2026] [proxy_fcgi:error] [pid 31780:tid 31826] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:05.935419 2026] [proxy_fcgi:error] [pid 31780:tid 31836] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:06.236790 2026] [proxy_fcgi:error] [pid 31780:tid 31821] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:06.527546 2026] [proxy_fcgi:error] [pid 31780:tid 31831] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:06.822369 2026] [proxy_fcgi:error] [pid 31780:tid 31834] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:07.126153 2026] [proxy_fcgi:error] [pid 31780:tid 31830] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:07.392318 2026] [proxy_fcgi:error] [pid 31780:tid 31820] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:07.674323 2026] [proxy_fcgi:error] [pid 31780:tid 31826] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:07.973078 2026] [proxy_fcgi:error] [pid 31780:tid 31840] [client 20.251.41.44:63491] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:10:08.253702 2026] [:error] [pid 31780:tid 31823] [client 20.251.41.44:63491] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acR5YJJDwZsy5O4ZXEi51AAAAgM"]
[Thu Mar 26 08:10:13.111517 2026] [:error] [pid 31778:tid 31816] [client 20.251.41.44:65432] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acR5ZQ3kybI2o-xasmBNGgAAAdc"]
[Thu Mar 26 08:10:14.771676 2026] [:error] [pid 31778:tid 31810] [client 20.251.41.44:3621] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acR5Zg3kybI2o-xasmBNIwAAAdE"]
[Thu Mar 26 08:10:16.099148 2026] [:error] [pid 31778:tid 31798] [client 20.251.41.44:62732] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amp.php"] [unique_id "acR5aA3kybI2o-xasmBNKAAAAcU"]
[Thu Mar 26 08:10:19.311228 2026] [:error] [pid 31778:tid 31796] [client 20.251.41.44:56454] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "acR5aw3kybI2o-xasmBNLwAAAcM"]
[Thu Mar 26 08:10:22.986304 2026] [:error] [pid 31670:tid 31680] [client 20.251.41.44:4041] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "acR5bjXVthXxCnWjOTRPtwAAAUg"]
[Thu Mar 26 08:10:28.180318 2026] [:error] [pid 19710:tid 19734] [client 20.251.41.44:65426] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "acR5dAVEWP8Ar68Njk6vwwAAAAw"]
[Thu Mar 26 08:10:34.745206 2026] [:error] [pid 31778:tid 31811] [client 20.251.41.44:63512] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "acR5eg3kybI2o-xasmBNQAAAAdI"]
[Thu Mar 26 08:10:36.026709 2026] [:error] [pid 19710:tid 19732] [client 20.251.41.44:3111] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "acR5fAVEWP8Ar68Njk6vxAAAAAo"]
[Thu Mar 26 08:10:37.073616 2026] [:error] [pid 19712:tid 19791] [client 20.251.41.44:65413] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "acR5fdWhKhRNqm23vFPjMgAAAI8"]
[Thu Mar 26 08:10:38.232880 2026] [:error] [pid 31717:tid 31733] [client 20.251.41.44:3122] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "acR5fr-SCF7YDISDX496QgAAAYs"]
[Thu Mar 26 08:10:39.690630 2026] [:error] [pid 31717:tid 31732] [client 20.251.41.44:64665] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "acR5f7-SCF7YDISDX496SgAAAYo"]
[Thu Mar 26 08:10:40.491223 2026] [:error] [pid 31670:tid 31681] [client 20.251.41.44:63548] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "acR5gDXVthXxCnWjOTRP0QAAAUk"]
[Thu Mar 26 08:10:41.276226 2026] [:error] [pid 19711:tid 19757] [client 20.251.41.44:63713] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "acR5gWj3l1y81GYfluRPqAAAAEg"]
[Thu Mar 26 08:10:42.224307 2026] [:error] [pid 31670:tid 31679] [client 20.251.41.44:64645] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "acR5gjXVthXxCnWjOTRP2QAAAUc"]
[Thu Mar 26 08:10:43.087404 2026] [:error] [pid 31778:tid 31807] [client 20.251.41.44:62774] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acR5gw3kybI2o-xasmBNTgAAAc4"]
[Thu Mar 26 08:10:43.766667 2026] [:error] [pid 31670:tid 31677] [client 20.251.41.44:3619] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acR5gzXVthXxCnWjOTRP3gAAAUU"]
[Thu Mar 26 08:10:44.595768 2026] [:error] [pid 31670:tid 31695] [client 20.251.41.44:65169] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acR5hDXVthXxCnWjOTRP5AAAAVc"]
[Thu Mar 26 08:10:45.564406 2026] [:error] [pid 31670:tid 31679] [client 20.251.41.44:65174] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "acR5hTXVthXxCnWjOTRP5gAAAUc"]
[Thu Mar 26 08:10:48.209177 2026] [:error] [pid 31778:tid 31803] [client 20.251.41.44:64694] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acR5iA3kybI2o-xasmBNVgAAAco"]
[Thu Mar 26 08:10:50.523421 2026] [:error] [pid 60829:tid 60837] [client 20.251.41.44:3625] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acR5ivTdjHKeZokybaQ4wgAAAQY"]
[Thu Mar 26 08:10:53.103973 2026] [:error] [pid 60829:tid 60831] [client 20.251.41.44:56455] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acR5jfTdjHKeZokybaQ4xwAAAQA"]
[Thu Mar 26 08:10:57.370180 2026] [:error] [pid 31780:tid 31839] [client 20.251.41.44:3596] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "acR5kZJDwZsy5O4ZXEi6BQAAAhI"]
[Thu Mar 26 08:10:59.603139 2026] [:error] [pid 19710:tid 19745] [client 20.251.41.44:3627] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acR5kwVEWP8Ar68Njk6v0gAAABc"]
[Thu Mar 26 08:11:02.736099 2026] [:error] [pid 19710:tid 19727] [client 20.251.41.44:65459] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acR5lgVEWP8Ar68Njk6v2QAAAAU"]
[Thu Mar 26 08:11:11.670631 2026] [proxy_fcgi:error] [pid 31780:tid 31826] [client 20.251.41.44:64575] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:11:11.934319 2026] [proxy_fcgi:error] [pid 31780:tid 31843] [client 20.251.41.44:64575] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:11:12.199134 2026] [proxy_fcgi:error] [pid 31780:tid 31836] [client 20.251.41.44:64575] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:11:12.462454 2026] [proxy_fcgi:error] [pid 31780:tid 31822] [client 20.251.41.44:64575] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 08:11:12.726419 2026] [proxy_fcgi:error] [pid 31780:tid 31838] [client 20.251.41.44:64575] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 09:24:27.915527 2026] [:error] [pid 31670:tid 31696] [client 114.130.168.23:38238] [client 114.130.168.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.168.23, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acSKyzXVthXxCnWjOTR7jAAAAVg"]
[Thu Mar 26 09:24:27.928686 2026] [proxy_fcgi:error] [pid 31670:tid 31696] [client 114.130.168.23:38238] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:50:12.539978 2026] [:error] [pid 31780:tid 31838] [client 148.72.173.239:54141] [client 148.72.173.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.239, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acTzRJJDwZsy5O4ZXEh1oQAAAhE"]
[Thu Mar 26 16:50:12.551761 2026] [proxy_fcgi:error] [pid 31780:tid 31838] [client 148.72.173.239:54141] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 01:39:48.123728 2026] [:error] [pid 62147:tid 62474] [client 185.169.4.152:54415] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "acVvZBPjxn06mcLazN6AvgAAAA4"]
[Fri Mar 27 01:39:48.803518 2026] [:error] [pid 62148:tid 62513] [client 185.169.4.152:55799] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.vscode/sftp.json"] [unique_id "acVvZIduik-mTruBKFVv6wAAAFA"]
[Fri Mar 27 03:33:27.826180 2026] [:error] [pid 44058:tid 44071] [client 102.209.247.6:65185] [client 102.209.247.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.209.247.6, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acWKB-qp9u5CVRGdZPFSBQAAAIs"]
[Fri Mar 27 03:33:27.837780 2026] [proxy_fcgi:error] [pid 44058:tid 44071] [client 102.209.247.6:65185] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 12:42:19.690795 2026] [:error] [pid 4341:tid 4345] [client 157.45.63.170:62586] [client 157.45.63.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.45.63.170, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acYKq-KJWrNB5dMlERHBIwAAAYI"]
[Fri Mar 27 12:42:19.703342 2026] [proxy_fcgi:error] [pid 4341:tid 4345] [client 157.45.63.170:62586] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 13:55:25.613114 2026] [:error] [pid 4341:tid 4346] [client 216.81.248.80:54612] [client 216.81.248.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "acYbzeKJWrNB5dMlERHtjQAAAYM"]
[Fri Mar 27 17:37:39.242901 2026] [:error] [pid 63897:tid 63908] [client 103.117.237.130:57238] [client 103.117.237.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.117.237.130, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acZP42VSkmYmLu7ycYgjogAAAQk"]
[Fri Mar 27 17:37:39.254406 2026] [proxy_fcgi:error] [pid 63897:tid 63908] [client 103.117.237.130:57238] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:38:53.518105 2026] [:error] [pid 4293:tid 4305] [client 217.165.28.236:7272] [client 217.165.28.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.28.236, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acZQLZLjeJUC3OKtEx8b5wAAAUo"]
[Fri Mar 27 17:38:53.531301 2026] [proxy_fcgi:error] [pid 4293:tid 4305] [client 217.165.28.236:7272] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 02:01:29.329316 2026] [:error] [pid 11324:tid 11736] [client 185.192.71.57:36421] [client 185.192.71.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.57, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acbF-TIhTRer7nZpUKjrYAAAAJY"]
[Sat Mar 28 02:01:29.341302 2026] [proxy_fcgi:error] [pid 11324:tid 11736] [client 185.192.71.57:36421] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.128639 2026] [proxy_fcgi:error] [pid 64861:tid 64943] [client 20.53.228.80:16128] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.176105 2026] [proxy_fcgi:error] [pid 64861:tid 64939] [client 20.53.228.80:16128] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.217006 2026] [proxy_fcgi:error] [pid 64861:tid 64958] [client 20.53.228.80:16128] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.237204 2026] [proxy_fcgi:error] [pid 64861:tid 64941] [client 20.53.228.80:16128] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.276661 2026] [proxy_fcgi:error] [pid 64861:tid 64940] [client 20.53.228.80:16128] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.297317 2026] [proxy_fcgi:error] [pid 64861:tid 64936] [client 20.53.228.80:16128] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.317799 2026] [proxy_fcgi:error] [pid 64861:tid 64949] [client 20.53.228.80:16128] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 06:21:40.383022 2026] [:error] [pid 64861:tid 64955] [client 20.53.228.80:16128] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "accC9OxK22_lUN2kvnVJ0gAAAJQ"]
[Sat Mar 28 06:21:40.491520 2026] [:error] [pid 43578:tid 43595] [client 20.53.228.80:6502] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "accC9HNG2YdGm41aN8LVbQAAAk4"]
[Sat Mar 28 06:21:40.557993 2026] [:error] [pid 34631:tid 34678] [client 20.53.228.80:17496] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "accC9DtzjMMS6kojpeQZ-AAAAdI"]
[Sat Mar 28 06:21:40.627817 2026] [:error] [pid 34631:tid 34667] [client 20.53.228.80:12515] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "accC9DtzjMMS6kojpeQZ-QAAAcc"]
[Sat Mar 28 09:25:47.755068 2026] [:error] [pid 43578:tid 43596] [client 2.58.56.116:54274] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "accuG3NG2YdGm41aN8LxIwAAAk8"]
[Sat Mar 28 09:25:48.264577 2026] [:error] [pid 2877:tid 2899] [client 2.58.56.116:54926] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "accuHLgM4xL1Xj409YTlgQAAARQ"]
[Sat Mar 28 09:25:48.808264 2026] [:error] [pid 64859:tid 64904] [client 2.58.56.116:55412] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "accuHG3qEBHXq3rHdBm5AQAAABc"]
[Sat Mar 28 09:25:49.310691 2026] [:error] [pid 43579:tid 43617] [client 2.58.56.116:55943] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "accuHSRqN4JVI8gB7AmlaAAAAok"]
[Sat Mar 28 09:25:49.811701 2026] [:error] [pid 43547:tid 43566] [client 2.58.56.116:56245] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "accuHT4ZEfdetXP-9aC9MwAAAhE"]
[Sat Mar 28 14:17:50.877339 2026] [:error] [pid 64861:tid 64953] [client 193.42.20.134:55324] [client 193.42.20.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.42.20.134, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acdyjuxK22_lUN2kvnXhdwAAAJI"]
[Sat Mar 28 14:17:50.888840 2026] [proxy_fcgi:error] [pid 64861:tid 64953] [client 193.42.20.134:55324] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 21:22:45.188899 2026] [:error] [pid 64861:tid 64952] [client 104.28.161.186:54939] [client 104.28.161.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "acfWJexK22_lUN2kvnV63AAAAJE"]
[Sat Mar 28 22:45:35.968559 2026] [:error] [pid 64861:tid 64952] [client 81.61.225.162:57326] [client 81.61.225.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.61.225.162, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acfpj-xK22_lUN2kvnWfKwAAAJE"]
[Sat Mar 28 22:45:35.979666 2026] [proxy_fcgi:error] [pid 64861:tid 64952] [client 81.61.225.162:57326] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 22:46:26.245143 2026] [:error] [pid 34631:tid 34678] [client 61.3.71.148:56317] [client 61.3.71.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.71.148, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acfpwjtzjMMS6kojpeRztAAAAdI"]
[Sat Mar 28 22:46:26.259475 2026] [proxy_fcgi:error] [pid 34631:tid 34678] [client 61.3.71.148:56317] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 22:46:51.457351 2026] [:error] [pid 43547:tid 43558] [client 223.228.29.222:63659] [client 223.228.29.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.29.222, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acfp2z4ZEfdetXP-9aAJlwAAAgk"]
[Sat Mar 28 22:46:51.468014 2026] [proxy_fcgi:error] [pid 43547:tid 43558] [client 223.228.29.222:63659] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:53:15.817814 2026] [proxy_fcgi:error] [pid 23284:tid 23309] [client 68.155.154.218:2776] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:53:16.230465 2026] [:error] [pid 23284:tid 23299] [client 68.155.154.218:2776] [client 68.155.154.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.155.154.218, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acj2jIzBujdPHsq7wyQUOQAAAo0"]
[Sun Mar 29 17:53:16.429588 2026] [proxy_fcgi:error] [pid 23284:tid 23297] [client 68.155.154.218:2776] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:53:17.207904 2026] [proxy_fcgi:error] [pid 23284:tid 23308] [client 68.155.154.218:2776] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:53:17.821243 2026] [proxy_fcgi:error] [pid 23284:tid 23305] [client 68.155.154.218:2776] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 17:53:18.029089 2026] [:error] [pid 23284:tid 23301] [client 68.155.154.218:2776] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acj2jozBujdPHsq7wyQUQwAAAo8"]
[Sun Mar 29 17:53:18.840881 2026] [:error] [pid 23168:tid 23216] [client 68.155.154.218:41085] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acj2jmP8p0yRL8ot_29aRgAAAhM"]
[Sun Mar 29 17:53:19.609023 2026] [:error] [pid 23250:tid 23271] [client 68.155.154.218:41697] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acj2j5xrpj-dQjy1cvrZCgAAAlM"]
[Sun Mar 29 17:53:20.375994 2026] [:error] [pid 23168:tid 23212] [client 68.155.154.218:41702] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acj2kGP8p0yRL8ot_29aSwAAAg8"]
[Sun Mar 29 18:16:16.670530 2026] [:error] [pid 32255:tid 32311] [client 212.200.247.166:16670] [client 212.200.247.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.200.247.166, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acj78Gnfn-AtRoMbquyU_AAAAFQ"]
[Sun Mar 29 18:16:16.680708 2026] [proxy_fcgi:error] [pid 32255:tid 32311] [client 212.200.247.166:16670] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 18:30:20.044801 2026] [:error] [pid 32255:tid 32295] [client 60.53.32.252:19189] [client 60.53.32.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.53.32.252, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acj_PGnfn-AtRoMbquyeswAAAEQ"]
[Sun Mar 29 18:30:20.054937 2026] [proxy_fcgi:error] [pid 32255:tid 32295] [client 60.53.32.252:19189] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 19:25:52.408811 2026] [:error] [pid 8818:tid 8832] [client 185.193.156.153:60014] [client 185.193.156.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.156.153, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ackMQCCDvotZNSF0FBrDXwAAAUo"]
[Sun Mar 29 19:25:52.421147 2026] [proxy_fcgi:error] [pid 8818:tid 8832] [client 185.193.156.153:60014] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 19:25:57.753705 2026] [:error] [pid 8818:tid 8838] [client 185.193.156.153:60014] [client 185.193.156.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ackMRSCDvotZNSF0FBrDcgAAAVA"]
[Sun Mar 29 19:26:11.432267 2026] [:error] [pid 23284:tid 23310] [client 185.193.156.153:45468] [client 185.193.156.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ackMU4zBujdPHsq7wyRDJQAAApg"]
[Sun Mar 29 19:26:11.731758 2026] [:error] [pid 23284:tid 23297] [client 185.193.156.153:45478] [client 185.193.156.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ackMU4zBujdPHsq7wyRDLAAAAos"]
[Sun Mar 29 19:26:12.030121 2026] [:error] [pid 23284:tid 23305] [client 185.193.156.153:45482] [client 185.193.156.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ackMVIzBujdPHsq7wyRDMAAAApM"]
[Sun Mar 29 19:26:12.534569 2026] [:error] [pid 32257:tid 32336] [client 185.193.156.153:45490] [client 185.193.156.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ackMVCE3TArOFrUtgWrrAAAAAJI"]
[Sun Mar 29 19:26:14.053155 2026] [:error] [pid 32257:tid 32320] [client 185.193.156.153:45502] [client 185.193.156.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ackMViE3TArOFrUtgWrrCwAAAII"]
[Sun Mar 29 19:26:15.396782 2026] [:error] [pid 23137:tid 23155] [client 185.193.156.153:45514] [client 185.193.156.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ackMVxaWQa7LdZ_qGFbmZwAAAZA"]
[Sun Mar 29 23:21:57.600573 2026] [:error] [pid 23284:tid 23310] [client 94.247.172.129:57474] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.stratapluswa.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "aclDlYzBujdPHsq7wyTjUQAAApg"]
[Mon Mar 30 06:32:32.207064 2026] [:error] [pid 4033:tid 4075] [client 185.198.240.37:49891] [client 185.198.240.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acmogKnf-DXI9VblHi2UYAAAABY"]
[Mon Mar 30 07:54:17.618965 2026] [:error] [pid 35248:tid 35266] [client 172.58.208.187:62500] [client 172.58.208.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.58.208.187, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acm7qb3igMCgAQPFS_9JUQAAAEw"]
[Mon Mar 30 07:54:17.629736 2026] [proxy_fcgi:error] [pid 35248:tid 35266] [client 172.58.208.187:62500] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 13:44:08.967083 2026] [:error] [pid 35250:tid 35329] [client 104.224.85.167:34604] [client 104.224.85.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqIaKM1MR6zcp2YPQrgAAANI"]
[Mon Mar 30 22:49:23.434670 2026] [:error] [pid 63557:tid 63567] [client 49.36.187.218:54658] [client 49.36.187.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.187.218, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "acqNc64QNVlzYgEvIjmmqAAAAQg"]
[Mon Mar 30 22:49:23.444864 2026] [proxy_fcgi:error] [pid 63557:tid 63567] [client 49.36.187.218:54658] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:51.273917 2026] [proxy_fcgi:error] [pid 18332:tid 18358] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:51.544065 2026] [proxy_fcgi:error] [pid 18332:tid 18349] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:51.798617 2026] [proxy_fcgi:error] [pid 18332:tid 18365] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:52.052381 2026] [proxy_fcgi:error] [pid 18332:tid 18372] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:52.307093 2026] [proxy_fcgi:error] [pid 18332:tid 18351] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:52.577465 2026] [proxy_fcgi:error] [pid 18332:tid 18356] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:52.833894 2026] [proxy_fcgi:error] [pid 18332:tid 18371] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:53.095138 2026] [proxy_fcgi:error] [pid 18332:tid 18362] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:53.349865 2026] [proxy_fcgi:error] [pid 18332:tid 18367] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:53.603754 2026] [proxy_fcgi:error] [pid 18332:tid 18354] [client 20.208.32.234:23372] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:00:53.868410 2026] [:error] [pid 18332:tid 18366] [client 20.208.32.234:23372] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "acrWdb4KXr1F9raS5GR6QQAAABI"]
[Tue Mar 31 04:00:54.431178 2026] [:error] [pid 18439:tid 18461] [client 20.208.32.234:23397] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "acrWdi-R9nOaA8Xqs7iFUgAAAMo"]
[Tue Mar 31 04:00:55.043568 2026] [:error] [pid 18439:tid 18473] [client 20.208.32.234:23308] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "acrWdy-R9nOaA8Xqs7iFVAAAANY"]
[Tue Mar 31 04:00:55.605840 2026] [:error] [pid 18439:tid 18475] [client 20.208.32.234:23392] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "acrWdy-R9nOaA8Xqs7iFWQAAANg"]
[Tue Mar 31 04:00:56.154934 2026] [:error] [pid 18439:tid 18467] [client 20.208.32.234:23421] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "acrWeC-R9nOaA8Xqs7iFXAAAANA"]
[Tue Mar 31 04:00:56.699505 2026] [:error] [pid 18334:tid 18422] [client 20.208.32.234:23401] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acrWeHqQrXLbk1cg3mgO_AAAAJA"]
[Tue Mar 31 04:00:57.258887 2026] [:error] [pid 18334:tid 18417] [client 20.208.32.234:23377] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acrWeXqQrXLbk1cg3mgO_gAAAIs"]
[Tue Mar 31 04:00:57.834269 2026] [:error] [pid 18334:tid 18430] [client 20.208.32.234:23413] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acrWeXqQrXLbk1cg3mgPAgAAAJg"]
[Tue Mar 31 04:00:58.436193 2026] [:error] [pid 18439:tid 18455] [client 20.208.32.234:23364] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acrWei-R9nOaA8Xqs7iFYAAAAMQ"]
[Tue Mar 31 04:00:58.989348 2026] [:error] [pid 18439:tid 18474] [client 20.208.32.234:23417] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acrWei-R9nOaA8Xqs7iFZgAAANc"]
[Tue Mar 31 04:00:59.545980 2026] [:error] [pid 18439:tid 18456] [client 20.208.32.234:23406] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acrWey-R9nOaA8Xqs7iFawAAAMU"]
[Tue Mar 31 04:01:00.089913 2026] [:error] [pid 18334:tid 18406] [client 20.208.32.234:23407] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acrWfHqQrXLbk1cg3mgPCQAAAIA"]
[Tue Mar 31 04:01:00.657709 2026] [:error] [pid 18439:tid 18465] [client 20.208.32.234:23422] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acrWfC-R9nOaA8Xqs7iFdAAAAM4"]
[Tue Mar 31 04:01:01.211482 2026] [:error] [pid 18334:tid 18408] [client 20.208.32.234:23418] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acrWfXqQrXLbk1cg3mgPDAAAAII"]
[Tue Mar 31 04:01:01.762882 2026] [:error] [pid 18439:tid 18474] [client 20.208.32.234:23405] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acrWfS-R9nOaA8Xqs7iFegAAANc"]
[Tue Mar 31 04:01:02.430428 2026] [:error] [pid 18332:tid 18367] [client 20.208.32.234:23419] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acrWfr4KXr1F9raS5GR6TgAAABM"]
[Tue Mar 31 06:24:38.734931 2026] [proxy_fcgi:error] [pid 1224:tid 1233] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:38.952147 2026] [proxy_fcgi:error] [pid 1224:tid 1239] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:39.392257 2026] [proxy_fcgi:error] [pid 1224:tid 1226] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:39.606593 2026] [proxy_fcgi:error] [pid 1224:tid 1236] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:39.827973 2026] [proxy_fcgi:error] [pid 1224:tid 1229] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:40.046395 2026] [proxy_fcgi:error] [pid 1224:tid 1231] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:42.076682 2026] [proxy_fcgi:error] [pid 1224:tid 1240] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:42.297996 2026] [proxy_fcgi:error] [pid 1224:tid 1245] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:42.517198 2026] [proxy_fcgi:error] [pid 1224:tid 1238] [client 20.104.16.84:6724] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:24:42.727178 2026] [:error] [pid 1224:tid 1228] [client 20.104.16.84:6724] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nz.php"] [unique_id "acr4KsXGPQPzIHnCuJhGygAAAQI"]
[Tue Mar 31 06:24:46.624684 2026] [:error] [pid 18333:tid 18391] [client 20.104.16.84:6774] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nz.php"] [unique_id "acr4LkSx2C5hLR0-8dIM1wAAAEw"]
[Tue Mar 31 06:24:50.585157 2026] [:error] [pid 18439:tid 18475] [client 20.104.16.84:9545] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nz.php"] [unique_id "acr4Mi-R9nOaA8Xqs7jr1wAAANg"]
[Tue Mar 31 06:24:52.286040 2026] [:error] [pid 18439:tid 18452] [client 20.104.16.84:3988] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nz.php"] [unique_id "acr4NC-R9nOaA8Xqs7jr2QAAAME"]
[Tue Mar 31 06:24:53.935968 2026] [:error] [pid 18332:tid 18359] [client 20.104.16.84:7119] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bnn_.php"] [unique_id "acr4Nb4KXr1F9raS5GSnMgAAAAs"]
[Tue Mar 31 06:25:03.453330 2026] [:error] [pid 18439:tid 18455] [client 20.104.16.84:5894] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bnn_.php"] [unique_id "acr4Py-R9nOaA8Xqs7jr4wAAAMQ"]
[Tue Mar 31 06:25:05.649724 2026] [:error] [pid 18439:tid 18473] [client 20.104.16.84:2941] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bnn_.php"] [unique_id "acr4QS-R9nOaA8Xqs7jr6AAAANY"]
[Tue Mar 31 06:25:19.778162 2026] [:error] [pid 11822:tid 11845] [client 20.104.16.84:5076] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/anz.php"] [unique_id "acr4TyLLrL4a3YEM2I0MxAAAAZU"]
[Tue Mar 31 06:25:26.290801 2026] [:error] [pid 18333:tid 18390] [client 20.104.16.84:19557] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/anz.php"] [unique_id "acr4VkSx2C5hLR0-8dINSAAAAEs"]
[Tue Mar 31 06:25:37.839555 2026] [:error] [pid 18332:tid 18368] [client 20.104.16.84:9899] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acr4Yb4KXr1F9raS5GSnUAAAABQ"]
[Tue Mar 31 06:25:40.540879 2026] [:error] [pid 18333:tid 18399] [client 20.104.16.84:10861] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "acr4ZESx2C5hLR0-8dINeAAAAFQ"]
[Tue Mar 31 06:25:42.861989 2026] [proxy_fcgi:error] [pid 18334:tid 18424] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:44.558162 2026] [proxy_fcgi:error] [pid 18334:tid 18413] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:44.767722 2026] [proxy_fcgi:error] [pid 18334:tid 18422] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:44.978958 2026] [proxy_fcgi:error] [pid 18334:tid 18430] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:46.164682 2026] [proxy_fcgi:error] [pid 18334:tid 18418] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:46.380113 2026] [proxy_fcgi:error] [pid 18334:tid 18421] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:46.597843 2026] [proxy_fcgi:error] [pid 18334:tid 18426] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:46.809682 2026] [proxy_fcgi:error] [pid 18334:tid 18407] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:47.019579 2026] [proxy_fcgi:error] [pid 18334:tid 18416] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:47.233332 2026] [proxy_fcgi:error] [pid 18334:tid 18412] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:47.443953 2026] [proxy_fcgi:error] [pid 18334:tid 18415] [client 20.104.16.84:2525] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:25:47.664246 2026] [:error] [pid 18334:tid 18428] [client 20.104.16.84:2525] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ztv.php"] [unique_id "acr4a3qQrXLbk1cg3mhckQAAAJY"]
[Tue Mar 31 06:25:55.203642 2026] [:error] [pid 11822:tid 11838] [client 20.104.16.84:6381] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ztv.php"] [unique_id "acr4cyLLrL4a3YEM2I0M1gAAAY4"]
[Tue Mar 31 06:26:06.655352 2026] [:error] [pid 18439:tid 18469] [client 20.104.16.84:9455] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Rk41.php"] [unique_id "acr4fi-R9nOaA8Xqs7jseAAAANI"]
[Tue Mar 31 06:26:09.934695 2026] [:error] [pid 18439:tid 18475] [client 20.104.16.84:5520] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Rk41.php"] [unique_id "acr4gS-R9nOaA8Xqs7jsewAAANg"]
[Tue Mar 31 06:26:13.893478 2026] [:error] [pid 18334:tid 18408] [client 20.104.16.84:10368] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Rk41.php"] [unique_id "acr4hXqQrXLbk1cg3mhctgAAAII"]
[Tue Mar 31 06:26:26.645411 2026] [:error] [pid 18334:tid 18420] [client 20.104.16.84:2569] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acr4knqQrXLbk1cg3mhc2gAAAI4"]
[Tue Mar 31 06:26:31.774497 2026] [:error] [pid 11869:tid 11893] [client 20.104.16.84:8997] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acr4lxvAVplg9I6KoIIn1wAAAdU"]
[Tue Mar 31 06:26:37.215691 2026] [:error] [pid 18334:tid 18428] [client 20.104.16.84:2219] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acr4nXqQrXLbk1cg3mhc7QAAAJY"]
[Tue Mar 31 06:26:39.403815 2026] [:error] [pid 18333:tid 18384] [client 20.104.16.84:4083] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acr4n0Sx2C5hLR0-8dIObAAAAEU"]
[Tue Mar 31 06:26:41.050801 2026] [:error] [pid 18439:tid 18453] [client 20.104.16.84:9155] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acr4oS-R9nOaA8Xqs7jszgAAAMI"]
[Tue Mar 31 06:26:43.365296 2026] [:error] [pid 18333:tid 18391] [client 20.104.16.84:9153] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/fm.php"] [unique_id "acr4o0Sx2C5hLR0-8dIOdAAAAEw"]
[Tue Mar 31 06:26:48.235145 2026] [proxy_fcgi:error] [pid 18439:tid 18463] [client 20.104.16.84:2621] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:26:48.445853 2026] [proxy_fcgi:error] [pid 18439:tid 18459] [client 20.104.16.84:2621] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:26:48.861796 2026] [:error] [pid 18439:tid 18475] [client 20.104.16.84:2621] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/fm.php"] [unique_id "acr4qC-R9nOaA8Xqs7js5QAAANg"]
[Tue Mar 31 06:26:54.097600 2026] [proxy_fcgi:error] [pid 18334:tid 18418] [client 20.104.16.84:7414] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:26:54.954053 2026] [:error] [pid 18334:tid 18412] [client 20.104.16.84:7414] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "acr4rnqQrXLbk1cg3mhdCgAAAIY"]
[Tue Mar 31 06:26:59.601650 2026] [:error] [pid 11907:tid 11934] [client 20.104.16.84:6833] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "acr4s8coKGLZkBF4Ym1aSwAAAhg"]
[Tue Mar 31 06:27:05.438433 2026] [:error] [pid 11907:tid 11916] [client 20.104.16.84:6583] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "acr4uccoKGLZkBF4Ym1aUAAAAgY"]
[Tue Mar 31 06:27:17.199883 2026] [:error] [pid 18334:tid 18429] [client 20.104.16.84:6574] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acr4xXqQrXLbk1cg3mhdQwAAAJc"]
[Tue Mar 31 06:27:21.317245 2026] [:error] [pid 11786:tid 11794] [client 20.104.16.84:9342] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acr4yU-ANHwuqDZumRDbFQAAAUY"]
[Tue Mar 31 06:27:24.293572 2026] [:error] [pid 18439:tid 18460] [client 20.104.16.84:9940] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acr4zC-R9nOaA8Xqs7jtRgAAAMk"]
[Tue Mar 31 06:27:31.118665 2026] [:error] [pid 18333:tid 18385] [client 20.104.16.84:8088] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acr400Sx2C5hLR0-8dIO-AAAAEY"]
[Tue Mar 31 06:27:35.567793 2026] [:error] [pid 18332:tid 18355] [client 20.104.16.84:2834] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acr4174KXr1F9raS5GSnlgAAAAc"]
[Tue Mar 31 06:27:42.837935 2026] [:error] [pid 11869:tid 11878] [client 20.104.16.84:6168] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acr43hvAVplg9I6KoIIoLwAAAcY"]
[Tue Mar 31 06:27:48.623767 2026] [:error] [pid 18334:tid 18413] [client 20.104.16.84:5310] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acr45HqQrXLbk1cg3mhdjwAAAIc"]
[Tue Mar 31 06:27:53.813848 2026] [:error] [pid 1224:tid 1237] [client 20.104.16.84:10634] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acr46cXGPQPzIHnCuJhH8QAAAQs"]
[Tue Mar 31 06:27:57.496056 2026] [proxy_fcgi:error] [pid 11786:tid 11806] [client 20.104.16.84:6517] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:27:57.702805 2026] [:error] [pid 11786:tid 11804] [client 20.104.16.84:6517] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acr47U-ANHwuqDZumRDbPQAAAVA"]
[Tue Mar 31 06:28:00.232905 2026] [:error] [pid 18333:tid 18402] [client 20.104.16.84:9703] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acr48ESx2C5hLR0-8dIPJQAAAFc"]
[Tue Mar 31 06:28:04.688063 2026] [:error] [pid 18439:tid 18462] [client 20.104.16.84:10921] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acr49C-R9nOaA8Xqs7jtggAAAMs"]
[Tue Mar 31 06:28:07.447276 2026] [proxy_fcgi:error] [pid 1224:tid 1229] [client 20.104.16.84:5296] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:28:08.104361 2026] [proxy_fcgi:error] [pid 1224:tid 1239] [client 20.104.16.84:5296] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:28:08.316450 2026] [:error] [pid 1224:tid 1240] [client 20.104.16.84:5296] [client 20.104.16.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.16.84, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acr4-MXGPQPzIHnCuJhIBgAAAQ4"]
[Tue Mar 31 06:28:08.964535 2026] [:error] [pid 1224:tid 1247] [client 20.104.16.84:5296] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acr4-MXGPQPzIHnCuJhIDAAAARU"]
[Tue Mar 31 06:28:15.588903 2026] [:error] [pid 18334:tid 18430] [client 20.104.16.84:3549] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acr4_3qQrXLbk1cg3mhdwQAAAJg"]
[Tue Mar 31 06:28:19.585549 2026] [:error] [pid 11907:tid 11921] [client 20.104.16.84:2482] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acr5A8coKGLZkBF4Ym1apQAAAgs"]
[Tue Mar 31 06:28:27.964726 2026] [:error] [pid 11869:tid 11885] [client 20.104.16.84:7237] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acr5CxvAVplg9I6KoIIoZwAAAc0"]
[Tue Mar 31 06:28:30.459879 2026] [:error] [pid 11907:tid 11920] [client 20.104.16.84:2473] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acr5DscoKGLZkBF4Ym1argAAAgo"]
[Tue Mar 31 06:28:36.022233 2026] [:error] [pid 11822:tid 11834] [client 20.104.16.84:10739] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acr5FCLLrL4a3YEM2I0NUgAAAYo"]
[Tue Mar 31 06:28:42.769821 2026] [:error] [pid 11786:tid 11810] [client 20.104.16.84:7258] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acr5Gk-ANHwuqDZumRDbWAAAAVY"]
[Tue Mar 31 06:28:44.974755 2026] [:error] [pid 18334:tid 18422] [client 20.104.16.84:7290] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acr5HHqQrXLbk1cg3mhd-wAAAJA"]
[Tue Mar 31 06:28:50.052916 2026] [:error] [pid 1224:tid 1231] [client 20.104.16.84:8355] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acr5IsXGPQPzIHnCuJhIKQAAAQU"]
[Tue Mar 31 06:28:55.208771 2026] [:error] [pid 18333:tid 18396] [client 20.104.16.84:8330] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acr5J0Sx2C5hLR0-8dIPtgAAAFE"]
[Tue Mar 31 06:29:07.731919 2026] [:error] [pid 11869:tid 11883] [client 20.104.16.84:6316] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acr5MxvAVplg9I6KoIIooAAAAcs"]
[Tue Mar 31 06:29:35.060085 2026] [:error] [pid 18334:tid 18424] [client 20.104.16.84:10485] [client 20.104.16.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.16.84, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acr5T3qQrXLbk1cg3mheRQAAAJI"]
[Tue Mar 31 06:29:35.487069 2026] [:error] [pid 18334:tid 18428] [client 20.104.16.84:10485] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acr5T3qQrXLbk1cg3mheSAAAAJY"]
[Tue Mar 31 06:29:40.980352 2026] [:error] [pid 11786:tid 11800] [client 20.104.16.84:8252] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acr5VE-ANHwuqDZumRDbfwAAAUw"]
[Tue Mar 31 06:29:44.988838 2026] [:error] [pid 18334:tid 18416] [client 20.104.16.84:10438] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acr5WHqQrXLbk1cg3mheXAAAAIo"]
[Tue Mar 31 06:29:48.314193 2026] [:error] [pid 18439:tid 18451] [client 20.104.16.84:9984] [client 20.104.16.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.16.84, incrementing brute counter"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acr5XC-R9nOaA8Xqs7ju9gAAAMA"]
[Tue Mar 31 06:29:48.554586 2026] [proxy_fcgi:error] [pid 18439:tid 18467] [client 20.104.16.84:9984] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:29:48.759624 2026] [:error] [pid 18439:tid 18457] [client 20.104.16.84:9984] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acr5XC-R9nOaA8Xqs7ju-AAAAMY"]
[Tue Mar 31 06:29:52.304067 2026] [:error] [pid 11822:tid 11837] [client 20.104.16.84:5972] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acr5YCLLrL4a3YEM2I0NpQAAAY0"]
[Tue Mar 31 06:29:55.318096 2026] [proxy_fcgi:error] [pid 11869:tid 11883] [client 20.104.16.84:10181] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:29:55.523057 2026] [:error] [pid 11869:tid 11888] [client 20.104.16.84:10181] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acr5YxvAVplg9I6KoIIo4QAAAdA"]
[Tue Mar 31 06:30:01.041172 2026] [proxy_fcgi:error] [pid 11907:tid 11910] [client 20.104.16.84:6833] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:30:01.255585 2026] [proxy_fcgi:error] [pid 11907:tid 11923] [client 20.104.16.84:6833] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:30:01.709775 2026] [:error] [pid 11907:tid 11925] [client 20.104.16.84:6833] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acr5accoKGLZkBF4Ym1a9QAAAg8"]
[Tue Mar 31 06:30:13.673427 2026] [:error] [pid 18333:tid 18390] [client 20.104.16.84:4339] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acr5dUSx2C5hLR0-8dIQmQAAAEs"]
[Tue Mar 31 06:30:16.858709 2026] [:error] [pid 18334:tid 18409] [client 20.104.16.84:10196] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acr5eHqQrXLbk1cg3mheogAAAIM"]
[Tue Mar 31 06:30:19.541949 2026] [:error] [pid 11907:tid 11914] [client 20.104.16.84:10469] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acr5e8coKGLZkBF4Ym1bDwAAAgQ"]
[Tue Mar 31 06:30:22.114612 2026] [:error] [pid 18334:tid 18420] [client 20.104.16.84:9741] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acr5fnqQrXLbk1cg3mherQAAAI4"]
[Tue Mar 31 06:30:38.361023 2026] [:error] [pid 11869:tid 11891] [client 20.104.16.84:10198] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "acr5jhvAVplg9I6KoIIo_AAAAdM"]
[Tue Mar 31 06:30:40.567264 2026] [:error] [pid 18333:tid 18384] [client 20.104.16.84:11054] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "acr5kESx2C5hLR0-8dIQugAAAEU"]
[Tue Mar 31 06:30:46.944601 2026] [:error] [pid 18334:tid 18410] [client 20.104.16.84:7624] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "acr5lnqQrXLbk1cg3mhe9QAAAIQ"]
[Tue Mar 31 06:30:51.326680 2026] [:error] [pid 11786:tid 11797] [client 20.104.16.84:5269] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acr5m0-ANHwuqDZumRDbmwAAAUk"]
[Tue Mar 31 06:30:53.469261 2026] [:error] [pid 11786:tid 11791] [client 20.104.16.84:9781] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acr5nU-ANHwuqDZumRDbpAAAAUM"]
[Tue Mar 31 06:30:54.258974 2026] [:error] [pid 11786:tid 11809] [client 20.104.16.84:7264] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acr5nk-ANHwuqDZumRDbqAAAAVU"]
[Tue Mar 31 06:30:55.871108 2026] [:error] [pid 11822:tid 11835] [client 20.104.16.84:5254] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acr5nyLLrL4a3YEM2I0NyQAAAYs"]
[Tue Mar 31 06:30:57.560616 2026] [:error] [pid 18439:tid 18475] [client 20.104.16.84:7275] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acr5oS-R9nOaA8Xqs7jvTAAAANg"]
[Tue Mar 31 06:30:59.226088 2026] [:error] [pid 18439:tid 18461] [client 20.104.16.84:7270] [client 20.104.16.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/403.php"] [unique_id "acr5oy-R9nOaA8Xqs7jvVgAAAMo"]
[Tue Mar 31 06:31:02.350104 2026] [proxy_fcgi:error] [pid 11869:tid 11881] [client 20.104.16.84:9304] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:31:02.777952 2026] [:error] [pid 11869:tid 11877] [client 20.104.16.84:9304] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acr5phvAVplg9I6KoIIpFAAAAcU"]
[Tue Mar 31 06:31:05.357833 2026] [proxy_fcgi:error] [pid 11869:tid 11873] [client 20.104.16.84:4680] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:31:05.565959 2026] [:error] [pid 11869:tid 11896] [client 20.104.16.84:4680] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acr5qRvAVplg9I6KoIIpGAAAAdg"]
[Tue Mar 31 06:31:08.317759 2026] [:error] [pid 18439:tid 18452] [client 20.104.16.84:7039] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acr5rC-R9nOaA8Xqs7jvkgAAAME"]
[Tue Mar 31 06:31:12.501325 2026] [:error] [pid 11907:tid 11910] [client 20.104.16.84:8649] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acr5sMcoKGLZkBF4Ym1bNgAAAgA"]
[Tue Mar 31 06:31:15.633575 2026] [proxy_fcgi:error] [pid 11907:tid 11932] [client 20.104.16.84:6996] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:31:15.843408 2026] [proxy_fcgi:error] [pid 11907:tid 11931] [client 20.104.16.84:6996] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:31:16.059168 2026] [:error] [pid 11907:tid 11911] [client 20.104.16.84:6996] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "acr5tMcoKGLZkBF4Ym1bPwAAAgE"]
[Tue Mar 31 06:31:22.853470 2026] [:error] [pid 11786:tid 11812] [client 20.104.16.84:6091] [client 20.104.16.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acr5uk-ANHwuqDZumRDbrQAAAVg"]
[Tue Mar 31 18:19:00.390581 2026] [proxy_fcgi:error] [pid 6548:tid 6563] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:00.650106 2026] [proxy_fcgi:error] [pid 6548:tid 6550] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:00.909449 2026] [proxy_fcgi:error] [pid 6548:tid 6568] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:01.168463 2026] [proxy_fcgi:error] [pid 6548:tid 6562] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:01.427366 2026] [proxy_fcgi:error] [pid 6548:tid 6572] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:01.685756 2026] [proxy_fcgi:error] [pid 6548:tid 6551] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:01.947581 2026] [proxy_fcgi:error] [pid 6548:tid 6570] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:02.205072 2026] [proxy_fcgi:error] [pid 6548:tid 6555] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:02.464169 2026] [proxy_fcgi:error] [pid 6548:tid 6550] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:02.724382 2026] [proxy_fcgi:error] [pid 6548:tid 6561] [client 74.248.131.153:3971] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:19:02.979079 2026] [:error] [pid 6548:tid 6572] [client 74.248.131.153:3971] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ycadmin.php"] [unique_id "acuflrgIz9HgMl9YwE71IgAAAVY"]
[Tue Mar 31 18:19:03.490458 2026] [:error] [pid 36890:tid 36912] [client 74.248.131.153:4033] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ycadmin.php"] [unique_id "acufl58FASPd_uH8z7cVdQAAABE"]
[Tue Mar 31 18:19:04.002522 2026] [:error] [pid 6548:tid 6571] [client 74.248.131.153:4060] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ycadmin.php"] [unique_id "acufmLgIz9HgMl9YwE71KAAAAVU"]
[Tue Mar 31 18:19:04.521795 2026] [:error] [pid 41421:tid 41433] [client 74.248.131.153:4095] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ycadmin.php"] [unique_id "acufmBSaDjY9kKFtUQBuTAAAAQk"]
[Tue Mar 31 18:19:05.041052 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:4055] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "acufmbgIz9HgMl9YwE71LwAAAU0"]
[Tue Mar 31 18:19:05.550733 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:4061] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "acufmbgIz9HgMl9YwE71NQAAAU4"]
[Tue Mar 31 18:19:06.064519 2026] [:error] [pid 36891:tid 36927] [client 74.248.131.153:4092] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "acufmpJhiMaJUqoqfl66wAAAAEM"]
[Tue Mar 31 18:19:06.574230 2026] [:error] [pid 36982:tid 36992] [client 74.248.131.153:4078] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "acufmvlMmeoQKN0r_GNlNwAAAMc"]
[Tue Mar 31 18:19:07.087328 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:4036] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "acufm7gIz9HgMl9YwE71PQAAAUE"]
[Tue Mar 31 18:19:07.597200 2026] [:error] [pid 36892:tid 36958] [client 74.248.131.153:3988] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "acufm0yj9S4G0ek3O4JzfAAAAIc"]
[Tue Mar 31 18:19:08.110782 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:4069] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "acufnBSaDjY9kKFtUQBuVAAAARY"]
[Tue Mar 31 18:19:08.619186 2026] [:error] [pid 36982:tid 37005] [client 74.248.131.153:3987] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "acufnPlMmeoQKN0r_GNlPgAAANQ"]
[Tue Mar 31 18:19:09.130390 2026] [:error] [pid 41421:tid 41429] [client 74.248.131.153:4054] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "acufnRSaDjY9kKFtUQBuWQAAAQU"]
[Tue Mar 31 18:19:09.642127 2026] [:error] [pid 36982:tid 36995] [client 74.248.131.153:4071] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "acufnflMmeoQKN0r_GNlQAAAAMo"]
[Tue Mar 31 18:19:10.154195 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:4064] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "acufnrgIz9HgMl9YwE71PwAAAVE"]
[Tue Mar 31 18:19:10.677799 2026] [:error] [pid 36890:tid 36909] [client 74.248.131.153:4079] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "acufnp8FASPd_uH8z7cVfAAAAA4"]
[Tue Mar 31 18:19:11.195111 2026] [:error] [pid 41421:tid 41448] [client 74.248.131.153:4076] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "acufnxSaDjY9kKFtUQBuYQAAARg"]
[Tue Mar 31 18:19:11.704093 2026] [:error] [pid 6548:tid 6561] [client 74.248.131.153:4057] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "acufn7gIz9HgMl9YwE71RQAAAUs"]
[Tue Mar 31 18:19:12.226135 2026] [:error] [pid 36892:tid 36961] [client 74.248.131.153:4012] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "acufoEyj9S4G0ek3O4JzgAAAAIo"]
[Tue Mar 31 18:19:12.736579 2026] [:error] [pid 41421:tid 41441] [client 74.248.131.153:3983] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "acufoBSaDjY9kKFtUQBuYwAAARE"]
[Tue Mar 31 18:19:13.250718 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:3917] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cnusw.php"] [unique_id "acufobgIz9HgMl9YwE71UwAAAU0"]
[Tue Mar 31 18:19:13.763387 2026] [:error] [pid 36891:tid 36925] [client 74.248.131.153:3968] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cnusw.php"] [unique_id "acufoZJhiMaJUqoqfl66yQAAAEE"]
[Tue Mar 31 18:19:14.275581 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:4058] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cnusw.php"] [unique_id "acuforgIz9HgMl9YwE71XAAAAVA"]
[Tue Mar 31 18:19:14.784772 2026] [:error] [pid 36982:tid 37005] [client 74.248.131.153:4032] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cnusw.php"] [unique_id "acufovlMmeoQKN0r_GNlRwAAANQ"]
[Tue Mar 31 18:19:15.296463 2026] [:error] [pid 36892:tid 36970] [client 74.248.131.153:4087] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acufo0yj9S4G0ek3O4JzgwAAAJM"]
[Tue Mar 31 18:19:15.810340 2026] [:error] [pid 36982:tid 36997] [client 74.248.131.153:4073] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acufo_lMmeoQKN0r_GNlTgAAAMw"]
[Tue Mar 31 18:19:16.332583 2026] [:error] [pid 41421:tid 41424] [client 74.248.131.153:3969] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acufpBSaDjY9kKFtUQBuawAAAQA"]
[Tue Mar 31 18:19:16.852609 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:3977] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acufpLgIz9HgMl9YwE71YgAAAUI"]
[Tue Mar 31 18:19:17.363569 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:4070] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acufpbgIz9HgMl9YwE71ZQAAAVE"]
[Tue Mar 31 18:19:17.882564 2026] [:error] [pid 6548:tid 6556] [client 74.248.131.153:3972] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acufpbgIz9HgMl9YwE71ZwAAAUY"]
[Tue Mar 31 18:19:18.402786 2026] [:error] [pid 36892:tid 36974] [client 74.248.131.153:4084] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acufpkyj9S4G0ek3O4JziQAAAJc"]
[Tue Mar 31 18:19:18.915449 2026] [:error] [pid 36891:tid 36948] [client 74.248.131.153:4059] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acufppJhiMaJUqoqfl66zwAAAFg"]
[Tue Mar 31 18:19:19.426712 2026] [:error] [pid 41421:tid 41439] [client 74.248.131.153:4082] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acufpxSaDjY9kKFtUQBubgAAAQ8"]
[Tue Mar 31 18:19:19.944202 2026] [:error] [pid 36890:tid 36907] [client 74.248.131.153:4052] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acufp58FASPd_uH8z7cVggAAAAw"]
[Tue Mar 31 18:19:20.462799 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:3980] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acufqPlMmeoQKN0r_GNlWQAAAMA"]
[Tue Mar 31 18:19:20.973992 2026] [:error] [pid 41421:tid 41424] [client 74.248.131.153:4067] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acufqBSaDjY9kKFtUQBuegAAAQA"]
[Tue Mar 31 18:19:21.487751 2026] [:error] [pid 36890:tid 36906] [client 74.248.131.153:4080] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acufqZ8FASPd_uH8z7cVhQAAAAs"]
[Tue Mar 31 18:19:21.997275 2026] [:error] [pid 36890:tid 36896] [client 74.248.131.153:4048] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acufqZ8FASPd_uH8z7cViAAAAAE"]
[Tue Mar 31 18:19:22.511577 2026] [:error] [pid 36890:tid 36895] [client 74.248.131.153:4053] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acufqp8FASPd_uH8z7cViwAAAAA"]
[Tue Mar 31 18:19:23.021271 2026] [:error] [pid 36891:tid 36940] [client 74.248.131.153:3921] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acufq5JhiMaJUqoqfl661AAAAFA"]
[Tue Mar 31 18:19:23.532582 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:4042] [client 74.248.131.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acufq7gIz9HgMl9YwE71cwAAAVE"]
[Tue Mar 31 18:19:24.043941 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3915] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "acufrLgIz9HgMl9YwE71dQAAAVM"]
[Tue Mar 31 18:19:24.561614 2026] [:error] [pid 6548:tid 6550] [client 74.248.131.153:3976] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "acufrLgIz9HgMl9YwE71eQAAAUA"]
[Tue Mar 31 18:19:25.072331 2026] [:error] [pid 6548:tid 6572] [client 74.248.131.153:4034] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "acufrbgIz9HgMl9YwE71ewAAAVY"]
[Tue Mar 31 18:19:25.585815 2026] [:error] [pid 41421:tid 41428] [client 74.248.131.153:3975] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "acufrRSaDjY9kKFtUQBugQAAAQQ"]
[Tue Mar 31 18:19:26.097389 2026] [:error] [pid 36890:tid 36918] [client 74.248.131.153:4091] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "acufrp8FASPd_uH8z7cVkgAAABc"]
[Tue Mar 31 18:19:26.606551 2026] [:error] [pid 36891:tid 36935] [client 74.248.131.153:4050] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "acufrpJhiMaJUqoqfl662QAAAEs"]
[Tue Mar 31 18:19:27.121989 2026] [:error] [pid 36982:tid 36994] [client 74.248.131.153:3999] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "acufr_lMmeoQKN0r_GNlYQAAAMk"]
[Tue Mar 31 18:19:27.631391 2026] [:error] [pid 6548:tid 6562] [client 74.248.131.153:3923] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acufr7gIz9HgMl9YwE71hwAAAUw"]
[Tue Mar 31 18:19:28.144189 2026] [:error] [pid 6548:tid 6553] [client 74.248.131.153:4049] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acufsLgIz9HgMl9YwE71jgAAAUM"]
[Tue Mar 31 18:19:28.653502 2026] [:error] [pid 6548:tid 6568] [client 74.248.131.153:3986] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acufsLgIz9HgMl9YwE71kQAAAVI"]
[Tue Mar 31 18:19:29.164744 2026] [:error] [pid 36982:tid 37008] [client 74.248.131.153:4028] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "acufsflMmeoQKN0r_GNlbAAAANc"]
[Tue Mar 31 18:19:29.675004 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:4037] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acufsbgIz9HgMl9YwE71kwAAAU4"]
[Tue Mar 31 18:19:30.184037 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:4086] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acufsrgIz9HgMl9YwE71lwAAAVQ"]
[Tue Mar 31 18:19:30.693044 2026] [:error] [pid 6548:tid 6568] [client 74.248.131.153:4088] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acufsrgIz9HgMl9YwE71mwAAAVI"]
[Tue Mar 31 18:19:31.205342 2026] [:error] [pid 36982:tid 36993] [client 74.248.131.153:3989] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "acufs_lMmeoQKN0r_GNlbgAAAMg"]
[Tue Mar 31 18:19:31.716628 2026] [:error] [pid 36982:tid 37009] [client 74.248.131.153:3914] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "acufs_lMmeoQKN0r_GNlcAAAANg"]
[Tue Mar 31 18:19:32.226976 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3985] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "acuftPlMmeoQKN0r_GNlcgAAANA"]
[Tue Mar 31 18:19:32.741411 2026] [:error] [pid 36892:tid 36974] [client 74.248.131.153:3982] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "acuftEyj9S4G0ek3O4JzmwAAAJc"]
[Tue Mar 31 18:19:33.251154 2026] [:error] [pid 36892:tid 36952] [client 74.248.131.153:3905] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "acuftUyj9S4G0ek3O4JznAAAAIE"]
[Tue Mar 31 18:19:33.761591 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:4068] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acuftbgIz9HgMl9YwE71pQAAAUE"]
[Tue Mar 31 18:19:34.273416 2026] [:error] [pid 36890:tid 36904] [client 74.248.131.153:4065] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acuftp8FASPd_uH8z7cVnwAAAAk"]
[Tue Mar 31 18:19:34.784661 2026] [:error] [pid 36890:tid 36903] [client 74.248.131.153:3973] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acuftp8FASPd_uH8z7cVogAAAAg"]
[Tue Mar 31 18:19:35.295419 2026] [:error] [pid 41421:tid 41447] [client 74.248.131.153:4021] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "acuftxSaDjY9kKFtUQBukwAAARc"]
[Tue Mar 31 18:19:35.807771 2026] [:error] [pid 6548:tid 6574] [client 74.248.131.153:4023] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acuft7gIz9HgMl9YwE71uQAAAVg"]
[Tue Mar 31 18:19:36.317916 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:4075] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acufuLgIz9HgMl9YwE71vwAAAUg"]
[Tue Mar 31 18:19:36.831279 2026] [:error] [pid 36982:tid 37000] [client 74.248.131.153:4046] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acufuPlMmeoQKN0r_GNleQAAAM8"]
[Tue Mar 31 18:19:37.342502 2026] [:error] [pid 6548:tid 6560] [client 74.248.131.153:4077] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acufubgIz9HgMl9YwE71xgAAAUo"]
[Tue Mar 31 18:19:37.855848 2026] [:error] [pid 36891:tid 36928] [client 74.248.131.153:3978] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acufuZJhiMaJUqoqfl665AAAAEQ"]
[Tue Mar 31 18:19:38.371290 2026] [:error] [pid 36890:tid 36901] [client 74.248.131.153:4094] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acufup8FASPd_uH8z7cVqQAAAAY"]
[Tue Mar 31 18:19:38.882384 2026] [:error] [pid 6548:tid 6561] [client 74.248.131.153:4029] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acufurgIz9HgMl9YwE71zQAAAUs"]
[Tue Mar 31 18:19:39.394689 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:4010] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "acufu7gIz9HgMl9YwE710wAAAUI"]
[Tue Mar 31 18:19:39.905343 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:3950] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufu7gIz9HgMl9YwE712AAAAUk"]
[Tue Mar 31 18:19:40.417066 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:4031] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufvLgIz9HgMl9YwE713QAAAUk"]
[Tue Mar 31 18:19:40.931463 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:4056] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufvBSaDjY9kKFtUQBumAAAARY"]
[Tue Mar 31 18:19:41.444269 2026] [:error] [pid 36891:tid 36929] [client 74.248.131.153:4072] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufvZJhiMaJUqoqfl665wAAAEU"]
[Tue Mar 31 18:19:41.954572 2026] [:error] [pid 36892:tid 36955] [client 74.248.131.153:4051] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufvUyj9S4G0ek3O4JzrAAAAIQ"]
[Tue Mar 31 18:19:42.469439 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:4024] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufvrgIz9HgMl9YwE715wAAAUk"]
[Tue Mar 31 18:19:42.978559 2026] [:error] [pid 36982:tid 37004] [client 74.248.131.153:3993] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufvvlMmeoQKN0r_GNliAAAANM"]
[Tue Mar 31 18:19:43.493354 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3970] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "acufv7gIz9HgMl9YwE716wAAAVA"]
[Tue Mar 31 18:19:44.005453 2026] [:error] [pid 36982:tid 36992] [client 74.248.131.153:4041] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hly.php"] [unique_id "acufwPlMmeoQKN0r_GNliwAAAMc"]
[Tue Mar 31 18:19:44.518452 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:3933] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hly.php"] [unique_id "acufwLgIz9HgMl9YwE717wAAAUk"]
[Tue Mar 31 18:19:45.028930 2026] [:error] [pid 36982:tid 36989] [client 74.248.131.153:4035] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hly.php"] [unique_id "acufwflMmeoQKN0r_GNljgAAAMQ"]
[Tue Mar 31 18:19:45.538979 2026] [:error] [pid 36891:tid 36931] [client 74.248.131.153:4040] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hly.php"] [unique_id "acufwZJhiMaJUqoqfl667QAAAEc"]
[Tue Mar 31 18:19:46.048436 2026] [:error] [pid 36982:tid 36991] [client 74.248.131.153:4090] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "acufwvlMmeoQKN0r_GNlkwAAAMY"]
[Tue Mar 31 18:19:46.563157 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:3979] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "acufwrgIz9HgMl9YwE71-QAAAUk"]
[Tue Mar 31 18:19:47.073989 2026] [:error] [pid 6548:tid 6554] [client 74.248.131.153:3994] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "acufw7gIz9HgMl9YwE71_QAAAUQ"]
[Tue Mar 31 18:19:47.585084 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:4066] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "acufw7gIz9HgMl9YwE72AgAAAVM"]
[Tue Mar 31 18:19:48.095469 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:4000] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "acufxLgIz9HgMl9YwE72BgAAAVE"]
[Tue Mar 31 18:19:48.604771 2026] [:error] [pid 36982:tid 37008] [client 74.248.131.153:4022] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "acufxPlMmeoQKN0r_GNlmAAAANc"]
[Tue Mar 31 18:19:49.115421 2026] [:error] [pid 36892:tid 36961] [client 74.248.131.153:3958] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "acufxUyj9S4G0ek3O4JzsgAAAIo"]
[Tue Mar 31 18:19:49.624926 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:4044] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file7.php"] [unique_id "acufxbgIz9HgMl9YwE72DAAAAVQ"]
[Tue Mar 31 18:19:50.135473 2026] [:error] [pid 36891:tid 36947] [client 74.248.131.153:3984] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/logain5.php"] [unique_id "acufxpJhiMaJUqoqfl669QAAAFc"]
[Tue Mar 31 18:19:50.645687 2026] [:error] [pid 36891:tid 36943] [client 74.248.131.153:4085] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/logain5.php"] [unique_id "acufxpJhiMaJUqoqfl669wAAAFM"]
[Tue Mar 31 18:19:51.159076 2026] [:error] [pid 41421:tid 41439] [client 74.248.131.153:4016] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/logain5.php"] [unique_id "acufxxSaDjY9kKFtUQBuoQAAAQ8"]
[Tue Mar 31 18:19:51.669675 2026] [:error] [pid 41421:tid 41426] [client 74.248.131.153:4025] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/logain5.php"] [unique_id "acufxxSaDjY9kKFtUQBuowAAAQI"]
[Tue Mar 31 18:19:52.186659 2026] [:error] [pid 6548:tid 6560] [client 74.248.131.153:4017] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "acufyLgIz9HgMl9YwE72FAAAAUo"]
[Tue Mar 31 18:19:52.696391 2026] [:error] [pid 41421:tid 41445] [client 74.248.131.153:3910] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "acufyBSaDjY9kKFtUQBuqAAAARU"]
[Tue Mar 31 18:19:53.208202 2026] [:error] [pid 36982:tid 36990] [client 74.248.131.153:4083] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "acufyflMmeoQKN0r_GNlmwAAAMU"]
[Tue Mar 31 18:19:53.728208 2026] [:error] [pid 36890:tid 36902] [client 74.248.131.153:3965] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "acufyZ8FASPd_uH8z7cVuwAAAAc"]
[Tue Mar 31 18:19:54.243314 2026] [:error] [pid 36892:tid 36960] [client 74.248.131.153:4093] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acufykyj9S4G0ek3O4JztQAAAIk"]
[Tue Mar 31 18:19:54.754272 2026] [:error] [pid 41421:tid 41437] [client 74.248.131.153:3935] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acufyhSaDjY9kKFtUQBuqgAAAQ0"]
[Tue Mar 31 18:19:55.267136 2026] [:error] [pid 41421:tid 41448] [client 74.248.131.153:4089] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acufyxSaDjY9kKFtUQBuqwAAARg"]
[Tue Mar 31 18:19:55.780621 2026] [:error] [pid 41421:tid 41436] [client 74.248.131.153:3940] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "acufyxSaDjY9kKFtUQBurQAAAQw"]
[Tue Mar 31 18:19:56.294762 2026] [:error] [pid 36891:tid 36947] [client 74.248.131.153:3913] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acufzJJhiMaJUqoqfl66_wAAAFc"]
[Tue Mar 31 18:19:56.804562 2026] [:error] [pid 41421:tid 41427] [client 74.248.131.153:3912] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acufzBSaDjY9kKFtUQBusgAAAQM"]
[Tue Mar 31 18:19:57.317706 2026] [:error] [pid 36890:tid 36895] [client 74.248.131.153:3997] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acufzZ8FASPd_uH8z7cVxgAAAAA"]
[Tue Mar 31 18:19:57.831062 2026] [:error] [pid 41421:tid 41440] [client 74.248.131.153:4007] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acufzRSaDjY9kKFtUQBuswAAARA"]
[Tue Mar 31 18:19:58.341274 2026] [:error] [pid 36890:tid 36913] [client 74.248.131.153:3919] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/index.php"] [unique_id "acufzp8FASPd_uH8z7cVyQAAABI"]
[Tue Mar 31 18:19:58.852821 2026] [:error] [pid 36982:tid 36989] [client 74.248.131.153:4002] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/index.php"] [unique_id "acufzvlMmeoQKN0r_GNlpQAAAMQ"]
[Tue Mar 31 18:19:59.363546 2026] [:error] [pid 36890:tid 36896] [client 74.248.131.153:4063] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/index.php"] [unique_id "acufz58FASPd_uH8z7cVzQAAAAE"]
[Tue Mar 31 18:19:59.877695 2026] [:error] [pid 36890:tid 36916] [client 74.248.131.153:3911] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/index.php"] [unique_id "acufz58FASPd_uH8z7cV0AAAABU"]
[Tue Mar 31 18:20:00.391845 2026] [:error] [pid 36892:tid 36964] [client 74.248.131.153:3998] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acuf0Eyj9S4G0ek3O4JzwAAAAI0"]
[Tue Mar 31 18:20:00.900686 2026] [:error] [pid 36892:tid 36970] [client 74.248.131.153:4027] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acuf0Eyj9S4G0ek3O4JzwgAAAJM"]
[Tue Mar 31 18:20:01.414290 2026] [:error] [pid 36982:tid 36997] [client 74.248.131.153:3924] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acuf0flMmeoQKN0r_GNlqAAAAMw"]
[Tue Mar 31 18:20:01.925411 2026] [:error] [pid 36892:tid 36953] [client 74.248.131.153:4006] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "acuf0Uyj9S4G0ek3O4JzxwAAAII"]
[Tue Mar 31 18:20:02.445789 2026] [proxy_fcgi:error] [pid 41421:tid 41443] [client 74.248.131.153:3995] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:02.706464 2026] [proxy_fcgi:error] [pid 41421:tid 41438] [client 74.248.131.153:3995] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:02.972315 2026] [proxy_fcgi:error] [pid 41421:tid 41444] [client 74.248.131.153:3995] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:03.230837 2026] [proxy_fcgi:error] [pid 41421:tid 41435] [client 74.248.131.153:3995] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:04.808300 2026] [proxy_fcgi:error] [pid 41421:tid 41437] [client 74.248.131.153:3995] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:05.065705 2026] [:error] [pid 41421:tid 41428] [client 74.248.131.153:3995] [client 74.248.131.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acuf1RSaDjY9kKFtUQBuxQAAAQQ"]
[Tue Mar 31 18:20:05.579533 2026] [proxy_fcgi:error] [pid 36982:tid 37007] [client 74.248.131.153:4014] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:05.835169 2026] [:error] [pid 36982:tid 36986] [client 74.248.131.153:4014] [client 74.248.131.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "acuf1flMmeoQKN0r_GNlsgAAAME"]
[Tue Mar 31 18:20:06.608942 2026] [proxy_fcgi:error] [pid 36890:tid 36905] [client 74.248.131.153:4003] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:06.864371 2026] [:error] [pid 36890:tid 36912] [client 74.248.131.153:4003] [client 74.248.131.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acuf1p8FASPd_uH8z7cV1gAAABE"]
[Tue Mar 31 18:20:07.382654 2026] [proxy_fcgi:error] [pid 6548:tid 6565] [client 74.248.131.153:3843] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:07.640782 2026] [proxy_fcgi:error] [pid 6548:tid 6554] [client 74.248.131.153:3843] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:07.896492 2026] [:error] [pid 6548:tid 6571] [client 74.248.131.153:3843] [client 74.248.131.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acuf17gIz9HgMl9YwE72KAAAAVU"]
[Tue Mar 31 18:20:08.429391 2026] [proxy_fcgi:error] [pid 41421:tid 41427] [client 74.248.131.153:3945] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:20:08.684604 2026] [:error] [pid 41421:tid 41429] [client 74.248.131.153:3945] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acuf2BSaDjY9kKFtUQBuywAAAQU"]
[Tue Mar 31 18:20:09.205049 2026] [:error] [pid 41421:tid 41436] [client 74.248.131.153:4011] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acuf2RSaDjY9kKFtUQBuzQAAAQw"]
[Tue Mar 31 18:20:09.716470 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:3920] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acuf2bgIz9HgMl9YwE72MAAAAVQ"]
[Tue Mar 31 18:20:10.230852 2026] [:error] [pid 36890:tid 36903] [client 74.248.131.153:4004] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class20.php"] [unique_id "acuf2p8FASPd_uH8z7cV2AAAAAg"]
[Tue Mar 31 18:20:10.741352 2026] [:error] [pid 36892:tid 36970] [client 74.248.131.153:4043] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "acuf2kyj9S4G0ek3O4Jz1wAAAJM"]
[Tue Mar 31 18:20:11.255905 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:4026] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "acuf27gIz9HgMl9YwE72OAAAAVE"]
[Tue Mar 31 18:20:11.768902 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:4015] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "acuf27gIz9HgMl9YwE72OwAAAU0"]
[Tue Mar 31 18:20:12.281509 2026] [:error] [pid 6548:tid 6571] [client 74.248.131.153:3949] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X7x.php"] [unique_id "acuf3LgIz9HgMl9YwE72QQAAAVU"]
[Tue Mar 31 18:20:12.795938 2026] [:error] [pid 41421:tid 41441] [client 74.248.131.153:4020] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "acuf3BSaDjY9kKFtUQBu0AAAARE"]
[Tue Mar 31 18:20:13.308571 2026] [:error] [pid 36892:tid 36967] [client 74.248.131.153:3925] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "acuf3Uyj9S4G0ek3O4Jz2wAAAJA"]
[Tue Mar 31 18:20:13.821846 2026] [:error] [pid 36891:tid 36938] [client 74.248.131.153:3927] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "acuf3ZJhiMaJUqoqfl67FwAAAE4"]
[Tue Mar 31 18:20:14.334954 2026] [:error] [pid 41421:tid 41436] [client 74.248.131.153:4009] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "acuf3hSaDjY9kKFtUQBu1QAAAQw"]
[Tue Mar 31 18:20:14.848032 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:3957] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acuf3rgIz9HgMl9YwE72RgAAAUI"]
[Tue Mar 31 18:20:15.363149 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:3955] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acuf37gIz9HgMl9YwE72SAAAAUk"]
[Tue Mar 31 18:20:15.872927 2026] [:error] [pid 36890:tid 36905] [client 74.248.131.153:4019] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acuf358FASPd_uH8z7cV4gAAAAo"]
[Tue Mar 31 18:20:16.383214 2026] [:error] [pid 41421:tid 41425] [client 74.248.131.153:3951] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "acuf4BSaDjY9kKFtUQBu3AAAAQE"]
[Tue Mar 31 18:20:16.894718 2026] [:error] [pid 36982:tid 36996] [client 74.248.131.153:3943] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "acuf4PlMmeoQKN0r_GNlvwAAAMs"]
[Tue Mar 31 18:20:17.405527 2026] [:error] [pid 36892:tid 36951] [client 74.248.131.153:3932] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "acuf4Uyj9S4G0ek3O4Jz4AAAAIA"]
[Tue Mar 31 18:20:17.919457 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:4039] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "acuf4RSaDjY9kKFtUQBu5AAAARY"]
[Tue Mar 31 18:20:18.433004 2026] [:error] [pid 36892:tid 36971] [client 74.248.131.153:3944] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "acuf4kyj9S4G0ek3O4Jz4QAAAJQ"]
[Tue Mar 31 18:20:18.944861 2026] [:error] [pid 36982:tid 36989] [client 74.248.131.153:4038] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acuf4vlMmeoQKN0r_GNlwwAAAMQ"]
[Tue Mar 31 18:20:19.454750 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3894] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acuf4_lMmeoQKN0r_GNlxgAAANA"]
[Tue Mar 31 18:20:19.967654 2026] [:error] [pid 36982:tid 37005] [client 74.248.131.153:3990] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acuf4_lMmeoQKN0r_GNlyQAAANQ"]
[Tue Mar 31 18:20:20.479811 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:3926] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "acuf5LgIz9HgMl9YwE72VAAAAVQ"]
[Tue Mar 31 18:20:20.989500 2026] [:error] [pid 41421:tid 41426] [client 74.248.131.153:4081] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "acuf5BSaDjY9kKFtUQBu6QAAAQI"]
[Tue Mar 31 18:20:21.500913 2026] [:error] [pid 41421:tid 41439] [client 74.248.131.153:4095] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "acuf5RSaDjY9kKFtUQBu6gAAAQ8"]
[Tue Mar 31 18:20:22.014798 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:3929] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "acuf5vlMmeoQKN0r_GNl3QAAAMA"]
[Tue Mar 31 18:20:22.523291 2026] [:error] [pid 41421:tid 41429] [client 74.248.131.153:3891] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "acuf5hSaDjY9kKFtUQBu7wAAAQU"]
[Tue Mar 31 18:20:23.032114 2026] [:error] [pid 36982:tid 36992] [client 74.248.131.153:3964] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thoms.php"] [unique_id "acuf5_lMmeoQKN0r_GNl5gAAAMc"]
[Tue Mar 31 18:20:23.542793 2026] [:error] [pid 36890:tid 36915] [client 74.248.131.153:3953] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thoms.php"] [unique_id "acuf558FASPd_uH8z7cWAAAAABQ"]
[Tue Mar 31 18:20:24.053613 2026] [:error] [pid 6548:tid 6568] [client 74.248.131.153:3936] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thoms.php"] [unique_id "acuf6LgIz9HgMl9YwE72iAAAAVI"]
[Tue Mar 31 18:20:24.566360 2026] [:error] [pid 6548:tid 6574] [client 74.248.131.153:3939] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/thoms.php"] [unique_id "acuf6LgIz9HgMl9YwE72iwAAAVg"]
[Tue Mar 31 18:20:25.075036 2026] [:error] [pid 36892:tid 36975] [client 74.248.131.153:3908] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/O00.php"] [unique_id "acuf6Uyj9S4G0ek3O4Jz9wAAAJg"]
[Tue Mar 31 18:20:25.587471 2026] [:error] [pid 36892:tid 36969] [client 74.248.131.153:4013] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/O00.php"] [unique_id "acuf6Uyj9S4G0ek3O4Jz-gAAAJI"]
[Tue Mar 31 18:20:26.099607 2026] [:error] [pid 36890:tid 36917] [client 74.248.131.153:3934] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/O00.php"] [unique_id "acuf6p8FASPd_uH8z7cWAgAAABY"]
[Tue Mar 31 18:20:26.610047 2026] [:error] [pid 36890:tid 36905] [client 74.248.131.153:3865] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/O00.php"] [unique_id "acuf6p8FASPd_uH8z7cWBAAAAAo"]
[Tue Mar 31 18:20:27.119515 2026] [:error] [pid 36982:tid 36999] [client 74.248.131.153:3814] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-.php"] [unique_id "acuf6_lMmeoQKN0r_GNl9wAAAM4"]
[Tue Mar 31 18:20:27.628273 2026] [:error] [pid 36982:tid 37004] [client 74.248.131.153:4074] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-.php"] [unique_id "acuf6_lMmeoQKN0r_GNl-AAAANM"]
[Tue Mar 31 18:20:28.136781 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:4018] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-.php"] [unique_id "acuf7PlMmeoQKN0r_GNl-wAAAMA"]
[Tue Mar 31 18:20:28.646134 2026] [:error] [pid 36892:tid 36968] [client 74.248.131.153:3909] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-.php"] [unique_id "acuf7Eyj9S4G0ek3O4Jz_wAAAJE"]
[Tue Mar 31 18:20:29.157010 2026] [:error] [pid 36891:tid 36936] [client 74.248.131.153:3781] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/akcc.php"] [unique_id "acuf7ZJhiMaJUqoqfl67RwAAAEw"]
[Tue Mar 31 18:20:29.667413 2026] [:error] [pid 36982:tid 36998] [client 74.248.131.153:3846] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/akcc.php"] [unique_id "acuf7flMmeoQKN0r_GNl_gAAAM0"]
[Tue Mar 31 18:20:30.178279 2026] [:error] [pid 36891:tid 36934] [client 74.248.131.153:3941] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/akcc.php"] [unique_id "acuf7pJhiMaJUqoqfl67TQAAAEo"]
[Tue Mar 31 18:20:30.688111 2026] [:error] [pid 36982:tid 36995] [client 74.248.131.153:3981] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/akcc.php"] [unique_id "acuf7vlMmeoQKN0r_GNmAwAAAMo"]
[Tue Mar 31 18:20:31.196720 2026] [:error] [pid 36982:tid 36997] [client 74.248.131.153:3860] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ee.php"] [unique_id "acuf7_lMmeoQKN0r_GNmBwAAAMw"]
[Tue Mar 31 18:20:31.706567 2026] [:error] [pid 36982:tid 36998] [client 74.248.131.153:3874] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ee.php"] [unique_id "acuf7_lMmeoQKN0r_GNmDwAAAM0"]
[Tue Mar 31 18:20:32.219073 2026] [:error] [pid 36892:tid 36957] [client 74.248.131.153:3849] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ee.php"] [unique_id "acuf8Eyj9S4G0ek3O4J0CwAAAIY"]
[Tue Mar 31 18:20:32.727553 2026] [:error] [pid 6548:tid 6573] [client 74.248.131.153:3930] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ee.php"] [unique_id "acuf8LgIz9HgMl9YwE72pgAAAVc"]
[Tue Mar 31 18:20:33.237836 2026] [:error] [pid 36892:tid 36971] [client 74.248.131.153:3876] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/epinyins.php"] [unique_id "acuf8Uyj9S4G0ek3O4J0EgAAAJQ"]
[Tue Mar 31 18:20:33.748707 2026] [:error] [pid 36890:tid 36903] [client 74.248.131.153:3858] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/epinyins.php"] [unique_id "acuf8Z8FASPd_uH8z7cWCQAAAAg"]
[Tue Mar 31 18:20:34.258576 2026] [:error] [pid 36890:tid 36904] [client 74.248.131.153:3918] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/epinyins.php"] [unique_id "acuf8p8FASPd_uH8z7cWCgAAAAk"]
[Tue Mar 31 18:20:34.771488 2026] [:error] [pid 36890:tid 36913] [client 74.248.131.153:3896] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/epinyins.php"] [unique_id "acuf8p8FASPd_uH8z7cWDAAAABI"]
[Tue Mar 31 18:20:35.287569 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:3967] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/i1.php"] [unique_id "acuf87gIz9HgMl9YwE72swAAAUk"]
[Tue Mar 31 18:20:35.797795 2026] [:error] [pid 41421:tid 41431] [client 74.248.131.153:3952] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/i1.php"] [unique_id "acuf8xSaDjY9kKFtUQBvDQAAAQc"]
[Tue Mar 31 18:20:36.310729 2026] [:error] [pid 36890:tid 36914] [client 74.248.131.153:3916] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/i1.php"] [unique_id "acuf9J8FASPd_uH8z7cWEQAAABM"]
[Tue Mar 31 18:20:36.821753 2026] [:error] [pid 36982:tid 37009] [client 74.248.131.153:3888] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/i1.php"] [unique_id "acuf9PlMmeoQKN0r_GNmKQAAANg"]
[Tue Mar 31 18:20:37.330904 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:3904] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vv.php"] [unique_id "acuf9bgIz9HgMl9YwE72vAAAAUE"]
[Tue Mar 31 18:20:37.846089 2026] [:error] [pid 41421:tid 41436] [client 74.248.131.153:3848] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vv.php"] [unique_id "acuf9RSaDjY9kKFtUQBvEgAAAQw"]
[Tue Mar 31 18:20:38.358556 2026] [:error] [pid 41421:tid 41437] [client 74.248.131.153:3856] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vv.php"] [unique_id "acuf9hSaDjY9kKFtUQBvFQAAAQ0"]
[Tue Mar 31 18:20:38.868205 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3907] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vv.php"] [unique_id "acuf9rgIz9HgMl9YwE72wQAAAVM"]
[Tue Mar 31 18:20:39.380128 2026] [:error] [pid 36890:tid 36903] [client 74.248.131.153:3897] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oo.php"] [unique_id "acuf958FASPd_uH8z7cWGAAAAAg"]
[Tue Mar 31 18:20:39.892924 2026] [:error] [pid 36890:tid 36904] [client 74.248.131.153:3844] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oo.php"] [unique_id "acuf958FASPd_uH8z7cWGQAAAAk"]
[Tue Mar 31 18:20:40.405429 2026] [:error] [pid 36890:tid 36913] [client 74.248.131.153:3942] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oo.php"] [unique_id "acuf-J8FASPd_uH8z7cWHAAAABI"]
[Tue Mar 31 18:20:40.918083 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3956] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oo.php"] [unique_id "acuf-LgIz9HgMl9YwE721AAAAVA"]
[Tue Mar 31 18:20:41.429493 2026] [:error] [pid 41421:tid 41425] [client 74.248.131.153:3853] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk.php"] [unique_id "acuf-RSaDjY9kKFtUQBvGgAAAQE"]
[Tue Mar 31 18:20:41.940187 2026] [:error] [pid 6548:tid 6574] [client 74.248.131.153:3841] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk.php"] [unique_id "acuf-bgIz9HgMl9YwE723AAAAVg"]
[Tue Mar 31 18:20:42.451446 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:3947] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk.php"] [unique_id "acuf-rgIz9HgMl9YwE724AAAAUI"]
[Tue Mar 31 18:20:42.962563 2026] [:error] [pid 41421:tid 41439] [client 74.248.131.153:3850] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk.php"] [unique_id "acuf-hSaDjY9kKFtUQBvIAAAAQ8"]
[Tue Mar 31 18:20:43.476797 2026] [:error] [pid 36890:tid 36914] [client 74.248.131.153:4001] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "acuf-58FASPd_uH8z7cWHQAAABM"]
[Tue Mar 31 18:20:43.988282 2026] [:error] [pid 36982:tid 36995] [client 74.248.131.153:3869] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "acuf-_lMmeoQKN0r_GNmLQAAAMo"]
[Tue Mar 31 18:20:44.501284 2026] [:error] [pid 36982:tid 36997] [client 74.248.131.153:3992] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "acuf_PlMmeoQKN0r_GNmMgAAAMw"]
[Tue Mar 31 18:20:45.012392 2026] [:error] [pid 36982:tid 37008] [client 74.248.131.153:3882] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "acuf_flMmeoQKN0r_GNmOAAAANc"]
[Tue Mar 31 18:20:45.522153 2026] [:error] [pid 36891:tid 36932] [client 74.248.131.153:3863] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acuf_ZJhiMaJUqoqfl67WQAAAEg"]
[Tue Mar 31 18:20:46.035110 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3834] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acuf_vlMmeoQKN0r_GNmPgAAANA"]
[Tue Mar 31 18:20:46.545902 2026] [:error] [pid 36892:tid 36968] [client 74.248.131.153:3864] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acuf_kyj9S4G0ek3O4J0FgAAAJE"]
[Tue Mar 31 18:20:47.056684 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3890] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "acuf_7gIz9HgMl9YwE726gAAAVE"]
[Tue Mar 31 18:20:47.566398 2026] [:error] [pid 36891:tid 36927] [client 74.248.131.153:3871] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acuf_5JhiMaJUqoqfl67WwAAAEM"]
[Tue Mar 31 18:20:48.076980 2026] [:error] [pid 36892:tid 36962] [client 74.248.131.153:3868] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acugAEyj9S4G0ek3O4J0GgAAAIs"]
[Tue Mar 31 18:20:48.588528 2026] [:error] [pid 6548:tid 6557] [client 74.248.131.153:3790] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acugALgIz9HgMl9YwE727wAAAUc"]
[Tue Mar 31 18:20:49.102316 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:3922] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "acugAflMmeoQKN0r_GNmRQAAAMA"]
[Tue Mar 31 18:20:49.611009 2026] [:error] [pid 36890:tid 36904] [client 74.248.131.153:3851] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "acugAZ8FASPd_uH8z7cWJgAAAAk"]
[Tue Mar 31 18:20:50.133175 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3892] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "acugArgIz9HgMl9YwE728wAAAVA"]
[Tue Mar 31 18:20:50.643800 2026] [:error] [pid 36890:tid 36919] [client 74.248.131.153:3996] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "acugAp8FASPd_uH8z7cWKAAAABg"]
[Tue Mar 31 18:20:51.164915 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3875] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "acugA7gIz9HgMl9YwE729gAAAVM"]
[Tue Mar 31 18:20:51.675245 2026] [:error] [pid 36892:tid 36964] [client 74.248.131.153:3928] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acugA0yj9S4G0ek3O4J0IQAAAI0"]
[Tue Mar 31 18:20:52.205540 2026] [:error] [pid 36891:tid 36930] [client 74.248.131.153:3783] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acugBJJhiMaJUqoqfl67YwAAAEY"]
[Tue Mar 31 18:20:52.715441 2026] [:error] [pid 36892:tid 36972] [client 74.248.131.153:3795] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acugBEyj9S4G0ek3O4J0JAAAAJU"]
[Tue Mar 31 18:20:53.238578 2026] [:error] [pid 41421:tid 41443] [client 74.248.131.153:3842] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "acugBRSaDjY9kKFtUQBvNAAAARM"]
[Tue Mar 31 18:20:53.747667 2026] [:error] [pid 41421:tid 41439] [client 74.248.131.153:3861] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acugBRSaDjY9kKFtUQBvNQAAAQ8"]
[Tue Mar 31 18:20:54.268007 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:4008] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acugBrgIz9HgMl9YwE72-gAAAU0"]
[Tue Mar 31 18:20:54.779943 2026] [:error] [pid 6548:tid 6571] [client 74.248.131.153:3899] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acugBrgIz9HgMl9YwE72_QAAAVU"]
[Tue Mar 31 18:20:55.297728 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3787] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "acugB7gIz9HgMl9YwE73AgAAAVE"]
[Tue Mar 31 18:20:55.809918 2026] [:error] [pid 41421:tid 41428] [client 74.248.131.153:3946] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "acugBxSaDjY9kKFtUQBvOgAAAQQ"]
[Tue Mar 31 18:20:56.320611 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3789] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "acugCPlMmeoQKN0r_GNmUAAAANE"]
[Tue Mar 31 18:20:56.830443 2026] [:error] [pid 36892:tid 36957] [client 74.248.131.153:3837] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "acugCEyj9S4G0ek3O4J0JwAAAIY"]
[Tue Mar 31 18:20:57.348005 2026] [:error] [pid 6548:tid 6573] [client 74.248.131.153:4005] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "acugCbgIz9HgMl9YwE73BQAAAVc"]
[Tue Mar 31 18:20:57.859807 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:3887] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "acugCbgIz9HgMl9YwE73DAAAAUE"]
[Tue Mar 31 18:20:58.377579 2026] [:error] [pid 36982:tid 36994] [client 74.248.131.153:3966] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "acugCvlMmeoQKN0r_GNmVwAAAMk"]
[Tue Mar 31 18:20:58.892562 2026] [:error] [pid 36890:tid 36897] [client 74.248.131.153:3820] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "acugCp8FASPd_uH8z7cWMwAAAAI"]
[Tue Mar 31 18:20:59.407485 2026] [:error] [pid 41421:tid 41424] [client 74.248.131.153:3938] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "acugCxSaDjY9kKFtUQBvRwAAAQA"]
[Tue Mar 31 18:20:59.918113 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3779] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acugC_lMmeoQKN0r_GNmXQAAANE"]
[Tue Mar 31 18:21:00.430489 2026] [:error] [pid 36892:tid 36965] [client 74.248.131.153:3959] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acugDEyj9S4G0ek3O4J0KgAAAI4"]
[Tue Mar 31 18:21:00.941062 2026] [:error] [pid 36890:tid 36899] [client 74.248.131.153:3777] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acugDJ8FASPd_uH8z7cWNwAAAAQ"]
[Tue Mar 31 18:21:01.455916 2026] [:error] [pid 6548:tid 6571] [client 74.248.131.153:3750] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "acugDbgIz9HgMl9YwE73FAAAAVU"]
[Tue Mar 31 18:21:01.967770 2026] [:error] [pid 6548:tid 6555] [client 74.248.131.153:3880] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "acugDbgIz9HgMl9YwE73FwAAAUU"]
[Tue Mar 31 18:21:02.478277 2026] [:error] [pid 36890:tid 36908] [client 74.248.131.153:3778] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "acugDp8FASPd_uH8z7cWOwAAAA0"]
[Tue Mar 31 18:21:02.987527 2026] [:error] [pid 36892:tid 36959] [client 74.248.131.153:3948] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "acugDkyj9S4G0ek3O4J0LgAAAIg"]
[Tue Mar 31 18:21:03.499391 2026] [:error] [pid 36892:tid 36968] [client 74.248.131.153:3960] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "acugD0yj9S4G0ek3O4J0MAAAAJE"]
[Tue Mar 31 18:21:04.010743 2026] [:error] [pid 6548:tid 6568] [client 74.248.131.153:3854] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "acugELgIz9HgMl9YwE73IgAAAVI"]
[Tue Mar 31 18:21:04.524292 2026] [:error] [pid 36890:tid 36907] [client 74.248.131.153:3878] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "acugEJ8FASPd_uH8z7cWPQAAAAw"]
[Tue Mar 31 18:21:05.037196 2026] [:error] [pid 36982:tid 36992] [client 74.248.131.153:3931] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "acugEflMmeoQKN0r_GNmcAAAAMc"]
[Tue Mar 31 18:21:05.551334 2026] [:error] [pid 36982:tid 36988] [client 74.248.131.153:3712] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "acugEflMmeoQKN0r_GNmdgAAAMM"]
[Tue Mar 31 18:21:06.062618 2026] [:error] [pid 6548:tid 6561] [client 74.248.131.153:3937] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x.php"] [unique_id "acugErgIz9HgMl9YwE73JAAAAUs"]
[Tue Mar 31 18:21:06.574288 2026] [:error] [pid 36982:tid 37000] [client 74.248.131.153:3838] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x.php"] [unique_id "acugEvlMmeoQKN0r_GNmewAAAM8"]
[Tue Mar 31 18:21:07.084798 2026] [:error] [pid 36982:tid 36989] [client 74.248.131.153:3902] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x.php"] [unique_id "acugE_lMmeoQKN0r_GNmfQAAAMQ"]
[Tue Mar 31 18:21:07.594710 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3845] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x.php"] [unique_id "acugE7gIz9HgMl9YwE73KgAAAVA"]
[Tue Mar 31 18:21:08.119033 2026] [proxy_fcgi:error] [pid 36892:tid 36975] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:08.378322 2026] [proxy_fcgi:error] [pid 36892:tid 36974] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:08.636972 2026] [proxy_fcgi:error] [pid 36892:tid 36965] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:08.895347 2026] [proxy_fcgi:error] [pid 36892:tid 36952] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:09.155020 2026] [proxy_fcgi:error] [pid 36892:tid 36958] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:09.416137 2026] [proxy_fcgi:error] [pid 36892:tid 36959] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:09.674953 2026] [proxy_fcgi:error] [pid 36892:tid 36968] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:09.934739 2026] [proxy_fcgi:error] [pid 36892:tid 36973] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:10.193640 2026] [proxy_fcgi:error] [pid 36892:tid 36956] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:10.453727 2026] [proxy_fcgi:error] [pid 36892:tid 36953] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:10.714387 2026] [proxy_fcgi:error] [pid 36892:tid 36958] [client 74.248.131.153:3881] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:21:10.970759 2026] [:error] [pid 36892:tid 36959] [client 74.248.131.153:3881] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acugFkyj9S4G0ek3O4J0TQAAAIg"]
[Tue Mar 31 18:21:11.483397 2026] [:error] [pid 36891:tid 36931] [client 74.248.131.153:3991] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acugF5JhiMaJUqoqfl67eAAAAEc"]
[Tue Mar 31 18:21:11.997072 2026] [:error] [pid 36891:tid 36936] [client 74.248.131.153:3809] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acugF5JhiMaJUqoqfl67ewAAAEw"]
[Tue Mar 31 18:21:12.508552 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3800] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "acugGPlMmeoQKN0r_GNmhAAAANA"]
[Tue Mar 31 18:21:13.019352 2026] [:error] [pid 36891:tid 36947] [client 74.248.131.153:3784] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "acugGZJhiMaJUqoqfl67fQAAAFc"]
[Tue Mar 31 18:21:13.538984 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3805] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "acugGbgIz9HgMl9YwE73OgAAAVE"]
[Tue Mar 31 18:21:14.059279 2026] [:error] [pid 36982:tid 37003] [client 74.248.131.153:3873] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "acugGvlMmeoQKN0r_GNmiQAAANI"]
[Tue Mar 31 18:21:14.575635 2026] [:error] [pid 36982:tid 36993] [client 74.248.131.153:3900] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "acugGvlMmeoQKN0r_GNmjAAAAMg"]
[Tue Mar 31 18:21:15.085873 2026] [:error] [pid 36982:tid 36991] [client 74.248.131.153:3857] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "acugG_lMmeoQKN0r_GNmjQAAAMY"]
[Tue Mar 31 18:21:15.595405 2026] [:error] [pid 6548:tid 6560] [client 74.248.131.153:3877] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "acugG7gIz9HgMl9YwE73RQAAAUo"]
[Tue Mar 31 18:21:16.108271 2026] [:error] [pid 36890:tid 36903] [client 74.248.131.153:3791] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "acugHJ8FASPd_uH8z7cWWAAAAAg"]
[Tue Mar 31 18:21:16.618185 2026] [:error] [pid 36892:tid 36961] [client 74.248.131.153:3962] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "acugHEyj9S4G0ek3O4J0VAAAAIo"]
[Tue Mar 31 18:21:17.129490 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:3798] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zde.php"] [unique_id "acugHbgIz9HgMl9YwE73SAAAAUE"]
[Tue Mar 31 18:21:17.639563 2026] [:error] [pid 6548:tid 6554] [client 74.248.131.153:3855] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zde.php"] [unique_id "acugHbgIz9HgMl9YwE73SgAAAUQ"]
[Tue Mar 31 18:21:18.150889 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:3824] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zde.php"] [unique_id "acugHrgIz9HgMl9YwE73TgAAAUI"]
[Tue Mar 31 18:21:18.661170 2026] [:error] [pid 36891:tid 36942] [client 74.248.131.153:3776] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zde.php"] [unique_id "acugHpJhiMaJUqoqfl67hgAAAFI"]
[Tue Mar 31 18:21:19.180312 2026] [:error] [pid 36982:tid 36989] [client 74.248.131.153:3799] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpo.php"] [unique_id "acugH_lMmeoQKN0r_GNmkwAAAMQ"]
[Tue Mar 31 18:21:19.690860 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3885] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpo.php"] [unique_id "acugH7gIz9HgMl9YwE73VQAAAVM"]
[Tue Mar 31 18:21:20.202507 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3870] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpo.php"] [unique_id "acugILgIz9HgMl9YwE73VwAAAVA"]
[Tue Mar 31 18:21:20.712089 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:3879] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpo.php"] [unique_id "acugILgIz9HgMl9YwE73XAAAAUk"]
[Tue Mar 31 18:21:21.228400 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3903] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj.php"] [unique_id "acugIbgIz9HgMl9YwE73XwAAAVM"]
[Tue Mar 31 18:21:21.738183 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3889] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj.php"] [unique_id "acugIflMmeoQKN0r_GNmmgAAANE"]
[Tue Mar 31 18:21:22.248415 2026] [:error] [pid 36982:tid 37009] [client 74.248.131.153:3813] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj.php"] [unique_id "acugIvlMmeoQKN0r_GNmnQAAANg"]
[Tue Mar 31 18:21:22.758603 2026] [:error] [pid 36891:tid 36944] [client 74.248.131.153:3859] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj.php"] [unique_id "acugIpJhiMaJUqoqfl67iwAAAFQ"]
[Tue Mar 31 18:21:23.276198 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3717] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "acugI_lMmeoQKN0r_GNmoQAAANA"]
[Tue Mar 31 18:21:23.786057 2026] [:error] [pid 6548:tid 6556] [client 74.248.131.153:4062] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "acugI7gIz9HgMl9YwE73ZAAAAUY"]
[Tue Mar 31 18:21:24.299890 2026] [:error] [pid 36891:tid 36945] [client 74.248.131.153:3901] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "acugJJJhiMaJUqoqfl67kAAAAFU"]
[Tue Mar 31 18:21:24.811333 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:3823] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "acugJLgIz9HgMl9YwE73ZwAAAU4"]
[Tue Mar 31 18:21:25.323334 2026] [:error] [pid 36982:tid 36988] [client 74.248.131.153:3815] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filer.php"] [unique_id "acugJflMmeoQKN0r_GNmpwAAAMM"]
[Tue Mar 31 18:21:25.839574 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:3793] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filer.php"] [unique_id "acugJRSaDjY9kKFtUQBvcQAAARY"]
[Tue Mar 31 18:21:26.351061 2026] [:error] [pid 36890:tid 36897] [client 74.248.131.153:3835] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filer.php"] [unique_id "acugJp8FASPd_uH8z7cWYgAAAAI"]
[Tue Mar 31 18:21:26.861865 2026] [:error] [pid 36891:tid 36924] [client 74.248.131.153:3974] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filer.php"] [unique_id "acugJpJhiMaJUqoqfl67kwAAAEA"]
[Tue Mar 31 18:21:27.375208 2026] [:error] [pid 36892:tid 36973] [client 74.248.131.153:4080] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "acugJ0yj9S4G0ek3O4J0XwAAAJY"]
[Tue Mar 31 18:21:27.885737 2026] [:error] [pid 41421:tid 41434] [client 74.248.131.153:3797] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "acugJxSaDjY9kKFtUQBveAAAAQo"]
[Tue Mar 31 18:21:28.399425 2026] [:error] [pid 41421:tid 41431] [client 74.248.131.153:3906] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "acugKBSaDjY9kKFtUQBvegAAAQc"]
[Tue Mar 31 18:21:28.914867 2026] [:error] [pid 36891:tid 36946] [client 74.248.131.153:3716] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "acugKJJhiMaJUqoqfl67lgAAAFY"]
[Tue Mar 31 18:21:29.426294 2026] [:error] [pid 36891:tid 36941] [client 74.248.131.153:3954] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acugKZJhiMaJUqoqfl67mQAAAFE"]
[Tue Mar 31 18:21:29.935639 2026] [:error] [pid 36891:tid 36942] [client 74.248.131.153:3804] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acugKZJhiMaJUqoqfl67nQAAAFI"]
[Tue Mar 31 18:21:30.449937 2026] [:error] [pid 36891:tid 36936] [client 74.248.131.153:3886] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acugKpJhiMaJUqoqfl67nwAAAEw"]
[Tue Mar 31 18:21:30.962196 2026] [:error] [pid 36890:tid 36909] [client 74.248.131.153:3810] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acugKp8FASPd_uH8z7cWaQAAAA4"]
[Tue Mar 31 18:21:31.475411 2026] [:error] [pid 36891:tid 36931] [client 74.248.131.153:3745] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main.php"] [unique_id "acugK5JhiMaJUqoqfl67oQAAAEc"]
[Tue Mar 31 18:21:31.986750 2026] [:error] [pid 36891:tid 36940] [client 74.248.131.153:3725] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main.php"] [unique_id "acugK5JhiMaJUqoqfl67owAAAFA"]
[Tue Mar 31 18:21:32.496703 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3953] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main.php"] [unique_id "acugLLgIz9HgMl9YwE73fwAAAVE"]
[Tue Mar 31 18:21:33.008738 2026] [:error] [pid 6548:tid 6565] [client 74.248.131.153:3718] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/main.php"] [unique_id "acugLbgIz9HgMl9YwE73gwAAAU8"]
[Tue Mar 31 18:21:33.521139 2026] [:error] [pid 36890:tid 36897] [client 74.248.131.153:3963] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "acugLZ8FASPd_uH8z7cWbgAAAAI"]
[Tue Mar 31 18:21:34.032435 2026] [:error] [pid 36891:tid 36930] [client 74.248.131.153:3803] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "acugLpJhiMaJUqoqfl67pAAAAEY"]
[Tue Mar 31 18:21:34.542534 2026] [:error] [pid 41421:tid 41429] [client 74.248.131.153:3822] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "acugLhSaDjY9kKFtUQBvgQAAAQU"]
[Tue Mar 31 18:21:35.054289 2026] [:error] [pid 41421:tid 41447] [client 74.248.131.153:3840] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "acugLxSaDjY9kKFtUQBvggAAARc"]
[Tue Mar 31 18:21:35.564069 2026] [:error] [pid 36890:tid 36898] [client 74.248.131.153:3741] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f.php"] [unique_id "acugL58FASPd_uH8z7cWdAAAAAM"]
[Tue Mar 31 18:21:36.075132 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:3726] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f.php"] [unique_id "acugMLgIz9HgMl9YwE73jwAAAU0"]
[Tue Mar 31 18:21:36.585516 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3828] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f.php"] [unique_id "acugMPlMmeoQKN0r_GNmvAAAANA"]
[Tue Mar 31 18:21:37.100521 2026] [:error] [pid 36890:tid 36902] [client 74.248.131.153:3685] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f.php"] [unique_id "acugMZ8FASPd_uH8z7cWeAAAAAc"]
[Tue Mar 31 18:21:37.610027 2026] [:error] [pid 36890:tid 36904] [client 74.248.131.153:3767] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "acugMZ8FASPd_uH8z7cWegAAAAk"]
[Tue Mar 31 18:21:38.120951 2026] [:error] [pid 41421:tid 41426] [client 74.248.131.153:3728] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "acugMhSaDjY9kKFtUQBviQAAAQI"]
[Tue Mar 31 18:21:38.631556 2026] [:error] [pid 36892:tid 36962] [client 74.248.131.153:3839] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "acugMkyj9S4G0ek3O4J0aAAAAIs"]
[Tue Mar 31 18:21:39.142035 2026] [:error] [pid 36890:tid 36911] [client 74.248.131.153:3785] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "acugM58FASPd_uH8z7cWfwAAABA"]
[Tue Mar 31 18:21:39.651220 2026] [:error] [pid 36982:tid 37006] [client 74.248.131.153:3735] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acugM_lMmeoQKN0r_GNmxgAAANU"]
[Tue Mar 31 18:21:40.163768 2026] [:error] [pid 36892:tid 36953] [client 74.248.131.153:3807] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acugNEyj9S4G0ek3O4J0aQAAAII"]
[Tue Mar 31 18:21:40.673661 2026] [:error] [pid 36891:tid 36940] [client 74.248.131.153:3817] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acugNJJhiMaJUqoqfl67rAAAAFA"]
[Tue Mar 31 18:21:41.184002 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:3732] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acugNbgIz9HgMl9YwE73lAAAAU0"]
[Tue Mar 31 18:21:41.693220 2026] [:error] [pid 36982:tid 37005] [client 74.248.131.153:3827] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugNflMmeoQKN0r_GNmzwAAANQ"]
[Tue Mar 31 18:21:42.203989 2026] [:error] [pid 41421:tid 41425] [client 74.248.131.153:3794] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugNhSaDjY9kKFtUQBvjwAAAQE"]
[Tue Mar 31 18:21:42.712868 2026] [:error] [pid 36890:tid 36919] [client 74.248.131.153:4045] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugNp8FASPd_uH8z7cWhAAAABg"]
[Tue Mar 31 18:21:43.223589 2026] [:error] [pid 36890:tid 36906] [client 74.248.131.153:3883] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugN58FASPd_uH8z7cWiAAAAAs"]
[Tue Mar 31 18:21:43.734832 2026] [:error] [pid 6548:tid 6553] [client 74.248.131.153:3884] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugN7gIz9HgMl9YwE73mAAAAUM"]
[Tue Mar 31 18:21:44.252111 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:3862] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugOLgIz9HgMl9YwE73nAAAAUg"]
[Tue Mar 31 18:21:44.762138 2026] [:error] [pid 36982:tid 36989] [client 74.248.131.153:3821] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugOPlMmeoQKN0r_GNm2QAAAMQ"]
[Tue Mar 31 18:21:45.291117 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3774] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "acugOflMmeoQKN0r_GNm3AAAANE"]
[Tue Mar 31 18:21:45.799376 2026] [:error] [pid 36892:tid 36961] [client 74.248.131.153:3649] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "acugOUyj9S4G0ek3O4J0dwAAAIo"]
[Tue Mar 31 18:21:46.311751 2026] [:error] [pid 36982:tid 36998] [client 74.248.131.153:3806] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "acugOvlMmeoQKN0r_GNm4QAAAM0"]
[Tue Mar 31 18:21:46.821300 2026] [:error] [pid 41421:tid 41432] [client 74.248.131.153:3866] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "acugOhSaDjY9kKFtUQBvnQAAAQg"]
[Tue Mar 31 18:21:47.335401 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:3743] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "acugO_lMmeoQKN0r_GNm5QAAAMA"]
[Tue Mar 31 18:21:47.846274 2026] [:error] [pid 6548:tid 6557] [client 74.248.131.153:3811] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acugO7gIz9HgMl9YwE73owAAAUc"]
[Tue Mar 31 18:21:48.360755 2026] [:error] [pid 36982:tid 36992] [client 74.248.131.153:3746] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acugPPlMmeoQKN0r_GNm6gAAAMc"]
[Tue Mar 31 18:21:48.870568 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:3761] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acugPLgIz9HgMl9YwE73pgAAAUg"]
[Tue Mar 31 18:21:49.379410 2026] [:error] [pid 36982:tid 37009] [client 74.248.131.153:3739] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "acugPflMmeoQKN0r_GNm8AAAANg"]
[Tue Mar 31 18:21:49.892399 2026] [:error] [pid 36892:tid 36963] [client 74.248.131.153:3730] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mt.php"] [unique_id "acugPUyj9S4G0ek3O4J0ewAAAIw"]
[Tue Mar 31 18:21:50.403907 2026] [:error] [pid 36892:tid 36965] [client 74.248.131.153:3766] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mt.php"] [unique_id "acugPkyj9S4G0ek3O4J0fAAAAI4"]
[Tue Mar 31 18:21:50.911937 2026] [:error] [pid 36891:tid 36940] [client 74.248.131.153:3731] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mt.php"] [unique_id "acugPpJhiMaJUqoqfl67sgAAAFA"]
[Tue Mar 31 18:21:51.423656 2026] [:error] [pid 36890:tid 36895] [client 74.248.131.153:3825] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mt.php"] [unique_id "acugP58FASPd_uH8z7cWjQAAAAA"]
[Tue Mar 31 18:21:51.940673 2026] [:error] [pid 36890:tid 36896] [client 74.248.131.153:3942] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "acugP58FASPd_uH8z7cWjgAAAAE"]
[Tue Mar 31 18:21:52.450683 2026] [:error] [pid 36890:tid 36912] [client 74.248.131.153:3714] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "acugQJ8FASPd_uH8z7cWkwAAABE"]
[Tue Mar 31 18:21:52.968960 2026] [:error] [pid 36892:tid 36972] [client 74.248.131.153:3938] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "acugQEyj9S4G0ek3O4J0gAAAAJU"]
[Tue Mar 31 18:21:53.483957 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3720] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "acugQflMmeoQKN0r_GNnAAAAANE"]
[Tue Mar 31 18:21:54.000056 2026] [:error] [pid 36982:tid 36998] [client 74.248.131.153:3724] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zews.php"] [unique_id "acugQflMmeoQKN0r_GNnBAAAAM0"]
[Tue Mar 31 18:21:54.511099 2026] [:error] [pid 36982:tid 36993] [client 74.248.131.153:3754] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zews.php"] [unique_id "acugQvlMmeoQKN0r_GNnCQAAAMg"]
[Tue Mar 31 18:21:55.022617 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:3816] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zews.php"] [unique_id "acugQ7gIz9HgMl9YwE73twAAAUE"]
[Tue Mar 31 18:21:55.534326 2026] [:error] [pid 36891:tid 36938] [client 74.248.131.153:3939] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zews.php"] [unique_id "acugQ5JhiMaJUqoqfl67tQAAAE4"]
[Tue Mar 31 18:21:56.047689 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3782] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "acugRLgIz9HgMl9YwE73vAAAAVM"]
[Tue Mar 31 18:21:56.559921 2026] [:error] [pid 6548:tid 6568] [client 74.248.131.153:3715] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "acugRLgIz9HgMl9YwE73vwAAAVI"]
[Tue Mar 31 18:21:57.071679 2026] [:error] [pid 6548:tid 6561] [client 74.248.131.153:3738] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "acugRbgIz9HgMl9YwE73wgAAAUs"]
[Tue Mar 31 18:21:57.582575 2026] [:error] [pid 36890:tid 36904] [client 74.248.131.153:3867] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "acugRZ8FASPd_uH8z7cWmAAAAAk"]
[Tue Mar 31 18:21:58.093807 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:3801] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acugRrgIz9HgMl9YwE73yQAAAUI"]
[Tue Mar 31 18:21:58.605182 2026] [:error] [pid 36982:tid 36999] [client 74.248.131.153:3788] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acugRvlMmeoQKN0r_GNnHgAAAM4"]
[Tue Mar 31 18:21:59.121005 2026] [:error] [pid 36892:tid 36951] [client 74.248.131.153:3747] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acugR0yj9S4G0ek3O4J0hQAAAIA"]
[Tue Mar 31 18:21:59.630837 2026] [:error] [pid 41421:tid 41433] [client 74.248.131.153:3826] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "acugRxSaDjY9kKFtUQBvsQAAAQk"]
[Tue Mar 31 18:22:00.141351 2026] [:error] [pid 36890:tid 36899] [client 74.248.131.153:3830] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acugSJ8FASPd_uH8z7cWmQAAAAQ"]
[Tue Mar 31 18:22:00.651985 2026] [:error] [pid 41421:tid 41444] [client 74.248.131.153:3836] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acugSBSaDjY9kKFtUQBvtAAAARQ"]
[Tue Mar 31 18:22:01.163667 2026] [:error] [pid 41421:tid 41440] [client 74.248.131.153:3872] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acugSRSaDjY9kKFtUQBvtgAAARA"]
[Tue Mar 31 18:22:01.673611 2026] [:error] [pid 41421:tid 41436] [client 74.248.131.153:3829] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "acugSRSaDjY9kKFtUQBvuQAAAQw"]
[Tue Mar 31 18:22:02.185101 2026] [:error] [pid 36982:tid 37007] [client 74.248.131.153:3893] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "acugSvlMmeoQKN0r_GNnLwAAANY"]
[Tue Mar 31 18:22:02.695052 2026] [:error] [pid 36982:tid 37009] [client 74.248.131.153:4047] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "acugSvlMmeoQKN0r_GNnMwAAANg"]
[Tue Mar 31 18:22:03.203790 2026] [:error] [pid 36890:tid 36919] [client 74.248.131.153:3755] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "acugS58FASPd_uH8z7cWnQAAABg"]
[Tue Mar 31 18:22:03.717687 2026] [:error] [pid 41421:tid 41444] [client 74.248.131.153:3852] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "acugSxSaDjY9kKFtUQBvwQAAARQ"]
[Tue Mar 31 18:22:04.233672 2026] [:error] [pid 41421:tid 41436] [client 74.248.131.153:3721] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acugTBSaDjY9kKFtUQBvxQAAAQw"]
[Tue Mar 31 18:22:04.744670 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:3729] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acugTLgIz9HgMl9YwE731gAAAU4"]
[Tue Mar 31 18:22:05.260731 2026] [:error] [pid 36891:tid 36936] [client 74.248.131.153:3651] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acugTZJhiMaJUqoqfl67vgAAAEw"]
[Tue Mar 31 18:22:05.772188 2026] [:error] [pid 41421:tid 41448] [client 74.248.131.153:3723] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acugTRSaDjY9kKFtUQBvzAAAARg"]
[Tue Mar 31 18:22:06.284777 2026] [:error] [pid 36890:tid 36907] [client 74.248.131.153:3676] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "acugTp8FASPd_uH8z7cWoQAAAAw"]
[Tue Mar 31 18:22:06.798079 2026] [:error] [pid 36890:tid 36915] [client 74.248.131.153:3655] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "acugTp8FASPd_uH8z7cWogAAABQ"]
[Tue Mar 31 18:22:07.315065 2026] [:error] [pid 36890:tid 36917] [client 74.248.131.153:3713] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "acugT58FASPd_uH8z7cWowAAABY"]
[Tue Mar 31 18:22:07.830314 2026] [:error] [pid 36890:tid 36896] [client 74.248.131.153:3706] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "acugT58FASPd_uH8z7cWpQAAAAE"]
[Tue Mar 31 18:22:08.342932 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:3833] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "acugULgIz9HgMl9YwE733AAAAUE"]
[Tue Mar 31 18:22:08.853223 2026] [:error] [pid 36982:tid 36995] [client 74.248.131.153:3677] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "acugUPlMmeoQKN0r_GNnUAAAAMo"]
[Tue Mar 31 18:22:09.367147 2026] [:error] [pid 36890:tid 36907] [client 74.248.131.153:3680] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "acugUZ8FASPd_uH8z7cWqwAAAAw"]
[Tue Mar 31 18:22:09.877243 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3792] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "acugUflMmeoQKN0r_GNnVwAAANE"]
[Tue Mar 31 18:22:10.400742 2026] [proxy_fcgi:error] [pid 41421:tid 41436] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:10.659408 2026] [proxy_fcgi:error] [pid 41421:tid 41435] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:11.178935 2026] [proxy_fcgi:error] [pid 41421:tid 41438] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:11.439531 2026] [proxy_fcgi:error] [pid 41421:tid 41426] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:11.699453 2026] [proxy_fcgi:error] [pid 41421:tid 41431] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:11.954666 2026] [:error] [pid 41421:tid 41444] [client 74.248.131.153:3737] [client 74.248.131.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.248.131.153, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "acugUxSaDjY9kKFtUQBv5QAAARQ"]
[Tue Mar 31 18:22:11.958537 2026] [proxy_fcgi:error] [pid 41421:tid 41444] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:12.218732 2026] [proxy_fcgi:error] [pid 41421:tid 41439] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:12.478836 2026] [proxy_fcgi:error] [pid 41421:tid 41432] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:12.738011 2026] [proxy_fcgi:error] [pid 41421:tid 41440] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:12.996212 2026] [proxy_fcgi:error] [pid 41421:tid 41447] [client 74.248.131.153:3737] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:22:13.251764 2026] [:error] [pid 41421:tid 41433] [client 74.248.131.153:3737] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/waq.php"] [unique_id "acugVRSaDjY9kKFtUQBv7AAAAQk"]
[Tue Mar 31 18:22:13.768627 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:3847] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/waq.php"] [unique_id "acugVbgIz9HgMl9YwE735wAAAU4"]
[Tue Mar 31 18:22:14.287995 2026] [:error] [pid 6548:tid 6555] [client 74.248.131.153:3752] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/waq.php"] [unique_id "acugVrgIz9HgMl9YwE736QAAAUU"]
[Tue Mar 31 18:22:14.797610 2026] [:error] [pid 41421:tid 41444] [client 74.248.131.153:3832] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/waq.php"] [unique_id "acugVhSaDjY9kKFtUQBv8QAAARQ"]
[Tue Mar 31 18:22:15.308526 2026] [:error] [pid 36892:tid 36963] [client 74.248.131.153:3736] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wakak.php"] [unique_id "acugV0yj9S4G0ek3O4J0jwAAAIw"]
[Tue Mar 31 18:22:15.816991 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3756] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wakak.php"] [unique_id "acugV7gIz9HgMl9YwE738QAAAVM"]
[Tue Mar 31 18:22:16.328628 2026] [:error] [pid 36890:tid 36900] [client 74.248.131.153:3659] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wakak.php"] [unique_id "acugWJ8FASPd_uH8z7cWsgAAAAU"]
[Tue Mar 31 18:22:16.838698 2026] [:error] [pid 41421:tid 41442] [client 74.248.131.153:3751] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wakak.php"] [unique_id "acugWBSaDjY9kKFtUQBv8gAAARI"]
[Tue Mar 31 18:22:17.356072 2026] [:error] [pid 6548:tid 6561] [client 74.248.131.153:3672] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bipas.php"] [unique_id "acugWbgIz9HgMl9YwE739gAAAUs"]
[Tue Mar 31 18:22:17.864887 2026] [:error] [pid 41421:tid 41440] [client 74.248.131.153:3727] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bipas.php"] [unique_id "acugWRSaDjY9kKFtUQBv9AAAARA"]
[Tue Mar 31 18:22:18.378182 2026] [:error] [pid 36891:tid 36939] [client 74.248.131.153:3763] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bipas.php"] [unique_id "acugWpJhiMaJUqoqfl67xwAAAE8"]
[Tue Mar 31 18:22:18.890498 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:3775] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bipas.php"] [unique_id "acugWrgIz9HgMl9YwE73_AAAAUI"]
[Tue Mar 31 18:22:19.400587 2026] [:error] [pid 36892:tid 36972] [client 74.248.131.153:3772] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/conte.php"] [unique_id "acugW0yj9S4G0ek3O4J0kwAAAJU"]
[Tue Mar 31 18:22:19.911677 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:3748] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/conte.php"] [unique_id "acugW7gIz9HgMl9YwE74AQAAAU0"]
[Tue Mar 31 18:22:20.425818 2026] [:error] [pid 36890:tid 36918] [client 74.248.131.153:3698] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/conte.php"] [unique_id "acugXJ8FASPd_uH8z7cWvAAAABc"]
[Tue Mar 31 18:22:20.944524 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3898] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/conte.php"] [unique_id "acugXLgIz9HgMl9YwE74CAAAAVA"]
[Tue Mar 31 18:22:21.457882 2026] [:error] [pid 36982:tid 37007] [client 74.248.131.153:3678] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class3.php"] [unique_id "acugXflMmeoQKN0r_GNnigAAANY"]
[Tue Mar 31 18:22:21.975779 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:3895] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class3.php"] [unique_id "acugXbgIz9HgMl9YwE74EAAAAVQ"]
[Tue Mar 31 18:22:22.489421 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3961] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class3.php"] [unique_id "acugXrgIz9HgMl9YwE74FQAAAVE"]
[Tue Mar 31 18:22:23.006206 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:3654] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class3.php"] [unique_id "acugX7gIz9HgMl9YwE74HgAAAVQ"]
[Tue Mar 31 18:22:23.518687 2026] [:error] [pid 36892:tid 36960] [client 74.248.131.153:3786] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/claa.php"] [unique_id "acugX0yj9S4G0ek3O4J0lgAAAIk"]
[Tue Mar 31 18:22:24.032186 2026] [:error] [pid 36892:tid 36956] [client 74.248.131.153:3762] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/claa.php"] [unique_id "acugYEyj9S4G0ek3O4J0lwAAAIU"]
[Tue Mar 31 18:22:24.547010 2026] [:error] [pid 6548:tid 6553] [client 74.248.131.153:3757] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/claa.php"] [unique_id "acugYLgIz9HgMl9YwE74LwAAAUM"]
[Tue Mar 31 18:22:25.062283 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:3674] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/claa.php"] [unique_id "acugYflMmeoQKN0r_GNniwAAAMA"]
[Tue Mar 31 18:22:25.573632 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:3668] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xb.php"] [unique_id "acugYbgIz9HgMl9YwE74NwAAAVQ"]
[Tue Mar 31 18:22:26.086034 2026] [:error] [pid 41421:tid 41430] [client 74.248.131.153:3818] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xb.php"] [unique_id "acugYhSaDjY9kKFtUQBv_wAAAQY"]
[Tue Mar 31 18:22:26.597798 2026] [:error] [pid 6548:tid 6574] [client 74.248.131.153:3670] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xb.php"] [unique_id "acugYrgIz9HgMl9YwE74QAAAAVg"]
[Tue Mar 31 18:22:27.108680 2026] [:error] [pid 41421:tid 41429] [client 74.248.131.153:3605] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xb.php"] [unique_id "acugYxSaDjY9kKFtUQBwAQAAAQU"]
[Tue Mar 31 18:22:27.618905 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:3591] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "acugYxSaDjY9kKFtUQBwAwAAARY"]
[Tue Mar 31 18:22:28.131412 2026] [:error] [pid 36982:tid 36995] [client 74.248.131.153:3681] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "acugZPlMmeoQKN0r_GNnkQAAAMo"]
[Tue Mar 31 18:22:28.641067 2026] [:error] [pid 36890:tid 36896] [client 74.248.131.153:3700] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "acugZJ8FASPd_uH8z7cWwQAAAAE"]
[Tue Mar 31 18:22:29.155537 2026] [:error] [pid 36890:tid 36913] [client 74.248.131.153:3688] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "acugZZ8FASPd_uH8z7cWwgAAABI"]
[Tue Mar 31 18:22:29.671925 2026] [:error] [pid 36890:tid 36905] [client 74.248.131.153:3662] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wa.php"] [unique_id "acugZZ8FASPd_uH8z7cWxQAAAAo"]
[Tue Mar 31 18:22:30.190468 2026] [:error] [pid 41421:tid 41438] [client 74.248.131.153:3819] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wa.php"] [unique_id "acugZhSaDjY9kKFtUQBwBQAAAQ4"]
[Tue Mar 31 18:22:30.700977 2026] [:error] [pid 6548:tid 6550] [client 74.248.131.153:4030] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wa.php"] [unique_id "acugZrgIz9HgMl9YwE74WAAAAUA"]
[Tue Mar 31 18:22:31.211151 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:3802] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wa.php"] [unique_id "acugZ_lMmeoQKN0r_GNnlwAAAMA"]
[Tue Mar 31 18:22:31.723680 2026] [:error] [pid 36891:tid 36929] [client 74.248.131.153:3696] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ac.php"] [unique_id "acugZ5JhiMaJUqoqfl670QAAAEU"]
[Tue Mar 31 18:22:32.235591 2026] [:error] [pid 36982:tid 37005] [client 74.248.131.153:3749] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ac.php"] [unique_id "acugaPlMmeoQKN0r_GNnmgAAANQ"]
[Tue Mar 31 18:22:32.744881 2026] [:error] [pid 36891:tid 36934] [client 74.248.131.153:3682] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ac.php"] [unique_id "acugaJJhiMaJUqoqfl671AAAAEo"]
[Tue Mar 31 18:22:33.258601 2026] [:error] [pid 36982:tid 36990] [client 74.248.131.153:3771] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ac.php"] [unique_id "acugaflMmeoQKN0r_GNnnQAAAMU"]
[Tue Mar 31 18:22:33.770081 2026] [:error] [pid 36982:tid 37004] [client 74.248.131.153:3753] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "acugaflMmeoQKN0r_GNnngAAANM"]
[Tue Mar 31 18:22:34.279978 2026] [:error] [pid 36892:tid 36961] [client 74.248.131.153:3656] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "acugakyj9S4G0ek3O4J0ngAAAIo"]
[Tue Mar 31 18:22:34.790571 2026] [:error] [pid 36890:tid 36897] [client 74.248.131.153:3742] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "acugap8FASPd_uH8z7cWyAAAAAI"]
[Tue Mar 31 18:22:35.308810 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3597] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "acuga_lMmeoQKN0r_GNnpgAAANE"]
[Tue Mar 31 18:22:35.819711 2026] [:error] [pid 36892:tid 36971] [client 74.248.131.153:3667] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/la.php"] [unique_id "acuga0yj9S4G0ek3O4J0oAAAAJQ"]
[Tue Mar 31 18:22:36.330467 2026] [:error] [pid 36890:tid 36914] [client 74.248.131.153:3663] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/la.php"] [unique_id "acugbJ8FASPd_uH8z7cWzAAAABM"]
[Tue Mar 31 18:22:36.839152 2026] [:error] [pid 41421:tid 41435] [client 74.248.131.153:3527] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/la.php"] [unique_id "acugbBSaDjY9kKFtUQBwDAAAAQs"]
[Tue Mar 31 18:22:37.349949 2026] [:error] [pid 36890:tid 36905] [client 74.248.131.153:3768] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/la.php"] [unique_id "acugbZ8FASPd_uH8z7cW0AAAAAo"]
[Tue Mar 31 18:22:37.863943 2026] [:error] [pid 36890:tid 36908] [client 74.248.131.153:3780] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gg.php"] [unique_id "acugbZ8FASPd_uH8z7cW0QAAAA0"]
[Tue Mar 31 18:22:38.375740 2026] [:error] [pid 41421:tid 41426] [client 74.248.131.153:3666] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gg.php"] [unique_id "acugbhSaDjY9kKFtUQBwEQAAAQI"]
[Tue Mar 31 18:22:38.884775 2026] [:error] [pid 41421:tid 41448] [client 74.248.131.153:3607] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gg.php"] [unique_id "acugbhSaDjY9kKFtUQBwEwAAARg"]
[Tue Mar 31 18:22:39.395458 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3671] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gg.php"] [unique_id "acugb7gIz9HgMl9YwE74fQAAAVA"]
[Tue Mar 31 18:22:39.906037 2026] [:error] [pid 36982:tid 37002] [client 74.248.131.153:3702] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ha.php"] [unique_id "acugb_lMmeoQKN0r_GNnrwAAANE"]
[Tue Mar 31 18:22:40.417392 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:3686] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ha.php"] [unique_id "acugcBSaDjY9kKFtUQBwFQAAARY"]
[Tue Mar 31 18:22:40.929438 2026] [:error] [pid 36890:tid 36906] [client 74.248.131.153:3669] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ha.php"] [unique_id "acugcJ8FASPd_uH8z7cW1AAAAAs"]
[Tue Mar 31 18:22:41.447631 2026] [:error] [pid 36890:tid 36898] [client 74.248.131.153:3594] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ha.php"] [unique_id "acugcZ8FASPd_uH8z7cW1QAAAAM"]
[Tue Mar 31 18:22:41.960697 2026] [:error] [pid 36891:tid 36948] [client 74.248.131.153:3684] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o1.php"] [unique_id "acugcZJhiMaJUqoqfl674QAAAFg"]
[Tue Mar 31 18:22:42.476141 2026] [:error] [pid 36892:tid 36959] [client 74.248.131.153:3740] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o1.php"] [unique_id "acugckyj9S4G0ek3O4J0qwAAAIg"]
[Tue Mar 31 18:22:42.987574 2026] [:error] [pid 36982:tid 36991] [client 74.248.131.153:3708] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o1.php"] [unique_id "acugcvlMmeoQKN0r_GNnsgAAAMY"]
[Tue Mar 31 18:22:43.497268 2026] [:error] [pid 36982:tid 36993] [client 74.248.131.153:3598] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o1.php"] [unique_id "acugc_lMmeoQKN0r_GNntQAAAMg"]
[Tue Mar 31 18:22:44.007463 2026] [:error] [pid 36982:tid 37005] [client 74.248.131.153:3690] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acugdPlMmeoQKN0r_GNntwAAANQ"]
[Tue Mar 31 18:22:44.520527 2026] [:error] [pid 6548:tid 6552] [client 74.248.131.153:3711] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acugdLgIz9HgMl9YwE74mwAAAUI"]
[Tue Mar 31 18:22:45.030381 2026] [:error] [pid 36982:tid 37004] [client 74.248.131.153:3630] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acugdflMmeoQKN0r_GNnvAAAANM"]
[Tue Mar 31 18:22:45.543456 2026] [:error] [pid 6548:tid 6555] [client 74.248.131.153:3586] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acugdbgIz9HgMl9YwE74oQAAAUU"]
[Tue Mar 31 18:22:46.054101 2026] [:error] [pid 6548:tid 6562] [client 74.248.131.153:3722] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lopst.php"] [unique_id "acugdrgIz9HgMl9YwE74pwAAAUw"]
[Tue Mar 31 18:22:46.566438 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:3588] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lopst.php"] [unique_id "acugdrgIz9HgMl9YwE74rgAAAU4"]
[Tue Mar 31 18:22:47.076099 2026] [:error] [pid 36982:tid 36996] [client 74.248.131.153:3760] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lopst.php"] [unique_id "acugd_lMmeoQKN0r_GNnvwAAAMs"]
[Tue Mar 31 18:22:47.587179 2026] [:error] [pid 36892:tid 36965] [client 74.248.131.153:3652] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lopst.php"] [unique_id "acugd0yj9S4G0ek3O4J0vQAAAI4"]
[Tue Mar 31 18:22:48.097987 2026] [:error] [pid 36891:tid 36929] [client 74.248.131.153:3602] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wft.php"] [unique_id "acugeJJhiMaJUqoqfl677wAAAEU"]
[Tue Mar 31 18:22:48.607695 2026] [:error] [pid 36982:tid 37008] [client 74.248.131.153:3703] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wft.php"] [unique_id "acugePlMmeoQKN0r_GNnxAAAANc"]
[Tue Mar 31 18:22:49.118898 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:3709] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wft.php"] [unique_id "acugeRSaDjY9kKFtUQBwNgAAARY"]
[Tue Mar 31 18:22:49.628824 2026] [:error] [pid 36890:tid 36910] [client 74.248.131.153:3648] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wft.php"] [unique_id "acugeZ8FASPd_uH8z7cW8AAAAA8"]
[Tue Mar 31 18:22:50.142181 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3808] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acugergIz9HgMl9YwE74xQAAAVE"]
[Tue Mar 31 18:22:50.651017 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:3691] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acugergIz9HgMl9YwE74ygAAAUk"]
[Tue Mar 31 18:22:51.165351 2026] [:error] [pid 36982:tid 37000] [client 74.248.131.153:3705] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acuge_lMmeoQKN0r_GNnzwAAAM8"]
[Tue Mar 31 18:22:51.676699 2026] [:error] [pid 36982:tid 37008] [client 74.248.131.153:3758] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "acuge_lMmeoQKN0r_GNn0QAAANc"]
[Tue Mar 31 18:22:52.201115 2026] [:error] [pid 36890:tid 36905] [client 74.248.131.153:3612] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nox.php"] [unique_id "acugfJ8FASPd_uH8z7cW-AAAAAo"]
[Tue Mar 31 18:22:52.713150 2026] [:error] [pid 6548:tid 6571] [client 74.248.131.153:3831] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nox.php"] [unique_id "acugfLgIz9HgMl9YwE740gAAAVU"]
[Tue Mar 31 18:22:53.225935 2026] [:error] [pid 36892:tid 36960] [client 74.248.131.153:3707] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nox.php"] [unique_id "acugfUyj9S4G0ek3O4J03gAAAIk"]
[Tue Mar 31 18:22:53.738192 2026] [:error] [pid 6548:tid 6556] [client 74.248.131.153:3658] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nox.php"] [unique_id "acugfbgIz9HgMl9YwE742wAAAUY"]
[Tue Mar 31 18:22:54.251748 2026] [:error] [pid 6548:tid 6573] [client 74.248.131.153:3675] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shlo.php"] [unique_id "acugfrgIz9HgMl9YwE743gAAAVc"]
[Tue Mar 31 18:22:54.762351 2026] [:error] [pid 6548:tid 6561] [client 74.248.131.153:3631] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shlo.php"] [unique_id "acugfrgIz9HgMl9YwE745AAAAUs"]
[Tue Mar 31 18:22:55.277723 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:3679] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shlo.php"] [unique_id "acugf7gIz9HgMl9YwE746wAAAU4"]
[Tue Mar 31 18:22:55.790996 2026] [:error] [pid 36891:tid 36930] [client 74.248.131.153:3621] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shlo.php"] [unique_id "acugf5JhiMaJUqoqfl679AAAAEY"]
[Tue Mar 31 18:22:56.300464 2026] [:error] [pid 36891:tid 36929] [client 74.248.131.153:3734] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acuggJJhiMaJUqoqfl67-AAAAEU"]
[Tue Mar 31 18:22:56.816619 2026] [:error] [pid 36892:tid 36971] [client 74.248.131.153:3744] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acuggEyj9S4G0ek3O4J06QAAAJQ"]
[Tue Mar 31 18:22:57.327848 2026] [:error] [pid 41421:tid 41443] [client 74.248.131.153:3539] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acuggRSaDjY9kKFtUQBwPAAAARM"]
[Tue Mar 31 18:22:57.840751 2026] [:error] [pid 36891:tid 36934] [client 74.248.131.153:3626] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acuggZJhiMaJUqoqfl68AAAAAEo"]
[Tue Mar 31 18:22:58.351861 2026] [:error] [pid 36890:tid 36918] [client 74.248.131.153:3641] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acuggp8FASPd_uH8z7cXCQAAABc"]
[Tue Mar 31 18:22:58.864518 2026] [:error] [pid 36982:tid 36997] [client 74.248.131.153:3618] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acuggvlMmeoQKN0r_GNn6AAAAMw"]
[Tue Mar 31 18:22:59.377525 2026] [:error] [pid 36890:tid 36898] [client 74.248.131.153:3640] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acugg58FASPd_uH8z7cXDgAAAAM"]
[Tue Mar 31 18:22:59.889071 2026] [:error] [pid 36892:tid 36964] [client 74.248.131.153:3622] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acugg0yj9S4G0ek3O4J09gAAAI0"]
[Tue Mar 31 18:23:00.406247 2026] [:error] [pid 36982:tid 36987] [client 74.248.131.153:3697] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "acughPlMmeoQKN0r_GNn8QAAAMI"]
[Tue Mar 31 18:23:00.918534 2026] [:error] [pid 36982:tid 36995] [client 74.248.131.153:3619] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "acughPlMmeoQKN0r_GNn8gAAAMo"]
[Tue Mar 31 18:23:01.443418 2026] [:error] [pid 36892:tid 36973] [client 74.248.131.153:3628] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "acughUyj9S4G0ek3O4J0-QAAAJY"]
[Tue Mar 31 18:23:01.966520 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:3610] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "acughbgIz9HgMl9YwE75CQAAAU0"]
[Tue Mar 31 18:23:02.483133 2026] [:error] [pid 6548:tid 6573] [client 74.248.131.153:3661] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "acughrgIz9HgMl9YwE75CgAAAVc"]
[Tue Mar 31 18:23:02.996540 2026] [:error] [pid 41421:tid 41429] [client 74.248.131.153:3719] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "acughhSaDjY9kKFtUQBwUAAAAQU"]
[Tue Mar 31 18:23:03.519572 2026] [:error] [pid 36891:tid 36941] [client 74.248.131.153:3733] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "acugh5JhiMaJUqoqfl68FAAAAFE"]
[Tue Mar 31 18:23:04.032418 2026] [:error] [pid 36892:tid 36956] [client 74.248.131.153:3759] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "acugiEyj9S4G0ek3O4J0-gAAAIU"]
[Tue Mar 31 18:23:04.544336 2026] [:error] [pid 36892:tid 36974] [client 74.248.131.153:3653] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "acugiEyj9S4G0ek3O4J0_AAAAJc"]
[Tue Mar 31 18:23:05.055776 2026] [:error] [pid 41421:tid 41428] [client 74.248.131.153:3611] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "acugiRSaDjY9kKFtUQBwVgAAAQQ"]
[Tue Mar 31 18:23:05.566146 2026] [:error] [pid 41421:tid 41432] [client 74.248.131.153:3526] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "acugiRSaDjY9kKFtUQBwVwAAAQg"]
[Tue Mar 31 18:23:06.076827 2026] [:error] [pid 36891:tid 36933] [client 74.248.131.153:3604] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "acugipJhiMaJUqoqfl68FgAAAEk"]
[Tue Mar 31 18:23:06.592525 2026] [:error] [pid 36891:tid 36935] [client 74.248.131.153:3773] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/read.php"] [unique_id "acugipJhiMaJUqoqfl68FwAAAEs"]
[Tue Mar 31 18:23:07.105959 2026] [:error] [pid 41421:tid 41446] [client 74.248.131.153:3543] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/read.php"] [unique_id "acugixSaDjY9kKFtUQBwWgAAARY"]
[Tue Mar 31 18:23:07.615475 2026] [:error] [pid 36982:tid 36990] [client 74.248.131.153:3599] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/read.php"] [unique_id "acugi_lMmeoQKN0r_GNn_QAAAMU"]
[Tue Mar 31 18:23:08.128026 2026] [:error] [pid 41421:tid 41428] [client 74.248.131.153:3627] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/read.php"] [unique_id "acugjBSaDjY9kKFtUQBwXwAAAQQ"]
[Tue Mar 31 18:23:08.637984 2026] [:error] [pid 41421:tid 41440] [client 74.248.131.153:3553] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acugjBSaDjY9kKFtUQBwYAAAARA"]
[Tue Mar 31 18:23:09.147887 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:3710] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acugjbgIz9HgMl9YwE75EQAAAUg"]
[Tue Mar 31 18:23:09.660731 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:3664] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acugjbgIz9HgMl9YwE75FgAAAVQ"]
[Tue Mar 31 18:23:10.180341 2026] [:error] [pid 6548:tid 6565] [client 74.248.131.153:3613] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acugjrgIz9HgMl9YwE75GQAAAU8"]
[Tue Mar 31 18:23:10.694278 2026] [:error] [pid 36892:tid 36973] [client 74.248.131.153:3563] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "acugjkyj9S4G0ek3O4J1BAAAAJY"]
[Tue Mar 31 18:23:11.207625 2026] [:error] [pid 36892:tid 36966] [client 74.248.131.153:3646] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "acugj0yj9S4G0ek3O4J1BQAAAI8"]
[Tue Mar 31 18:23:11.721557 2026] [:error] [pid 36982:tid 36987] [client 74.248.131.153:3534] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "acugj_lMmeoQKN0r_GNoAgAAAMI"]
[Tue Mar 31 18:23:12.241373 2026] [proxy_fcgi:error] [pid 36892:tid 36956] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:12.500287 2026] [proxy_fcgi:error] [pid 36892:tid 36975] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:12.758695 2026] [proxy_fcgi:error] [pid 36892:tid 36974] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:13.019511 2026] [proxy_fcgi:error] [pid 36892:tid 36959] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:13.278358 2026] [proxy_fcgi:error] [pid 36892:tid 36969] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:13.536994 2026] [proxy_fcgi:error] [pid 36892:tid 36972] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:13.795379 2026] [proxy_fcgi:error] [pid 36892:tid 36958] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:14.055503 2026] [proxy_fcgi:error] [pid 36892:tid 36951] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:14.314260 2026] [proxy_fcgi:error] [pid 36892:tid 36970] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:14.832527 2026] [proxy_fcgi:error] [pid 36892:tid 36953] [client 74.248.131.153:3590] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:23:15.087896 2026] [:error] [pid 36892:tid 36957] [client 74.248.131.153:3590] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acugk0yj9S4G0ek3O4J1EwAAAIY"]
[Tue Mar 31 18:23:15.604633 2026] [:error] [pid 36982:tid 37005] [client 74.248.131.153:3660] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acugk_lMmeoQKN0r_GNoCgAAANQ"]
[Tue Mar 31 18:23:16.117081 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:4061] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acuglLgIz9HgMl9YwE75KgAAAU4"]
[Tue Mar 31 18:23:16.626115 2026] [:error] [pid 36890:tid 36908] [client 74.248.131.153:3704] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "acuglJ8FASPd_uH8z7cXKAAAAA0"]
[Tue Mar 31 18:23:17.135876 2026] [:error] [pid 36890:tid 36917] [client 74.248.131.153:4078] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "acuglZ8FASPd_uH8z7cXKgAAABY"]
[Tue Mar 31 18:23:17.646892 2026] [:error] [pid 6548:tid 6572] [client 74.248.131.153:3673] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "acuglbgIz9HgMl9YwE75MgAAAVY"]
[Tue Mar 31 18:23:18.161989 2026] [:error] [pid 41421:tid 41432] [client 74.248.131.153:3584] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "acuglhSaDjY9kKFtUQBwZgAAAQg"]
[Tue Mar 31 18:23:18.674355 2026] [:error] [pid 41421:tid 41435] [client 74.248.131.153:3565] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "acuglhSaDjY9kKFtUQBwaQAAAQs"]
[Tue Mar 31 18:23:19.184375 2026] [:error] [pid 36890:tid 36902] [client 74.248.131.153:3521] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acugl58FASPd_uH8z7cXKwAAAAc"]
[Tue Mar 31 18:23:19.696099 2026] [:error] [pid 36891:tid 36946] [client 74.248.131.153:3587] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acugl5JhiMaJUqoqfl68GgAAAFY"]
[Tue Mar 31 18:23:20.214196 2026] [:error] [pid 36982:tid 36991] [client 74.248.131.153:3620] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acugmPlMmeoQKN0r_GNoDwAAAMY"]
[Tue Mar 31 18:23:20.725675 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3918] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acugmLgIz9HgMl9YwE75OwAAAVA"]
[Tue Mar 31 18:23:21.234574 2026] [:error] [pid 6548:tid 6574] [client 74.248.131.153:3645] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acugmbgIz9HgMl9YwE75QAAAAVg"]
[Tue Mar 31 18:23:21.745783 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3524] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acugmbgIz9HgMl9YwE75RgAAAVE"]
[Tue Mar 31 18:23:22.260530 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3637] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acugmrgIz9HgMl9YwE75SQAAAVM"]
[Tue Mar 31 18:23:22.781224 2026] [:error] [pid 36892:tid 36965] [client 74.248.131.153:4058] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "acugmkyj9S4G0ek3O4J1HAAAAI4"]
[Tue Mar 31 18:23:23.292378 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:4079] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acugm7gIz9HgMl9YwE75UgAAAVE"]
[Tue Mar 31 18:23:23.804568 2026] [:error] [pid 36982:tid 37007] [client 74.248.131.153:3796] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acugm_lMmeoQKN0r_GNoEwAAANY"]
[Tue Mar 31 18:23:24.319367 2026] [:error] [pid 36982:tid 36998] [client 74.248.131.153:4069] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acugnPlMmeoQKN0r_GNoFgAAAM0"]
[Tue Mar 31 18:23:24.831403 2026] [:error] [pid 36982:tid 36985] [client 74.248.131.153:4012] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acugnPlMmeoQKN0r_GNoGgAAAMA"]
[Tue Mar 31 18:23:25.344322 2026] [:error] [pid 6548:tid 6563] [client 74.248.131.153:3917] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acugnbgIz9HgMl9YwE75VwAAAU0"]
[Tue Mar 31 18:23:25.886151 2026] [:error] [pid 36892:tid 36955] [client 74.248.131.153:4087] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acugnUyj9S4G0ek3O4J1HQAAAIQ"]
[Tue Mar 31 18:23:26.398055 2026] [:error] [pid 6548:tid 6557] [client 74.248.131.153:3683] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acugnrgIz9HgMl9YwE75WwAAAUc"]
[Tue Mar 31 18:23:26.914308 2026] [:error] [pid 41421:tid 41441] [client 74.248.131.153:3548] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "acugnhSaDjY9kKFtUQBwbwAAARE"]
[Tue Mar 31 18:23:27.427090 2026] [:error] [pid 41421:tid 41431] [client 74.248.131.153:4064] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acugnxSaDjY9kKFtUQBwdAAAAQc"]
[Tue Mar 31 18:23:27.944509 2026] [:error] [pid 36890:tid 36913] [client 74.248.131.153:3969] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acugn58FASPd_uH8z7cXMAAAABI"]
[Tue Mar 31 18:23:28.466125 2026] [:error] [pid 36982:tid 36989] [client 74.248.131.153:3971] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acugoPlMmeoQKN0r_GNoIwAAAMQ"]
[Tue Mar 31 18:23:28.984941 2026] [:error] [pid 36890:tid 36908] [client 74.248.131.153:3694] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "acugoJ8FASPd_uH8z7cXMwAAAA0"]
[Tue Mar 31 18:23:29.497453 2026] [:error] [pid 41421:tid 41431] [client 74.248.131.153:4032] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acugoRSaDjY9kKFtUQBwewAAAQc"]
[Tue Mar 31 18:23:30.034819 2026] [:error] [pid 6548:tid 6565] [client 74.248.131.153:3987] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acugorgIz9HgMl9YwE75YQAAAU8"]
[Tue Mar 31 18:23:30.544806 2026] [:error] [pid 36891:tid 36940] [client 74.248.131.153:3535] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acugopJhiMaJUqoqfl68JQAAAFA"]
[Tue Mar 31 18:23:31.058037 2026] [:error] [pid 36892:tid 36968] [client 74.248.131.153:4084] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acugo0yj9S4G0ek3O4J1HwAAAJE"]
[Tue Mar 31 18:23:31.569478 2026] [:error] [pid 6548:tid 6565] [client 74.248.131.153:3983] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "acugo7gIz9HgMl9YwE75cwAAAU8"]
[Tue Mar 31 18:23:32.081519 2026] [:error] [pid 6548:tid 6551] [client 74.248.131.153:3623] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "acugpLgIz9HgMl9YwE75dwAAAUE"]
[Tue Mar 31 18:23:32.594158 2026] [:error] [pid 6548:tid 6565] [client 74.248.131.153:3770] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "acugpLgIz9HgMl9YwE75eQAAAU8"]
[Tue Mar 31 18:23:33.113002 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:3701] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "acugpbgIz9HgMl9YwE75gQAAAUg"]
[Tue Mar 31 18:23:33.621326 2026] [:error] [pid 36982:tid 37000] [client 74.248.131.153:3556] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acugpflMmeoQKN0r_GNoKQAAAM8"]
[Tue Mar 31 18:23:34.135529 2026] [:error] [pid 6548:tid 6557] [client 74.248.131.153:3972] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acugprgIz9HgMl9YwE75hgAAAUc"]
[Tue Mar 31 18:23:34.649242 2026] [:error] [pid 6548:tid 6566] [client 74.248.131.153:3523] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acugprgIz9HgMl9YwE75iAAAAVA"]
[Tue Mar 31 18:23:35.158967 2026] [:error] [pid 6548:tid 6570] [client 74.248.131.153:3980] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acugp7gIz9HgMl9YwE75jAAAAVQ"]
[Tue Mar 31 18:23:35.675005 2026] [:error] [pid 36891:tid 36933] [client 74.248.131.153:4034] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acugp5JhiMaJUqoqfl68NAAAAEk"]
[Tue Mar 31 18:23:36.190203 2026] [:error] [pid 6548:tid 6560] [client 74.248.131.153:3629] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acugqLgIz9HgMl9YwE75kQAAAUo"]
[Tue Mar 31 18:23:36.699318 2026] [:error] [pid 6548:tid 6571] [client 74.248.131.153:3634] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acugqLgIz9HgMl9YwE75lQAAAVU"]
[Tue Mar 31 18:23:37.209717 2026] [:error] [pid 41421:tid 41443] [client 74.248.131.153:4036] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "acugqRSaDjY9kKFtUQBwlQAAARM"]
[Tue Mar 31 18:23:37.727146 2026] [:error] [pid 36982:tid 37000] [client 74.248.131.153:3566] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "acugqflMmeoQKN0r_GNoMwAAAM8"]
[Tue Mar 31 18:23:38.239543 2026] [:error] [pid 41421:tid 41428] [client 74.248.131.153:4048] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "acugqhSaDjY9kKFtUQBwmgAAAQQ"]
[Tue Mar 31 18:23:38.753591 2026] [:error] [pid 36892:tid 36951] [client 74.248.131.153:3488] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "acugqkyj9S4G0ek3O4J1JwAAAIA"]
[Tue Mar 31 18:23:39.264381 2026] [:error] [pid 41421:tid 41427] [client 74.248.131.153:4086] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "acugqxSaDjY9kKFtUQBwnQAAAQM"]
[Tue Mar 31 18:23:39.773790 2026] [:error] [pid 36890:tid 36912] [client 74.248.131.153:3638] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acugq58FASPd_uH8z7cXPQAAABE"]
[Tue Mar 31 18:23:40.289208 2026] [:error] [pid 6548:tid 6560] [client 74.248.131.153:3546] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acugrLgIz9HgMl9YwE75pgAAAUo"]
[Tue Mar 31 18:23:40.798688 2026] [:error] [pid 36982:tid 36998] [client 74.248.131.153:4091] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acugrPlMmeoQKN0r_GNoNwAAAM0"]
[Tue Mar 31 18:23:41.311000 2026] [:error] [pid 36891:tid 36938] [client 74.248.131.153:3985] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "acugrZJhiMaJUqoqfl68NgAAAE4"]
[Tue Mar 31 18:23:41.828062 2026] [:error] [pid 36890:tid 36917] [client 74.248.131.153:3642] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "acugrZ8FASPd_uH8z7cXPgAAABY"]
[Tue Mar 31 18:23:42.338270 2026] [:error] [pid 6548:tid 6565] [client 74.248.131.153:3615] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "acugrrgIz9HgMl9YwE75qgAAAU8"]
[Tue Mar 31 18:23:42.849707 2026] [:error] [pid 36890:tid 36918] [client 74.248.131.153:3578] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "acugrp8FASPd_uH8z7cXQAAAABc"]
[Tue Mar 31 18:23:43.361720 2026] [:error] [pid 6548:tid 6568] [client 74.248.131.153:3624] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "acugr7gIz9HgMl9YwE75sQAAAVI"]
[Tue Mar 31 18:23:43.874329 2026] [:error] [pid 36890:tid 36898] [client 74.248.131.153:3915] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "acugr58FASPd_uH8z7cXQQAAAAM"]
[Tue Mar 31 18:23:44.384977 2026] [:error] [pid 36891:tid 36929] [client 74.248.131.153:3976] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "acugsJJhiMaJUqoqfl68OQAAAEU"]
[Tue Mar 31 18:23:44.896289 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3528] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "acugsLgIz9HgMl9YwE75tQAAAVM"]
[Tue Mar 31 18:23:45.410110 2026] [:error] [pid 36891:tid 36937] [client 74.248.131.153:3644] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "acugsZJhiMaJUqoqfl68PAAAAE0"]
[Tue Mar 31 18:23:45.920872 2026] [:error] [pid 36891:tid 36935] [client 74.248.131.153:4033] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acugsZJhiMaJUqoqfl68PgAAAEs"]
[Tue Mar 31 18:23:46.431686 2026] [:error] [pid 41421:tid 41433] [client 74.248.131.153:4059] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acugshSaDjY9kKFtUQBwoAAAAQk"]
[Tue Mar 31 18:23:46.942514 2026] [:error] [pid 6548:tid 6559] [client 74.248.131.153:4073] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acugsrgIz9HgMl9YwE75vgAAAUk"]
[Tue Mar 31 18:23:47.457086 2026] [:error] [pid 41421:tid 41443] [client 74.248.131.153:3598] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fffff.php"] [unique_id "acugsxSaDjY9kKFtUQBwpQAAARM"]
[Tue Mar 31 18:23:47.969122 2026] [:error] [pid 36982:tid 36999] [client 74.248.131.153:4057] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acugs_lMmeoQKN0r_GNoPgAAAM4"]
[Tue Mar 31 18:23:48.484945 2026] [:error] [pid 41421:tid 41436] [client 74.248.131.153:3541] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acugtBSaDjY9kKFtUQBwsAAAAQw"]
[Tue Mar 31 18:23:48.998339 2026] [:error] [pid 36982:tid 36997] [client 74.248.131.153:4092] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acugtPlMmeoQKN0r_GNoQgAAAMw"]
[Tue Mar 31 18:23:49.510819 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3989] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "acugtflMmeoQKN0r_GNoQwAAANA"]
[Tue Mar 31 18:23:50.022709 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:3977] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acugtrgIz9HgMl9YwE75ywAAAVM"]
[Tue Mar 31 18:23:50.534086 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:4037] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acugtrgIz9HgMl9YwE75zgAAAUg"]
[Tue Mar 31 18:23:51.048114 2026] [:error] [pid 41421:tid 41443] [client 74.248.131.153:3769] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acugtxSaDjY9kKFtUQBwuwAAARM"]
[Tue Mar 31 18:23:51.560138 2026] [:error] [pid 6548:tid 6560] [client 74.248.131.153:4046] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "acugt7gIz9HgMl9YwE751gAAAUo"]
[Tue Mar 31 18:23:52.069963 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:3657] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acuguLgIz9HgMl9YwE752QAAAU4"]
[Tue Mar 31 18:23:52.581862 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3530] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acuguLgIz9HgMl9YwE753QAAAVE"]
[Tue Mar 31 18:23:53.091648 2026] [:error] [pid 6548:tid 6569] [client 74.248.131.153:4049] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acugubgIz9HgMl9YwE754wAAAVM"]
[Tue Mar 31 18:23:53.605776 2026] [:error] [pid 6548:tid 6568] [client 74.248.131.153:3609] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acugubgIz9HgMl9YwE756wAAAVI"]
[Tue Mar 31 18:23:54.116976 2026] [:error] [pid 6548:tid 6572] [client 74.248.131.153:3479] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acugurgIz9HgMl9YwE757QAAAVY"]
[Tue Mar 31 18:23:54.626815 2026] [:error] [pid 6548:tid 6553] [client 74.248.131.153:3978] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acugurgIz9HgMl9YwE758gAAAUM"]
[Tue Mar 31 18:23:55.136781 2026] [:error] [pid 6548:tid 6567] [client 74.248.131.153:3606] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acugu7gIz9HgMl9YwE75-AAAAVE"]
[Tue Mar 31 18:23:55.646959 2026] [:error] [pid 36982:tid 36999] [client 74.248.131.153:3923] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "acugu_lMmeoQKN0r_GNoSgAAAM4"]
[Tue Mar 31 18:23:56.157145 2026] [:error] [pid 6548:tid 6564] [client 74.248.131.153:4040] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acugvLgIz9HgMl9YwE76BwAAAU4"]
[Tue Mar 31 18:23:56.668538 2026] [:error] [pid 41421:tid 41430] [client 74.248.131.153:3552] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acugvBSaDjY9kKFtUQBwvgAAAQY"]
[Tue Mar 31 18:23:57.183007 2026] [:error] [pid 36982:tid 36998] [client 74.248.131.153:3993] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acugvflMmeoQKN0r_GNoTQAAAM0"]
[Tue Mar 31 18:23:57.693808 2026] [:error] [pid 36982:tid 37001] [client 74.248.131.153:3471] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "acugvflMmeoQKN0r_GNoTwAAANA"]
[Tue Mar 31 18:23:58.204301 2026] [:error] [pid 36982:tid 36987] [client 74.248.131.153:3975] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php/admin.php"] [unique_id "acugvvlMmeoQKN0r_GNoUQAAAMI"]
[Tue Mar 31 18:23:58.716758 2026] [:error] [pid 36890:tid 36897] [client 74.248.131.153:4088] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php/admin.php"] [unique_id "acugvp8FASPd_uH8z7cXSQAAAAI"]
[Tue Mar 31 18:23:59.225969 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:3616] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php/admin.php"] [unique_id "acugv7gIz9HgMl9YwE76HAAAAUg"]
[Tue Mar 31 18:23:59.738089 2026] [:error] [pid 36892:tid 36965] [client 74.248.131.153:4000] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php/admin.php"] [unique_id "acugv0yj9S4G0ek3O4J1SwAAAI4"]
[Tue Mar 31 18:24:00.249606 2026] [:error] [pid 36982:tid 36996] [client 74.248.131.153:3589] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acugwPlMmeoQKN0r_GNoVAAAAMs"]
[Tue Mar 31 18:24:00.758637 2026] [:error] [pid 41421:tid 41438] [client 74.248.131.153:3636] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acugwBSaDjY9kKFtUQBwwwAAAQ4"]
[Tue Mar 31 18:24:01.269956 2026] [:error] [pid 41421:tid 41437] [client 74.248.131.153:3914] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acugwRSaDjY9kKFtUQBwxQAAAQ0"]
[Tue Mar 31 18:24:01.781116 2026] [:error] [pid 41421:tid 41424] [client 74.248.131.153:3458] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "acugwRSaDjY9kKFtUQBwxgAAAQA"]
[Tue Mar 31 18:24:02.290995 2026] [:error] [pid 36890:tid 36916] [client 74.248.131.153:3982] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "acugwp8FASPd_uH8z7cXTQAAABU"]
[Tue Mar 31 18:24:02.806474 2026] [:error] [pid 36982:tid 36999] [client 74.248.131.153:3580] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "acugwvlMmeoQKN0r_GNoVgAAAM4"]
[Tue Mar 31 18:24:03.319860 2026] [:error] [pid 36982:tid 36988] [client 74.248.131.153:3692] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "acugw_lMmeoQKN0r_GNoVwAAAMM"]
[Tue Mar 31 18:24:03.837119 2026] [:error] [pid 36890:tid 36911] [client 74.248.131.153:3560] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "acugw58FASPd_uH8z7cXUAAAABA"]
[Tue Mar 31 18:24:04.348694 2026] [:error] [pid 36890:tid 36905] [client 74.248.131.153:3602] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa2.php"] [unique_id "acugxJ8FASPd_uH8z7cXUQAAAAo"]
[Tue Mar 31 18:24:04.859591 2026] [:error] [pid 36892:tid 36959] [client 74.248.131.153:4054] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa2.php"] [unique_id "acugxEyj9S4G0ek3O4J1VQAAAIg"]
[Tue Mar 31 18:24:05.369680 2026] [:error] [pid 6548:tid 6553] [client 74.248.131.153:3910] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa2.php"] [unique_id "acugxbgIz9HgMl9YwE76OgAAAUM"]
[Tue Mar 31 18:24:05.884286 2026] [:error] [pid 6548:tid 6558] [client 74.248.131.153:3473] [client 74.248.131.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa2.php"] [unique_id "acugxbgIz9HgMl9YwE76PQAAAUg"]
[Tue Mar 31 19:56:41.210994 2026] [proxy_fcgi:error] [pid 6548:tid 6559] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:41.456712 2026] [proxy_fcgi:error] [pid 6548:tid 6554] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:41.752519 2026] [proxy_fcgi:error] [pid 6548:tid 6561] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:41.995903 2026] [proxy_fcgi:error] [pid 6548:tid 6567] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:42.261827 2026] [proxy_fcgi:error] [pid 6548:tid 6573] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:42.517668 2026] [proxy_fcgi:error] [pid 6548:tid 6556] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:42.762370 2026] [proxy_fcgi:error] [pid 6548:tid 6562] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:43.005984 2026] [proxy_fcgi:error] [pid 6548:tid 6554] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:43.249859 2026] [proxy_fcgi:error] [pid 6548:tid 6569] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:43.494971 2026] [proxy_fcgi:error] [pid 6548:tid 6570] [client 158.158.107.18:52743] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:56:43.735795 2026] [:error] [pid 6548:tid 6566] [client 158.158.107.18:52743] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acu2e7gIz9HgMl9YwE4w5AAAAVA"]
[Tue Mar 31 19:56:44.225590 2026] [:error] [pid 6548:tid 6558] [client 158.158.107.18:33638] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acu2fLgIz9HgMl9YwE4w6gAAAUg"]
[Tue Mar 31 19:56:44.729629 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:52791] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acu2fPlMmeoQKN0r_GOmhwAAAMY"]
[Tue Mar 31 19:56:45.273728 2026] [:error] [pid 36891:tid 36943] [client 158.158.107.18:53477] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "acu2fZJhiMaJUqoqfl7PjwAAAFM"]
[Tue Mar 31 19:56:45.828732 2026] [:error] [pid 36890:tid 36896] [client 158.158.107.18:34633] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "acu2fZ8FASPd_uH8z7c0nwAAAAE"]
[Tue Mar 31 19:56:46.344140 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:37711] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "acu2frgIz9HgMl9YwE4w8wAAAUA"]
[Tue Mar 31 19:56:46.831706 2026] [:error] [pid 6548:tid 6555] [client 158.158.107.18:65019] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "acu2frgIz9HgMl9YwE4w-AAAAUU"]
[Tue Mar 31 19:56:47.368865 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:33636] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "acu2f7gIz9HgMl9YwE4w-wAAAU4"]
[Tue Mar 31 19:56:47.937777 2026] [:error] [pid 6548:tid 6557] [client 158.158.107.18:18573] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "acu2f7gIz9HgMl9YwE4w_QAAAUc"]
[Tue Mar 31 19:56:48.470343 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:33614] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "acu2gLgIz9HgMl9YwE4xAAAAAVU"]
[Tue Mar 31 19:56:49.035149 2026] [:error] [pid 36890:tid 36907] [client 158.158.107.18:33660] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "acu2gZ8FASPd_uH8z7c0ogAAAAw"]
[Tue Mar 31 19:56:49.558987 2026] [:error] [pid 41421:tid 41448] [client 158.158.107.18:17846] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "acu2gRSaDjY9kKFtUQCTvQAAARg"]
[Tue Mar 31 19:56:50.109866 2026] [:error] [pid 6548:tid 6563] [client 158.158.107.18:37750] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acu2grgIz9HgMl9YwE4xCQAAAU0"]
[Tue Mar 31 19:56:50.592832 2026] [:error] [pid 41421:tid 41427] [client 158.158.107.18:35192] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acu2ghSaDjY9kKFtUQCTvwAAAQM"]
[Tue Mar 31 19:56:51.126758 2026] [:error] [pid 36890:tid 36900] [client 158.158.107.18:18570] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acu2g58FASPd_uH8z7c0pAAAAAU"]
[Tue Mar 31 19:56:51.688183 2026] [:error] [pid 41421:tid 41434] [client 158.158.107.18:33604] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acu2gxSaDjY9kKFtUQCTwwAAAQo"]
[Tue Mar 31 19:56:52.317025 2026] [:error] [pid 41421:tid 41447] [client 158.158.107.18:17793] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "acu2hBSaDjY9kKFtUQCTxQAAARc"]
[Tue Mar 31 19:56:52.824945 2026] [:error] [pid 36890:tid 36919] [client 158.158.107.18:53499] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "acu2hJ8FASPd_uH8z7c0pQAAABg"]
[Tue Mar 31 19:56:53.391799 2026] [:error] [pid 36982:tid 37005] [client 158.158.107.18:34663] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "acu2hflMmeoQKN0r_GOmkAAAANQ"]
[Tue Mar 31 19:56:53.882943 2026] [:error] [pid 41421:tid 41446] [client 158.158.107.18:18574] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "acu2hRSaDjY9kKFtUQCTyQAAARY"]
[Tue Mar 31 19:56:54.383865 2026] [:error] [pid 41421:tid 41426] [client 158.158.107.18:62954] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acu2hhSaDjY9kKFtUQCTzAAAAQI"]
[Tue Mar 31 19:56:54.899061 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:33623] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acu2hvlMmeoQKN0r_GOmmQAAAMk"]
[Tue Mar 31 19:56:55.409997 2026] [:error] [pid 41421:tid 41429] [client 158.158.107.18:57274] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acu2hxSaDjY9kKFtUQCTzwAAAQU"]
[Tue Mar 31 19:56:55.974375 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:37229] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "acu2h_lMmeoQKN0r_GOmmwAAANM"]
[Tue Mar 31 19:56:56.524545 2026] [:error] [pid 41421:tid 41430] [client 158.158.107.18:62972] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "acu2iBSaDjY9kKFtUQCT0wAAAQY"]
[Tue Mar 31 19:56:57.072051 2026] [:error] [pid 36891:tid 36927] [client 158.158.107.18:34649] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "acu2iZJhiMaJUqoqfl7PlgAAAEM"]
[Tue Mar 31 19:56:57.620540 2026] [:error] [pid 6548:tid 6566] [client 158.158.107.18:57246] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "acu2ibgIz9HgMl9YwE4xEAAAAVA"]
[Tue Mar 31 19:56:58.139368 2026] [:error] [pid 36891:tid 36947] [client 158.158.107.18:35125] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "acu2ipJhiMaJUqoqfl7PmAAAAFc"]
[Tue Mar 31 19:56:58.657858 2026] [:error] [pid 41421:tid 41436] [client 158.158.107.18:35075] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acu2ihSaDjY9kKFtUQCT1gAAAQw"]
[Tue Mar 31 19:56:59.358127 2026] [:error] [pid 36982:tid 36992] [client 158.158.107.18:51456] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acu2i_lMmeoQKN0r_GOmnQAAAMc"]
[Tue Mar 31 19:56:59.836270 2026] [:error] [pid 36891:tid 36924] [client 158.158.107.18:48429] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acu2i5JhiMaJUqoqfl7PmgAAAEA"]
[Tue Mar 31 19:57:00.322465 2026] [:error] [pid 36890:tid 36904] [client 158.158.107.18:54722] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "acu2jJ8FASPd_uH8z7c0qQAAAAk"]
[Tue Mar 31 19:57:00.823931 2026] [:error] [pid 36890:tid 36899] [client 158.158.107.18:48412] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "acu2jJ8FASPd_uH8z7c0qwAAAAQ"]
[Tue Mar 31 19:57:01.346169 2026] [:error] [pid 36892:tid 36969] [client 158.158.107.18:63711] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "acu2jUyj9S4G0ek3O4KPXgAAAJI"]
[Tue Mar 31 19:57:01.983688 2026] [:error] [pid 36892:tid 36961] [client 158.158.107.18:48433] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "acu2jUyj9S4G0ek3O4KPYAAAAIo"]
[Tue Mar 31 19:57:02.541912 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:57240] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "acu2jvlMmeoQKN0r_GOmoQAAANM"]
[Tue Mar 31 19:57:03.297963 2026] [:error] [pid 41421:tid 41433] [client 158.158.107.18:18118] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acu2jxSaDjY9kKFtUQCT2AAAAQk"]
[Tue Mar 31 19:57:04.013314 2026] [:error] [pid 36890:tid 36914] [client 158.158.107.18:62922] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acu2kJ8FASPd_uH8z7c0sAAAABM"]
[Tue Mar 31 19:57:04.590836 2026] [:error] [pid 36982:tid 37000] [client 158.158.107.18:33188] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acu2kPlMmeoQKN0r_GOmpwAAAM8"]
[Tue Mar 31 19:57:05.078335 2026] [:error] [pid 36890:tid 36903] [client 158.158.107.18:33196] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acu2kZ8FASPd_uH8z7c0tgAAAAg"]
[Tue Mar 31 19:57:05.631683 2026] [:error] [pid 41421:tid 41434] [client 158.158.107.18:59588] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "acu2kRSaDjY9kKFtUQCT2gAAAQo"]
[Tue Mar 31 19:57:06.168996 2026] [:error] [pid 41421:tid 41437] [client 158.158.107.18:46515] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "acu2khSaDjY9kKFtUQCT2wAAAQ0"]
[Tue Mar 31 19:57:06.660050 2026] [:error] [pid 41421:tid 41443] [client 158.158.107.18:54744] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "acu2khSaDjY9kKFtUQCT3gAAARM"]
[Tue Mar 31 19:57:07.199430 2026] [:error] [pid 36890:tid 36895] [client 158.158.107.18:62956] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "acu2k58FASPd_uH8z7c0vgAAAAA"]
[Tue Mar 31 19:57:07.689170 2026] [:error] [pid 36982:tid 36995] [client 158.158.107.18:57273] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "acu2k_lMmeoQKN0r_GOmrAAAAMo"]
[Tue Mar 31 19:57:08.196614 2026] [:error] [pid 36892:tid 36970] [client 158.158.107.18:48414] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "acu2lEyj9S4G0ek3O4KPZAAAAJM"]
[Tue Mar 31 19:57:08.751117 2026] [:error] [pid 36891:tid 36940] [client 158.158.107.18:51470] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "acu2lJJhiMaJUqoqfl7PnwAAAFA"]
[Tue Mar 31 19:57:09.387940 2026] [:error] [pid 41421:tid 41431] [client 158.158.107.18:18119] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "acu2lRSaDjY9kKFtUQCT4AAAAQc"]
[Tue Mar 31 19:57:09.902799 2026] [:error] [pid 6548:tid 6557] [client 158.158.107.18:1606] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acu2lbgIz9HgMl9YwE4xGgAAAUc"]
[Tue Mar 31 19:57:10.397911 2026] [:error] [pid 41421:tid 41438] [client 158.158.107.18:21184] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acu2lhSaDjY9kKFtUQCT4gAAAQ4"]
[Tue Mar 31 19:57:11.193601 2026] [:error] [pid 36890:tid 36905] [client 158.158.107.18:62851] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acu2l58FASPd_uH8z7c0wwAAAAo"]
[Tue Mar 31 19:57:11.863268 2026] [:error] [pid 41421:tid 41439] [client 158.158.107.18:46471] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "acu2lxSaDjY9kKFtUQCT5AAAAQ8"]
[Tue Mar 31 19:57:12.566658 2026] [:error] [pid 41421:tid 41437] [client 158.158.107.18:51524] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acu2mBSaDjY9kKFtUQCT5wAAAQ0"]
[Tue Mar 31 19:57:13.052348 2026] [:error] [pid 36890:tid 36919] [client 158.158.107.18:56670] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acu2mZ8FASPd_uH8z7c0xgAAABg"]
[Tue Mar 31 19:57:13.564902 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:54768] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acu2mbgIz9HgMl9YwE4xJQAAAUY"]
[Tue Mar 31 19:57:14.069824 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:19143] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "acu2mrgIz9HgMl9YwE4xJgAAAUw"]
[Tue Mar 31 19:57:14.551704 2026] [:error] [pid 41421:tid 41430] [client 158.158.107.18:46502] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "acu2mhSaDjY9kKFtUQCT6QAAAQY"]
[Tue Mar 31 19:57:15.067299 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:19176] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "acu2m7gIz9HgMl9YwE4xLAAAAU4"]
[Tue Mar 31 19:57:15.598344 2026] [:error] [pid 6548:tid 6568] [client 158.158.107.18:62896] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "acu2m7gIz9HgMl9YwE4xLgAAAVI"]
[Tue Mar 31 19:57:16.080155 2026] [:error] [pid 36892:tid 36961] [client 158.158.107.18:49576] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "acu2nEyj9S4G0ek3O4KPZwAAAIo"]
[Tue Mar 31 19:57:16.579933 2026] [:error] [pid 6548:tid 6560] [client 158.158.107.18:51535] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "acu2nLgIz9HgMl9YwE4xMQAAAUo"]
[Tue Mar 31 19:57:17.060460 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:51531] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "acu2nbgIz9HgMl9YwE4xMgAAAUw"]
[Tue Mar 31 19:57:17.604774 2026] [:error] [pid 6548:tid 6563] [client 158.158.107.18:62900] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "acu2nbgIz9HgMl9YwE4xMwAAAU0"]
[Tue Mar 31 19:57:18.183661 2026] [:error] [pid 36890:tid 36895] [client 158.158.107.18:49599] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "acu2np8FASPd_uH8z7c0yQAAAAA"]
[Tue Mar 31 19:57:18.705291 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:51504] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "acu2nrgIz9HgMl9YwE4xNQAAAU4"]
[Tue Mar 31 19:57:19.281561 2026] [:error] [pid 36982:tid 37005] [client 158.158.107.18:61599] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "acu2n_lMmeoQKN0r_GOmrgAAANQ"]
[Tue Mar 31 19:57:19.798957 2026] [:error] [pid 36892:tid 36953] [client 158.158.107.18:19136] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "acu2n0yj9S4G0ek3O4KPbAAAAII"]
[Tue Mar 31 19:57:20.286822 2026] [:error] [pid 41421:tid 41432] [client 158.158.107.18:19146] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "acu2oBSaDjY9kKFtUQCT7AAAAQg"]
[Tue Mar 31 19:57:20.773477 2026] [:error] [pid 36892:tid 36970] [client 158.158.107.18:31114] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "acu2oEyj9S4G0ek3O4KPbgAAAJM"]
[Tue Mar 31 19:57:21.257345 2026] [:error] [pid 6548:tid 6565] [client 158.158.107.18:45925] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "acu2obgIz9HgMl9YwE4xNgAAAU8"]
[Tue Mar 31 19:57:21.735374 2026] [:error] [pid 6548:tid 6557] [client 158.158.107.18:19158] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "acu2obgIz9HgMl9YwE4xOQAAAUc"]
[Tue Mar 31 19:57:22.218101 2026] [:error] [pid 41421:tid 41442] [client 158.158.107.18:13625] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "acu2ohSaDjY9kKFtUQCT7gAAARI"]
[Tue Mar 31 19:57:22.718809 2026] [:error] [pid 6548:tid 6568] [client 158.158.107.18:14089] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acu2orgIz9HgMl9YwE4xPgAAAVI"]
[Tue Mar 31 19:57:23.205357 2026] [:error] [pid 41421:tid 41448] [client 158.158.107.18:13613] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acu2oxSaDjY9kKFtUQCT8AAAARg"]
[Tue Mar 31 19:57:23.798857 2026] [:error] [pid 41421:tid 41428] [client 158.158.107.18:27390] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acu2oxSaDjY9kKFtUQCT8gAAAQQ"]
[Tue Mar 31 19:57:24.282260 2026] [:error] [pid 41421:tid 41424] [client 158.158.107.18:27363] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acu2pBSaDjY9kKFtUQCT9AAAAQA"]
[Tue Mar 31 19:57:24.794050 2026] [:error] [pid 36890:tid 36908] [client 158.158.107.18:58431] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acu2pJ8FASPd_uH8z7c00gAAAA0"]
[Tue Mar 31 19:57:25.306157 2026] [:error] [pid 36890:tid 36914] [client 158.158.107.18:55373] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acu2pZ8FASPd_uH8z7c01QAAABM"]
[Tue Mar 31 19:57:25.800415 2026] [:error] [pid 36892:tid 36966] [client 158.158.107.18:31120] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acu2pUyj9S4G0ek3O4KPdAAAAI8"]
[Tue Mar 31 19:57:26.315264 2026] [:error] [pid 36890:tid 36897] [client 158.158.107.18:20676] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acu2pp8FASPd_uH8z7c02AAAAAI"]
[Tue Mar 31 19:57:26.825348 2026] [:error] [pid 36890:tid 36912] [client 158.158.107.18:26775] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "acu2pp8FASPd_uH8z7c02QAAABE"]
[Tue Mar 31 19:57:27.321798 2026] [:error] [pid 36892:tid 36953] [client 158.158.107.18:55399] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "acu2p0yj9S4G0ek3O4KPdgAAAII"]
[Tue Mar 31 19:57:27.825654 2026] [:error] [pid 41421:tid 41426] [client 158.158.107.18:45905] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "acu2pxSaDjY9kKFtUQCT-wAAAQI"]
[Tue Mar 31 19:57:28.351826 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:1300] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "acu2qPlMmeoQKN0r_GOmtAAAAMY"]
[Tue Mar 31 19:57:28.853086 2026] [:error] [pid 41421:tid 41439] [client 158.158.107.18:45904] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "acu2qBSaDjY9kKFtUQCT_QAAAQ8"]
[Tue Mar 31 19:57:29.357784 2026] [:error] [pid 41421:tid 41433] [client 158.158.107.18:26767] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "acu2qRSaDjY9kKFtUQCUAgAAAQk"]
[Tue Mar 31 19:57:30.035715 2026] [:error] [pid 36891:tid 36931] [client 158.158.107.18:1341] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "acu2qpJhiMaJUqoqfl7PpwAAAEc"]
[Tue Mar 31 19:57:30.578489 2026] [:error] [pid 41421:tid 41447] [client 158.158.107.18:1516] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "acu2qhSaDjY9kKFtUQCUBAAAARc"]
[Tue Mar 31 19:57:31.202497 2026] [:error] [pid 41421:tid 41436] [client 158.158.107.18:23715] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "acu2qxSaDjY9kKFtUQCUBQAAAQw"]
[Tue Mar 31 19:57:31.735596 2026] [:error] [pid 6548:tid 6572] [client 158.158.107.18:12927] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "acu2q7gIz9HgMl9YwE4xPwAAAVY"]
[Tue Mar 31 19:57:38.701647 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:58379] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "acu2svlMmeoQKN0r_GOmvgAAAMk"]
[Tue Mar 31 19:57:39.804395 2026] [:error] [pid 6548:tid 6557] [client 158.158.107.18:22780] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "acu2s7gIz9HgMl9YwE4xWwAAAUc"]
[Tue Mar 31 19:57:40.410384 2026] [:error] [pid 36891:tid 36930] [client 158.158.107.18:23249] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "acu2tJJhiMaJUqoqfl7PqQAAAEY"]
[Tue Mar 31 19:57:40.891996 2026] [:error] [pid 41421:tid 41441] [client 158.158.107.18:23294] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "acu2tBSaDjY9kKFtUQCUCAAAARE"]
[Tue Mar 31 19:57:41.568369 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:22758] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "acu2tflMmeoQKN0r_GOmwgAAANM"]
[Tue Mar 31 19:57:42.109361 2026] [:error] [pid 36891:tid 36932] [client 158.158.107.18:41367] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "acu2tpJhiMaJUqoqfl7PqwAAAEg"]
[Tue Mar 31 19:57:42.626583 2026] [:error] [pid 36982:tid 37006] [client 158.158.107.18:41355] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "acu2tvlMmeoQKN0r_GOmxgAAANU"]
[Tue Mar 31 19:57:43.267251 2026] [proxy_fcgi:error] [pid 36890:tid 36910] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:43.509073 2026] [proxy_fcgi:error] [pid 36890:tid 36905] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:43.754659 2026] [proxy_fcgi:error] [pid 36890:tid 36904] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:44.007784 2026] [proxy_fcgi:error] [pid 36890:tid 36900] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:44.260427 2026] [proxy_fcgi:error] [pid 36890:tid 36901] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:44.503496 2026] [proxy_fcgi:error] [pid 36890:tid 36907] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:44.746292 2026] [proxy_fcgi:error] [pid 36890:tid 36908] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:45.024320 2026] [proxy_fcgi:error] [pid 36890:tid 36919] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:45.266783 2026] [proxy_fcgi:error] [pid 36890:tid 36911] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:45.508642 2026] [proxy_fcgi:error] [pid 36890:tid 36914] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:45.759038 2026] [proxy_fcgi:error] [pid 36890:tid 36899] [client 158.158.107.18:27353] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:57:46.031536 2026] [:error] [pid 36890:tid 36897] [client 158.158.107.18:27353] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xpwer1.php"] [unique_id "acu2up8FASPd_uH8z7c07gAAAAI"]
[Tue Mar 31 19:57:46.550693 2026] [:error] [pid 6548:tid 6567] [client 158.158.107.18:26773] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xpwer1.php"] [unique_id "acu2urgIz9HgMl9YwE4xcAAAAVE"]
[Tue Mar 31 19:57:47.052542 2026] [:error] [pid 36891:tid 36947] [client 158.158.107.18:22745] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xpwer1.php"] [unique_id "acu2u5JhiMaJUqoqfl7PsQAAAFc"]
[Tue Mar 31 19:57:47.584201 2026] [:error] [pid 36892:tid 36959] [client 158.158.107.18:32131] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xpwer1.php"] [unique_id "acu2u0yj9S4G0ek3O4KPhAAAAIg"]
[Tue Mar 31 19:57:48.167594 2026] [:error] [pid 36892:tid 36969] [client 158.158.107.18:50871] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "acu2vEyj9S4G0ek3O4KPhgAAAJI"]
[Tue Mar 31 19:57:48.702788 2026] [:error] [pid 36982:tid 36986] [client 158.158.107.18:26763] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "acu2vPlMmeoQKN0r_GOm0QAAAME"]
[Tue Mar 31 19:57:49.213152 2026] [:error] [pid 36982:tid 36989] [client 158.158.107.18:1535] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "acu2vflMmeoQKN0r_GOm0gAAAMQ"]
[Tue Mar 31 19:57:49.699901 2026] [:error] [pid 36982:tid 36992] [client 158.158.107.18:50860] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "acu2vflMmeoQKN0r_GOm1AAAAMc"]
[Tue Mar 31 19:57:50.250192 2026] [:error] [pid 36892:tid 36974] [client 158.158.107.18:50869] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acu2vkyj9S4G0ek3O4KPiQAAAJc"]
[Tue Mar 31 19:57:50.820181 2026] [:error] [pid 36982:tid 36990] [client 158.158.107.18:12868] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acu2vvlMmeoQKN0r_GOm1wAAAMU"]
[Tue Mar 31 19:57:51.443773 2026] [:error] [pid 41421:tid 41425] [client 158.158.107.18:32142] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acu2vxSaDjY9kKFtUQCUCQAAAQE"]
[Tue Mar 31 19:57:52.106646 2026] [:error] [pid 41421:tid 41446] [client 158.158.107.18:1494] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acu2wBSaDjY9kKFtUQCUCgAAARY"]
[Tue Mar 31 19:57:52.589345 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:45877] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "acu2wPlMmeoQKN0r_GOm3gAAAMk"]
[Tue Mar 31 19:57:53.095962 2026] [:error] [pid 36982:tid 36998] [client 158.158.107.18:41346] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "acu2wflMmeoQKN0r_GOm3wAAAM0"]
[Tue Mar 31 19:57:53.698453 2026] [:error] [pid 36982:tid 36993] [client 158.158.107.18:45876] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "acu2wflMmeoQKN0r_GOm4QAAAMg"]
[Tue Mar 31 19:57:54.209634 2026] [:error] [pid 36890:tid 36911] [client 158.158.107.18:12899] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "acu2wp8FASPd_uH8z7c09wAAABA"]
[Tue Mar 31 19:57:54.697107 2026] [:error] [pid 36890:tid 36916] [client 158.158.107.18:12873] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "acu2wp8FASPd_uH8z7c0-AAAABU"]
[Tue Mar 31 19:57:55.206309 2026] [:error] [pid 36890:tid 36897] [client 158.158.107.18:13572] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "acu2w58FASPd_uH8z7c0-wAAAAI"]
[Tue Mar 31 19:57:55.719031 2026] [:error] [pid 36982:tid 37002] [client 158.158.107.18:32135] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "acu2w_lMmeoQKN0r_GOm5AAAANE"]
[Tue Mar 31 19:57:56.256730 2026] [:error] [pid 6548:tid 6560] [client 158.158.107.18:36196] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "acu2xLgIz9HgMl9YwE4xdgAAAUo"]
[Tue Mar 31 19:57:56.761587 2026] [:error] [pid 6548:tid 6568] [client 158.158.107.18:50867] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "acu2xLgIz9HgMl9YwE4xegAAAVI"]
[Tue Mar 31 19:57:57.240031 2026] [:error] [pid 36982:tid 36988] [client 158.158.107.18:32183] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "acu2xflMmeoQKN0r_GOm5QAAAMM"]
[Tue Mar 31 19:57:57.721150 2026] [:error] [pid 36982:tid 36997] [client 158.158.107.18:60364] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "acu2xflMmeoQKN0r_GOm5gAAAMw"]
[Tue Mar 31 19:57:58.222814 2026] [:error] [pid 36890:tid 36898] [client 158.158.107.18:22156] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "acu2xp8FASPd_uH8z7c1BgAAAAM"]
[Tue Mar 31 19:57:58.702143 2026] [:error] [pid 41421:tid 41430] [client 158.158.107.18:57869] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "acu2xhSaDjY9kKFtUQCUDAAAAQY"]
[Tue Mar 31 19:57:59.188749 2026] [:error] [pid 36890:tid 36905] [client 158.158.107.18:22162] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "acu2x58FASPd_uH8z7c1CAAAAAo"]
[Tue Mar 31 19:57:59.682746 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:16039] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "acu2x_lMmeoQKN0r_GOm5wAAANM"]
[Tue Mar 31 19:58:00.171169 2026] [:error] [pid 6548:tid 6567] [client 158.158.107.18:22189] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "acu2yLgIz9HgMl9YwE4xfgAAAVE"]
[Tue Mar 31 19:58:00.659276 2026] [:error] [pid 36890:tid 36896] [client 158.158.107.18:50874] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "acu2yJ8FASPd_uH8z7c1EgAAAAE"]
[Tue Mar 31 19:58:01.143457 2026] [:error] [pid 36890:tid 36908] [client 158.158.107.18:57858] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "acu2yZ8FASPd_uH8z7c1FAAAAA0"]
[Tue Mar 31 19:58:01.659349 2026] [:error] [pid 36890:tid 36907] [client 158.158.107.18:38180] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "acu2yZ8FASPd_uH8z7c1FQAAAAw"]
[Tue Mar 31 19:58:02.158761 2026] [:error] [pid 36982:tid 36989] [client 158.158.107.18:28755] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "acu2yvlMmeoQKN0r_GOm6gAAAMQ"]
[Tue Mar 31 19:58:02.658389 2026] [:error] [pid 6548:tid 6570] [client 158.158.107.18:36212] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acu2yrgIz9HgMl9YwE4xgQAAAVQ"]
[Tue Mar 31 19:58:03.145389 2026] [:error] [pid 36982:tid 36993] [client 158.158.107.18:49616] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acu2y_lMmeoQKN0r_GOm6wAAAMg"]
[Tue Mar 31 19:58:03.639834 2026] [:error] [pid 36982:tid 36996] [client 158.158.107.18:32139] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acu2y_lMmeoQKN0r_GOm7QAAAMs"]
[Tue Mar 31 19:58:04.123112 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:60389] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "acu2zPlMmeoQKN0r_GOm7wAAAMY"]
[Tue Mar 31 19:58:04.609533 2026] [:error] [pid 36891:tid 36942] [client 158.158.107.18:57916] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "acu2zJJhiMaJUqoqfl7PtwAAAFI"]
[Tue Mar 31 19:58:05.198522 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:38737] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "acu2zbgIz9HgMl9YwE4xkAAAAUY"]
[Tue Mar 31 19:58:05.678794 2026] [:error] [pid 6548:tid 6565] [client 158.158.107.18:45209] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "acu2zbgIz9HgMl9YwE4xkgAAAU8"]
[Tue Mar 31 19:58:06.164403 2026] [:error] [pid 6548:tid 6551] [client 158.158.107.18:60356] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "acu2zrgIz9HgMl9YwE4xlQAAAUE"]
[Tue Mar 31 19:58:06.643978 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:16035] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acu2zvlMmeoQKN0r_GOm-AAAANM"]
[Tue Mar 31 19:58:07.181822 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:32139] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acu2z7gIz9HgMl9YwE4xnQAAAUY"]
[Tue Mar 31 19:58:07.823451 2026] [:error] [pid 36891:tid 36924] [client 158.158.107.18:28778] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acu2z5JhiMaJUqoqfl7PuQAAAEA"]
[Tue Mar 31 19:58:08.319700 2026] [:error] [pid 6548:tid 6551] [client 158.158.107.18:38204] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "acu20LgIz9HgMl9YwE4xpAAAAUE"]
[Tue Mar 31 19:58:09.033692 2026] [:error] [pid 36982:tid 37006] [client 158.158.107.18:32165] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acu20flMmeoQKN0r_GOm_gAAANU"]
[Tue Mar 31 19:58:09.666527 2026] [:error] [pid 6548:tid 6554] [client 158.158.107.18:1380] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acu20bgIz9HgMl9YwE4xpQAAAUQ"]
[Tue Mar 31 19:58:10.364967 2026] [:error] [pid 41421:tid 41435] [client 158.158.107.18:36731] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acu20hSaDjY9kKFtUQCUDgAAAQs"]
[Tue Mar 31 19:58:11.251065 2026] [:error] [pid 36982:tid 36993] [client 158.158.107.18:38738] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "acu20_lMmeoQKN0r_GOnAwAAAMg"]
[Tue Mar 31 19:58:12.281226 2026] [:error] [pid 36891:tid 36943] [client 158.158.107.18:22169] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "acu21JJhiMaJUqoqfl7PvAAAAFM"]
[Tue Mar 31 19:58:13.303781 2026] [:error] [pid 36982:tid 36988] [client 158.158.107.18:60405] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "acu21flMmeoQKN0r_GOnBQAAAMM"]
[Tue Mar 31 19:58:14.159688 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:60377] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "acu21vlMmeoQKN0r_GOnCwAAANM"]
[Tue Mar 31 19:58:15.094385 2026] [:error] [pid 36982:tid 37002] [client 158.158.107.18:28739] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "acu21_lMmeoQKN0r_GOnEAAAANE"]
[Tue Mar 31 19:58:15.781425 2026] [:error] [pid 41421:tid 41427] [client 158.158.107.18:33541] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acu21xSaDjY9kKFtUQCUEwAAAQM"]
[Tue Mar 31 19:58:16.738456 2026] [:error] [pid 36892:tid 36963] [client 158.158.107.18:32667] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acu22Eyj9S4G0ek3O4KPjwAAAIw"]
[Tue Mar 31 19:58:17.338117 2026] [:error] [pid 36892:tid 36954] [client 158.158.107.18:36675] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acu22Uyj9S4G0ek3O4KPkAAAAIM"]
[Tue Mar 31 19:58:18.197244 2026] [:error] [pid 6548:tid 6568] [client 158.158.107.18:36714] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "acu22rgIz9HgMl9YwE4xsAAAAVI"]
[Tue Mar 31 19:58:18.804135 2026] [:error] [pid 41421:tid 41448] [client 158.158.107.18:38261] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "acu22hSaDjY9kKFtUQCUFwAAARg"]
[Tue Mar 31 19:58:19.500155 2026] [:error] [pid 41421:tid 41430] [client 158.158.107.18:28742] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "acu22xSaDjY9kKFtUQCUGQAAAQY"]
[Tue Mar 31 19:58:20.253928 2026] [:error] [pid 36890:tid 36915] [client 158.158.107.18:38177] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "acu23J8FASPd_uH8z7c1IQAAABQ"]
[Tue Mar 31 19:58:20.916481 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:1759] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "acu23LgIz9HgMl9YwE4xtQAAAUA"]
[Tue Mar 31 19:58:21.612532 2026] [:error] [pid 36982:tid 37000] [client 158.158.107.18:38200] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "acu23flMmeoQKN0r_GOnGQAAAM8"]
[Tue Mar 31 19:58:22.175785 2026] [:error] [pid 36890:tid 36917] [client 158.158.107.18:18119] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "acu23p8FASPd_uH8z7c1IwAAABY"]
[Tue Mar 31 19:58:22.937208 2026] [:error] [pid 36891:tid 36947] [client 158.158.107.18:38778] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "acu23pJhiMaJUqoqfl7PwgAAAFc"]
[Tue Mar 31 19:58:23.892736 2026] [:error] [pid 36892:tid 36970] [client 158.158.107.18:36710] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "acu230yj9S4G0ek3O4KPlgAAAJM"]
[Tue Mar 31 19:58:24.459354 2026] [:error] [pid 36890:tid 36905] [client 158.158.107.18:1779] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "acu24J8FASPd_uH8z7c1KgAAAAo"]
[Tue Mar 31 19:58:25.055750 2026] [:error] [pid 36890:tid 36896] [client 158.158.107.18:34612] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "acu24Z8FASPd_uH8z7c1LAAAAAE"]
[Tue Mar 31 19:58:25.807374 2026] [:error] [pid 36890:tid 36911] [client 158.158.107.18:1765] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "acu24Z8FASPd_uH8z7c1MAAAABA"]
[Tue Mar 31 19:58:26.383637 2026] [:error] [pid 36890:tid 36915] [client 158.158.107.18:49602] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "acu24p8FASPd_uH8z7c1MgAAABQ"]
[Tue Mar 31 19:58:27.355275 2026] [:error] [pid 36890:tid 36908] [client 158.158.107.18:57290] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acu2458FASPd_uH8z7c1OgAAAA0"]
[Tue Mar 31 19:58:28.218384 2026] [:error] [pid 36890:tid 36899] [client 158.158.107.18:47864] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acu25J8FASPd_uH8z7c1PgAAAAQ"]
[Tue Mar 31 19:58:29.081581 2026] [:error] [pid 36891:tid 36944] [client 158.158.107.18:57318] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acu25ZJhiMaJUqoqfl7PxgAAAFQ"]
[Tue Mar 31 19:58:29.963195 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:33563] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "acu25bgIz9HgMl9YwE4xuAAAAUw"]
[Tue Mar 31 19:58:30.731670 2026] [:error] [pid 36892:tid 36961] [client 158.158.107.18:60973] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acu25kyj9S4G0ek3O4KPnAAAAIo"]
[Tue Mar 31 19:58:32.314642 2026] [:error] [pid 6548:tid 6554] [client 158.158.107.18:34623] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acu26LgIz9HgMl9YwE4xvAAAAUQ"]
[Tue Mar 31 19:58:33.809809 2026] [:error] [pid 36891:tid 36929] [client 158.158.107.18:36686] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acu26ZJhiMaJUqoqfl7PzQAAAEU"]
[Tue Mar 31 19:58:35.733756 2026] [:error] [pid 36891:tid 36944] [client 158.158.107.18:41999] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "acu265JhiMaJUqoqfl7PzwAAAFQ"]
[Tue Mar 31 19:58:37.579124 2026] [:error] [pid 36892:tid 36956] [client 158.158.107.18:38241] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "acu27Uyj9S4G0ek3O4KPoAAAAIU"]
[Tue Mar 31 19:58:38.364107 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:32695] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "acu27rgIz9HgMl9YwE4x0QAAAUw"]
[Tue Mar 31 19:58:39.934984 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:33552] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "acu277gIz9HgMl9YwE4x1AAAAU4"]
[Tue Mar 31 19:58:41.218079 2026] [:error] [pid 6548:tid 6565] [client 158.158.107.18:39267] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "acu28bgIz9HgMl9YwE4x3AAAAU8"]
[Tue Mar 31 19:58:42.832721 2026] [:error] [pid 36892:tid 36961] [client 158.158.107.18:42005] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acu28kyj9S4G0ek3O4KPpgAAAIo"]
[Tue Mar 31 19:58:43.685293 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:44657] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acu287gIz9HgMl9YwE4x4wAAAUY"]
[Tue Mar 31 19:58:44.973187 2026] [:error] [pid 36892:tid 36966] [client 158.158.107.18:36685] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "acu29Eyj9S4G0ek3O4KPqAAAAI8"]
[Tue Mar 31 19:58:45.921907 2026] [proxy_fcgi:error] [pid 36890:tid 36901] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:46.166004 2026] [proxy_fcgi:error] [pid 36890:tid 36907] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:46.456157 2026] [proxy_fcgi:error] [pid 36890:tid 36909] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:46.813653 2026] [proxy_fcgi:error] [pid 36890:tid 36904] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:47.245668 2026] [proxy_fcgi:error] [pid 36890:tid 36895] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:47.540992 2026] [proxy_fcgi:error] [pid 36890:tid 36899] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:48.098707 2026] [proxy_fcgi:error] [pid 36890:tid 36906] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:48.369394 2026] [proxy_fcgi:error] [pid 36890:tid 36905] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:48.656767 2026] [proxy_fcgi:error] [pid 36890:tid 36910] [client 158.158.107.18:50247] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:58:49.274451 2026] [:error] [pid 36890:tid 36908] [client 158.158.107.18:50247] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp3.php"] [unique_id "acu2-Z8FASPd_uH8z7c1XQAAAA0"]
[Tue Mar 31 19:58:50.335007 2026] [:error] [pid 36890:tid 36918] [client 158.158.107.18:57300] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp3.php"] [unique_id "acu2-p8FASPd_uH8z7c1XwAAABc"]
[Tue Mar 31 19:58:50.974895 2026] [:error] [pid 6548:tid 6560] [client 158.158.107.18:57301] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp3.php"] [unique_id "acu2-rgIz9HgMl9YwE4x-gAAAUo"]
[Tue Mar 31 19:58:51.707037 2026] [:error] [pid 6548:tid 6569] [client 158.158.107.18:57322] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp3.php"] [unique_id "acu2-7gIz9HgMl9YwE4yAgAAAVM"]
[Tue Mar 31 19:58:52.305118 2026] [:error] [pid 36891:tid 36932] [client 158.158.107.18:39240] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "acu2_JJhiMaJUqoqfl7P0gAAAEg"]
[Tue Mar 31 19:58:52.894602 2026] [:error] [pid 36892:tid 36962] [client 158.158.107.18:40800] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "acu2_Eyj9S4G0ek3O4KPsAAAAIs"]
[Tue Mar 31 19:58:53.418745 2026] [:error] [pid 36982:tid 37002] [client 158.158.107.18:57295] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "acu2_flMmeoQKN0r_GOnKAAAANE"]
[Tue Mar 31 19:58:54.128244 2026] [:error] [pid 41421:tid 41439] [client 158.158.107.18:16794] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "acu2_hSaDjY9kKFtUQCUOwAAAQ8"]
[Tue Mar 31 19:58:54.685976 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:52096] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "acu2_vlMmeoQKN0r_GOnLgAAANM"]
[Tue Mar 31 19:58:55.220844 2026] [:error] [pid 36982:tid 37006] [client 158.158.107.18:15678] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "acu2__lMmeoQKN0r_GOnMAAAANU"]
[Tue Mar 31 19:58:55.713297 2026] [:error] [pid 36982:tid 36999] [client 158.158.107.18:40297] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "acu2__lMmeoQKN0r_GOnMQAAAM4"]
[Tue Mar 31 19:58:56.305760 2026] [:error] [pid 36892:tid 36972] [client 158.158.107.18:16814] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "acu3AEyj9S4G0ek3O4KPsQAAAJU"]
[Tue Mar 31 19:58:57.052747 2026] [:error] [pid 36982:tid 37000] [client 158.158.107.18:24092] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d2.php"] [unique_id "acu3AflMmeoQKN0r_GOnNQAAAM8"]
[Tue Mar 31 19:58:57.794650 2026] [:error] [pid 36892:tid 36964] [client 158.158.107.18:15623] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d2.php"] [unique_id "acu3AUyj9S4G0ek3O4KPsgAAAI0"]
[Tue Mar 31 19:58:58.631480 2026] [:error] [pid 36892:tid 36956] [client 158.158.107.18:50242] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d2.php"] [unique_id "acu3Akyj9S4G0ek3O4KPtQAAAIU"]
[Tue Mar 31 19:58:59.209970 2026] [:error] [pid 36890:tid 36906] [client 158.158.107.18:50232] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d2.php"] [unique_id "acu3A58FASPd_uH8z7c1YgAAAAs"]
[Tue Mar 31 19:58:59.877496 2026] [:error] [pid 6548:tid 6561] [client 158.158.107.18:22186] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "acu3A7gIz9HgMl9YwE4yBgAAAUs"]
[Tue Mar 31 19:59:00.540750 2026] [:error] [pid 36890:tid 36914] [client 158.158.107.18:15645] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "acu3BJ8FASPd_uH8z7c1aQAAABM"]
[Tue Mar 31 19:59:01.110898 2026] [:error] [pid 36890:tid 36908] [client 158.158.107.18:16772] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "acu3BZ8FASPd_uH8z7c1awAAAA0"]
[Tue Mar 31 19:59:01.608983 2026] [:error] [pid 36982:tid 36985] [client 158.158.107.18:29247] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "acu3BflMmeoQKN0r_GOnQQAAAMA"]
[Tue Mar 31 19:59:02.121891 2026] [:error] [pid 36892:tid 36968] [client 158.158.107.18:16798] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acu3Bkyj9S4G0ek3O4KPtwAAAJE"]
[Tue Mar 31 19:59:02.632296 2026] [:error] [pid 6548:tid 6567] [client 158.158.107.18:15655] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acu3BrgIz9HgMl9YwE4yCAAAAVE"]
[Tue Mar 31 19:59:03.134434 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:42003] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acu3B7gIz9HgMl9YwE4yEQAAAU4"]
[Tue Mar 31 19:59:03.650910 2026] [:error] [pid 36892:tid 36963] [client 158.158.107.18:36728] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "acu3B0yj9S4G0ek3O4KPwAAAAIw"]
[Tue Mar 31 19:59:04.251812 2026] [:error] [pid 36890:tid 36909] [client 158.158.107.18:39277] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "acu3CJ8FASPd_uH8z7c1cQAAAA4"]
[Tue Mar 31 19:59:04.933755 2026] [:error] [pid 36890:tid 36900] [client 158.158.107.18:29225] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "acu3CJ8FASPd_uH8z7c1dQAAAAU"]
[Tue Mar 31 19:59:05.631006 2026] [:error] [pid 36982:tid 36995] [client 158.158.107.18:50237] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "acu3CflMmeoQKN0r_GOnRwAAAMo"]
[Tue Mar 31 19:59:06.635140 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:48982] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "acu3CvlMmeoQKN0r_GOnSQAAAMk"]
[Tue Mar 31 19:59:07.167394 2026] [:error] [pid 36982:tid 36986] [client 158.158.107.18:29221] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "acu3C_lMmeoQKN0r_GOnTgAAAME"]
[Tue Mar 31 19:59:07.721162 2026] [:error] [pid 41421:tid 41444] [client 158.158.107.18:24097] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "acu3CxSaDjY9kKFtUQCUPwAAARQ"]
[Tue Mar 31 19:59:08.232123 2026] [:error] [pid 36890:tid 36919] [client 158.158.107.18:21682] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "acu3DJ8FASPd_uH8z7c1fAAAABg"]
[Tue Mar 31 19:59:08.743020 2026] [:error] [pid 36891:tid 36944] [client 158.158.107.18:62259] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "acu3DJJhiMaJUqoqfl7P4wAAAFQ"]
[Tue Mar 31 19:59:09.297890 2026] [:error] [pid 36982:tid 37009] [client 158.158.107.18:50205] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "acu3DflMmeoQKN0r_GOnWgAAANg"]
[Tue Mar 31 19:59:09.971425 2026] [:error] [pid 36892:tid 36954] [client 158.158.107.18:50234] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "acu3DUyj9S4G0ek3O4KP3gAAAIM"]
[Tue Mar 31 19:59:10.498153 2026] [:error] [pid 36982:tid 36996] [client 158.158.107.18:15638] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "acu3DvlMmeoQKN0r_GOnXAAAAMs"]
[Tue Mar 31 19:59:11.083790 2026] [:error] [pid 36891:tid 36935] [client 158.158.107.18:47812] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "acu3D5JhiMaJUqoqfl7P6QAAAEs"]
[Tue Mar 31 19:59:11.788022 2026] [:error] [pid 6548:tid 6553] [client 158.158.107.18:48965] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acu3D7gIz9HgMl9YwE4yXgAAAUM"]
[Tue Mar 31 19:59:12.368424 2026] [:error] [pid 6548:tid 6568] [client 158.158.107.18:48412] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acu3ELgIz9HgMl9YwE4yYgAAAVI"]
[Tue Mar 31 19:59:12.943024 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:29216] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acu3ELgIz9HgMl9YwE4yZgAAAVU"]
[Tue Mar 31 19:59:13.423708 2026] [:error] [pid 6548:tid 6572] [client 158.158.107.18:62270] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "acu3EbgIz9HgMl9YwE4ybQAAAVY"]
[Tue Mar 31 19:59:13.973668 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:40285] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "acu3EbgIz9HgMl9YwE4ydQAAAUY"]
[Tue Mar 31 19:59:14.687247 2026] [:error] [pid 36892:tid 36966] [client 158.158.107.18:24072] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "acu3Ekyj9S4G0ek3O4KP4gAAAI8"]
[Tue Mar 31 19:59:15.242830 2026] [:error] [pid 36892:tid 36961] [client 158.158.107.18:50177] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "acu3E0yj9S4G0ek3O4KP5wAAAIo"]
[Tue Mar 31 19:59:15.946790 2026] [:error] [pid 36890:tid 36900] [client 158.158.107.18:50275] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "acu3E58FASPd_uH8z7c1gQAAAAU"]
[Tue Mar 31 19:59:16.510586 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:48971] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "acu3FLgIz9HgMl9YwE4yegAAAUA"]
[Tue Mar 31 19:59:17.201952 2026] [:error] [pid 36891:tid 36946] [client 158.158.107.18:47828] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "acu3FZJhiMaJUqoqfl7P8QAAAFY"]
[Tue Mar 31 19:59:17.771289 2026] [:error] [pid 6548:tid 6573] [client 158.158.107.18:40310] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "acu3FbgIz9HgMl9YwE4ygQAAAVc"]
[Tue Mar 31 19:59:18.314932 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:40292] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "acu3FrgIz9HgMl9YwE4yhgAAAUA"]
[Tue Mar 31 19:59:18.928519 2026] [:error] [pid 6548:tid 6551] [client 158.158.107.18:52860] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "acu3FrgIz9HgMl9YwE4yhwAAAUE"]
[Tue Mar 31 19:59:19.531501 2026] [:error] [pid 6548:tid 6569] [client 158.158.107.18:29196] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "acu3F7gIz9HgMl9YwE4yigAAAVM"]
[Tue Mar 31 19:59:20.197029 2026] [:error] [pid 36891:tid 36940] [client 158.158.107.18:52140] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "acu3GJJhiMaJUqoqfl7P9QAAAFA"]
[Tue Mar 31 19:59:20.970457 2026] [:error] [pid 6548:tid 6568] [client 158.158.107.18:48973] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "acu3GLgIz9HgMl9YwE4ykAAAAVI"]
[Tue Mar 31 19:59:21.645566 2026] [:error] [pid 36892:tid 36965] [client 158.158.107.18:21667] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "acu3GUyj9S4G0ek3O4KP-gAAAI4"]
[Tue Mar 31 19:59:22.489597 2026] [:error] [pid 36892:tid 36953] [client 158.158.107.18:15658] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "acu3Gkyj9S4G0ek3O4KP-wAAAII"]
[Tue Mar 31 19:59:23.133170 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:24067] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "acu3G_lMmeoQKN0r_GOncwAAAMk"]
[Tue Mar 31 19:59:23.936761 2026] [:error] [pid 36892:tid 36969] [client 158.158.107.18:40288] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "acu3G0yj9S4G0ek3O4KP_QAAAJI"]
[Wed Apr 01 03:28:28.046970 2026] [proxy_fcgi:error] [pid 44830:tid 44856] [client 74.248.134.58:37517] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.759845 2026] [proxy_fcgi:error] [pid 45776:tid 45794] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.778372 2026] [proxy_fcgi:error] [pid 45776:tid 45805] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.796452 2026] [proxy_fcgi:error] [pid 45776:tid 45803] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.814524 2026] [proxy_fcgi:error] [pid 45776:tid 45792] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.886211 2026] [proxy_fcgi:error] [pid 45776:tid 45800] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.903611 2026] [proxy_fcgi:error] [pid 45776:tid 45797] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.920884 2026] [proxy_fcgi:error] [pid 45776:tid 45787] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.960621 2026] [proxy_fcgi:error] [pid 45776:tid 45796] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.978646 2026] [proxy_fcgi:error] [pid 45776:tid 45791] [client 13.75.213.214:4184] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:55:02.992570 2026] [:error] [pid 45776:tid 45789] [client 13.75.213.214:4184] [client 13.75.213.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "acwmlm827UBx7K9U3bPaBAAAAMY"]
[Wed Apr 01 03:55:03.111448 2026] [:error] [pid 45613:tid 45691] [client 13.75.213.214:4833] [client 13.75.213.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "acwml3VVWWw8hrj-8EuytgAAAIM"]
[Wed Apr 01 03:55:03.172408 2026] [:error] [pid 45613:tid 45688] [client 13.75.213.214:4851] [client 13.75.213.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "acwml3VVWWw8hrj-8EuytwAAAIA"]
[Wed Apr 01 03:55:03.306608 2026] [:error] [pid 45776:tid 45799] [client 13.75.213.214:4840] [client 13.75.213.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nc4.php"] [unique_id "acwml2827UBx7K9U3bPaBgAAANA"]
[Wed Apr 01 06:14:55.536852 2026] [proxy_fcgi:error] [pid 23715:tid 23761] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:55.799078 2026] [proxy_fcgi:error] [pid 23715:tid 23777] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:56.059992 2026] [proxy_fcgi:error] [pid 23715:tid 23775] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:56.326039 2026] [proxy_fcgi:error] [pid 23715:tid 23767] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:56.584539 2026] [proxy_fcgi:error] [pid 23715:tid 23782] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:56.843830 2026] [proxy_fcgi:error] [pid 23715:tid 23780] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:57.104250 2026] [proxy_fcgi:error] [pid 23715:tid 23764] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:57.366085 2026] [proxy_fcgi:error] [pid 23715:tid 23776] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:57.629108 2026] [proxy_fcgi:error] [pid 23715:tid 23785] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:57.888695 2026] [proxy_fcgi:error] [pid 23715:tid 23765] [client 74.248.134.58:30232] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:14:58.144590 2026] [:error] [pid 23715:tid 23771] [client 74.248.134.58:30232] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "acxHYq-REzOruNbiT9w_GgAAAEo"]
[Wed Apr 01 06:14:58.654862 2026] [:error] [pid 23716:tid 23789] [client 74.248.134.58:49475] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "acxHYnVtFUg_mx-RYb5jNwAAAIE"]
[Wed Apr 01 06:14:59.164001 2026] [:error] [pid 24346:tid 24355] [client 74.248.134.58:35165] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "acxHY7c1l8kg9MhGHIKChgAAAUM"]
[Wed Apr 01 06:14:59.676978 2026] [:error] [pid 23714:tid 23738] [client 74.248.134.58:35164] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "acxHY0HxDDU2ETcG9DS_1QAAAAQ"]
[Wed Apr 01 06:15:00.188463 2026] [:error] [pid 23714:tid 23754] [client 74.248.134.58:35143] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-moonka.php"] [unique_id "acxHZEHxDDU2ETcG9DS_2AAAABQ"]
[Wed Apr 01 06:15:00.702865 2026] [:error] [pid 23715:tid 23776] [client 74.248.134.58:35181] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-moonka.php"] [unique_id "acxHZK-REzOruNbiT9w_HQAAAE8"]
[Wed Apr 01 06:15:01.216051 2026] [:error] [pid 23715:tid 23777] [client 74.248.134.58:49474] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/000.php"] [unique_id "acxHZa-REzOruNbiT9w_IAAAAFA"]
[Wed Apr 01 06:15:01.737994 2026] [:error] [pid 23715:tid 23763] [client 74.248.134.58:49519] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/000.php"] [unique_id "acxHZa-REzOruNbiT9w_IgAAAEI"]
[Wed Apr 01 06:15:02.256123 2026] [:error] [pid 23714:tid 23737] [client 74.248.134.58:30251] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dichku.php"] [unique_id "acxHZkHxDDU2ETcG9DS_4gAAAAM"]
[Wed Apr 01 06:15:02.779205 2026] [:error] [pid 23715:tid 23780] [client 74.248.134.58:6829] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dichku.php"] [unique_id "acxHZq-REzOruNbiT9w_MQAAAFM"]
[Wed Apr 01 06:15:03.292139 2026] [:error] [pid 23715:tid 23776] [client 74.248.134.58:46955] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dichku.php"] [unique_id "acxHZ6-REzOruNbiT9w_PQAAAE8"]
[Wed Apr 01 06:15:03.825869 2026] [:error] [pid 23715:tid 23775] [client 74.248.134.58:30252] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dichku.php"] [unique_id "acxHZ6-REzOruNbiT9w_SwAAAE4"]
[Wed Apr 01 06:15:04.335508 2026] [:error] [pid 24346:tid 24360] [client 74.248.134.58:35161] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "acxHaLc1l8kg9MhGHIKCiQAAAUg"]
[Wed Apr 01 06:15:04.868683 2026] [:error] [pid 24346:tid 24362] [client 74.248.134.58:35194] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "acxHaLc1l8kg9MhGHIKCigAAAUo"]
[Wed Apr 01 06:15:05.380405 2026] [:error] [pid 23714:tid 23758] [client 74.248.134.58:35141] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "acxHaUHxDDU2ETcG9DS_9wAAABg"]
[Wed Apr 01 06:15:05.890180 2026] [:error] [pid 23819:tid 23824] [client 74.248.134.58:30226] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "acxHaddfUS_37wFAM77hiwAAAMI"]
[Wed Apr 01 06:15:06.411903 2026] [:error] [pid 23715:tid 23775] [client 74.248.134.58:6605] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acxHaq-REzOruNbiT9w_hwAAAE4"]
[Wed Apr 01 06:15:06.931589 2026] [:error] [pid 23716:tid 23799] [client 74.248.134.58:6865] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acxHanVtFUg_mx-RYb5jOQAAAIs"]
[Wed Apr 01 06:15:07.441565 2026] [:error] [pid 23715:tid 23770] [client 74.248.134.58:46967] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acxHa6-REzOruNbiT9w_nwAAAEk"]
[Wed Apr 01 06:15:07.952406 2026] [:error] [pid 24348:tid 24401] [client 74.248.134.58:46908] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vvedr.php"] [unique_id "acxHa20Vs69Y5nF1HA_PZwAAAZY"]
[Wed Apr 01 06:15:08.464491 2026] [:error] [pid 23819:tid 23828] [client 74.248.134.58:46958] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acxHbNdfUS_37wFAM77hkAAAAMY"]
[Wed Apr 01 06:15:09.014973 2026] [:error] [pid 23715:tid 23774] [client 74.248.134.58:6630] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acxHba-REzOruNbiT9w_twAAAE0"]
[Wed Apr 01 06:15:09.526796 2026] [:error] [pid 23714:tid 23748] [client 74.248.134.58:46930] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acxHbUHxDDU2ETcG9DTADgAAAA4"]
[Wed Apr 01 06:15:10.036649 2026] [:error] [pid 23715:tid 23770] [client 74.248.134.58:46885] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "acxHbq-REzOruNbiT9w_0gAAAEk"]
[Wed Apr 01 06:15:10.551798 2026] [:error] [pid 23714:tid 23753] [client 74.248.134.58:35196] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acxHbkHxDDU2ETcG9DTAFgAAABM"]
[Wed Apr 01 06:15:11.062089 2026] [:error] [pid 24348:tid 24387] [client 74.248.134.58:30209] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acxHb20Vs69Y5nF1HA_PbgAAAYg"]
[Wed Apr 01 06:15:11.577873 2026] [:error] [pid 23716:tid 23806] [client 74.248.134.58:6883] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acxHb3VtFUg_mx-RYb5jPgAAAJI"]
[Wed Apr 01 06:15:12.089902 2026] [:error] [pid 23714:tid 23748] [client 74.248.134.58:46870] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "acxHcEHxDDU2ETcG9DTAHwAAAA4"]
[Wed Apr 01 06:15:12.605413 2026] [:error] [pid 23714:tid 23751] [client 74.248.134.58:35157] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acxHcEHxDDU2ETcG9DTAIwAAABE"]
[Wed Apr 01 06:15:13.115707 2026] [:error] [pid 23715:tid 23781] [client 74.248.134.58:30243] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acxHca-REzOruNbiT9w_-QAAAFQ"]
[Wed Apr 01 06:15:13.634673 2026] [:error] [pid 23716:tid 23800] [client 74.248.134.58:35140] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acxHcXVtFUg_mx-RYb5jQQAAAIw"]
[Wed Apr 01 06:15:14.146937 2026] [:error] [pid 24314:tid 24326] [client 74.248.134.58:30255] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "acxHcpRF3FCzjmMUX5bfYwAAAQg"]
[Wed Apr 01 06:15:14.680953 2026] [:error] [pid 23716:tid 23789] [client 74.248.134.58:6612] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/htto.php"] [unique_id "acxHcnVtFUg_mx-RYb5jRAAAAIE"]
[Wed Apr 01 06:15:15.194291 2026] [:error] [pid 24348:tid 24390] [client 74.248.134.58:6620] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/htto.php"] [unique_id "acxHc20Vs69Y5nF1HA_PfQAAAYs"]
[Wed Apr 01 06:15:15.713988 2026] [:error] [pid 23714:tid 23741] [client 74.248.134.58:35198] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/htto.php"] [unique_id "acxHc0HxDDU2ETcG9DTAKgAAAAc"]
[Wed Apr 01 06:15:16.225973 2026] [:error] [pid 23714:tid 23751] [client 74.248.134.58:35147] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/htto.php"] [unique_id "acxHdEHxDDU2ETcG9DTALQAAABE"]
[Wed Apr 01 06:15:16.754996 2026] [:error] [pid 23714:tid 23746] [client 74.248.134.58:49535] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xhejulap.php"] [unique_id "acxHdEHxDDU2ETcG9DTAMQAAAAw"]
[Wed Apr 01 06:15:17.269451 2026] [:error] [pid 23715:tid 23761] [client 74.248.134.58:49521] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xhejulap.php"] [unique_id "acxHda-REzOruNbiT9xACAAAAEA"]
[Wed Apr 01 06:15:17.793013 2026] [:error] [pid 24346:tid 24373] [client 74.248.134.58:49500] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xhejulap.php"] [unique_id "acxHdbc1l8kg9MhGHIKCmQAAAVU"]
[Wed Apr 01 06:15:18.305017 2026] [:error] [pid 23714:tid 23736] [client 74.248.134.58:6786] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xhejulap.php"] [unique_id "acxHdkHxDDU2ETcG9DTANQAAAAI"]
[Wed Apr 01 06:15:18.848930 2026] [:error] [pid 23715:tid 23764] [client 74.248.134.58:46890] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acxHdq-REzOruNbiT9xADAAAAEM"]
[Wed Apr 01 06:15:19.360193 2026] [:error] [pid 23715:tid 23785] [client 74.248.134.58:49514] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acxHd6-REzOruNbiT9xAEwAAAFg"]
[Wed Apr 01 06:15:19.889640 2026] [:error] [pid 23714:tid 23737] [client 74.248.134.58:46923] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acxHd0HxDDU2ETcG9DTAOwAAAAM"]
[Wed Apr 01 06:15:20.400740 2026] [:error] [pid 23714:tid 23755] [client 74.248.134.58:35184] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "acxHeEHxDDU2ETcG9DTAQAAAABU"]
[Wed Apr 01 06:15:20.913187 2026] [:error] [pid 23715:tid 23782] [client 74.248.134.58:6861] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8pewqMTX.php"] [unique_id "acxHeK-REzOruNbiT9xAGgAAAFU"]
[Wed Apr 01 06:15:21.428311 2026] [:error] [pid 24314:tid 24326] [client 74.248.134.58:46888] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dropdown.php"] [unique_id "acxHeZRF3FCzjmMUX5bfbwAAAQg"]
[Wed Apr 01 06:15:21.940390 2026] [:error] [pid 23715:tid 23765] [client 74.248.134.58:6898] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dropdown.php"] [unique_id "acxHea-REzOruNbiT9xAIAAAAEQ"]
[Wed Apr 01 06:15:22.455049 2026] [:error] [pid 23819:tid 23827] [client 74.248.134.58:46901] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "acxHetdfUS_37wFAM77hmgAAAMU"]
[Wed Apr 01 06:15:22.966207 2026] [:error] [pid 23819:tid 23838] [client 74.248.134.58:49513] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "acxHetdfUS_37wFAM77hngAAANA"]
[Wed Apr 01 06:15:23.480475 2026] [:error] [pid 23819:tid 23842] [client 74.248.134.58:6828] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "acxHe9dfUS_37wFAM77hogAAANQ"]
[Wed Apr 01 21:44:31.934853 2026] [proxy_fcgi:error] [pid 17856:tid 17866] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:32.252215 2026] [proxy_fcgi:error] [pid 17856:tid 17877] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:32.506708 2026] [proxy_fcgi:error] [pid 17856:tid 17881] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:32.773865 2026] [proxy_fcgi:error] [pid 17856:tid 17872] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:33.029597 2026] [proxy_fcgi:error] [pid 17856:tid 17860] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:33.346960 2026] [proxy_fcgi:error] [pid 17856:tid 17879] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:33.602801 2026] [proxy_fcgi:error] [pid 17856:tid 17859] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:33.868382 2026] [proxy_fcgi:error] [pid 17856:tid 17868] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:34.126479 2026] [proxy_fcgi:error] [pid 17856:tid 17869] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:34.437842 2026] [proxy_fcgi:error] [pid 17856:tid 17882] [client 52.156.211.140:36994] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:44:34.689930 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:36994] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "ac0hQj7Idlm5j9frhqRNDAAAAFI"]
[Wed Apr 01 21:44:35.196130 2026] [:error] [pid 8995:tid 9022] [client 52.156.211.140:37201] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "ac0hQ-onaBjs3qxcRefU3wAAABg"]
[Wed Apr 01 21:44:35.790509 2026] [:error] [pid 62559:tid 62568] [client 52.156.211.140:37207] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "ac0hQy7NKI8IaNKZFIesKwAAAUc"]
[Wed Apr 01 21:44:36.294306 2026] [:error] [pid 17856:tid 17882] [client 52.156.211.140:36995] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-true.php"] [unique_id "ac0hRD7Idlm5j9frhqRNFAAAAFg"]
[Wed Apr 01 21:44:36.882177 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:37202] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "ac0hRD7Idlm5j9frhqRNFwAAAEc"]
[Wed Apr 01 21:44:37.388476 2026] [:error] [pid 62559:tid 62579] [client 52.156.211.140:37197] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "ac0hRS7NKI8IaNKZFIesMAAAAVI"]
[Wed Apr 01 21:44:37.962651 2026] [:error] [pid 8909:tid 8960] [client 52.156.211.140:37189] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "ac0hRTvP_a0662gDl6DhmwAAANM"]
[Wed Apr 01 21:44:38.464598 2026] [:error] [pid 8909:tid 8965] [client 52.156.211.140:37220] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws42.php"] [unique_id "ac0hRjvP_a0662gDl6DhnQAAANg"]
[Wed Apr 01 21:44:40.160589 2026] [:error] [pid 8909:tid 8948] [client 52.156.211.140:37225] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ac0hSDvP_a0662gDl6DhqAAAAMc"]
[Wed Apr 01 21:44:40.703444 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:36998] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ac0hSD7Idlm5j9frhqRNGQAAAFI"]
[Wed Apr 01 21:44:41.833175 2026] [:error] [pid 62559:tid 62562] [client 52.156.211.140:36992] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ac0hSS7NKI8IaNKZFIesMwAAAUE"]
[Wed Apr 01 21:44:42.333948 2026] [:error] [pid 62559:tid 62571] [client 52.156.211.140:37208] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ac0hSi7NKI8IaNKZFIesNgAAAUo"]
[Wed Apr 01 21:44:42.835411 2026] [:error] [pid 8909:tid 8946] [client 52.156.211.140:37029] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac0hSjvP_a0662gDl6DhsQAAAMU"]
[Wed Apr 01 21:44:43.343296 2026] [:error] [pid 8909:tid 8941] [client 52.156.211.140:37013] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac0hSzvP_a0662gDl6DhswAAAMA"]
[Wed Apr 01 21:44:43.856169 2026] [:error] [pid 17856:tid 17862] [client 52.156.211.140:37006] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac0hSz7Idlm5j9frhqRNJgAAAEQ"]
[Wed Apr 01 21:44:44.364679 2026] [:error] [pid 17856:tid 17864] [client 52.156.211.140:37192] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac0hTD7Idlm5j9frhqRNKAAAAEY"]
[Wed Apr 01 21:44:44.870688 2026] [:error] [pid 62559:tid 62561] [client 52.156.211.140:37188] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac0hTC7NKI8IaNKZFIesOgAAAUA"]
[Wed Apr 01 21:44:45.400000 2026] [:error] [pid 8908:tid 8920] [client 52.156.211.140:37230] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac0hTfkmxtJXGnLdvgCaZQAAAIc"]
[Wed Apr 01 21:44:45.902947 2026] [:error] [pid 8910:tid 8981] [client 52.156.211.140:4047] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac0hTaJZINUcF3tYgExq9AAAAQ0"]
[Wed Apr 01 21:44:46.446945 2026] [:error] [pid 62559:tid 62567] [client 52.156.211.140:37233] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac0hTi7NKI8IaNKZFIesRQAAAUY"]
[Wed Apr 01 21:44:46.959695 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:37021] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "ac0hTj7Idlm5j9frhqRNRQAAAE4"]
[Wed Apr 01 21:44:47.489643 2026] [:error] [pid 8995:tid 9007] [client 52.156.211.140:37231] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "ac0hT-onaBjs3qxcRefU-gAAAAk"]
[Wed Apr 01 21:44:48.007745 2026] [:error] [pid 8909:tid 8950] [client 52.156.211.140:36997] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "ac0hUDvP_a0662gDl6DhugAAAMk"]
[Wed Apr 01 21:44:49.963833 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:37012] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/north1.php"] [unique_id "ac0hUT7Idlm5j9frhqRNTwAAAFI"]
[Wed Apr 01 21:44:50.468459 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:36996] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "ac0hUj7Idlm5j9frhqRNUgAAAEc"]
[Wed Apr 01 21:44:51.009193 2026] [:error] [pid 8908:tid 8916] [client 52.156.211.140:37003] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "ac0hU_kmxtJXGnLdvgCabwAAAIM"]
[Wed Apr 01 21:44:51.516777 2026] [:error] [pid 8909:tid 8961] [client 52.156.211.140:37227] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "ac0hUzvP_a0662gDl6DhvwAAANQ"]
[Wed Apr 01 21:44:52.082262 2026] [:error] [pid 17856:tid 17868] [client 52.156.211.140:37195] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eee.php"] [unique_id "ac0hVD7Idlm5j9frhqRNWwAAAEo"]
[Wed Apr 01 21:44:52.590061 2026] [:error] [pid 17856:tid 17880] [client 52.156.211.140:37243] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ac0hVD7Idlm5j9frhqRNXwAAAFY"]
[Wed Apr 01 21:44:53.175009 2026] [:error] [pid 17856:tid 17861] [client 52.156.211.140:37007] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ac0hVT7Idlm5j9frhqRNZAAAAEM"]
[Wed Apr 01 21:44:53.678977 2026] [:error] [pid 17856:tid 17882] [client 52.156.211.140:37232] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ac0hVT7Idlm5j9frhqRNZwAAAFg"]
[Wed Apr 01 21:44:54.180094 2026] [:error] [pid 8908:tid 8933] [client 52.156.211.140:37186] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ac0hVvkmxtJXGnLdvgCadgAAAJQ"]
[Wed Apr 01 21:44:54.686745 2026] [:error] [pid 8910:tid 8979] [client 52.156.211.140:37246] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0hVqJZINUcF3tYgExq-wAAAQs"]
[Wed Apr 01 21:44:55.188016 2026] [:error] [pid 8908:tid 8927] [client 52.156.211.140:37242] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0hV_kmxtJXGnLdvgCaeAAAAI4"]
[Wed Apr 01 21:44:55.713578 2026] [:error] [pid 8995:tid 9013] [client 52.156.211.140:37020] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0hV-onaBjs3qxcRefU_gAAAA8"]
[Wed Apr 01 21:44:56.255398 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:37219] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0hWPkmxtJXGnLdvgCafAAAAJI"]
[Wed Apr 01 21:44:56.756091 2026] [:error] [pid 8909:tid 8943] [client 52.156.211.140:36993] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "ac0hWDvP_a0662gDl6DhwgAAAMI"]
[Wed Apr 01 21:44:57.326366 2026] [:error] [pid 17856:tid 17878] [client 52.156.211.140:37215] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "ac0hWT7Idlm5j9frhqRNcQAAAFQ"]
[Wed Apr 01 21:44:57.844590 2026] [:error] [pid 62559:tid 62567] [client 52.156.211.140:37022] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "ac0hWS7NKI8IaNKZFIesTgAAAUY"]
[Wed Apr 01 21:44:58.443734 2026] [:error] [pid 8995:tid 9001] [client 52.156.211.140:37023] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "ac0hWuonaBjs3qxcRefVAgAAAAM"]
[Wed Apr 01 21:44:58.950315 2026] [:error] [pid 8909:tid 8944] [client 52.156.211.140:37206] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0hWjvP_a0662gDl6DhxgAAAMM"]
[Wed Apr 01 21:44:59.510262 2026] [:error] [pid 17856:tid 17864] [client 52.156.211.140:37237] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0hWz7Idlm5j9frhqRNcwAAAEY"]
[Wed Apr 01 21:45:00.011258 2026] [:error] [pid 8995:tid 9014] [client 52.156.211.140:4046] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0hXOonaBjs3qxcRefVBgAAABA"]
[Wed Apr 01 21:45:00.518159 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:37234] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0hXPkmxtJXGnLdvgCaiQAAAJI"]
[Wed Apr 01 21:45:01.027656 2026] [:error] [pid 8909:tid 8957] [client 52.156.211.140:37222] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ac0hXTvP_a0662gDl6DhyAAAANA"]
[Wed Apr 01 21:45:02.543139 2026] [:error] [pid 8995:tid 9017] [client 52.156.211.140:37236] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ac0hXuonaBjs3qxcRefVBwAAABM"]
[Wed Apr 01 21:45:04.045710 2026] [:error] [pid 8908:tid 8936] [client 52.156.211.140:37010] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ac0hYPkmxtJXGnLdvgCajwAAAJc"]
[Wed Apr 01 21:45:04.553329 2026] [:error] [pid 17856:tid 17879] [client 52.156.211.140:37226] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ac0hYD7Idlm5j9frhqRNewAAAFU"]
[Wed Apr 01 21:45:05.105678 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:37212] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "ac0hYT7Idlm5j9frhqRNgQAAAFI"]
[Wed Apr 01 21:45:05.625957 2026] [:error] [pid 17856:tid 17866] [client 52.156.211.140:37247] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "ac0hYT7Idlm5j9frhqRNhgAAAEg"]
[Wed Apr 01 21:45:06.126919 2026] [:error] [pid 8909:tid 8947] [client 52.156.211.140:4080] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "ac0hYjvP_a0662gDl6Dh0QAAAMY"]
[Wed Apr 01 21:45:06.640524 2026] [:error] [pid 62559:tid 62575] [client 52.156.211.140:37019] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "ac0hYi7NKI8IaNKZFIesUgAAAU4"]
[Wed Apr 01 21:45:08.259501 2026] [:error] [pid 8995:tid 9022] [client 52.156.211.140:4037] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac0hZOonaBjs3qxcRefVDQAAABg"]
[Wed Apr 01 21:45:08.777176 2026] [:error] [pid 17856:tid 17878] [client 52.156.211.140:37214] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac0hZD7Idlm5j9frhqRNiwAAAFQ"]
[Wed Apr 01 21:45:09.362420 2026] [:error] [pid 8908:tid 8933] [client 52.156.211.140:37184] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac0hZfkmxtJXGnLdvgCalgAAAJQ"]
[Wed Apr 01 21:45:09.886729 2026] [:error] [pid 17856:tid 17873] [client 52.156.211.140:37045] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac0hZT7Idlm5j9frhqRNjwAAAE8"]
[Wed Apr 01 21:45:10.454167 2026] [:error] [pid 17856:tid 17870] [client 52.156.211.140:37008] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0hZj7Idlm5j9frhqRNlQAAAEw"]
[Wed Apr 01 21:45:10.957035 2026] [:error] [pid 17856:tid 17873] [client 52.156.211.140:37054] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0hZj7Idlm5j9frhqRNmQAAAE8"]
[Wed Apr 01 21:45:11.466266 2026] [:error] [pid 8910:tid 8986] [client 52.156.211.140:4069] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0hZ6JZINUcF3tYgExrAwAAARI"]
[Wed Apr 01 21:45:11.967831 2026] [:error] [pid 8908:tid 8917] [client 52.156.211.140:37205] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0hZ_kmxtJXGnLdvgCamAAAAIQ"]
[Wed Apr 01 21:45:13.048251 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:37046] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "ac0haT7Idlm5j9frhqRNogAAAEc"]
[Wed Apr 01 21:45:13.549436 2026] [:error] [pid 17856:tid 17863] [client 52.156.211.140:37025] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "ac0haT7Idlm5j9frhqRNpQAAAEU"]
[Wed Apr 01 21:45:14.050499 2026] [:error] [pid 8909:tid 8961] [client 52.156.211.140:37015] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "ac0hajvP_a0662gDl6Dh3QAAANQ"]
[Wed Apr 01 21:45:14.572753 2026] [:error] [pid 8908:tid 8915] [client 52.156.211.140:37240] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ad.php"] [unique_id "ac0havkmxtJXGnLdvgCamgAAAII"]
[Wed Apr 01 21:45:15.116159 2026] [:error] [pid 8909:tid 8943] [client 52.156.211.140:4055] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "ac0hazvP_a0662gDl6Dh4AAAAMI"]
[Wed Apr 01 21:45:15.622876 2026] [:error] [pid 62559:tid 62582] [client 52.156.211.140:37030] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "ac0hay7NKI8IaNKZFIesVAAAAVU"]
[Wed Apr 01 21:45:16.227301 2026] [:error] [pid 62559:tid 62579] [client 52.156.211.140:37009] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "ac0hbC7NKI8IaNKZFIesVwAAAVI"]
[Wed Apr 01 21:45:16.743206 2026] [:error] [pid 8910:tid 8971] [client 52.156.211.140:37238] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z60.php"] [unique_id "ac0hbKJZINUcF3tYgExrBwAAAQM"]
[Wed Apr 01 21:45:17.336996 2026] [:error] [pid 8908:tid 8917] [client 52.156.211.140:37040] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "ac0hbfkmxtJXGnLdvgCapAAAAIQ"]
[Wed Apr 01 21:45:17.843406 2026] [:error] [pid 17856:tid 17873] [client 52.156.211.140:3976] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "ac0hbT7Idlm5j9frhqRNqQAAAE8"]
[Wed Apr 01 21:45:19.433329 2026] [:error] [pid 8908:tid 8930] [client 52.156.211.140:37194] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "ac0hb_kmxtJXGnLdvgCapwAAAJE"]
[Wed Apr 01 21:45:19.953563 2026] [:error] [pid 8908:tid 8913] [client 52.156.211.140:37211] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "ac0hb_kmxtJXGnLdvgCaqgAAAIA"]
[Wed Apr 01 21:45:20.469786 2026] [:error] [pid 8910:tid 8991] [client 52.156.211.140:4041] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0hcKJZINUcF3tYgExrCwAAARc"]
[Wed Apr 01 21:45:20.982229 2026] [:error] [pid 8910:tid 8974] [client 52.156.211.140:37209] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0hcKJZINUcF3tYgExrDAAAAQY"]
[Wed Apr 01 21:45:21.491953 2026] [:error] [pid 8908:tid 8919] [client 52.156.211.140:37210] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0hcfkmxtJXGnLdvgCarwAAAIY"]
[Wed Apr 01 21:45:21.996568 2026] [:error] [pid 8910:tid 8976] [client 52.156.211.140:36999] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0hcaJZINUcF3tYgExrDgAAAQg"]
[Wed Apr 01 21:45:22.552897 2026] [:error] [pid 8910:tid 8990] [client 52.156.211.140:37190] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "ac0hcqJZINUcF3tYgExrEQAAARY"]
[Wed Apr 01 21:45:23.055819 2026] [:error] [pid 8910:tid 8972] [client 52.156.211.140:4036] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "ac0hc6JZINUcF3tYgExrFAAAAQQ"]
[Wed Apr 01 21:45:23.565016 2026] [:error] [pid 8908:tid 8935] [client 52.156.211.140:37235] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "ac0hc_kmxtJXGnLdvgCasQAAAJY"]
[Wed Apr 01 21:45:24.068773 2026] [:error] [pid 8909:tid 8963] [client 52.156.211.140:37051] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sql.php"] [unique_id "ac0hdDvP_a0662gDl6Dh7wAAANY"]
[Wed Apr 01 21:45:24.583195 2026] [:error] [pid 8909:tid 8951] [client 52.156.211.140:37014] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "ac0hdDvP_a0662gDl6Dh8AAAAMo"]
[Wed Apr 01 21:45:25.100491 2026] [:error] [pid 8909:tid 8964] [client 52.156.211.140:37049] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "ac0hdTvP_a0662gDl6Dh8wAAANc"]
[Wed Apr 01 21:45:25.606430 2026] [:error] [pid 17856:tid 17880] [client 52.156.211.140:37001] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "ac0hdT7Idlm5j9frhqRNtQAAAFY"]
[Wed Apr 01 21:45:26.118747 2026] [:error] [pid 17856:tid 17869] [client 52.156.211.140:3992] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "ac0hdj7Idlm5j9frhqRNtwAAAEs"]
[Wed Apr 01 21:45:26.621462 2026] [:error] [pid 62559:tid 62563] [client 52.156.211.140:37005] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "ac0hdi7NKI8IaNKZFIesbAAAAUI"]
[Wed Apr 01 21:45:27.703809 2026] [:error] [pid 8908:tid 8926] [client 52.156.211.140:4040] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "ac0hd_kmxtJXGnLdvgCaugAAAI0"]
[Wed Apr 01 21:45:28.206724 2026] [:error] [pid 62559:tid 62564] [client 52.156.211.140:37042] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "ac0heC7NKI8IaNKZFIesbgAAAUM"]
[Wed Apr 01 21:45:28.706865 2026] [:error] [pid 62559:tid 62583] [client 52.156.211.140:37044] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "ac0heC7NKI8IaNKZFIesbwAAAVY"]
[Wed Apr 01 21:45:29.210661 2026] [:error] [pid 8995:tid 9003] [client 52.156.211.140:37187] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "ac0heeonaBjs3qxcRefVIwAAAAU"]
[Wed Apr 01 21:45:29.713976 2026] [:error] [pid 62559:tid 62580] [client 52.156.211.140:4042] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "ac0heS7NKI8IaNKZFIescQAAAVM"]
[Wed Apr 01 21:45:30.268824 2026] [:error] [pid 8909:tid 8961] [client 52.156.211.140:37241] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "ac0hejvP_a0662gDl6Dh9wAAANQ"]
[Wed Apr 01 21:45:31.072471 2026] [:error] [pid 8909:tid 8960] [client 52.156.211.140:37244] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "ac0hezvP_a0662gDl6Dh-QAAANM"]
[Wed Apr 01 21:45:31.636806 2026] [:error] [pid 62559:tid 62568] [client 52.156.211.140:37224] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "ac0hey7NKI8IaNKZFIesdAAAAUc"]
[Wed Apr 01 21:45:32.146170 2026] [:error] [pid 8910:tid 8989] [client 52.156.211.140:37004] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "ac0hfKJZINUcF3tYgExrHQAAARU"]
[Wed Apr 01 21:45:32.730322 2026] [:error] [pid 8908:tid 8926] [client 52.156.211.140:37048] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "ac0hfPkmxtJXGnLdvgCaxQAAAI0"]
[Wed Apr 01 21:45:33.237491 2026] [:error] [pid 8910:tid 8977] [client 52.156.211.140:4094] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "ac0hfaJZINUcF3tYgExrHwAAAQk"]
[Wed Apr 01 21:45:33.807552 2026] [:error] [pid 8908:tid 8914] [client 52.156.211.140:37237] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uang.php"] [unique_id "ac0hffkmxtJXGnLdvgCayQAAAIE"]
[Wed Apr 01 21:45:34.319784 2026] [proxy_fcgi:error] [pid 8910:tid 8973] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:34.579734 2026] [proxy_fcgi:error] [pid 8910:tid 8984] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:34.833672 2026] [proxy_fcgi:error] [pid 8910:tid 8981] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:35.090586 2026] [proxy_fcgi:error] [pid 8910:tid 8974] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:35.344496 2026] [proxy_fcgi:error] [pid 8910:tid 8989] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:35.598450 2026] [proxy_fcgi:error] [pid 8910:tid 8979] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:35.862665 2026] [proxy_fcgi:error] [pid 8910:tid 8984] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:36.120183 2026] [proxy_fcgi:error] [pid 8910:tid 8969] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:36.377470 2026] [proxy_fcgi:error] [pid 8910:tid 8991] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:36.634221 2026] [proxy_fcgi:error] [pid 8910:tid 8968] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:36.889736 2026] [proxy_fcgi:error] [pid 8910:tid 8979] [client 52.156.211.140:37239] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:45:37.150300 2026] [:error] [pid 8910:tid 8973] [client 52.156.211.140:37239] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "ac0hgaJZINUcF3tYgExrQAAAAQU"]
[Wed Apr 01 21:45:37.672651 2026] [:error] [pid 8909:tid 8947] [client 52.156.211.140:4052] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "ac0hgTvP_a0662gDl6Dh_gAAAMY"]
[Wed Apr 01 21:45:39.226005 2026] [:error] [pid 8910:tid 8983] [client 52.156.211.140:3996] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "ac0hg6JZINUcF3tYgExrUQAAAQ8"]
[Wed Apr 01 21:45:39.725997 2026] [:error] [pid 8908:tid 8914] [client 52.156.211.140:37016] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws40.php"] [unique_id "ac0hg_kmxtJXGnLdvgCa3QAAAIE"]
[Wed Apr 01 21:45:40.228766 2026] [:error] [pid 17856:tid 17860] [client 52.156.211.140:37034] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ac0hhD7Idlm5j9frhqRNuwAAAEI"]
[Wed Apr 01 21:45:40.730565 2026] [:error] [pid 8909:tid 8949] [client 52.156.211.140:37039] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ac0hhDvP_a0662gDl6DiAAAAAMg"]
[Wed Apr 01 21:45:41.234179 2026] [:error] [pid 8909:tid 8958] [client 52.156.211.140:4039] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ac0hhTvP_a0662gDl6DiAwAAANE"]
[Wed Apr 01 21:45:41.752260 2026] [:error] [pid 8909:tid 8955] [client 52.156.211.140:4079] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ac0hhTvP_a0662gDl6DiBQAAAM4"]
[Wed Apr 01 21:45:43.267048 2026] [:error] [pid 8908:tid 8924] [client 52.156.211.140:37017] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "ac0hh_kmxtJXGnLdvgCa5QAAAIs"]
[Wed Apr 01 21:45:43.775449 2026] [:error] [pid 17856:tid 17871] [client 52.156.211.140:37052] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "ac0hhz7Idlm5j9frhqRNyQAAAE0"]
[Wed Apr 01 21:45:44.281024 2026] [:error] [pid 17856:tid 17874] [client 52.156.211.140:3990] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "ac0hiD7Idlm5j9frhqRNywAAAFA"]
[Wed Apr 01 21:45:44.788163 2026] [:error] [pid 17856:tid 17880] [client 52.156.211.140:37053] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awh.php"] [unique_id "ac0hiD7Idlm5j9frhqRNzwAAAFY"]
[Wed Apr 01 21:45:45.290079 2026] [:error] [pid 8909:tid 8947] [client 52.156.211.140:4058] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "ac0hiTvP_a0662gDl6DiCgAAAMY"]
[Wed Apr 01 21:45:46.811912 2026] [:error] [pid 8995:tid 9007] [client 52.156.211.140:4083] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "ac0hiuonaBjs3qxcRefVNgAAAAk"]
[Wed Apr 01 21:45:47.318516 2026] [:error] [pid 8995:tid 9011] [client 52.156.211.140:4064] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "ac0hi-onaBjs3qxcRefVNwAAAA0"]
[Wed Apr 01 21:45:47.820365 2026] [:error] [pid 62559:tid 62564] [client 52.156.211.140:3988] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellerr.php"] [unique_id "ac0hiy7NKI8IaNKZFIesiwAAAUM"]
[Wed Apr 01 21:45:48.331756 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:4028] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0hjD7Idlm5j9frhqRN1QAAAEc"]
[Wed Apr 01 21:45:49.841214 2026] [:error] [pid 17856:tid 17861] [client 52.156.211.140:37043] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0hjT7Idlm5j9frhqRN4gAAAEM"]
[Wed Apr 01 21:45:50.346180 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:37011] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0hjj7Idlm5j9frhqRN5gAAAE4"]
[Wed Apr 01 21:45:50.846032 2026] [:error] [pid 62559:tid 62569] [client 52.156.211.140:37037] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0hji7NKI8IaNKZFIeskwAAAUg"]
[Wed Apr 01 21:45:51.349996 2026] [:error] [pid 62559:tid 62572] [client 52.156.211.140:37196] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "ac0hjy7NKI8IaNKZFIeslQAAAUs"]
[Wed Apr 01 21:45:51.874163 2026] [:error] [pid 62559:tid 62565] [client 52.156.211.140:3982] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "ac0hjy7NKI8IaNKZFIesmQAAAUQ"]
[Wed Apr 01 21:45:53.377800 2026] [:error] [pid 17856:tid 17879] [client 52.156.211.140:3978] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "ac0hkT7Idlm5j9frhqRN8wAAAFU"]
[Wed Apr 01 21:45:53.896130 2026] [:error] [pid 17856:tid 17877] [client 52.156.211.140:4075] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "ac0hkT7Idlm5j9frhqRN9QAAAFM"]
[Wed Apr 01 21:45:54.414349 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:37047] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac0hkj7Idlm5j9frhqRN-wAAAE4"]
[Wed Apr 01 21:45:54.927325 2026] [:error] [pid 8910:tid 8984] [client 52.156.211.140:4068] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac0hkqJZINUcF3tYgExrXQAAARA"]
[Wed Apr 01 21:45:56.434829 2026] [:error] [pid 17856:tid 17867] [client 52.156.211.140:3970] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac0hlD7Idlm5j9frhqRN_wAAAEk"]
[Wed Apr 01 21:45:56.966854 2026] [:error] [pid 8908:tid 8919] [client 52.156.211.140:37055] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac0hlPkmxtJXGnLdvgCa-AAAAIY"]
[Wed Apr 01 21:45:57.475381 2026] [:error] [pid 8908:tid 8932] [client 52.156.211.140:4038] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ac0hlfkmxtJXGnLdvgCa-gAAAJM"]
[Wed Apr 01 21:45:57.995842 2026] [:error] [pid 8908:tid 8937] [client 52.156.211.140:3921] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ac0hlfkmxtJXGnLdvgCa_AAAAJg"]
[Wed Apr 01 21:45:58.526960 2026] [:error] [pid 8909:tid 8948] [client 52.156.211.140:3991] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ac0hljvP_a0662gDl6DiEgAAAMc"]
[Wed Apr 01 21:45:59.623632 2026] [:error] [pid 17856:tid 17864] [client 52.156.211.140:3985] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ac0hlz7Idlm5j9frhqROAAAAAEY"]
[Wed Apr 01 21:46:00.724433 2026] [:error] [pid 8908:tid 8936] [client 52.156.211.140:4088] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "ac0hmPkmxtJXGnLdvgCbAAAAAJc"]
[Wed Apr 01 21:46:01.281492 2026] [:error] [pid 8909:tid 8958] [client 52.156.211.140:3986] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "ac0hmTvP_a0662gDl6DiIAAAANE"]
[Wed Apr 01 21:46:01.788466 2026] [:error] [pid 62559:tid 62565] [client 52.156.211.140:37041] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "ac0hmS7NKI8IaNKZFIesrQAAAUQ"]
[Wed Apr 01 21:46:02.290319 2026] [:error] [pid 8909:tid 8945] [client 52.156.211.140:3995] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ant.php"] [unique_id "ac0hmjvP_a0662gDl6DiJwAAAMQ"]
[Wed Apr 01 21:46:02.794482 2026] [:error] [pid 8910:tid 8981] [client 52.156.211.140:37008] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "ac0hmqJZINUcF3tYgExrZgAAAQ0"]
[Wed Apr 01 21:46:03.370836 2026] [:error] [pid 8910:tid 8970] [client 52.156.211.140:4078] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "ac0hm6JZINUcF3tYgExraQAAAQI"]
[Wed Apr 01 21:46:03.870446 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:4033] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "ac0hmzvP_a0662gDl6DiOgAAANU"]
[Wed Apr 01 21:46:04.372317 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:3933] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "ac0hnPkmxtJXGnLdvgCbCQAAAJI"]
[Wed Apr 01 21:46:04.878785 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:37028] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "ac0hnDvP_a0662gDl6DiRAAAANU"]
[Wed Apr 01 21:46:05.443821 2026] [:error] [pid 8909:tid 8952] [client 52.156.211.140:37228] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "ac0hnTvP_a0662gDl6DiVQAAAMs"]
[Wed Apr 01 21:46:05.949605 2026] [:error] [pid 17856:tid 17861] [client 52.156.211.140:37000] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "ac0hnT7Idlm5j9frhqRODAAAAEM"]
[Wed Apr 01 21:46:06.452176 2026] [:error] [pid 17856:tid 17867] [client 52.156.211.140:37026] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "ac0hnj7Idlm5j9frhqROEQAAAEk"]
[Wed Apr 01 21:46:06.958148 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:3933] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ac0hnjvP_a0662gDl6DiXAAAANU"]
[Wed Apr 01 21:46:07.463971 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:4065] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ac0hnz7Idlm5j9frhqROHgAAAEc"]
[Wed Apr 01 21:46:07.966178 2026] [:error] [pid 8909:tid 8965] [client 52.156.211.140:37217] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ac0hnzvP_a0662gDl6DiYwAAANg"]
[Wed Apr 01 21:46:08.498922 2026] [:error] [pid 8908:tid 8913] [client 52.156.211.140:4034] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ac0hoPkmxtJXGnLdvgCbGgAAAIA"]
[Wed Apr 01 21:46:09.011646 2026] [:error] [pid 8908:tid 8936] [client 52.156.211.140:4020] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "ac0hofkmxtJXGnLdvgCbIwAAAJc"]
[Wed Apr 01 21:46:09.546011 2026] [:error] [pid 8909:tid 8955] [client 52.156.211.140:37216] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "ac0hoTvP_a0662gDl6DiaQAAAM4"]
[Wed Apr 01 21:46:10.063088 2026] [:error] [pid 17856:tid 17874] [client 52.156.211.140:4066] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "ac0hoj7Idlm5j9frhqROMgAAAFA"]
[Wed Apr 01 21:46:10.571062 2026] [:error] [pid 8995:tid 9016] [client 52.156.211.140:3934] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classgoto24.php"] [unique_id "ac0houonaBjs3qxcRefVSQAAABI"]
[Wed Apr 01 21:46:11.124851 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:4001] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ac0hoz7Idlm5j9frhqROOQAAAFI"]
[Wed Apr 01 21:46:11.672279 2026] [:error] [pid 8908:tid 8917] [client 52.156.211.140:37200] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ac0ho_kmxtJXGnLdvgCbKwAAAIQ"]
[Wed Apr 01 21:46:12.174700 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:37191] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ac0hpD7Idlm5j9frhqROPQAAAE4"]
[Wed Apr 01 21:46:12.740208 2026] [:error] [pid 17856:tid 17861] [client 52.156.211.140:3981] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ac0hpD7Idlm5j9frhqROPwAAAEM"]
[Wed Apr 01 21:46:13.242781 2026] [:error] [pid 17856:tid 17867] [client 52.156.211.140:37024] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "ac0hpT7Idlm5j9frhqROQgAAAEk"]
[Wed Apr 01 21:46:13.742164 2026] [:error] [pid 17856:tid 17879] [client 52.156.211.140:37193] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "ac0hpT7Idlm5j9frhqRORgAAAFU"]
[Wed Apr 01 21:46:14.250850 2026] [:error] [pid 62559:tid 62569] [client 52.156.211.140:4060] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "ac0hpi7NKI8IaNKZFIes1wAAAUg"]
[Wed Apr 01 21:46:14.755269 2026] [:error] [pid 8910:tid 8973] [client 52.156.211.140:4050] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws43.php"] [unique_id "ac0hpqJZINUcF3tYgExrfQAAAQU"]
[Wed Apr 01 21:46:15.262634 2026] [:error] [pid 62559:tid 62567] [client 52.156.211.140:4063] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "ac0hpy7NKI8IaNKZFIes2gAAAUY"]
[Wed Apr 01 21:46:15.781937 2026] [:error] [pid 62559:tid 62584] [client 52.156.211.140:37002] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "ac0hpy7NKI8IaNKZFIes2wAAAVc"]
[Wed Apr 01 21:46:16.322145 2026] [:error] [pid 62559:tid 62563] [client 52.156.211.140:4023] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "ac0hqC7NKI8IaNKZFIes3QAAAUI"]
[Wed Apr 01 21:46:16.843906 2026] [:error] [pid 17856:tid 17858] [client 52.156.211.140:4086] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gec.php"] [unique_id "ac0hqD7Idlm5j9frhqROTAAAAEA"]
[Wed Apr 01 21:46:17.370077 2026] [:error] [pid 8909:tid 8949] [client 52.156.211.140:4057] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ac0hqTvP_a0662gDl6DibgAAAMg"]
[Wed Apr 01 21:46:17.882850 2026] [:error] [pid 8910:tid 8969] [client 52.156.211.140:4091] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ac0hqaJZINUcF3tYgExrfwAAAQE"]
[Wed Apr 01 21:46:18.426919 2026] [:error] [pid 8910:tid 8979] [client 52.156.211.140:3999] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ac0hqqJZINUcF3tYgExrgQAAAQs"]
[Wed Apr 01 21:46:18.936249 2026] [:error] [pid 17856:tid 17861] [client 52.156.211.140:3983] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ac0hqj7Idlm5j9frhqROVgAAAEM"]
[Wed Apr 01 21:46:19.541480 2026] [:error] [pid 17856:tid 17858] [client 52.156.211.140:37229] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "ac0hqz7Idlm5j9frhqROWgAAAEA"]
[Wed Apr 01 21:46:20.043030 2026] [:error] [pid 17856:tid 17879] [client 52.156.211.140:37199] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "ac0hrD7Idlm5j9frhqROXAAAAFU"]
[Wed Apr 01 21:46:20.550205 2026] [:error] [pid 62559:tid 62572] [client 52.156.211.140:3969] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "ac0hrC7NKI8IaNKZFIes_wAAAUs"]
[Wed Apr 01 21:46:21.063249 2026] [:error] [pid 8908:tid 8927] [client 52.156.211.140:3935] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "ac0hrfkmxtJXGnLdvgCbOQAAAI4"]
[Wed Apr 01 21:46:21.565648 2026] [:error] [pid 17856:tid 17875] [client 52.156.211.140:4059] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "ac0hrT7Idlm5j9frhqROZAAAAFE"]
[Wed Apr 01 21:46:22.067450 2026] [:error] [pid 8995:tid 9012] [client 52.156.211.140:4054] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "ac0hruonaBjs3qxcRefVUAAAAA4"]
[Wed Apr 01 21:46:22.575570 2026] [:error] [pid 17856:tid 17877] [client 52.156.211.140:3951] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "ac0hrj7Idlm5j9frhqROZQAAAFM"]
[Wed Apr 01 21:46:23.077373 2026] [:error] [pid 8910:tid 8987] [client 52.156.211.140:3929] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "ac0hr6JZINUcF3tYgExrigAAARM"]
[Wed Apr 01 21:46:24.588730 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:37223] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ac0hsD7Idlm5j9frhqROagAAAEc"]
[Wed Apr 01 21:46:25.090699 2026] [:error] [pid 8995:tid 9018] [client 52.156.211.140:37038] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ac0hseonaBjs3qxcRefVVQAAABQ"]
[Wed Apr 01 21:46:25.606550 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:4007] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ac0hsT7Idlm5j9frhqRObAAAAE4"]
[Wed Apr 01 21:46:26.107600 2026] [:error] [pid 8995:tid 9007] [client 52.156.211.140:4032] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ac0hsuonaBjs3qxcRefVVgAAAAk"]
[Wed Apr 01 21:46:26.643807 2026] [:error] [pid 17856:tid 17859] [client 52.156.211.140:4031] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ac0hsj7Idlm5j9frhqROcAAAAEE"]
[Wed Apr 01 21:46:28.161067 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:37031] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ac0htD7Idlm5j9frhqROeAAAAE4"]
[Wed Apr 01 21:46:28.675872 2026] [:error] [pid 8995:tid 9019] [client 52.156.211.140:4081] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ac0htOonaBjs3qxcRefVWQAAABU"]
[Wed Apr 01 21:46:29.177838 2026] [:error] [pid 8910:tid 8980] [client 52.156.211.140:37213] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ac0htaJZINUcF3tYgExrkAAAAQw"]
[Wed Apr 01 21:46:29.709348 2026] [:error] [pid 8995:tid 8999] [client 52.156.211.140:3918] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac0hteonaBjs3qxcRefVWwAAAAE"]
[Wed Apr 01 21:46:31.234507 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:3971] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac0ht_kmxtJXGnLdvgCbSgAAAJI"]
[Wed Apr 01 21:46:31.739089 2026] [:error] [pid 8908:tid 8937] [client 52.156.211.140:3910] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac0ht_kmxtJXGnLdvgCbSwAAAJg"]
[Wed Apr 01 21:46:32.246295 2026] [:error] [pid 8908:tid 8921] [client 52.156.211.140:3980] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac0huPkmxtJXGnLdvgCbTAAAAIg"]
[Wed Apr 01 21:46:32.749571 2026] [:error] [pid 8909:tid 8961] [client 52.156.211.140:37035] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ac0huDvP_a0662gDl6DifgAAANQ"]
[Wed Apr 01 21:46:33.260737 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:37204] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ac0huT7Idlm5j9frhqROfQAAAE4"]
[Wed Apr 01 21:46:33.763296 2026] [:error] [pid 8909:tid 8945] [client 52.156.211.140:4082] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ac0huTvP_a0662gDl6DifwAAAMQ"]
[Wed Apr 01 21:46:34.272786 2026] [:error] [pid 8908:tid 8929] [client 52.156.211.140:4048] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ac0huvkmxtJXGnLdvgCbTQAAAJA"]
[Wed Apr 01 21:46:34.809155 2026] [:error] [pid 8995:tid 9003] [client 52.156.211.140:37203] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vaza.php"] [unique_id "ac0huuonaBjs3qxcRefVYwAAAAU"]
[Wed Apr 01 21:46:35.310826 2026] [:error] [pid 8908:tid 8930] [client 52.156.211.140:4084] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vaza.php"] [unique_id "ac0hu_kmxtJXGnLdvgCbTwAAAJE"]
[Wed Apr 01 21:46:35.811024 2026] [:error] [pid 8910:tid 8992] [client 52.156.211.140:3922] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vaza.php"] [unique_id "ac0hu6JZINUcF3tYgExrlwAAARg"]
[Wed Apr 01 21:46:36.334818 2026] [proxy_fcgi:error] [pid 8910:tid 8981] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:36.589388 2026] [proxy_fcgi:error] [pid 8910:tid 8985] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:37.098510 2026] [proxy_fcgi:error] [pid 8910:tid 8982] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:37.352563 2026] [proxy_fcgi:error] [pid 8910:tid 8969] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:37.606126 2026] [proxy_fcgi:error] [pid 8910:tid 8979] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:38.114420 2026] [proxy_fcgi:error] [pid 8910:tid 8980] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:38.368743 2026] [proxy_fcgi:error] [pid 8910:tid 8978] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:38.624148 2026] [proxy_fcgi:error] [pid 8910:tid 8989] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:38.878208 2026] [proxy_fcgi:error] [pid 8910:tid 8988] [client 52.156.211.140:4043] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:46:39.127793 2026] [:error] [pid 8910:tid 8975] [client 52.156.211.140:4043] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "ac0hv6JZINUcF3tYgExrqAAAAQc"]
[Wed Apr 01 21:46:39.628895 2026] [:error] [pid 17856:tid 17858] [client 52.156.211.140:4035] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "ac0hvz7Idlm5j9frhqROigAAAEA"]
[Wed Apr 01 21:46:40.142588 2026] [:error] [pid 17856:tid 17875] [client 52.156.211.140:37050] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "ac0hwD7Idlm5j9frhqROjQAAAFE"]
[Wed Apr 01 21:46:40.653423 2026] [:error] [pid 17856:tid 17877] [client 52.156.211.140:3853] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xc.php"] [unique_id "ac0hwD7Idlm5j9frhqROjwAAAFM"]
[Wed Apr 01 21:46:41.197574 2026] [:error] [pid 17856:tid 17863] [client 52.156.211.140:3961] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac0hwT7Idlm5j9frhqROkgAAAEU"]
[Wed Apr 01 21:46:41.730885 2026] [:error] [pid 17856:tid 17868] [client 52.156.211.140:37198] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac0hwT7Idlm5j9frhqROlwAAAEo"]
[Wed Apr 01 21:46:42.286056 2026] [:error] [pid 17856:tid 17875] [client 52.156.211.140:3849] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac0hwj7Idlm5j9frhqROmAAAAFE"]
[Wed Apr 01 21:46:42.788780 2026] [:error] [pid 62559:tid 62572] [client 52.156.211.140:4018] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac0hwi7NKI8IaNKZFIetFQAAAUs"]
[Wed Apr 01 21:46:43.290056 2026] [:error] [pid 8995:tid 9016] [client 52.156.211.140:4053] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "ac0hw-onaBjs3qxcRefVeQAAABI"]
[Wed Apr 01 21:46:43.803335 2026] [:error] [pid 8995:tid 9003] [client 52.156.211.140:37241] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "ac0hw-onaBjs3qxcRefVewAAAAU"]
[Wed Apr 01 21:46:44.308470 2026] [:error] [pid 62559:tid 62582] [client 52.156.211.140:4073] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "ac0hxC7NKI8IaNKZFIetGgAAAVU"]
[Wed Apr 01 21:46:44.833879 2026] [:error] [pid 8910:tid 8969] [client 52.156.211.140:4015] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "ac0hxKJZINUcF3tYgExrrgAAAQE"]
[Wed Apr 01 21:46:45.360734 2026] [:error] [pid 17856:tid 17874] [client 52.156.211.140:3977] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ac0hxT7Idlm5j9frhqROngAAAFA"]
[Wed Apr 01 21:46:45.863995 2026] [:error] [pid 8910:tid 8970] [client 52.156.211.140:37190] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ac0hxaJZINUcF3tYgExrrwAAAQI"]
[Wed Apr 01 21:46:46.388604 2026] [:error] [pid 8910:tid 8980] [client 52.156.211.140:4010] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ac0hxqJZINUcF3tYgExrsQAAAQw"]
[Wed Apr 01 21:46:47.905616 2026] [:error] [pid 8910:tid 8978] [client 52.156.211.140:37216] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ac0hx6JZINUcF3tYgExrswAAAQo"]
[Wed Apr 01 21:46:48.411289 2026] [:error] [pid 8909:tid 8954] [client 52.156.211.140:4056] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "ac0hyDvP_a0662gDl6DiiwAAAM0"]
[Wed Apr 01 21:46:48.921066 2026] [:error] [pid 62559:tid 62562] [client 52.156.211.140:37036] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "ac0hyC7NKI8IaNKZFIetKgAAAUE"]
[Wed Apr 01 21:46:49.450661 2026] [:error] [pid 62559:tid 62585] [client 52.156.211.140:37245] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "ac0hyS7NKI8IaNKZFIetLAAAAVg"]
[Wed Apr 01 21:46:50.964361 2026] [:error] [pid 8909:tid 8943] [client 52.156.211.140:37033] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/20.php"] [unique_id "ac0hyjvP_a0662gDl6DikgAAAMI"]
[Wed Apr 01 21:46:51.466340 2026] [:error] [pid 62559:tid 62567] [client 52.156.211.140:4062] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "ac0hyy7NKI8IaNKZFIetMgAAAUY"]
[Wed Apr 01 21:46:51.997141 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:37018] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "ac0hy_kmxtJXGnLdvgCbYwAAAJI"]
[Wed Apr 01 21:46:52.527098 2026] [:error] [pid 8910:tid 8975] [client 52.156.211.140:4044] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "ac0hzKJZINUcF3tYgExrtgAAAQc"]
[Wed Apr 01 21:46:53.031351 2026] [:error] [pid 8909:tid 8953] [client 52.156.211.140:4005] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "ac0hzTvP_a0662gDl6DilwAAAMw"]
[Wed Apr 01 21:46:53.533658 2026] [:error] [pid 8909:tid 8956] [client 52.156.211.140:3975] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "ac0hzTvP_a0662gDl6DimwAAAM8"]
[Wed Apr 01 21:46:54.040335 2026] [:error] [pid 8909:tid 8951] [client 52.156.211.140:4067] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "ac0hzjvP_a0662gDl6DinQAAAMo"]
[Wed Apr 01 21:46:54.542553 2026] [:error] [pid 8909:tid 8942] [client 52.156.211.140:3850] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "ac0hzjvP_a0662gDl6DiowAAAME"]
[Wed Apr 01 21:46:55.049876 2026] [:error] [pid 8995:tid 9019] [client 52.156.211.140:3930] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/c.php"] [unique_id "ac0hz-onaBjs3qxcRefVjAAAABU"]
[Wed Apr 01 21:46:55.558323 2026] [:error] [pid 8995:tid 9001] [client 52.156.211.140:3965] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "ac0hz-onaBjs3qxcRefVjQAAAAM"]
[Wed Apr 01 21:46:56.059313 2026] [:error] [pid 8995:tid 9021] [client 52.156.211.140:3943] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "ac0h0OonaBjs3qxcRefVkQAAABc"]
[Wed Apr 01 21:46:56.569413 2026] [:error] [pid 8995:tid 9007] [client 52.156.211.140:4092] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "ac0h0OonaBjs3qxcRefVkgAAAAk"]
[Wed Apr 01 21:46:57.081029 2026] [:error] [pid 8909:tid 8954] [client 52.156.211.140:3905] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "ac0h0TvP_a0662gDl6DirQAAAM0"]
[Wed Apr 01 21:46:57.581908 2026] [:error] [pid 8909:tid 8955] [client 52.156.211.140:37239] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "ac0h0TvP_a0662gDl6DirwAAAM4"]
[Wed Apr 01 21:46:58.082756 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:4051] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "ac0h0vkmxtJXGnLdvgCbcAAAAJI"]
[Wed Apr 01 21:46:58.584600 2026] [:error] [pid 17856:tid 17867] [client 52.156.211.140:37221] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "ac0h0j7Idlm5j9frhqROqgAAAEk"]
[Wed Apr 01 21:46:59.086266 2026] [:error] [pid 8910:tid 8969] [client 52.156.211.140:3842] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/04.php"] [unique_id "ac0h06JZINUcF3tYgExrvAAAAQE"]
[Wed Apr 01 21:46:59.588229 2026] [:error] [pid 17856:tid 17863] [client 52.156.211.140:4012] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "ac0h0z7Idlm5j9frhqROsQAAAEU"]
[Wed Apr 01 21:47:00.092855 2026] [:error] [pid 17856:tid 17860] [client 52.156.211.140:3919] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "ac0h1D7Idlm5j9frhqROtgAAAEI"]
[Wed Apr 01 21:47:00.595910 2026] [:error] [pid 17856:tid 17882] [client 52.156.211.140:3972] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "ac0h1D7Idlm5j9frhqROuwAAAFg"]
[Wed Apr 01 21:47:01.095925 2026] [:error] [pid 17856:tid 17873] [client 52.156.211.140:4089] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "ac0h1T7Idlm5j9frhqROvgAAAE8"]
[Wed Apr 01 22:40:57.304533 2026] [:error] [pid 8909:tid 8955] [client 187.108.215.17:51673] [client 187.108.215.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.108.215.17, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ac0ueTvP_a0662gDl6D9RgAAAM4"]
[Wed Apr 01 22:40:57.317605 2026] [proxy_fcgi:error] [pid 8909:tid 8955] [client 187.108.215.17:51673] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:18:27.914333 2026] [proxy_fcgi:error] [pid 8908:tid 8934] [client 84.233.212.8:61448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:18:28.675280 2026] [proxy_fcgi:error] [pid 8909:tid 8957] [client 84.233.212.8:61601] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 00:18:30.168125 2026] [:error] [pid 8908:tid 8924] [client 84.233.212.8:61893] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "ac1FVvkmxtJXGnLdvgD5PgAAAIs"]
[Thu Apr 02 00:18:30.926311 2026] [:error] [pid 8995:tid 9009] [client 84.233.212.8:62019] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/db.sql"] [unique_id "ac1FVuonaBjs3qxcRecGRQAAAAs"]
[Thu Apr 02 00:18:31.670124 2026] [:error] [pid 62559:tid 62580] [client 84.233.212.8:62219] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/dump.sql"] [unique_id "ac1FVy7NKI8IaNKZFIcmFQAAAVM"]
[Thu Apr 02 00:18:32.412455 2026] [:error] [pid 62559:tid 62562] [client 84.233.212.8:62491] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/database.sql"] [unique_id "ac1FWC7NKI8IaNKZFIcmGgAAAUE"]
[Thu Apr 02 00:18:33.155101 2026] [:error] [pid 8908:tid 8932] [client 84.233.212.8:62635] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/backup.sql"] [unique_id "ac1FWfkmxtJXGnLdvgD5SwAAAJM"]
[Thu Apr 02 00:18:34.103621 2026] [:error] [pid 8908:tid 8936] [client 84.233.212.8:62819] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/config/db.sql"] [unique_id "ac1FWvkmxtJXGnLdvgD5UgAAAJc"]
[Thu Apr 02 00:18:34.847857 2026] [:error] [pid 8910:tid 8968] [client 84.233.212.8:62966] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/sql/db.sql"] [unique_id "ac1FWqJZINUcF3tYgEyQjgAAAQA"]
[Thu Apr 02 00:18:35.591026 2026] [:error] [pid 62559:tid 62584] [client 84.233.212.8:63101] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/data/dump.sql"] [unique_id "ac1FWy7NKI8IaNKZFIcmJAAAAVc"]
[Thu Apr 02 00:18:36.334945 2026] [:error] [pid 8908:tid 8932] [client 84.233.212.8:63228] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/backups/database.sql"] [unique_id "ac1FXPkmxtJXGnLdvgD5YwAAAJM"]
[Thu Apr 02 00:18:37.077684 2026] [:error] [pid 17856:tid 17874] [client 84.233.212.8:55188] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/mysql.sql"] [unique_id "ac1FXT7Idlm5j9frhqSRfwAAAFA"]
[Thu Apr 02 00:18:37.841106 2026] [:error] [pid 8908:tid 8931] [client 84.233.212.8:58016] [client 84.233.212.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/db_backup.sql"] [unique_id "ac1FXfkmxtJXGnLdvgD5agAAAJI"]
[Thu Apr 02 04:31:41.882340 2026] [proxy_fcgi:error] [pid 37543:tid 37551] [client 172.213.236.116:58015] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:20:31.138664 2026] [proxy_fcgi:error] [pid 23927:tid 23930] [client 158.158.99.125:44608] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:47.996306 2026] [proxy_fcgi:error] [pid 59194:tid 59229] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:48.236043 2026] [proxy_fcgi:error] [pid 59194:tid 59234] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:48.477266 2026] [proxy_fcgi:error] [pid 59194:tid 59225] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:48.716772 2026] [proxy_fcgi:error] [pid 59194:tid 59222] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:48.957667 2026] [proxy_fcgi:error] [pid 59194:tid 59217] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:49.196041 2026] [proxy_fcgi:error] [pid 59194:tid 59236] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:49.435328 2026] [proxy_fcgi:error] [pid 59194:tid 59231] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:49.674073 2026] [proxy_fcgi:error] [pid 59194:tid 59227] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:49.914544 2026] [proxy_fcgi:error] [pid 59194:tid 59223] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:50.153975 2026] [proxy_fcgi:error] [pid 59194:tid 59220] [client 20.203.168.203:13848] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:54:50.389426 2026] [:error] [pid 59194:tid 59221] [client 20.203.168.203:13848] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hnphq.php"] [unique_id "ac5nGhMpAeV11hcQehxOcQAAAAg"]
[Thu Apr 02 20:54:50.890515 2026] [:error] [pid 59305:tid 59328] [client 20.203.168.203:20903] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hnphq.php"] [unique_id "ac5nGqr2tV4rDwKFxKelLgAAANM"]
[Thu Apr 02 20:54:51.400036 2026] [:error] [pid 29467:tid 29492] [client 20.203.168.203:20532] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hnphq.php"] [unique_id "ac5nG74VUBFCJAq-WOmlnwAAARY"]
[Thu Apr 02 20:54:51.990919 2026] [:error] [pid 23927:tid 23935] [client 20.203.168.203:31479] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hnphq.php"] [unique_id "ac5nG0sZwqCndhl9uKDGnQAAAYY"]
[Thu Apr 02 20:54:52.483301 2026] [:error] [pid 29467:tid 29474] [client 20.203.168.203:17624] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5nHL4VUBFCJAq-WOmlqAAAAQQ"]
[Thu Apr 02 20:54:52.973191 2026] [:error] [pid 54384:tid 54395] [client 20.203.168.203:17622] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5nHNWWpaby3TVN7McfwgAAAck"]
[Thu Apr 02 20:54:53.475604 2026] [:error] [pid 29467:tid 29479] [client 20.203.168.203:4625] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5nHb4VUBFCJAq-WOmlsgAAAQk"]
[Thu Apr 02 20:54:54.137374 2026] [:error] [pid 37543:tid 37569] [client 20.203.168.203:13846] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac5nHnhdk2bEYJCvILbrugAAAVg"]
[Thu Apr 02 20:54:54.651656 2026] [:error] [pid 59201:tid 59270] [client 20.203.168.203:4598] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "ac5nHsAC0Tw8eL6gzZ4oBQAAAIM"]
[Thu Apr 02 20:54:55.164907 2026] [:error] [pid 59305:tid 59323] [client 20.203.168.203:7798] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "ac5nH6r2tV4rDwKFxKelMgAAAM4"]
[Thu Apr 02 20:54:55.757980 2026] [:error] [pid 29467:tid 29476] [client 20.203.168.203:49631] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "ac5nH74VUBFCJAq-WOmlvAAAAQY"]
[Thu Apr 02 20:54:56.366962 2026] [:error] [pid 59305:tid 59322] [client 20.203.168.203:34653] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "ac5nIKr2tV4rDwKFxKelNQAAAM0"]
[Thu Apr 02 20:54:56.964606 2026] [:error] [pid 23927:tid 23944] [client 20.203.168.203:30101] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "ac5nIEsZwqCndhl9uKDGoQAAAY8"]
[Thu Apr 02 20:54:57.456283 2026] [:error] [pid 59201:tid 59277] [client 20.203.168.203:13853] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "ac5nIcAC0Tw8eL6gzZ4oBgAAAIo"]
[Thu Apr 02 20:54:57.938821 2026] [:error] [pid 37543:tid 37566] [client 20.203.168.203:39856] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "ac5nIXhdk2bEYJCvILbrwgAAAVU"]
[Thu Apr 02 20:54:58.423801 2026] [:error] [pid 29467:tid 29480] [client 20.203.168.203:34633] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "ac5nIr4VUBFCJAq-WOmlwgAAAQo"]
[Thu Apr 02 20:54:58.938759 2026] [:error] [pid 59201:tid 59267] [client 20.203.168.203:16004] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5nIsAC0Tw8eL6gzZ4oCQAAAIA"]
[Thu Apr 02 20:54:59.456670 2026] [:error] [pid 59194:tid 59228] [client 20.203.168.203:4564] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5nIxMpAeV11hcQehxOfgAAAA8"]
[Thu Apr 02 20:55:00.015598 2026] [:error] [pid 59201:tid 59287] [client 20.203.168.203:20540] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5nJMAC0Tw8eL6gzZ4oCwAAAJQ"]
[Thu Apr 02 20:55:00.561927 2026] [:error] [pid 59194:tid 59227] [client 20.203.168.203:20918] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5nJBMpAeV11hcQehxOgAAAAA4"]
[Thu Apr 02 20:55:01.033638 2026] [:error] [pid 29467:tid 29491] [client 20.203.168.203:4553] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5nJb4VUBFCJAq-WOmlzgAAARU"]
[Thu Apr 02 20:55:01.508593 2026] [:error] [pid 29467:tid 29485] [client 20.203.168.203:51227] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5nJb4VUBFCJAq-WOml0AAAAQ8"]
[Thu Apr 02 20:55:02.051605 2026] [:error] [pid 29467:tid 29478] [client 20.203.168.203:16053] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5nJr4VUBFCJAq-WOml0wAAAQg"]
[Thu Apr 02 20:55:02.549932 2026] [:error] [pid 54384:tid 54403] [client 20.203.168.203:41307] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5nJtWWpaby3TVN7McfzAAAAdE"]
[Thu Apr 02 20:55:03.103136 2026] [:error] [pid 54384:tid 54401] [client 20.203.168.203:47338] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ac5nJ9WWpaby3TVN7McfzgAAAc8"]
[Thu Apr 02 20:55:03.664478 2026] [:error] [pid 23927:tid 23952] [client 20.203.168.203:31435] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ac5nJ0sZwqCndhl9uKDGqgAAAZc"]
[Thu Apr 02 20:55:04.321859 2026] [:error] [pid 29467:tid 29474] [client 20.203.168.203:20505] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ac5nKL4VUBFCJAq-WOml3QAAAQQ"]
[Thu Apr 02 20:55:04.832515 2026] [:error] [pid 29467:tid 29489] [client 20.203.168.203:30083] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ac5nKL4VUBFCJAq-WOml3gAAARM"]
[Thu Apr 02 20:55:05.349130 2026] [:error] [pid 59305:tid 59321] [client 20.203.168.203:49623] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5nKar2tV4rDwKFxKelQQAAAMw"]
[Thu Apr 02 20:55:06.077873 2026] [:error] [pid 59201:tid 59288] [client 20.203.168.203:49619] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5nKsAC0Tw8eL6gzZ4oDwAAAJU"]
[Thu Apr 02 20:55:06.553444 2026] [:error] [pid 29467:tid 29494] [client 20.203.168.203:4562] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5nKr4VUBFCJAq-WOml5gAAARg"]
[Thu Apr 02 20:55:07.113735 2026] [:error] [pid 29467:tid 29481] [client 20.203.168.203:49621] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5nK74VUBFCJAq-WOml6AAAAQs"]
[Thu Apr 02 20:55:07.620743 2026] [:error] [pid 23927:tid 23945] [client 20.203.168.203:20537] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5nK0sZwqCndhl9uKDG1AAAAZA"]
[Thu Apr 02 20:55:08.184177 2026] [:error] [pid 29467:tid 29480] [client 20.203.168.203:51208] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5nLL4VUBFCJAq-WOml7gAAAQo"]
[Thu Apr 02 20:55:08.720066 2026] [:error] [pid 59200:tid 59244] [client 20.203.168.203:41283] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5nLLfP26txrdLs3Ep-oAAAAEQ"]
[Thu Apr 02 20:55:09.269947 2026] [:error] [pid 23927:tid 23948] [client 20.203.168.203:41329] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5nLUsZwqCndhl9uKDG2AAAAZM"]
[Thu Apr 02 20:55:09.779222 2026] [:error] [pid 59201:tid 59286] [client 20.203.168.203:13947] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/only.php"] [unique_id "ac5nLcAC0Tw8eL6gzZ4oEgAAAJM"]
[Thu Apr 02 20:55:10.261168 2026] [:error] [pid 29467:tid 29484] [client 20.203.168.203:19103] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/only.php"] [unique_id "ac5nLr4VUBFCJAq-WOml-AAAAQ4"]
[Thu Apr 02 20:55:10.748426 2026] [:error] [pid 23927:tid 23949] [client 20.203.168.203:50572] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/only.php"] [unique_id "ac5nLksZwqCndhl9uKDG3AAAAZQ"]
[Thu Apr 02 20:55:11.383157 2026] [:error] [pid 29467:tid 29473] [client 20.203.168.203:4657] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/only.php"] [unique_id "ac5nL74VUBFCJAq-WOml_AAAAQM"]
[Thu Apr 02 20:55:11.882200 2026] [:error] [pid 29467:tid 29487] [client 20.203.168.203:50601] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/repurify.php"] [unique_id "ac5nL74VUBFCJAq-WOmmAAAAARE"]
[Thu Apr 02 20:55:12.647395 2026] [:error] [pid 23927:tid 23946] [client 20.203.168.203:49657] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/repurify.php"] [unique_id "ac5nMEsZwqCndhl9uKDG4gAAAZE"]
[Thu Apr 02 20:55:13.649798 2026] [:error] [pid 54384:tid 54402] [client 20.203.168.203:13867] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/repurify.php"] [unique_id "ac5nMdWWpaby3TVN7Mcf7AAAAdA"]
[Thu Apr 02 20:55:14.286969 2026] [:error] [pid 54384:tid 54392] [client 20.203.168.203:41292] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/repurify.php"] [unique_id "ac5nMtWWpaby3TVN7Mcf7wAAAcY"]
[Thu Apr 02 20:55:15.092395 2026] [:error] [pid 59201:tid 59276] [client 20.203.168.203:47329] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tdsaz.php"] [unique_id "ac5nM8AC0Tw8eL6gzZ4oFgAAAIk"]
[Thu Apr 02 20:55:15.966404 2026] [:error] [pid 54384:tid 54395] [client 20.203.168.203:51211] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tdsaz.php"] [unique_id "ac5nM9WWpaby3TVN7Mcf9wAAAck"]
[Thu Apr 02 20:55:16.597183 2026] [:error] [pid 59194:tid 59223] [client 20.203.168.203:16059] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tdsaz.php"] [unique_id "ac5nNBMpAeV11hcQehxOjgAAAAo"]
[Thu Apr 02 20:55:17.073867 2026] [:error] [pid 54384:tid 54399] [client 20.203.168.203:50584] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tdsaz.php"] [unique_id "ac5nNdWWpaby3TVN7Mcf-wAAAc0"]
[Thu Apr 02 20:55:17.586377 2026] [:error] [pid 59201:tid 59290] [client 20.203.168.203:41323] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac5nNcAC0Tw8eL6gzZ4oGgAAAJc"]
[Thu Apr 02 20:55:18.240313 2026] [:error] [pid 59201:tid 59281] [client 20.203.168.203:42453] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac5nNsAC0Tw8eL6gzZ4oGwAAAI4"]
[Thu Apr 02 20:55:18.903976 2026] [:error] [pid 54384:tid 54392] [client 20.203.168.203:2249] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac5nNtWWpaby3TVN7Mcf_gAAAcY"]
[Thu Apr 02 20:55:19.437383 2026] [:error] [pid 59305:tid 59319] [client 20.203.168.203:4222] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac5nN6r2tV4rDwKFxKelXwAAAMo"]
[Thu Apr 02 20:55:19.997677 2026] [:error] [pid 59194:tid 59229] [client 20.203.168.203:11061] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hfles.php"] [unique_id "ac5nNxMpAeV11hcQehxOmAAAABA"]
[Thu Apr 02 20:55:20.540362 2026] [:error] [pid 59305:tid 59325] [client 20.203.168.203:41288] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hfles.php"] [unique_id "ac5nOKr2tV4rDwKFxKelZwAAANA"]
[Thu Apr 02 20:55:21.024333 2026] [:error] [pid 59200:tid 59258] [client 20.203.168.203:42470] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hfles.php"] [unique_id "ac5nObfP26txrdLs3Ep-twAAAFI"]
[Thu Apr 02 20:55:21.499805 2026] [:error] [pid 29467:tid 29476] [client 20.203.168.203:31482] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hfles.php"] [unique_id "ac5nOb4VUBFCJAq-WOmmCgAAAQY"]
[Thu Apr 02 20:55:22.079453 2026] [:error] [pid 29467:tid 29486] [client 20.203.168.203:22817] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5nOr4VUBFCJAq-WOmmDgAAARA"]
[Thu Apr 02 20:55:22.803026 2026] [:error] [pid 54384:tid 54398] [client 20.203.168.203:50569] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5nOtWWpaby3TVN7McgBgAAAcw"]
[Thu Apr 02 20:55:23.383492 2026] [:error] [pid 29467:tid 29486] [client 20.203.168.203:4671] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5nO74VUBFCJAq-WOmmHgAAARA"]
[Thu Apr 02 20:55:23.889541 2026] [:error] [pid 37543:tid 37561] [client 20.203.168.203:4624] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5nO3hdk2bEYJCvILbr8wAAAVA"]
[Thu Apr 02 20:55:24.381115 2026] [:error] [pid 29467:tid 29482] [client 20.203.168.203:47335] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "ac5nPL4VUBFCJAq-WOmmJwAAAQw"]
[Thu Apr 02 20:55:24.856565 2026] [:error] [pid 29467:tid 29485] [client 20.203.168.203:4160] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "ac5nPL4VUBFCJAq-WOmmKwAAAQ8"]
[Thu Apr 02 20:55:25.411572 2026] [:error] [pid 59201:tid 59289] [client 20.203.168.203:27566] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "ac5nPcAC0Tw8eL6gzZ4oJgAAAJY"]
[Thu Apr 02 20:55:25.902001 2026] [:error] [pid 29467:tid 29492] [client 20.203.168.203:34663] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "ac5nPb4VUBFCJAq-WOmmMgAAARY"]
[Thu Apr 02 20:55:26.400244 2026] [:error] [pid 54384:tid 54390] [client 20.203.168.203:47322] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5nPtWWpaby3TVN7McgCgAAAcQ"]
[Thu Apr 02 20:55:26.976398 2026] [:error] [pid 23927:tid 23941] [client 20.203.168.203:20905] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5nPksZwqCndhl9uKDG8wAAAYw"]
[Thu Apr 02 20:55:27.457447 2026] [:error] [pid 29467:tid 29470] [client 20.203.168.203:30130] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5nP74VUBFCJAq-WOmmQQAAAQA"]
[Thu Apr 02 20:55:27.982853 2026] [:error] [pid 29467:tid 29471] [client 20.203.168.203:19125] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5nP74VUBFCJAq-WOmmRgAAAQE"]
[Thu Apr 02 20:55:28.489853 2026] [:error] [pid 23927:tid 23947] [client 20.203.168.203:30131] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ac5nQEsZwqCndhl9uKDG9QAAAZI"]
[Thu Apr 02 20:55:29.033444 2026] [:error] [pid 54384:tid 54407] [client 20.203.168.203:18754] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ac5nQdWWpaby3TVN7McgEwAAAdU"]
[Thu Apr 02 20:55:29.540732 2026] [:error] [pid 54384:tid 54410] [client 20.203.168.203:22815] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ac5nQdWWpaby3TVN7McgFQAAAdg"]
[Thu Apr 02 20:55:30.090177 2026] [:error] [pid 29467:tid 29481] [client 20.203.168.203:27558] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ac5nQr4VUBFCJAq-WOmmVAAAAQs"]
[Thu Apr 02 20:55:30.623525 2026] [:error] [pid 29467:tid 29482] [client 20.203.168.203:27561] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5nQr4VUBFCJAq-WOmmWAAAAQw"]
[Thu Apr 02 20:55:31.106724 2026] [:error] [pid 23927:tid 23944] [client 20.203.168.203:4177] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5nQ0sZwqCndhl9uKDG-QAAAY8"]
[Thu Apr 02 20:55:31.794933 2026] [:error] [pid 29467:tid 29492] [client 20.203.168.203:2267] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5nQ74VUBFCJAq-WOmmXgAAARY"]
[Thu Apr 02 20:55:32.453077 2026] [:error] [pid 29467:tid 29485] [client 20.203.168.203:34656] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5nRL4VUBFCJAq-WOmmYgAAAQ8"]
[Thu Apr 02 20:55:32.998299 2026] [:error] [pid 29467:tid 29488] [client 20.203.168.203:41294] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ac5nRL4VUBFCJAq-WOmmZgAAARI"]
[Thu Apr 02 20:55:33.653622 2026] [:error] [pid 54384:tid 54395] [client 20.203.168.203:53136] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ac5nRdWWpaby3TVN7McgHwAAAck"]
[Thu Apr 02 20:55:34.230049 2026] [:error] [pid 37543:tid 37553] [client 20.203.168.203:53179] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ac5nRnhdk2bEYJCvILbsAgAAAUg"]
[Thu Apr 02 20:55:34.740379 2026] [:error] [pid 59201:tid 59280] [client 20.203.168.203:16054] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ac5nRsAC0Tw8eL6gzZ4oNQAAAI0"]
[Thu Apr 02 20:55:35.465702 2026] [:error] [pid 29467:tid 29489] [client 20.203.168.203:22845] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac5nR74VUBFCJAq-WOmmcwAAARM"]
[Thu Apr 02 20:55:35.973809 2026] [:error] [pid 29467:tid 29480] [client 20.203.168.203:42427] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac5nR74VUBFCJAq-WOmmeAAAAQo"]
[Thu Apr 02 20:55:36.456636 2026] [:error] [pid 29467:tid 29490] [client 20.203.168.203:22793] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac5nSL4VUBFCJAq-WOmmfgAAARQ"]
[Thu Apr 02 20:55:36.956894 2026] [:error] [pid 29467:tid 29493] [client 20.203.168.203:2300] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac5nSL4VUBFCJAq-WOmmgwAAARc"]
[Thu Apr 02 20:55:37.440335 2026] [:error] [pid 29467:tid 29483] [client 20.203.168.203:60693] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5nSb4VUBFCJAq-WOmmhwAAAQ0"]
[Thu Apr 02 20:55:38.001682 2026] [:error] [pid 29467:tid 29488] [client 20.203.168.203:16002] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5nSr4VUBFCJAq-WOmmiwAAARI"]
[Thu Apr 02 20:55:38.475063 2026] [:error] [pid 59305:tid 59326] [client 20.203.168.203:22811] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5nSqr2tV4rDwKFxKelhQAAANE"]
[Thu Apr 02 20:55:38.971392 2026] [:error] [pid 59305:tid 59322] [client 20.203.168.203:42450] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5nSqr2tV4rDwKFxKeliwAAAM0"]
[Thu Apr 02 20:55:39.506261 2026] [:error] [pid 59305:tid 59324] [client 20.203.168.203:16470] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ac5nS6r2tV4rDwKFxKelkQAAAM8"]
[Thu Apr 02 20:55:40.030841 2026] [:error] [pid 37543:tid 37548] [client 20.203.168.203:30125] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ac5nTHhdk2bEYJCvILbsCQAAAUM"]
[Thu Apr 02 20:55:40.521114 2026] [:error] [pid 29467:tid 29491] [client 20.203.168.203:17591] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ac5nTL4VUBFCJAq-WOmmkwAAARU"]
[Thu Apr 02 20:55:40.997650 2026] [:error] [pid 23927:tid 23943] [client 20.203.168.203:4162] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ac5nTEsZwqCndhl9uKDHCQAAAY4"]
[Thu Apr 02 20:55:41.470340 2026] [:error] [pid 29467:tid 29493] [client 20.203.168.203:49644] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "ac5nTb4VUBFCJAq-WOmmmQAAARc"]
[Thu Apr 02 20:55:41.973752 2026] [:error] [pid 23927:tid 23949] [client 20.203.168.203:30829] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "ac5nTUsZwqCndhl9uKDHCwAAAZQ"]
[Thu Apr 02 20:55:42.454205 2026] [:error] [pid 23927:tid 23951] [client 20.203.168.203:8212] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "ac5nTksZwqCndhl9uKDHDQAAAZY"]
[Thu Apr 02 20:55:42.928795 2026] [:error] [pid 59201:tid 59280] [client 20.203.168.203:19134] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "ac5nTsAC0Tw8eL6gzZ4oQAAAAI0"]
[Thu Apr 02 20:55:43.406373 2026] [:error] [pid 59201:tid 59282] [client 20.203.168.203:22793] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5nT8AC0Tw8eL6gzZ4oQwAAAI8"]
[Thu Apr 02 20:55:43.916042 2026] [:error] [pid 23927:tid 23939] [client 20.203.168.203:52577] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5nT0sZwqCndhl9uKDHEgAAAYo"]
[Thu Apr 02 20:55:44.388107 2026] [:error] [pid 29467:tid 29487] [client 20.203.168.203:49166] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5nUL4VUBFCJAq-WOmmqQAAARE"]
[Thu Apr 02 20:55:44.874181 2026] [:error] [pid 59305:tid 59329] [client 20.203.168.203:18761] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac5nUKr2tV4rDwKFxKelpAAAANQ"]
[Thu Apr 02 20:55:45.377673 2026] [:error] [pid 59200:tid 59257] [client 20.203.168.203:53182] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/less.php"] [unique_id "ac5nUbfP26txrdLs3Ep-zgAAAFE"]
[Thu Apr 02 20:55:46.008793 2026] [:error] [pid 59194:tid 59224] [client 20.203.168.203:22179] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/less.php"] [unique_id "ac5nUhMpAeV11hcQehxOpAAAAAs"]
[Thu Apr 02 20:55:46.511250 2026] [:error] [pid 54384:tid 54402] [client 20.203.168.203:44436] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/less.php"] [unique_id "ac5nUtWWpaby3TVN7McgNgAAAdA"]
[Thu Apr 02 20:55:47.003548 2026] [:error] [pid 37543:tid 37561] [client 20.203.168.203:16477] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/less.php"] [unique_id "ac5nU3hdk2bEYJCvILbsFAAAAVA"]
[Thu Apr 02 20:55:47.480294 2026] [:error] [pid 59201:tid 59274] [client 20.203.168.203:6565] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5nU8AC0Tw8eL6gzZ4oSgAAAIc"]
[Thu Apr 02 20:55:48.029882 2026] [:error] [pid 59200:tid 59259] [client 20.203.168.203:8201] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5nVLfP26txrdLs3Ep-0AAAAFM"]
[Thu Apr 02 20:55:48.535738 2026] [:error] [pid 23927:tid 23948] [client 20.203.168.203:49176] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5nVEsZwqCndhl9uKDHGgAAAZM"]
[Thu Apr 02 20:55:49.020443 2026] [:error] [pid 54384:tid 54388] [client 20.203.168.203:30817] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac5nVdWWpaby3TVN7McgPQAAAcI"]
[Thu Apr 02 20:55:49.563397 2026] [:error] [pid 59305:tid 59324] [client 20.203.168.203:62349] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new3.php"] [unique_id "ac5nVar2tV4rDwKFxKelsQAAAM8"]
[Thu Apr 02 20:55:50.046526 2026] [proxy_fcgi:error] [pid 59201:tid 59289] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:50.286752 2026] [proxy_fcgi:error] [pid 59201:tid 59290] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:50.525608 2026] [proxy_fcgi:error] [pid 59201:tid 59285] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:50.765417 2026] [proxy_fcgi:error] [pid 59201:tid 59284] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:51.005884 2026] [proxy_fcgi:error] [pid 59201:tid 59272] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:51.247794 2026] [proxy_fcgi:error] [pid 59201:tid 59273] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:51.496332 2026] [proxy_fcgi:error] [pid 59201:tid 59278] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:51.736629 2026] [proxy_fcgi:error] [pid 59201:tid 59286] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:51.976760 2026] [proxy_fcgi:error] [pid 59201:tid 59288] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:52.219416 2026] [proxy_fcgi:error] [pid 59201:tid 59287] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:53.925088 2026] [proxy_fcgi:error] [pid 59201:tid 59287] [client 20.203.168.203:16461] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 20:55:54.161606 2026] [:error] [pid 59201:tid 59291] [client 20.203.168.203:16461] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5nWsAC0Tw8eL6gzZ4oYAAAAJg"]
[Thu Apr 02 20:55:54.655733 2026] [:error] [pid 59305:tid 59333] [client 20.203.168.203:12990] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5nWqr2tV4rDwKFxKelxQAAANg"]
[Thu Apr 02 20:55:55.174397 2026] [:error] [pid 37543:tid 37545] [client 20.203.168.203:12977] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5nW3hdk2bEYJCvILbsIgAAAUA"]
[Thu Apr 02 20:55:55.670366 2026] [:error] [pid 59194:tid 59235] [client 20.203.168.203:33294] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5nWxMpAeV11hcQehxOpQAAABY"]
[Thu Apr 02 20:55:56.187758 2026] [:error] [pid 23927:tid 23934] [client 20.203.168.203:21260] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sts.php"] [unique_id "ac5nXEsZwqCndhl9uKDHKwAAAYU"]
[Thu Apr 02 20:55:56.699888 2026] [:error] [pid 54384:tid 54406] [client 20.203.168.203:24360] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sts.php"] [unique_id "ac5nXNWWpaby3TVN7McgVAAAAdQ"]
[Thu Apr 02 20:55:57.177060 2026] [:error] [pid 54384:tid 54409] [client 20.203.168.203:13598] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sts.php"] [unique_id "ac5nXdWWpaby3TVN7McgVwAAAdc"]
[Thu Apr 02 20:55:57.667124 2026] [:error] [pid 54384:tid 54393] [client 20.203.168.203:25214] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sts.php"] [unique_id "ac5nXdWWpaby3TVN7McgWwAAAcc"]
[Thu Apr 02 20:55:58.150914 2026] [:error] [pid 54384:tid 54386] [client 20.203.168.203:7706] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5nXtWWpaby3TVN7McgXQAAAcA"]
[Thu Apr 02 20:55:58.663938 2026] [:error] [pid 59194:tid 59229] [client 20.203.168.203:20988] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5nXhMpAeV11hcQehxOpwAAABA"]
[Thu Apr 02 20:55:59.190386 2026] [:error] [pid 59200:tid 59247] [client 20.203.168.203:21284] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5nX7fP26txrdLs3Ep-3AAAAEc"]
[Thu Apr 02 20:55:59.682612 2026] [:error] [pid 59201:tid 59285] [client 20.203.168.203:23977] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5nX8AC0Tw8eL6gzZ4oYwAAAJI"]
[Thu Apr 02 20:56:00.269687 2026] [:error] [pid 23927:tid 23938] [client 20.203.168.203:4342] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ac5nYEsZwqCndhl9uKDHMQAAAYk"]
[Thu Apr 02 20:56:00.810026 2026] [:error] [pid 54384:tid 54386] [client 20.203.168.203:4305] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ac5nYNWWpaby3TVN7McgZwAAAcA"]
[Thu Apr 02 20:56:01.323829 2026] [:error] [pid 29467:tid 29482] [client 20.203.168.203:23979] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ac5nYb4VUBFCJAq-WOmmxwAAAQw"]
[Thu Apr 02 20:56:01.815979 2026] [:error] [pid 54384:tid 54408] [client 20.203.168.203:36526] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ac5nYdWWpaby3TVN7McgbAAAAdY"]
[Thu Apr 02 20:56:02.363372 2026] [:error] [pid 59200:tid 59251] [client 20.203.168.203:21349] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5nYrfP26txrdLs3Ep-4QAAAEs"]
[Thu Apr 02 20:56:02.856659 2026] [:error] [pid 23927:tid 23949] [client 20.203.168.203:49566] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5nYksZwqCndhl9uKDHNgAAAZQ"]
[Thu Apr 02 20:56:03.398063 2026] [:error] [pid 54384:tid 54406] [client 20.203.168.203:19187] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5nY9WWpaby3TVN7McgbgAAAdQ"]
[Thu Apr 02 20:56:04.000972 2026] [:error] [pid 23927:tid 23945] [client 20.203.168.203:4944] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5nY0sZwqCndhl9uKDHPAAAAZA"]
[Thu Apr 02 20:56:04.502605 2026] [:error] [pid 23927:tid 23949] [client 20.203.168.203:34001] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5nZEsZwqCndhl9uKDHQwAAAZQ"]
[Thu Apr 02 20:56:05.035412 2026] [:error] [pid 23927:tid 23929] [client 20.203.168.203:8289] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5nZUsZwqCndhl9uKDHRAAAAYA"]
[Thu Apr 02 20:56:05.528016 2026] [:error] [pid 29467:tid 29485] [client 20.203.168.203:41801] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5nZb4VUBFCJAq-WOmm2AAAAQ8"]
[Thu Apr 02 20:56:06.024214 2026] [:error] [pid 29467:tid 29476] [client 20.203.168.203:19785] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5nZr4VUBFCJAq-WOmm2wAAAQY"]
[Thu Apr 02 20:56:06.505110 2026] [:error] [pid 29467:tid 29475] [client 20.203.168.203:21321] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "ac5nZr4VUBFCJAq-WOmm3wAAAQU"]
[Thu Apr 02 20:56:07.059723 2026] [:error] [pid 23927:tid 23937] [client 20.203.168.203:21326] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "ac5nZ0sZwqCndhl9uKDHSQAAAYg"]
[Thu Apr 02 20:56:07.546663 2026] [:error] [pid 23927:tid 23935] [client 20.203.168.203:9575] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "ac5nZ0sZwqCndhl9uKDHSwAAAYY"]
[Thu Apr 02 20:56:08.062111 2026] [:error] [pid 59305:tid 59331] [client 20.203.168.203:23187] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "ac5naKr2tV4rDwKFxKel0QAAANY"]
[Thu Apr 02 20:56:08.579720 2026] [:error] [pid 59200:tid 59243] [client 20.203.168.203:41244] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a8.php"] [unique_id "ac5naLfP26txrdLs3Ep-5AAAAEM"]
[Thu Apr 02 20:56:09.076840 2026] [:error] [pid 59305:tid 59329] [client 20.203.168.203:21678] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a8.php"] [unique_id "ac5naar2tV4rDwKFxKel0wAAANQ"]
[Thu Apr 02 20:56:09.561761 2026] [:error] [pid 59305:tid 59332] [client 20.203.168.203:4922] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a8.php"] [unique_id "ac5naar2tV4rDwKFxKel1AAAANc"]
[Thu Apr 02 20:56:10.077458 2026] [:error] [pid 59305:tid 59321] [client 20.203.168.203:21344] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a8.php"] [unique_id "ac5naqr2tV4rDwKFxKel1gAAAMw"]
[Thu Apr 02 20:56:10.560815 2026] [:error] [pid 23927:tid 23948] [client 20.203.168.203:36487] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5naksZwqCndhl9uKDHVwAAAZM"]
[Thu Apr 02 20:56:11.066249 2026] [:error] [pid 59305:tid 59318] [client 20.203.168.203:21652] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5na6r2tV4rDwKFxKel2gAAAMk"]
[Thu Apr 02 20:56:11.547568 2026] [:error] [pid 23927:tid 23929] [client 20.203.168.203:10014] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5na0sZwqCndhl9uKDHXQAAAYA"]
[Thu Apr 02 20:56:12.050929 2026] [:error] [pid 59201:tid 59274] [client 20.203.168.203:6630] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5nbMAC0Tw8eL6gzZ4oaAAAAIc"]
[Thu Apr 02 20:56:12.546833 2026] [:error] [pid 37543:tid 37554] [client 20.203.168.203:21661] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5nbHhdk2bEYJCvILbsKwAAAUk"]
[Thu Apr 02 20:56:13.081021 2026] [:error] [pid 37543:tid 37550] [client 20.203.168.203:41272] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5nbXhdk2bEYJCvILbsLQAAAUU"]
[Thu Apr 02 20:56:13.559292 2026] [:error] [pid 59305:tid 59333] [client 20.203.168.203:21754] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5nbar2tV4rDwKFxKel3wAAANg"]
[Thu Apr 02 20:56:14.034992 2026] [:error] [pid 59305:tid 59326] [client 20.203.168.203:6636] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5nbqr2tV4rDwKFxKel4AAAANE"]
[Thu Apr 02 20:56:14.537637 2026] [:error] [pid 23927:tid 23931] [client 20.203.168.203:9571] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ac5nbksZwqCndhl9uKDHYQAAAYI"]
[Thu Apr 02 20:56:15.056440 2026] [:error] [pid 23927:tid 23946] [client 20.203.168.203:10010] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ac5nb0sZwqCndhl9uKDHZgAAAZE"]
[Thu Apr 02 20:56:15.544388 2026] [:error] [pid 54384:tid 54399] [client 20.203.168.203:22878] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ac5nb9WWpaby3TVN7McgfAAAAc0"]
[Thu Apr 02 20:56:16.057264 2026] [:error] [pid 23927:tid 23937] [client 20.203.168.203:19355] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ac5ncEsZwqCndhl9uKDHbAAAAYg"]
[Thu Apr 02 20:56:16.529939 2026] [:error] [pid 59200:tid 59247] [client 20.203.168.203:21718] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5ncLfP26txrdLs3Ep-5wAAAEc"]
[Thu Apr 02 20:56:17.006752 2026] [:error] [pid 29467:tid 29486] [client 20.203.168.203:28166] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5ncb4VUBFCJAq-WOmnAAAAARA"]
[Thu Apr 02 20:56:17.486768 2026] [:error] [pid 59305:tid 59330] [client 20.203.168.203:19386] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5ncar2tV4rDwKFxKel5AAAANU"]
[Thu Apr 02 20:56:17.966732 2026] [:error] [pid 29467:tid 29488] [client 20.203.168.203:10015] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5ncb4VUBFCJAq-WOmnBgAAARI"]
[Thu Apr 02 20:56:18.451258 2026] [:error] [pid 29467:tid 29494] [client 20.203.168.203:29456] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "ac5ncr4VUBFCJAq-WOmnCAAAARg"]
[Thu Apr 02 20:56:18.972523 2026] [:error] [pid 37543:tid 37564] [client 20.203.168.203:29484] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "ac5ncnhdk2bEYJCvILbsNwAAAVM"]
[Thu Apr 02 20:56:19.448734 2026] [:error] [pid 59194:tid 59231] [client 20.203.168.203:17188] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "ac5ncxMpAeV11hcQehxOtgAAABI"]
[Thu Apr 02 20:56:19.969141 2026] [:error] [pid 29467:tid 29472] [client 20.203.168.203:27623] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "ac5nc74VUBFCJAq-WOmnCwAAAQI"]
[Thu Apr 02 20:56:20.462843 2026] [:error] [pid 29467:tid 29491] [client 20.203.168.203:21701] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "ac5ndL4VUBFCJAq-WOmnDgAAARU"]
[Thu Apr 02 20:56:20.976773 2026] [:error] [pid 59194:tid 59223] [client 20.203.168.203:32689] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "ac5ndBMpAeV11hcQehxOuQAAAAo"]
[Thu Apr 02 20:56:21.453449 2026] [:error] [pid 29467:tid 29479] [client 20.203.168.203:17214] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "ac5ndb4VUBFCJAq-WOmnEAAAAQk"]
[Thu Apr 02 20:56:21.985901 2026] [:error] [pid 29467:tid 29493] [client 20.203.168.203:9781] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "ac5ndb4VUBFCJAq-WOmnKAAAARc"]
[Thu Apr 02 20:56:22.491725 2026] [:error] [pid 59194:tid 59227] [client 20.203.168.203:22856] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5ndhMpAeV11hcQehxOugAAAA4"]
[Thu Apr 02 20:56:22.997615 2026] [:error] [pid 59200:tid 59264] [client 20.203.168.203:28183] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5ndrfP26txrdLs3Ep-6QAAAFg"]
[Thu Apr 02 20:56:23.545921 2026] [:error] [pid 59305:tid 59322] [client 20.203.168.203:21733] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5nd6r2tV4rDwKFxKel8gAAAM0"]
[Thu Apr 02 20:56:24.031046 2026] [:error] [pid 59305:tid 59314] [client 20.203.168.203:27629] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5neKr2tV4rDwKFxKel9gAAAMU"]
[Thu Apr 02 20:56:24.506336 2026] [:error] [pid 59194:tid 59232] [client 20.203.168.203:21729] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/luyuc.php"] [unique_id "ac5neBMpAeV11hcQehxOuwAAABM"]
[Thu Apr 02 20:56:24.982210 2026] [:error] [pid 59200:tid 59253] [client 20.203.168.203:9785] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/luyuc.php"] [unique_id "ac5neLfP26txrdLs3Ep-6wAAAE0"]
[Thu Apr 02 20:56:25.460925 2026] [:error] [pid 29467:tid 29482] [client 20.203.168.203:9759] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/luyuc.php"] [unique_id "ac5neb4VUBFCJAq-WOmnPQAAAQw"]
[Thu Apr 02 20:56:25.935159 2026] [:error] [pid 59201:tid 59274] [client 20.203.168.203:22879] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/luyuc.php"] [unique_id "ac5necAC0Tw8eL6gzZ4ocgAAAIc"]
[Thu Apr 02 20:56:26.409191 2026] [:error] [pid 29467:tid 29470] [client 20.203.168.203:4228] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac5ner4VUBFCJAq-WOmnSQAAAQA"]
[Thu Apr 02 20:56:26.887458 2026] [:error] [pid 59200:tid 59260] [client 20.203.168.203:11663] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac5nerfP26txrdLs3Ep-7gAAAFQ"]
[Thu Apr 02 20:56:27.361201 2026] [:error] [pid 59200:tid 59241] [client 20.203.168.203:17185] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac5ne7fP26txrdLs3Ep-7wAAAEE"]
[Thu Apr 02 20:56:27.841875 2026] [:error] [pid 23927:tid 23942] [client 20.203.168.203:43035] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac5ne0sZwqCndhl9uKDHeAAAAY0"]
[Thu Apr 02 20:56:28.319783 2026] [:error] [pid 23927:tid 23947] [client 20.203.168.203:22863] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/htto.php"] [unique_id "ac5nfEsZwqCndhl9uKDHeQAAAZI"]
[Thu Apr 02 20:56:28.820945 2026] [:error] [pid 54384:tid 54388] [client 20.203.168.203:5083] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/htto.php"] [unique_id "ac5nfNWWpaby3TVN7McglwAAAcI"]
[Thu Apr 02 20:56:29.297080 2026] [:error] [pid 59305:tid 59319] [client 20.203.168.203:53136] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/htto.php"] [unique_id "ac5nfar2tV4rDwKFxKemAAAAAMo"]
[Thu Apr 02 20:56:29.773114 2026] [:error] [pid 59305:tid 59314] [client 20.203.168.203:27639] [client 20.203.168.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/htto.php"] [unique_id "ac5nfar2tV4rDwKFxKemAQAAAMU"]
[Fri Apr 03 06:36:39.875900 2026] [:error] [pid 33446:tid 33488] [client 83.110.171.253:65446] [client 83.110.171.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.110.171.253, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ac7vd9g3dCqFYIIdw0oVNAAAAEs"]
[Fri Apr 03 06:36:39.887156 2026] [proxy_fcgi:error] [pid 33446:tid 33488] [client 83.110.171.253:65446] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:05.733761 2026] [proxy_fcgi:error] [pid 33446:tid 33489] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:06.011081 2026] [proxy_fcgi:error] [pid 33446:tid 33497] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:06.250849 2026] [proxy_fcgi:error] [pid 33446:tid 33481] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:06.490183 2026] [proxy_fcgi:error] [pid 33446:tid 33477] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:06.729407 2026] [proxy_fcgi:error] [pid 33446:tid 33488] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:06.968373 2026] [proxy_fcgi:error] [pid 33446:tid 33499] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:07.209613 2026] [proxy_fcgi:error] [pid 33446:tid 33492] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:07.448601 2026] [proxy_fcgi:error] [pid 33446:tid 33496] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:07.688197 2026] [proxy_fcgi:error] [pid 33446:tid 33491] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:07.929417 2026] [proxy_fcgi:error] [pid 33446:tid 33479] [client 20.19.191.162:1963] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:43:08.164881 2026] [:error] [pid 33446:tid 33485] [client 20.19.191.162:1963] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7w_Ng3dCqFYIIdw0oXKwAAAEg"]
[Fri Apr 03 06:43:08.756559 2026] [:error] [pid 35469:tid 35488] [client 20.19.191.162:34479] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7w_KGvTIc8-wY3jUQUXgAAARE"]
[Fri Apr 03 06:43:09.385360 2026] [:error] [pid 35469:tid 35472] [client 20.19.191.162:17628] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7w_aGvTIc8-wY3jUQUZAAAAQE"]
[Fri Apr 03 06:43:10.016153 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:15770] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7w_qGvTIc8-wY3jUQUbQAAAQ8"]
[Fri Apr 03 06:43:10.524201 2026] [:error] [pid 33447:tid 33516] [client 20.19.191.162:13097] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7w_kgaPmDHz92j4lOQwAAAAIw"]
[Fri Apr 03 06:43:11.000879 2026] [:error] [pid 33445:tid 33456] [client 20.19.191.162:12311] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7w_llRNZ0iDVmJWM2JjwAAAAY"]
[Fri Apr 03 06:43:11.500829 2026] [:error] [pid 33447:tid 33522] [client 20.19.191.162:34520] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7w_0gaPmDHz92j4lOQwwAAAJI"]
[Fri Apr 03 06:43:11.988997 2026] [:error] [pid 33446:tid 33501] [client 20.19.191.162:38280] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7w_9g3dCqFYIIdw0oXMAAAAFg"]
[Fri Apr 03 06:43:12.513484 2026] [:error] [pid 33446:tid 33477] [client 20.19.191.162:12289] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7xANg3dCqFYIIdw0oXMgAAAEA"]
[Fri Apr 03 06:43:12.999836 2026] [:error] [pid 35469:tid 35491] [client 20.19.191.162:12307] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7xAKGvTIc8-wY3jUQUewAAARQ"]
[Fri Apr 03 06:43:13.558303 2026] [:error] [pid 33447:tid 33514] [client 20.19.191.162:25219] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7xAUgaPmDHz92j4lOQzAAAAIo"]
[Fri Apr 03 06:43:14.220366 2026] [:error] [pid 35469:tid 35482] [client 20.19.191.162:13638] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7xAqGvTIc8-wY3jUQUhAAAAQs"]
[Fri Apr 03 06:43:14.918964 2026] [:error] [pid 35469:tid 35480] [client 20.19.191.162:46846] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ac7xAqGvTIc8-wY3jUQUiQAAAQk"]
[Fri Apr 03 06:43:15.534324 2026] [:error] [pid 35469:tid 35478] [client 20.19.191.162:38306] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ac7xA6GvTIc8-wY3jUQUjAAAAQc"]
[Fri Apr 03 06:43:16.116929 2026] [:error] [pid 33542:tid 33554] [client 20.19.191.162:20381] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ac7xBHwb6uB1LaGtepYCAAAAAMk"]
[Fri Apr 03 06:43:16.650489 2026] [:error] [pid 33445:tid 33468] [client 20.19.191.162:20360] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ac7xBFlRNZ0iDVmJWM2JlQAAABI"]
[Fri Apr 03 06:43:17.164346 2026] [:error] [pid 33445:tid 33453] [client 20.19.191.162:34559] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1.php"] [unique_id "ac7xBVlRNZ0iDVmJWM2JlwAAAAM"]
[Fri Apr 03 06:43:17.747780 2026] [:error] [pid 33447:tid 33507] [client 20.19.191.162:45827] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1.php"] [unique_id "ac7xBUgaPmDHz92j4lOQzQAAAIM"]
[Fri Apr 03 06:43:18.489891 2026] [:error] [pid 35469:tid 35492] [client 20.19.191.162:34538] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1.php"] [unique_id "ac7xBqGvTIc8-wY3jUQUkgAAARU"]
[Fri Apr 03 06:43:18.971565 2026] [:error] [pid 33542:tid 33550] [client 20.19.191.162:38292] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1.php"] [unique_id "ac7xBnwb6uB1LaGtepYCDgAAAMU"]
[Fri Apr 03 06:43:19.577736 2026] [:error] [pid 35469:tid 35471] [client 20.19.191.162:34549] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac7xB6GvTIc8-wY3jUQUlwAAAQA"]
[Fri Apr 03 06:43:20.424814 2026] [:error] [pid 35469:tid 35489] [client 20.19.191.162:13112] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac7xCKGvTIc8-wY3jUQUngAAARI"]
[Fri Apr 03 06:43:20.985387 2026] [:error] [pid 33542:tid 33567] [client 20.19.191.162:8229] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac7xCHwb6uB1LaGtepYCEQAAANY"]
[Fri Apr 03 06:43:21.726060 2026] [:error] [pid 35469:tid 35480] [client 20.19.191.162:8197] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "ac7xCaGvTIc8-wY3jUQUpQAAAQk"]
[Fri Apr 03 06:43:22.857989 2026] [:error] [pid 35469:tid 35479] [client 20.19.191.162:41704] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "ac7xCqGvTIc8-wY3jUQUrwAAAQg"]
[Fri Apr 03 06:43:23.810275 2026] [:error] [pid 35469:tid 35493] [client 20.19.191.162:36843] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "ac7xC6GvTIc8-wY3jUQUtgAAARY"]
[Fri Apr 03 06:43:24.657373 2026] [:error] [pid 35469:tid 35492] [client 20.19.191.162:13668] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "ac7xDKGvTIc8-wY3jUQUvQAAARU"]
[Fri Apr 03 06:43:25.619277 2026] [:error] [pid 33542:tid 33549] [client 20.19.191.162:9603] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "ac7xDXwb6uB1LaGtepYCHgAAAMQ"]
[Fri Apr 03 06:43:26.212351 2026] [:error] [pid 35469:tid 35473] [client 20.19.191.162:19589] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/24.php"] [unique_id "ac7xDqGvTIc8-wY3jUQUwgAAAQI"]
[Fri Apr 03 06:43:26.770510 2026] [:error] [pid 33542:tid 33561] [client 20.19.191.162:28829] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/24.php"] [unique_id "ac7xDnwb6uB1LaGtepYCJAAAANA"]
[Fri Apr 03 06:43:27.301436 2026] [:error] [pid 33447:tid 33523] [client 20.19.191.162:8106] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/24.php"] [unique_id "ac7xD0gaPmDHz92j4lOQ0gAAAJM"]
[Fri Apr 03 06:43:27.882165 2026] [:error] [pid 33447:tid 33520] [client 20.19.191.162:36863] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/24.php"] [unique_id "ac7xD0gaPmDHz92j4lOQ1AAAAJA"]
[Fri Apr 03 06:43:28.557412 2026] [:error] [pid 35469:tid 35475] [client 20.19.191.162:24287] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ac7xEKGvTIc8-wY3jUQUywAAAQQ"]
[Fri Apr 03 06:43:30.570613 2026] [:error] [pid 33447:tid 33526] [client 20.19.191.162:8066] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ac7xEkgaPmDHz92j4lOQ2gAAAJY"]
[Fri Apr 03 06:43:31.993593 2026] [:error] [pid 35469:tid 35494] [client 20.19.191.162:36832] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ac7xE6GvTIc8-wY3jUQUzwAAARc"]
[Fri Apr 03 06:43:33.132254 2026] [:error] [pid 35469:tid 35489] [client 20.19.191.162:24276] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ac7xFaGvTIc8-wY3jUQU1wAAARI"]
[Fri Apr 03 06:43:34.033907 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:1780] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ac7xFqGvTIc8-wY3jUQU4gAAAQ8"]
[Fri Apr 03 06:43:34.747330 2026] [:error] [pid 33542:tid 33566] [client 20.19.191.162:1754] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ac7xFnwb6uB1LaGtepYCNAAAANU"]
[Fri Apr 03 06:43:35.273422 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:25227] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ac7xF6GvTIc8-wY3jUQU6wAAAQ8"]
[Fri Apr 03 06:43:35.910010 2026] [:error] [pid 33542:tid 33550] [client 20.19.191.162:20396] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ac7xF3wb6uB1LaGtepYCOAAAAMU"]
[Fri Apr 03 06:43:36.443254 2026] [:error] [pid 35469:tid 35474] [client 20.19.191.162:27377] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyiiz.php"] [unique_id "ac7xGKGvTIc8-wY3jUQU8wAAAQM"]
[Fri Apr 03 06:43:37.175714 2026] [:error] [pid 33542:tid 33563] [client 20.19.191.162:13669] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyiiz.php"] [unique_id "ac7xGXwb6uB1LaGtepYCPAAAANI"]
[Fri Apr 03 06:43:37.670880 2026] [:error] [pid 35469:tid 35471] [client 20.19.191.162:28838] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyiiz.php"] [unique_id "ac7xGaGvTIc8-wY3jUQU-AAAAQA"]
[Fri Apr 03 06:43:38.232395 2026] [:error] [pid 35469:tid 35479] [client 20.19.191.162:13632] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyiiz.php"] [unique_id "ac7xGqGvTIc8-wY3jUQU-wAAAQg"]
[Fri Apr 03 06:43:39.252988 2026] [:error] [pid 33542:tid 33567] [client 20.19.191.162:49839] [client 20.19.191.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac7xG3wb6uB1LaGtepYCPgAAANY"]
[Fri Apr 03 06:43:40.219406 2026] [:error] [pid 33542:tid 33555] [client 20.19.191.162:20411] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7xHHwb6uB1LaGtepYCQwAAAMo"]
[Fri Apr 03 06:43:40.761830 2026] [:error] [pid 33542:tid 33556] [client 20.19.191.162:9186] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7xHHwb6uB1LaGtepYCRAAAAMs"]
[Fri Apr 03 06:43:41.268336 2026] [:error] [pid 35469:tid 35488] [client 20.19.191.162:1740] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7xHaGvTIc8-wY3jUQVAwAAARE"]
[Fri Apr 03 06:43:41.890094 2026] [:error] [pid 35469:tid 35492] [client 20.19.191.162:1788] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac7xHaGvTIc8-wY3jUQVBQAAARU"]
[Fri Apr 03 06:43:42.373797 2026] [:error] [pid 35469:tid 35483] [client 20.19.191.162:25262] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac7xHqGvTIc8-wY3jUQVCAAAAQw"]
[Fri Apr 03 06:43:42.865151 2026] [:error] [pid 33542:tid 33566] [client 20.19.191.162:8077] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac7xHnwb6uB1LaGtepYCSwAAANU"]
[Fri Apr 03 06:43:43.345662 2026] [:error] [pid 33542:tid 33556] [client 20.19.191.162:28823] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ac7xH3wb6uB1LaGtepYCTAAAAMs"]
[Fri Apr 03 06:43:43.866793 2026] [:error] [pid 33542:tid 33554] [client 20.19.191.162:26343] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7xH3wb6uB1LaGtepYCTgAAAMk"]
[Fri Apr 03 06:43:44.366646 2026] [:error] [pid 33542:tid 33545] [client 20.19.191.162:1737] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7xIHwb6uB1LaGtepYCUQAAAMA"]
[Fri Apr 03 06:43:44.863085 2026] [:error] [pid 33542:tid 33553] [client 20.19.191.162:34519] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7xIHwb6uB1LaGtepYCVgAAAMg"]
[Fri Apr 03 06:43:45.351701 2026] [:error] [pid 35469:tid 35491] [client 20.19.191.162:20390] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7xIaGvTIc8-wY3jUQVFwAAARQ"]
[Fri Apr 03 06:43:45.927069 2026] [:error] [pid 33542:tid 33554] [client 20.19.191.162:41691] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ac7xIXwb6uB1LaGtepYCXQAAAMk"]
[Fri Apr 03 06:43:46.673691 2026] [:error] [pid 33446:tid 33480] [client 20.19.191.162:9194] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ac7xItg3dCqFYIIdw0oXUgAAAEM"]
[Fri Apr 03 06:43:47.687300 2026] [:error] [pid 35469:tid 35472] [client 20.19.191.162:41667] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ac7xI6GvTIc8-wY3jUQVJQAAAQE"]
[Fri Apr 03 06:43:48.362779 2026] [:error] [pid 33447:tid 33524] [client 20.19.191.162:25245] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ac7xJEgaPmDHz92j4lOQ6QAAAJQ"]
[Fri Apr 03 06:43:49.296783 2026] [:error] [pid 35469:tid 35492] [client 20.19.191.162:6214] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7xJaGvTIc8-wY3jUQVLQAAARU"]
[Fri Apr 03 06:43:49.860164 2026] [:error] [pid 33446:tid 33478] [client 20.19.191.162:46825] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7xJdg3dCqFYIIdw0oXVAAAAEE"]
[Fri Apr 03 06:43:50.775895 2026] [:error] [pid 33447:tid 33522] [client 20.19.191.162:25225] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7xJkgaPmDHz92j4lOQ6wAAAJI"]
[Fri Apr 03 06:43:51.877311 2026] [:error] [pid 33542:tid 33566] [client 20.19.191.162:8081] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7xJ3wb6uB1LaGtepYCbQAAANU"]
[Fri Apr 03 06:43:53.538457 2026] [:error] [pid 33445:tid 33450] [client 20.19.191.162:49836] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/erty.php"] [unique_id "ac7xKVlRNZ0iDVmJWM2JzAAAAAA"]
[Fri Apr 03 06:43:56.810812 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:20357] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/erty.php"] [unique_id "ac7xLKGvTIc8-wY3jUQVTAAAAQ8"]
[Fri Apr 03 06:43:58.839634 2026] [:error] [pid 33446:tid 33484] [client 20.19.191.162:41700] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/erty.php"] [unique_id "ac7xLtg3dCqFYIIdw0oXXwAAAEc"]
[Fri Apr 03 06:44:00.178395 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:14349] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/erty.php"] [unique_id "ac7xMKGvTIc8-wY3jUQVYAAAAQ8"]
[Fri Apr 03 06:44:00.889602 2026] [:error] [pid 35469:tid 35491] [client 20.19.191.162:14395] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "ac7xMKGvTIc8-wY3jUQVYwAAARQ"]
[Fri Apr 03 06:44:01.397923 2026] [:error] [pid 35469:tid 35488] [client 20.19.191.162:11138] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "ac7xMaGvTIc8-wY3jUQVZQAAARE"]
[Fri Apr 03 06:44:01.951469 2026] [:error] [pid 35469:tid 35476] [client 20.19.191.162:8012] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "ac7xMaGvTIc8-wY3jUQVaQAAAQU"]
[Fri Apr 03 06:44:02.476536 2026] [:error] [pid 35469:tid 35494] [client 20.19.191.162:8037] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "ac7xMqGvTIc8-wY3jUQVbgAAARc"]
[Fri Apr 03 06:44:03.020043 2026] [:error] [pid 33542:tid 33556] [client 20.19.191.162:32991] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac7xM3wb6uB1LaGtepYCjAAAAMs"]
[Fri Apr 03 06:44:03.761211 2026] [:error] [pid 33447:tid 33508] [client 20.19.191.162:9208] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac7xM0gaPmDHz92j4lOQ7QAAAIQ"]
[Fri Apr 03 06:44:04.392773 2026] [:error] [pid 33447:tid 33514] [client 20.19.191.162:49843] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac7xNEgaPmDHz92j4lOQ7wAAAIo"]
[Fri Apr 03 06:44:05.411612 2026] [:error] [pid 35469:tid 35482] [client 20.19.191.162:20353] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "ac7xNaGvTIc8-wY3jUQVegAAAQs"]
[Fri Apr 03 06:44:06.060271 2026] [:error] [pid 33446:tid 33495] [client 20.19.191.162:40719] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "ac7xNtg3dCqFYIIdw0oXYQAAAFI"]
[Fri Apr 03 06:44:06.825381 2026] [:error] [pid 33542:tid 33557] [client 20.19.191.162:1777] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "ac7xNnwb6uB1LaGtepYClwAAAMw"]
[Fri Apr 03 06:44:07.609908 2026] [proxy_fcgi:error] [pid 35469:tid 35475] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:07.849456 2026] [proxy_fcgi:error] [pid 35469:tid 35494] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:08.088164 2026] [proxy_fcgi:error] [pid 35469:tid 35473] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:08.334726 2026] [proxy_fcgi:error] [pid 35469:tid 35480] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:08.574493 2026] [proxy_fcgi:error] [pid 35469:tid 35474] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:08.814630 2026] [proxy_fcgi:error] [pid 35469:tid 35472] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:09.053929 2026] [proxy_fcgi:error] [pid 35469:tid 35483] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:09.293076 2026] [proxy_fcgi:error] [pid 35469:tid 35471] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:09.532908 2026] [proxy_fcgi:error] [pid 35469:tid 35495] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:09.774272 2026] [proxy_fcgi:error] [pid 35469:tid 35493] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:10.013078 2026] [proxy_fcgi:error] [pid 35469:tid 35489] [client 20.19.191.162:26351] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:44:10.249319 2026] [:error] [pid 35469:tid 35473] [client 20.19.191.162:26351] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xvs.php"] [unique_id "ac7xOqGvTIc8-wY3jUQVkQAAAQI"]
[Fri Apr 03 06:44:11.749772 2026] [:error] [pid 35469:tid 35483] [client 20.19.191.162:14372] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xvs.php"] [unique_id "ac7xO6GvTIc8-wY3jUQVlwAAAQw"]
[Fri Apr 03 06:44:16.574646 2026] [:error] [pid 33447:tid 33509] [client 20.19.191.162:49806] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xvs.php"] [unique_id "ac7xQEgaPmDHz92j4lOQ_QAAAIU"]
[Fri Apr 03 06:44:18.539668 2026] [:error] [pid 33542:tid 33568] [client 20.19.191.162:39518] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xvs.php"] [unique_id "ac7xQnwb6uB1LaGtepYCvAAAANc"]
[Fri Apr 03 06:44:19.813013 2026] [:error] [pid 33445:tid 33458] [client 20.19.191.162:26869] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ac7xQ1lRNZ0iDVmJWM2J9gAAAAg"]
[Fri Apr 03 06:44:20.526770 2026] [:error] [pid 35469:tid 35492] [client 20.19.191.162:8018] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ac7xRKGvTIc8-wY3jUQVpAAAARU"]
[Fri Apr 03 06:44:21.625284 2026] [:error] [pid 35469:tid 35481] [client 20.19.191.162:32410] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ac7xRaGvTIc8-wY3jUQVpgAAAQo"]
[Fri Apr 03 06:44:22.207820 2026] [:error] [pid 33446:tid 33500] [client 20.19.191.162:36309] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ac7xRtg3dCqFYIIdw0oXcwAAAFc"]
[Fri Apr 03 06:44:22.738317 2026] [:error] [pid 35469:tid 35488] [client 20.19.191.162:13835] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "ac7xRqGvTIc8-wY3jUQVrgAAARE"]
[Fri Apr 03 06:44:23.259841 2026] [:error] [pid 33447:tid 33508] [client 20.19.191.162:39495] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "ac7xR0gaPmDHz92j4lORBAAAAIQ"]
[Fri Apr 03 06:44:23.812698 2026] [:error] [pid 33446:tid 33490] [client 20.19.191.162:12849] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "ac7xR9g3dCqFYIIdw0oXdQAAAE0"]
[Fri Apr 03 06:44:24.467746 2026] [:error] [pid 33447:tid 33510] [client 20.19.191.162:32393] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/az.php"] [unique_id "ac7xSEgaPmDHz92j4lORBwAAAIY"]
[Fri Apr 03 06:44:25.122463 2026] [:error] [pid 33447:tid 33509] [client 20.19.191.162:33019] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web.php"] [unique_id "ac7xSUgaPmDHz92j4lORCAAAAIU"]
[Fri Apr 03 06:44:25.691380 2026] [:error] [pid 33542:tid 33552] [client 20.19.191.162:12034] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web.php"] [unique_id "ac7xSXwb6uB1LaGtepYC0gAAAMc"]
[Fri Apr 03 06:44:26.277671 2026] [:error] [pid 35469:tid 35473] [client 20.19.191.162:13865] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web.php"] [unique_id "ac7xSqGvTIc8-wY3jUQVtQAAAQI"]
[Fri Apr 03 06:44:26.842707 2026] [:error] [pid 33447:tid 33516] [client 20.19.191.162:42133] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web.php"] [unique_id "ac7xSkgaPmDHz92j4lORDAAAAIw"]
[Fri Apr 03 06:44:27.508705 2026] [:error] [pid 33542:tid 33564] [client 20.19.191.162:4208] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7xS3wb6uB1LaGtepYC1wAAANM"]
[Fri Apr 03 06:44:28.058815 2026] [:error] [pid 33542:tid 33562] [client 20.19.191.162:39527] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7xTHwb6uB1LaGtepYC3AAAANE"]
[Fri Apr 03 06:44:28.554730 2026] [:error] [pid 33445:tid 33452] [client 20.19.191.162:36340] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7xTFlRNZ0iDVmJWM2KDQAAAAI"]
[Fri Apr 03 06:44:29.120600 2026] [:error] [pid 33445:tid 33454] [client 20.19.191.162:42135] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7xTVlRNZ0iDVmJWM2KEQAAAAQ"]
[Fri Apr 03 06:44:29.700382 2026] [:error] [pid 33542:tid 33548] [client 20.19.191.162:39540] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lp6.php"] [unique_id "ac7xTXwb6uB1LaGtepYC4gAAAMM"]
[Fri Apr 03 06:44:30.228218 2026] [:error] [pid 33445:tid 33450] [client 20.19.191.162:8081] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lp6.php"] [unique_id "ac7xTllRNZ0iDVmJWM2KFAAAAAA"]
[Fri Apr 03 06:44:30.905320 2026] [:error] [pid 33447:tid 33522] [client 20.19.191.162:36292] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lp6.php"] [unique_id "ac7xTkgaPmDHz92j4lOREgAAAJI"]
[Fri Apr 03 06:44:31.428889 2026] [:error] [pid 33446:tid 33485] [client 20.19.191.162:19654] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lp6.php"] [unique_id "ac7xT9g3dCqFYIIdw0oXgQAAAEg"]
[Fri Apr 03 06:44:32.480185 2026] [:error] [pid 33447:tid 33524] [client 20.19.191.162:19666] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/com.php"] [unique_id "ac7xUEgaPmDHz92j4lORGQAAAJQ"]
[Fri Apr 03 06:44:33.554216 2026] [:error] [pid 33542:tid 33548] [client 20.19.191.162:8004] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/com.php"] [unique_id "ac7xUXwb6uB1LaGtepYC7gAAAMM"]
[Fri Apr 03 06:44:34.575229 2026] [:error] [pid 35469:tid 35493] [client 20.19.191.162:13829] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/com.php"] [unique_id "ac7xUqGvTIc8-wY3jUQVzQAAARY"]
[Fri Apr 03 06:44:36.329504 2026] [:error] [pid 33447:tid 33518] [client 20.19.191.162:4220] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/com.php"] [unique_id "ac7xVEgaPmDHz92j4lORIQAAAI4"]
[Fri Apr 03 06:44:37.594937 2026] [:error] [pid 33446:tid 33489] [client 20.19.191.162:8631] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac7xVdg3dCqFYIIdw0oXigAAAEw"]
[Fri Apr 03 06:44:39.109451 2026] [:error] [pid 33445:tid 33471] [client 20.19.191.162:32442] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac7xV1lRNZ0iDVmJWM2KHQAAABU"]
[Fri Apr 03 06:44:41.505186 2026] [:error] [pid 33542:tid 33553] [client 20.19.191.162:12045] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac7xWXwb6uB1LaGtepYDAwAAAMg"]
[Fri Apr 03 06:44:44.700196 2026] [:error] [pid 33542:tid 33558] [client 20.19.191.162:6245] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac7xXHwb6uB1LaGtepYDEwAAAM0"]
[Fri Apr 03 06:44:46.880631 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:8591] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac7xXqGvTIc8-wY3jUQV5wAAAQ8"]
[Fri Apr 03 06:44:48.115086 2026] [:error] [pid 33447:tid 33521] [client 20.19.191.162:32504] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac7xYEgaPmDHz92j4lORMAAAAJE"]
[Fri Apr 03 06:44:49.657177 2026] [:error] [pid 33542:tid 33554] [client 20.19.191.162:13395] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac7xYXwb6uB1LaGtepYDJgAAAMk"]
[Fri Apr 03 06:44:50.718630 2026] [:error] [pid 33445:tid 33454] [client 20.19.191.162:13413] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "ac7xYllRNZ0iDVmJWM2KMAAAAAQ"]
[Fri Apr 03 06:44:52.251699 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:27807] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ac7xZKGvTIc8-wY3jUQV9QAAAQ8"]
[Fri Apr 03 06:44:52.877282 2026] [:error] [pid 33445:tid 33458] [client 20.19.191.162:4163] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ac7xZFlRNZ0iDVmJWM2KPQAAAAg"]
[Fri Apr 03 06:44:53.700145 2026] [:error] [pid 35469:tid 35493] [client 20.19.191.162:4217] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ac7xZaGvTIc8-wY3jUQV-wAAARY"]
[Fri Apr 03 06:44:54.317951 2026] [:error] [pid 35469:tid 35492] [client 20.19.191.162:13833] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ac7xZqGvTIc8-wY3jUQV_QAAARU"]
[Fri Apr 03 06:44:54.971942 2026] [:error] [pid 35469:tid 35474] [client 20.19.191.162:20743] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7xZqGvTIc8-wY3jUQWAAAAAQM"]
[Fri Apr 03 06:44:55.571332 2026] [:error] [pid 33542:tid 33566] [client 20.19.191.162:42131] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7xZ3wb6uB1LaGtepYDKwAAANU"]
[Fri Apr 03 06:44:56.199497 2026] [:error] [pid 33447:tid 33508] [client 20.19.191.162:30337] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7xaEgaPmDHz92j4lORPAAAAIQ"]
[Fri Apr 03 06:44:56.708732 2026] [:error] [pid 33542:tid 33547] [client 20.19.191.162:12818] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7xaHwb6uB1LaGtepYDMAAAAMI"]
[Fri Apr 03 06:44:57.238730 2026] [:error] [pid 33542:tid 33554] [client 20.19.191.162:20757] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "ac7xaXwb6uB1LaGtepYDNAAAAMk"]
[Fri Apr 03 06:44:57.835700 2026] [:error] [pid 35469:tid 35473] [client 20.19.191.162:12077] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "ac7xaaGvTIc8-wY3jUQWDAAAAQI"]
[Fri Apr 03 06:44:59.147536 2026] [:error] [pid 35469:tid 35484] [client 20.19.191.162:22982] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "ac7xa6GvTIc8-wY3jUQWGAAAAQ0"]
[Fri Apr 03 06:44:59.844252 2026] [:error] [pid 33542:tid 33558] [client 20.19.191.162:12842] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "ac7xa3wb6uB1LaGtepYDOQAAAM0"]
[Fri Apr 03 06:45:00.386056 2026] [:error] [pid 33445:tid 33472] [client 20.19.191.162:12055] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac7xbFlRNZ0iDVmJWM2KUgAAABY"]
[Fri Apr 03 06:45:00.937116 2026] [:error] [pid 33447:tid 33514] [client 20.19.191.162:13417] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac7xbEgaPmDHz92j4lORRwAAAIo"]
[Fri Apr 03 06:45:01.469869 2026] [:error] [pid 33445:tid 33466] [client 20.19.191.162:39506] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac7xbVlRNZ0iDVmJWM2KVQAAABA"]
[Fri Apr 03 06:45:02.428219 2026] [:error] [pid 33445:tid 33451] [client 20.19.191.162:12092] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "ac7xbllRNZ0iDVmJWM2KVwAAAAE"]
[Fri Apr 03 06:45:03.338469 2026] [:error] [pid 33445:tid 33454] [client 20.19.191.162:20738] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac7xb1lRNZ0iDVmJWM2KWgAAAAQ"]
[Fri Apr 03 06:45:05.014037 2026] [:error] [pid 33542:tid 33558] [client 20.19.191.162:39519] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac7xcXwb6uB1LaGtepYDRQAAAM0"]
[Fri Apr 03 06:45:06.259342 2026] [:error] [pid 33542:tid 33560] [client 20.19.191.162:42157] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac7xcnwb6uB1LaGtepYDSQAAAM8"]
[Fri Apr 03 06:45:08.006070 2026] [:error] [pid 33446:tid 33477] [client 20.19.191.162:8638] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/to.php"] [unique_id "ac7xdNg3dCqFYIIdw0oXvgAAAEA"]
[Fri Apr 03 06:45:09.805712 2026] [:error] [pid 33447:tid 33509] [client 20.19.191.162:20763] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wqqs.php"] [unique_id "ac7xdUgaPmDHz92j4lORagAAAIU"]
[Fri Apr 03 06:45:12.663596 2026] [proxy_fcgi:error] [pid 35469:tid 35483] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:12.913965 2026] [proxy_fcgi:error] [pid 35469:tid 35473] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:13.220341 2026] [proxy_fcgi:error] [pid 35469:tid 35477] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:13.461919 2026] [proxy_fcgi:error] [pid 35469:tid 35487] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:13.705633 2026] [proxy_fcgi:error] [pid 35469:tid 35495] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:14.039500 2026] [proxy_fcgi:error] [pid 35469:tid 35482] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:14.281500 2026] [proxy_fcgi:error] [pid 35469:tid 35478] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:14.521731 2026] [proxy_fcgi:error] [pid 35469:tid 35481] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:15.002341 2026] [proxy_fcgi:error] [pid 35469:tid 35474] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:15.242984 2026] [proxy_fcgi:error] [pid 35469:tid 35481] [client 20.19.191.162:32458] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:45:15.496618 2026] [:error] [pid 35469:tid 35479] [client 20.19.191.162:32458] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cron.php"] [unique_id "ac7xe6GvTIc8-wY3jUQWkQAAAQg"]
[Fri Apr 03 06:45:17.060780 2026] [:error] [pid 35469:tid 35490] [client 20.19.191.162:32505] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cron.php"] [unique_id "ac7xfaGvTIc8-wY3jUQWpQAAARM"]
[Fri Apr 03 06:45:18.823077 2026] [:error] [pid 33445:tid 33468] [client 20.19.191.162:8610] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cron.php"] [unique_id "ac7xfllRNZ0iDVmJWM2KeAAAABI"]
[Fri Apr 03 06:45:21.006224 2026] [:error] [pid 33542:tid 33550] [client 20.19.191.162:12802] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cron.php"] [unique_id "ac7xgXwb6uB1LaGtepYDeQAAAMU"]
[Fri Apr 03 06:45:21.956362 2026] [:error] [pid 33445:tid 33464] [client 20.19.191.162:8147] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yanz.php"] [unique_id "ac7xgVlRNZ0iDVmJWM2KfAAAAA4"]
[Fri Apr 03 06:45:22.761090 2026] [:error] [pid 33542:tid 33552] [client 20.19.191.162:39498] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yanz.php"] [unique_id "ac7xgnwb6uB1LaGtepYDgAAAAMc"]
[Fri Apr 03 06:45:23.289832 2026] [:error] [pid 35469:tid 35493] [client 20.19.191.162:8639] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yanz.php"] [unique_id "ac7xg6GvTIc8-wY3jUQWxAAAARY"]
[Fri Apr 03 06:45:23.988748 2026] [:error] [pid 33542:tid 33559] [client 20.19.191.162:19986] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yanz.php"] [unique_id "ac7xg3wb6uB1LaGtepYDhAAAAM4"]
[Fri Apr 03 06:45:24.618286 2026] [:error] [pid 35469:tid 35474] [client 20.19.191.162:23033] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ac7xhKGvTIc8-wY3jUQWzgAAAQM"]
[Fri Apr 03 06:45:25.282810 2026] [:error] [pid 33445:tid 33452] [client 20.19.191.162:12860] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ac7xhVlRNZ0iDVmJWM2KgAAAAAI"]
[Fri Apr 03 06:45:25.821093 2026] [:error] [pid 35469:tid 35479] [client 20.19.191.162:30349] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ac7xhaGvTIc8-wY3jUQW2AAAAQg"]
[Fri Apr 03 06:45:26.509690 2026] [:error] [pid 35469:tid 35483] [client 20.19.191.162:12811] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ac7xhqGvTIc8-wY3jUQW3gAAAQw"]
[Fri Apr 03 06:45:27.222121 2026] [:error] [pid 35469:tid 35491] [client 20.19.191.162:23011] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/network.php"] [unique_id "ac7xh6GvTIc8-wY3jUQW5gAAARQ"]
[Fri Apr 03 06:45:27.851910 2026] [:error] [pid 35469:tid 35483] [client 20.19.191.162:8577] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/network.php"] [unique_id "ac7xh6GvTIc8-wY3jUQW7wAAAQw"]
[Fri Apr 03 06:45:28.543280 2026] [:error] [pid 33445:tid 33463] [client 20.19.191.162:32480] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/network.php"] [unique_id "ac7xiFlRNZ0iDVmJWM2KigAAAA0"]
[Fri Apr 03 06:45:29.106677 2026] [:error] [pid 35469:tid 35490] [client 20.19.191.162:20783] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/network.php"] [unique_id "ac7xiaGvTIc8-wY3jUQW9AAAARM"]
[Fri Apr 03 06:45:29.775907 2026] [:error] [pid 35469:tid 35483] [client 20.19.191.162:32401] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "ac7xiaGvTIc8-wY3jUQW-QAAAQw"]
[Fri Apr 03 06:45:30.488328 2026] [:error] [pid 33446:tid 33497] [client 20.19.191.162:30396] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "ac7xitg3dCqFYIIdw0oX3QAAAFQ"]
[Fri Apr 03 06:45:31.497317 2026] [:error] [pid 33445:tid 33471] [client 20.19.191.162:13428] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "ac7xi1lRNZ0iDVmJWM2KlAAAABU"]
[Fri Apr 03 06:45:32.780184 2026] [:error] [pid 33445:tid 33451] [client 20.19.191.162:39502] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "ac7xjFlRNZ0iDVmJWM2KmAAAAAE"]
[Fri Apr 03 06:45:34.153010 2026] [:error] [pid 33447:tid 33512] [client 20.19.191.162:36291] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypass.php"] [unique_id "ac7xjkgaPmDHz92j4lORfgAAAIg"]
[Fri Apr 03 06:45:36.102819 2026] [:error] [pid 33446:tid 33494] [client 20.19.191.162:32489] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypass.php"] [unique_id "ac7xkNg3dCqFYIIdw0oX4wAAAFE"]
[Fri Apr 03 06:45:47.233507 2026] [:error] [pid 35469:tid 35487] [client 20.19.191.162:30382] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypass.php"] [unique_id "ac7xm6GvTIc8-wY3jUQXRgAAARA"]
[Fri Apr 03 06:45:50.357673 2026] [:error] [pid 35469:tid 35476] [client 20.19.191.162:42134] [client 20.19.191.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac7xnqGvTIc8-wY3jUQXUQAAAQU"]
[Fri Apr 03 06:45:51.792351 2026] [:error] [pid 33542:tid 33557] [client 20.19.191.162:9896] [client 20.19.191.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac7xn3wb6uB1LaGtepYDzwAAAMw"]
[Fri Apr 03 06:45:54.245512 2026] [:error] [pid 33445:tid 33469] [client 20.19.191.162:1313] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "ac7xollRNZ0iDVmJWM2KswAAABM"]
[Fri Apr 03 06:45:54.944932 2026] [:error] [pid 33445:tid 33456] [client 20.19.191.162:7903] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "ac7xollRNZ0iDVmJWM2KuAAAAAY"]
[Fri Apr 03 06:45:56.390387 2026] [:error] [pid 35469:tid 35485] [client 20.19.191.162:5373] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "ac7xpKGvTIc8-wY3jUQXYwAAAQ4"]
[Fri Apr 03 06:45:57.113126 2026] [:error] [pid 35469:tid 35477] [client 20.19.191.162:23032] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "ac7xpaGvTIc8-wY3jUQXZgAAAQY"]
[Fri Apr 03 06:45:58.509562 2026] [:error] [pid 35469:tid 35479] [client 20.19.191.162:20011] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "ac7xpqGvTIc8-wY3jUQXcAAAAQg"]
[Fri Apr 03 06:45:59.671693 2026] [:error] [pid 35469:tid 35491] [client 20.19.191.162:8618] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "ac7xp6GvTIc8-wY3jUQXfQAAARQ"]
[Fri Apr 03 06:46:00.468693 2026] [:error] [pid 35469:tid 35489] [client 20.19.191.162:1293] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "ac7xqKGvTIc8-wY3jUQXgwAAARI"]
[Fri Apr 03 06:46:01.415169 2026] [:error] [pid 33542:tid 33553] [client 20.19.191.162:4185] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock.php"] [unique_id "ac7xqXwb6uB1LaGtepYD3wAAAMg"]
[Fri Apr 03 06:46:03.137436 2026] [:error] [pid 35469:tid 35472] [client 20.19.191.162:14188] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "ac7xq6GvTIc8-wY3jUQXlwAAAQE"]
[Fri Apr 03 06:46:07.463979 2026] [:error] [pid 35469:tid 35492] [client 20.19.191.162:36758] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "ac7xr6GvTIc8-wY3jUQXpgAAARU"]
[Fri Apr 03 06:46:08.560625 2026] [:error] [pid 33542:tid 33556] [client 20.19.191.162:36775] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "ac7xsHwb6uB1LaGtepYD7QAAAMs"]
[Fri Apr 03 06:46:09.330557 2026] [:error] [pid 33445:tid 33459] [client 20.19.191.162:42188] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail.php"] [unique_id "ac7xsVlRNZ0iDVmJWM2K3AAAAAk"]
[Fri Apr 03 06:46:10.116395 2026] [:error] [pid 33447:tid 33506] [client 20.19.191.162:30374] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/marijuana.php"] [unique_id "ac7xskgaPmDHz92j4lORqgAAAII"]
[Fri Apr 03 06:46:10.963081 2026] [:error] [pid 33447:tid 33511] [client 20.19.191.162:36796] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/marijuana.php"] [unique_id "ac7xskgaPmDHz92j4lORrAAAAIc"]
[Fri Apr 03 06:46:11.805242 2026] [:error] [pid 35469:tid 35471] [client 20.19.191.162:20736] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/marijuana.php"] [unique_id "ac7xs6GvTIc8-wY3jUQXwQAAAQA"]
[Fri Apr 03 06:46:13.080582 2026] [:error] [pid 33542:tid 33548] [client 20.19.191.162:5315] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/marijuana.php"] [unique_id "ac7xtXwb6uB1LaGtepYD8QAAAMM"]
[Fri Apr 03 06:46:14.066198 2026] [:error] [pid 35469:tid 35473] [client 20.19.191.162:20786] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "ac7xtqGvTIc8-wY3jUQXzQAAAQI"]
[Fri Apr 03 06:46:14.873905 2026] [:error] [pid 35469:tid 35490] [client 20.19.191.162:9864] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "ac7xtqGvTIc8-wY3jUQX0wAAARM"]
[Fri Apr 03 06:46:15.821940 2026] [proxy_fcgi:error] [pid 33542:tid 33553] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:16.061998 2026] [proxy_fcgi:error] [pid 33542:tid 33560] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:16.406593 2026] [proxy_fcgi:error] [pid 33542:tid 33566] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:16.751212 2026] [proxy_fcgi:error] [pid 33542:tid 33567] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:17.021381 2026] [proxy_fcgi:error] [pid 33542:tid 33548] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:17.261873 2026] [proxy_fcgi:error] [pid 33542:tid 33568] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:17.504929 2026] [proxy_fcgi:error] [pid 33542:tid 33550] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:17.785962 2026] [proxy_fcgi:error] [pid 33542:tid 33563] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:18.027023 2026] [proxy_fcgi:error] [pid 33542:tid 33552] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:18.267953 2026] [proxy_fcgi:error] [pid 33542:tid 33557] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:18.550528 2026] [proxy_fcgi:error] [pid 33542:tid 33547] [client 20.19.191.162:19977] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:46:18.831322 2026] [:error] [pid 33542:tid 33549] [client 20.19.191.162:19977] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/he.php"] [unique_id "ac7xunwb6uB1LaGtepYEBgAAAMQ"]
[Fri Apr 03 06:46:19.729254 2026] [:error] [pid 33445:tid 33466] [client 20.19.191.162:30341] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/he.php"] [unique_id "ac7xu1lRNZ0iDVmJWM2K7gAAABA"]
[Fri Apr 03 06:46:20.546368 2026] [:error] [pid 35469:tid 35474] [client 20.19.191.162:18941] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/he.php"] [unique_id "ac7xvKGvTIc8-wY3jUQX9gAAAQM"]
[Fri Apr 03 06:46:21.747516 2026] [:error] [pid 33447:tid 33522] [client 20.19.191.162:1128] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/he.php"] [unique_id "ac7xvUgaPmDHz92j4lORuQAAAJI"]
[Fri Apr 03 06:46:22.669915 2026] [:error] [pid 33445:tid 33468] [client 20.19.191.162:18911] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "ac7xvllRNZ0iDVmJWM2K8wAAABI"]
[Fri Apr 03 06:46:23.476629 2026] [:error] [pid 33542:tid 33567] [client 20.19.191.162:23740] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "ac7xv3wb6uB1LaGtepYEGgAAANY"]
[Fri Apr 03 06:46:24.871578 2026] [:error] [pid 35469:tid 35479] [client 20.19.191.162:7972] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "ac7xwKGvTIc8-wY3jUQYCQAAAQg"]
[Fri Apr 03 06:46:25.677325 2026] [:error] [pid 35469:tid 35481] [client 20.19.191.162:40394] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aves.php"] [unique_id "ac7xwaGvTIc8-wY3jUQYEgAAAQo"]
[Fri Apr 03 06:46:26.443888 2026] [:error] [pid 35469:tid 35487] [client 20.19.191.162:38719] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "ac7xwqGvTIc8-wY3jUQYFAAAARA"]
[Fri Apr 03 06:46:27.135913 2026] [:error] [pid 35469:tid 35474] [client 20.19.191.162:42190] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "ac7xw6GvTIc8-wY3jUQYFgAAAQM"]
[Fri Apr 03 06:46:28.180377 2026] [:error] [pid 33445:tid 33451] [client 20.19.191.162:23730] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "ac7xxFlRNZ0iDVmJWM2K-AAAAAE"]
[Fri Apr 03 06:46:29.188846 2026] [:error] [pid 33446:tid 33481] [client 20.19.191.162:36784] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gorila.php"] [unique_id "ac7xxdg3dCqFYIIdw0oYEQAAAEQ"]
[Fri Apr 03 06:46:30.076434 2026] [:error] [pid 33445:tid 33454] [client 20.19.191.162:22564] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vanta.php"] [unique_id "ac7xxllRNZ0iDVmJWM2K_gAAAAQ"]
[Fri Apr 03 06:46:30.942737 2026] [:error] [pid 33542:tid 33562] [client 20.19.191.162:38691] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vanta.php"] [unique_id "ac7xxnwb6uB1LaGtepYELQAAANE"]
[Fri Apr 03 06:46:31.657320 2026] [:error] [pid 33446:tid 33497] [client 20.19.191.162:41140] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vanta.php"] [unique_id "ac7xx9g3dCqFYIIdw0oYEwAAAFQ"]
[Fri Apr 03 06:46:32.403868 2026] [:error] [pid 33447:tid 33514] [client 20.19.191.162:1695] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vanta.php"] [unique_id "ac7xyEgaPmDHz92j4lORygAAAIo"]
[Fri Apr 03 06:46:33.199354 2026] [:error] [pid 33542:tid 33558] [client 20.19.191.162:23742] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sh3ll.php"] [unique_id "ac7xyXwb6uB1LaGtepYEMgAAAM0"]
[Fri Apr 03 06:46:34.071375 2026] [:error] [pid 35469:tid 35486] [client 20.19.191.162:17992] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sh3ll.php"] [unique_id "ac7xyqGvTIc8-wY3jUQYLQAAAQ8"]
[Fri Apr 03 06:46:34.937678 2026] [:error] [pid 33447:tid 33512] [client 20.19.191.162:33927] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sh3ll.php"] [unique_id "ac7xykgaPmDHz92j4lOR0AAAAIg"]
[Fri Apr 03 06:46:35.434299 2026] [:error] [pid 35469:tid 35487] [client 20.19.191.162:33956] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sh3ll.php"] [unique_id "ac7xy6GvTIc8-wY3jUQYMwAAARA"]
[Fri Apr 03 06:46:36.067229 2026] [:error] [pid 35469:tid 35475] [client 20.19.191.162:6197] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "ac7xzKGvTIc8-wY3jUQYNgAAAQQ"]
[Fri Apr 03 06:46:36.708390 2026] [:error] [pid 33446:tid 33496] [client 20.19.191.162:45942] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "ac7xzNg3dCqFYIIdw0oYGgAAAFM"]
[Fri Apr 03 06:46:37.614222 2026] [:error] [pid 33542:tid 33567] [client 20.19.191.162:9120] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "ac7xzXwb6uB1LaGtepYEPwAAANY"]
[Fri Apr 03 06:46:38.884846 2026] [:error] [pid 33447:tid 33505] [client 20.19.191.162:5625] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "ac7xzkgaPmDHz92j4lOR1AAAAIE"]
[Fri Apr 03 10:31:22.064948 2026] [:error] [pid 33445:tid 33462] [client 202.62.43.154:38624] [client 202.62.43.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "ac8mellRNZ0iDVmJWM2yBQAAAAw"]
[Fri Apr 03 18:33:48.699329 2026] [:error] [pid 33447:tid 33518] [client 98.159.37.88:32269] [client 98.159.37.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac-XjEgaPmDHz92j4lMjPgAAAI4"]
[Fri Apr 03 21:01:33.522156 2026] [proxy_fcgi:error] [pid 35469:tid 35491] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:33.764430 2026] [proxy_fcgi:error] [pid 35469:tid 35480] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:34.003934 2026] [proxy_fcgi:error] [pid 35469:tid 35487] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:34.243476 2026] [proxy_fcgi:error] [pid 35469:tid 35475] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:34.485650 2026] [proxy_fcgi:error] [pid 35469:tid 35488] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:34.725094 2026] [proxy_fcgi:error] [pid 35469:tid 35489] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:35.204119 2026] [proxy_fcgi:error] [pid 35469:tid 35471] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:35.442093 2026] [proxy_fcgi:error] [pid 35469:tid 35481] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:35.681168 2026] [proxy_fcgi:error] [pid 35469:tid 35488] [client 51.103.121.234:60783] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:01:35.916989 2026] [:error] [pid 35469:tid 35494] [client 51.103.121.234:60783] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-6L6GvTIc8-wY3jUSJEgAAARc"]
[Fri Apr 03 21:01:36.389877 2026] [:error] [pid 35469:tid 35474] [client 51.103.121.234:51530] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-6MKGvTIc8-wY3jUSJHwAAAQM"]
[Fri Apr 03 21:01:36.887522 2026] [:error] [pid 40562:tid 40579] [client 51.103.121.234:60791] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-6MDfFMXuP9zvqCep-9QAAAY4"]
[Fri Apr 03 21:01:37.356267 2026] [:error] [pid 35469:tid 35484] [client 51.103.121.234:60770] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-6MaGvTIc8-wY3jUSJLgAAAQ0"]
[Fri Apr 03 21:01:37.847615 2026] [:error] [pid 35469:tid 35475] [client 51.103.121.234:51550] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n.php"] [unique_id "ac-6MaGvTIc8-wY3jUSJMgAAAQQ"]
[Fri Apr 03 21:01:38.324676 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:51533] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n.php"] [unique_id "ac-6MqGvTIc8-wY3jUSJOAAAARM"]
[Fri Apr 03 21:01:38.795473 2026] [:error] [pid 40562:tid 40588] [client 51.103.121.234:60756] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n.php"] [unique_id "ac-6MjfFMXuP9zvqCep--QAAAZc"]
[Fri Apr 03 21:01:39.267715 2026] [:error] [pid 33447:tid 33508] [client 51.103.121.234:60753] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n.php"] [unique_id "ac-6M0gaPmDHz92j4lNIHAAAAIQ"]
[Fri Apr 03 21:01:39.762504 2026] [:error] [pid 35469:tid 35473] [client 51.103.121.234:51535] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ac-6M6GvTIc8-wY3jUSJQgAAAQI"]
[Fri Apr 03 21:01:40.241001 2026] [:error] [pid 33445:tid 33460] [client 51.103.121.234:51547] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ac-6NFlRNZ0iDVmJWM0CYwAAAAo"]
[Fri Apr 03 21:01:40.715682 2026] [:error] [pid 35469:tid 35474] [client 51.103.121.234:60745] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ac-6NKGvTIc8-wY3jUSJSAAAAQM"]
[Fri Apr 03 21:01:41.190376 2026] [:error] [pid 40562:tid 40589] [client 51.103.121.234:60757] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ac-6NTfFMXuP9zvqCep-_AAAAZg"]
[Fri Apr 03 21:01:41.663742 2026] [:error] [pid 33445:tid 33474] [client 51.103.121.234:60755] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "ac-6NVlRNZ0iDVmJWM0CZgAAABg"]
[Fri Apr 03 21:01:42.174062 2026] [:error] [pid 33445:tid 33473] [client 51.103.121.234:60760] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "ac-6NllRNZ0iDVmJWM0CaQAAABc"]
[Fri Apr 03 21:01:42.650141 2026] [:error] [pid 33445:tid 33456] [client 51.103.121.234:60793] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "ac-6NllRNZ0iDVmJWM0CagAAAAY"]
[Fri Apr 03 21:01:43.137518 2026] [:error] [pid 55174:tid 55185] [client 51.103.121.234:60789] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "ac-6N5_WKqUonPNUHYzwEAAAAck"]
[Fri Apr 03 21:01:43.621517 2026] [:error] [pid 33446:tid 33486] [client 51.103.121.234:60768] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "ac-6N9g3dCqFYIIdw0pfSgAAAEk"]
[Fri Apr 03 21:01:44.095280 2026] [:error] [pid 35469:tid 35494] [client 51.103.121.234:51560] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "ac-6OKGvTIc8-wY3jUSJTgAAARc"]
[Fri Apr 03 21:01:44.570083 2026] [:error] [pid 35469:tid 35484] [client 51.103.121.234:60785] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "ac-6OKGvTIc8-wY3jUSJTwAAAQ0"]
[Fri Apr 03 21:01:45.071911 2026] [:error] [pid 33445:tid 33459] [client 51.103.121.234:60797] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "ac-6OVlRNZ0iDVmJWM0CdAAAAAk"]
[Fri Apr 03 21:01:45.551537 2026] [:error] [pid 33446:tid 33482] [client 51.103.121.234:51527] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-6Odg3dCqFYIIdw0pfTwAAAEU"]
[Fri Apr 03 21:01:46.033997 2026] [:error] [pid 33542:tid 33559] [client 51.103.121.234:51549] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-6Onwb6uB1LaGtepb3ZAAAAM4"]
[Fri Apr 03 21:01:46.514015 2026] [:error] [pid 40562:tid 40579] [client 51.103.121.234:60763] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-6OjfFMXuP9zvqCep_AAAAAY4"]
[Fri Apr 03 21:01:46.998834 2026] [:error] [pid 40562:tid 40588] [client 51.103.121.234:51539] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-6OjfFMXuP9zvqCep_BAAAAZc"]
[Fri Apr 03 21:01:47.481652 2026] [:error] [pid 55174:tid 55182] [client 51.103.121.234:51526] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "ac-6O5_WKqUonPNUHYzwFAAAAcY"]
[Fri Apr 03 21:01:47.960428 2026] [:error] [pid 55174:tid 55179] [client 51.103.121.234:60775] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "ac-6O5_WKqUonPNUHYzwFwAAAcM"]
[Fri Apr 03 21:01:48.450190 2026] [:error] [pid 35469:tid 35482] [client 51.103.121.234:60772] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "ac-6PKGvTIc8-wY3jUSJUwAAAQs"]
[Fri Apr 03 21:01:48.920673 2026] [:error] [pid 33446:tid 33485] [client 51.103.121.234:60792] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "ac-6PNg3dCqFYIIdw0pfXQAAAEg"]
[Fri Apr 03 21:01:49.401405 2026] [:error] [pid 35469:tid 35492] [client 51.103.121.234:60786] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "ac-6PaGvTIc8-wY3jUSJVwAAARU"]
[Fri Apr 03 21:01:49.877847 2026] [:error] [pid 33446:tid 33477] [client 51.103.121.234:60746] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "ac-6Pdg3dCqFYIIdw0pfYgAAAEA"]
[Fri Apr 03 21:01:50.384893 2026] [:error] [pid 33445:tid 33470] [client 51.103.121.234:3021] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "ac-6PllRNZ0iDVmJWM0CggAAABQ"]
[Fri Apr 03 21:01:50.859905 2026] [:error] [pid 35469:tid 35475] [client 51.103.121.234:60758] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "ac-6PqGvTIc8-wY3jUSJWAAAAQQ"]
[Fri Apr 03 21:01:51.358272 2026] [:error] [pid 35469:tid 35480] [client 51.103.121.234:60764] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "ac-6P6GvTIc8-wY3jUSJXQAAAQk"]
[Fri Apr 03 21:01:51.830116 2026] [:error] [pid 35469:tid 35481] [client 51.103.121.234:51546] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "ac-6P6GvTIc8-wY3jUSJZAAAAQo"]
[Fri Apr 03 21:01:52.306060 2026] [:error] [pid 35469:tid 35471] [client 51.103.121.234:51540] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "ac-6QKGvTIc8-wY3jUSJaAAAAQA"]
[Fri Apr 03 21:01:52.776479 2026] [:error] [pid 35469:tid 35480] [client 51.103.121.234:60759] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/o.php"] [unique_id "ac-6QKGvTIc8-wY3jUSJcQAAAQk"]
[Fri Apr 03 21:01:53.253065 2026] [:error] [pid 33447:tid 33505] [client 51.103.121.234:51534] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "ac-6QUgaPmDHz92j4lNIJgAAAIE"]
[Fri Apr 03 21:01:53.728005 2026] [:error] [pid 33542:tid 33551] [client 51.103.121.234:51529] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "ac-6QXwb6uB1LaGtepb3bwAAAMY"]
[Fri Apr 03 21:01:54.204124 2026] [:error] [pid 33446:tid 33490] [client 51.103.121.234:60777] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "ac-6Qtg3dCqFYIIdw0pfawAAAE0"]
[Fri Apr 03 21:01:54.677442 2026] [:error] [pid 33446:tid 33498] [client 51.103.121.234:60794] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "ac-6Qtg3dCqFYIIdw0pfbQAAAFU"]
[Fri Apr 03 21:01:55.174275 2026] [:error] [pid 40562:tid 40576] [client 51.103.121.234:60762] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system_log.php"] [unique_id "ac-6QzfFMXuP9zvqCep_HAAAAYs"]
[Fri Apr 03 21:01:55.646523 2026] [:error] [pid 33446:tid 33497] [client 51.103.121.234:3027] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system_log.php"] [unique_id "ac-6Q9g3dCqFYIIdw0pfcQAAAFQ"]
[Fri Apr 03 21:01:56.119473 2026] [:error] [pid 40562:tid 40589] [client 51.103.121.234:3030] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system_log.php"] [unique_id "ac-6RDfFMXuP9zvqCep_IQAAAZg"]
[Fri Apr 03 21:01:56.595294 2026] [:error] [pid 33446:tid 33494] [client 51.103.121.234:60749] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system_log.php"] [unique_id "ac-6RNg3dCqFYIIdw0pfdQAAAFE"]
[Fri Apr 03 21:01:57.066345 2026] [:error] [pid 33445:tid 33454] [client 51.103.121.234:51551] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-6RVlRNZ0iDVmJWM0ChgAAAAQ"]
[Fri Apr 03 21:01:57.558638 2026] [:error] [pid 33447:tid 33510] [client 51.103.121.234:60765] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-6RUgaPmDHz92j4lNIKwAAAIY"]
[Fri Apr 03 21:01:58.028956 2026] [:error] [pid 33446:tid 33485] [client 51.103.121.234:60790] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-6Rtg3dCqFYIIdw0pffgAAAEg"]
[Fri Apr 03 21:01:58.509775 2026] [:error] [pid 40562:tid 40566] [client 51.103.121.234:3019] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-6RjfFMXuP9zvqCep_KAAAAYE"]
[Fri Apr 03 21:01:58.984442 2026] [:error] [pid 35469:tid 35494] [client 51.103.121.234:3041] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ac-6RqGvTIc8-wY3jUSJhQAAARc"]
[Fri Apr 03 21:01:59.462693 2026] [:error] [pid 33446:tid 33500] [client 51.103.121.234:51581] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ac-6R9g3dCqFYIIdw0pfgwAAAFc"]
[Fri Apr 03 21:01:59.937528 2026] [:error] [pid 35469:tid 35474] [client 51.103.121.234:51537] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ac-6R6GvTIc8-wY3jUSJigAAAQM"]
[Fri Apr 03 21:02:00.415499 2026] [:error] [pid 33445:tid 33458] [client 51.103.121.234:3029] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ac-6SFlRNZ0iDVmJWM0CiQAAAAg"]
[Fri Apr 03 21:02:00.904571 2026] [:error] [pid 33447:tid 33504] [client 51.103.121.234:51559] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-6SEgaPmDHz92j4lNILAAAAIA"]
[Fri Apr 03 21:02:01.380348 2026] [:error] [pid 35469:tid 35474] [client 51.103.121.234:60761] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-6SaGvTIc8-wY3jUSJkwAAAQM"]
[Fri Apr 03 21:02:01.858553 2026] [:error] [pid 33446:tid 33480] [client 51.103.121.234:60766] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-6Sdg3dCqFYIIdw0pfiwAAAEM"]
[Fri Apr 03 21:02:02.347631 2026] [:error] [pid 35469:tid 35471] [client 51.103.121.234:60741] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-6SqGvTIc8-wY3jUSJmQAAAQA"]
[Fri Apr 03 21:02:02.832255 2026] [:error] [pid 33445:tid 33464] [client 51.103.121.234:3032] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "ac-6SllRNZ0iDVmJWM0CjQAAAA4"]
[Fri Apr 03 21:02:03.310197 2026] [:error] [pid 35469:tid 35478] [client 51.103.121.234:51555] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "ac-6S6GvTIc8-wY3jUSJpQAAAQc"]
[Fri Apr 03 21:02:03.781966 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:3058] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "ac-6S6GvTIc8-wY3jUSJqAAAARM"]
[Fri Apr 03 21:02:04.258401 2026] [:error] [pid 55174:tid 55188] [client 51.103.121.234:60784] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "ac-6TJ_WKqUonPNUHYzwHwAAAcw"]
[Fri Apr 03 21:02:04.741966 2026] [:error] [pid 33447:tid 33527] [client 51.103.121.234:51543] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "ac-6TEgaPmDHz92j4lNIMQAAAJc"]
[Fri Apr 03 21:02:05.215196 2026] [:error] [pid 40533:tid 40547] [client 51.103.121.234:60774] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "ac-6TfbIAA8AViDmwsusCwAAAUw"]
[Fri Apr 03 21:02:05.726776 2026] [:error] [pid 35469:tid 35489] [client 51.103.121.234:60750] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "ac-6TaGvTIc8-wY3jUSJsQAAARI"]
[Fri Apr 03 21:02:06.200494 2026] [:error] [pid 35469:tid 35485] [client 51.103.121.234:3071] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "ac-6TqGvTIc8-wY3jUSJtgAAAQ4"]
[Fri Apr 03 21:02:06.697523 2026] [:error] [pid 35469:tid 35489] [client 51.103.121.234:51528] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nope.php"] [unique_id "ac-6TqGvTIc8-wY3jUSJuwAAARI"]
[Fri Apr 03 21:02:07.169785 2026] [:error] [pid 40562:tid 40579] [client 51.103.121.234:60796] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nope.php"] [unique_id "ac-6TzfFMXuP9zvqCep_LQAAAY4"]
[Fri Apr 03 21:02:07.645573 2026] [:error] [pid 33445:tid 33473] [client 51.103.121.234:51579] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nope.php"] [unique_id "ac-6T1lRNZ0iDVmJWM0CmAAAABc"]
[Fri Apr 03 21:02:08.120358 2026] [:error] [pid 35469:tid 35477] [client 51.103.121.234:3011] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nope.php"] [unique_id "ac-6UKGvTIc8-wY3jUSJwwAAAQY"]
[Fri Apr 03 21:02:08.597508 2026] [:error] [pid 55174:tid 55181] [client 51.103.121.234:3070] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js.php"] [unique_id "ac-6UJ_WKqUonPNUHYzwKgAAAcU"]
[Fri Apr 03 21:02:09.068991 2026] [:error] [pid 33445:tid 33450] [client 51.103.121.234:51580] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js.php"] [unique_id "ac-6UVlRNZ0iDVmJWM0CnAAAAAA"]
[Fri Apr 03 21:02:09.543278 2026] [:error] [pid 35469:tid 35493] [client 51.103.121.234:3062] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js.php"] [unique_id "ac-6UaGvTIc8-wY3jUSJxgAAARY"]
[Fri Apr 03 21:02:10.033704 2026] [:error] [pid 35469:tid 35482] [client 51.103.121.234:60791] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js.php"] [unique_id "ac-6UqGvTIc8-wY3jUSJyAAAAQs"]
[Fri Apr 03 21:02:10.511755 2026] [:error] [pid 35469:tid 35473] [client 51.103.121.234:60787] [client 51.103.121.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac-6UqGvTIc8-wY3jUSJywAAAQI"]
[Fri Apr 03 21:02:10.994128 2026] [:error] [pid 35469:tid 35495] [client 51.103.121.234:60754] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "ac-6UqGvTIc8-wY3jUSJzwAAARg"]
[Fri Apr 03 21:02:11.468505 2026] [:error] [pid 33446:tid 33486] [client 51.103.121.234:51542] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "ac-6U9g3dCqFYIIdw0pfmAAAAEk"]
[Fri Apr 03 21:02:11.944187 2026] [:error] [pid 33445:tid 33471] [client 51.103.121.234:51545] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "ac-6U1lRNZ0iDVmJWM0CpQAAABU"]
[Fri Apr 03 21:02:12.421097 2026] [:error] [pid 35469:tid 35471] [client 51.103.121.234:51564] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/num.php"] [unique_id "ac-6VKGvTIc8-wY3jUSJ2QAAAQA"]
[Fri Apr 03 21:02:12.892755 2026] [:error] [pid 35469:tid 35476] [client 51.103.121.234:51553] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "ac-6VKGvTIc8-wY3jUSJ2wAAAQU"]
[Fri Apr 03 21:02:13.368043 2026] [:error] [pid 33446:tid 33501] [client 51.103.121.234:60738] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "ac-6Vdg3dCqFYIIdw0pfmQAAAFg"]
[Fri Apr 03 21:02:13.839451 2026] [:error] [pid 35469:tid 35493] [client 51.103.121.234:60781] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "ac-6VaGvTIc8-wY3jUSJ5AAAARY"]
[Fri Apr 03 21:02:14.314017 2026] [:error] [pid 35469:tid 35492] [client 51.103.121.234:60795] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "ac-6VqGvTIc8-wY3jUSJ5wAAARU"]
[Fri Apr 03 21:02:14.785488 2026] [:error] [pid 35469:tid 35473] [client 51.103.121.234:51522] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ac-6VqGvTIc8-wY3jUSJ6wAAAQI"]
[Fri Apr 03 21:02:15.454982 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:3020] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ac-6V6GvTIc8-wY3jUSJ9AAAARM"]
[Fri Apr 03 21:02:15.961332 2026] [:error] [pid 40562:tid 40581] [client 51.103.121.234:60799] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ac-6VzfFMXuP9zvqCep_PQAAAZA"]
[Fri Apr 03 21:02:16.444665 2026] [:error] [pid 33447:tid 33520] [client 51.103.121.234:51544] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ac-6WEgaPmDHz92j4lNINgAAAJA"]
[Fri Apr 03 21:02:16.923526 2026] [:error] [pid 40562:tid 40570] [client 51.103.121.234:51521] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ac-6WDfFMXuP9zvqCep_PwAAAYU"]
[Fri Apr 03 21:02:17.410830 2026] [:error] [pid 33446:tid 33496] [client 51.103.121.234:2993] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ac-6Wdg3dCqFYIIdw0pfrQAAAFM"]
[Fri Apr 03 21:02:17.887014 2026] [:error] [pid 33447:tid 33505] [client 51.103.121.234:60779] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ac-6WUgaPmDHz92j4lNIOAAAAIE"]
[Fri Apr 03 21:02:18.362984 2026] [:error] [pid 33542:tid 33566] [client 51.103.121.234:2960] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ac-6Wnwb6uB1LaGtepb3eAAAANU"]
[Fri Apr 03 21:02:18.838724 2026] [:error] [pid 40562:tid 40575] [client 51.103.121.234:51565] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "ac-6WjfFMXuP9zvqCep_QQAAAYo"]
[Fri Apr 03 21:02:19.308848 2026] [:error] [pid 33447:tid 33526] [client 51.103.121.234:51571] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "ac-6W0gaPmDHz92j4lNIPQAAAJY"]
[Fri Apr 03 21:02:19.780252 2026] [:error] [pid 33542:tid 33565] [client 51.103.121.234:2989] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "ac-6W3wb6uB1LaGtepb3egAAANQ"]
[Fri Apr 03 21:02:20.259539 2026] [:error] [pid 35469:tid 35492] [client 51.103.121.234:51556] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wfile.php"] [unique_id "ac-6XKGvTIc8-wY3jUSJ-gAAARU"]
[Fri Apr 03 21:02:20.733582 2026] [:error] [pid 33447:tid 33508] [client 51.103.121.234:60743] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ac-6XEgaPmDHz92j4lNIPwAAAIQ"]
[Fri Apr 03 21:02:21.207462 2026] [:error] [pid 33446:tid 33501] [client 51.103.121.234:60769] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ac-6Xdg3dCqFYIIdw0pftwAAAFg"]
[Fri Apr 03 21:02:21.681129 2026] [:error] [pid 33446:tid 33491] [client 51.103.121.234:3046] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ac-6Xdg3dCqFYIIdw0pfuQAAAE4"]
[Fri Apr 03 21:02:22.156194 2026] [:error] [pid 33446:tid 33479] [client 51.103.121.234:51538] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ac-6Xtg3dCqFYIIdw0pfuwAAAEI"]
[Fri Apr 03 21:02:22.633405 2026] [:error] [pid 40562:tid 40589] [client 51.103.121.234:3015] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ac-6XjfFMXuP9zvqCep_SgAAAZg"]
[Fri Apr 03 21:02:23.114327 2026] [:error] [pid 40533:tid 40539] [client 51.103.121.234:51523] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ac-6X_bIAA8AViDmwsusEwAAAUQ"]
[Fri Apr 03 21:02:23.586028 2026] [:error] [pid 33445:tid 33471] [client 51.103.121.234:2966] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ac-6X1lRNZ0iDVmJWM0CswAAABU"]
[Fri Apr 03 21:02:24.062559 2026] [:error] [pid 40533:tid 40544] [client 51.103.121.234:3051] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ac-6YPbIAA8AViDmwsusFgAAAUk"]
[Fri Apr 03 21:02:24.535180 2026] [:error] [pid 40533:tid 40551] [client 51.103.121.234:3017] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ac-6YPbIAA8AViDmwsusGAAAAVA"]
[Fri Apr 03 21:02:25.014634 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:3014] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ac-6YaGvTIc8-wY3jUSKAAAAARM"]
[Fri Apr 03 21:02:25.487933 2026] [:error] [pid 55174:tid 55197] [client 51.103.121.234:51541] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ac-6YZ_WKqUonPNUHYzwOgAAAdU"]
[Fri Apr 03 21:02:25.965342 2026] [:error] [pid 55174:tid 55181] [client 51.103.121.234:2983] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ac-6YZ_WKqUonPNUHYzwPAAAAcU"]
[Fri Apr 03 21:02:26.456172 2026] [:error] [pid 40562:tid 40579] [client 51.103.121.234:2947] [client 51.103.121.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "ac-6YjfFMXuP9zvqCep_XgAAAY4"]
[Fri Apr 03 21:02:26.939004 2026] [:error] [pid 40562:tid 40570] [client 51.103.121.234:51536] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/123.php"] [unique_id "ac-6YjfFMXuP9zvqCep_YAAAAYU"]
[Fri Apr 03 21:02:27.418174 2026] [:error] [pid 40562:tid 40584] [client 51.103.121.234:51552] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/123.php"] [unique_id "ac-6YzfFMXuP9zvqCep_YwAAAZM"]
[Fri Apr 03 21:02:27.889971 2026] [:error] [pid 40562:tid 40569] [client 51.103.121.234:60773] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/123.php"] [unique_id "ac-6YzfFMXuP9zvqCep_ZwAAAYQ"]
[Fri Apr 03 21:02:28.368638 2026] [:error] [pid 40562:tid 40580] [client 51.103.121.234:51562] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-6ZDfFMXuP9zvqCep_bQAAAY8"]
[Fri Apr 03 21:02:28.839755 2026] [:error] [pid 33447:tid 33525] [client 51.103.121.234:60737] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-6ZEgaPmDHz92j4lNISAAAAJU"]
[Fri Apr 03 21:02:29.332593 2026] [:error] [pid 33447:tid 33504] [client 51.103.121.234:3045] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-6ZUgaPmDHz92j4lNISgAAAIA"]
[Fri Apr 03 21:02:29.803915 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:60776] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-6ZaGvTIc8-wY3jUSKBwAAARM"]
[Fri Apr 03 21:02:30.295374 2026] [:error] [pid 33446:tid 33498] [client 51.103.121.234:3028] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-6Ztg3dCqFYIIdw0pfxgAAAFU"]
[Fri Apr 03 21:02:30.777229 2026] [:error] [pid 35469:tid 35478] [client 51.103.121.234:2964] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-6ZqGvTIc8-wY3jUSKDQAAAQc"]
[Fri Apr 03 21:02:31.258324 2026] [:error] [pid 33447:tid 33522] [client 51.103.121.234:2973] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-6Z0gaPmDHz92j4lNITQAAAJI"]
[Fri Apr 03 21:02:31.733385 2026] [:error] [pid 33542:tid 33551] [client 51.103.121.234:2953] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-6Z3wb6uB1LaGtepb3jQAAAMY"]
[Fri Apr 03 21:02:32.204413 2026] [:error] [pid 33542:tid 33554] [client 51.103.121.234:3004] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "ac-6aHwb6uB1LaGtepb3jgAAAMk"]
[Fri Apr 03 21:02:32.685734 2026] [:error] [pid 33445:tid 33455] [client 51.103.121.234:3010] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "ac-6aFlRNZ0iDVmJWM0CugAAAAU"]
[Fri Apr 03 21:02:33.187099 2026] [:error] [pid 33446:tid 33484] [client 51.103.121.234:51525] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "ac-6adg3dCqFYIIdw0pfzwAAAEc"]
[Fri Apr 03 21:02:33.662546 2026] [:error] [pid 33446:tid 33478] [client 51.103.121.234:60798] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon.php"] [unique_id "ac-6adg3dCqFYIIdw0pf1AAAAEE"]
[Fri Apr 03 21:02:34.155307 2026] [:error] [pid 40562:tid 40584] [client 51.103.121.234:3040] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/33.php"] [unique_id "ac-6ajfFMXuP9zvqCep_dwAAAZM"]
[Fri Apr 03 21:02:34.627984 2026] [:error] [pid 35469:tid 35493] [client 51.103.121.234:3047] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/33.php"] [unique_id "ac-6aqGvTIc8-wY3jUSKGAAAARY"]
[Fri Apr 03 21:02:35.133922 2026] [proxy_fcgi:error] [pid 35469:tid 35494] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:35.380612 2026] [proxy_fcgi:error] [pid 35469:tid 35484] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:35.620005 2026] [proxy_fcgi:error] [pid 35469:tid 35473] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:36.098385 2026] [proxy_fcgi:error] [pid 35469:tid 35489] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:36.338757 2026] [proxy_fcgi:error] [pid 35469:tid 35485] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:36.579613 2026] [proxy_fcgi:error] [pid 35469:tid 35487] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:36.819015 2026] [proxy_fcgi:error] [pid 35469:tid 35492] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:37.059729 2026] [proxy_fcgi:error] [pid 35469:tid 35478] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:37.300707 2026] [proxy_fcgi:error] [pid 35469:tid 35489] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:37.540303 2026] [proxy_fcgi:error] [pid 35469:tid 35485] [client 51.103.121.234:60788] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:02:37.777590 2026] [:error] [pid 35469:tid 35471] [client 51.103.121.234:60788] [client 51.103.121.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac-6baGvTIc8-wY3jUSKOQAAAQA"]
[Fri Apr 03 21:02:38.250310 2026] [:error] [pid 33445:tid 33463] [client 51.103.121.234:3022] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "ac-6bllRNZ0iDVmJWM0CwwAAAA0"]
[Fri Apr 03 21:02:38.722935 2026] [:error] [pid 33445:tid 33470] [client 51.103.121.234:51532] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "ac-6bllRNZ0iDVmJWM0CxwAAABQ"]
[Fri Apr 03 21:02:39.212185 2026] [:error] [pid 40562:tid 40567] [client 51.103.121.234:2986] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "ac-6bzfFMXuP9zvqCep_fQAAAYI"]
[Fri Apr 03 21:02:39.700251 2026] [:error] [pid 35469:tid 35478] [client 51.103.121.234:60740] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ext.php"] [unique_id "ac-6b6GvTIc8-wY3jUSKPAAAAQc"]
[Fri Apr 03 21:02:40.173992 2026] [:error] [pid 33445:tid 33451] [client 51.103.121.234:3002] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ext.php"] [unique_id "ac-6cFlRNZ0iDVmJWM0CzAAAAAE"]
[Fri Apr 03 21:02:40.644548 2026] [:error] [pid 35469:tid 35480] [client 51.103.121.234:51576] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ext.php"] [unique_id "ac-6cKGvTIc8-wY3jUSKRQAAAQk"]
[Fri Apr 03 21:02:41.116141 2026] [:error] [pid 33446:tid 33489] [client 51.103.121.234:2962] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ext.php"] [unique_id "ac-6cdg3dCqFYIIdw0pf4wAAAEw"]
[Fri Apr 03 21:02:41.602403 2026] [:error] [pid 33446:tid 33497] [client 51.103.121.234:51548] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "ac-6cdg3dCqFYIIdw0pf5wAAAFQ"]
[Fri Apr 03 21:02:42.077645 2026] [:error] [pid 55174:tid 55176] [client 51.103.121.234:2954] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "ac-6cp_WKqUonPNUHYzwWAAAAcA"]
[Fri Apr 03 21:02:42.567510 2026] [:error] [pid 33446:tid 33482] [client 51.103.121.234:3025] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "ac-6ctg3dCqFYIIdw0pf6wAAAEU"]
[Fri Apr 03 21:02:43.046156 2026] [:error] [pid 40562:tid 40588] [client 51.103.121.234:51568] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about3.php"] [unique_id "ac-6czfFMXuP9zvqCep_ggAAAZc"]
[Fri Apr 03 21:02:43.533907 2026] [:error] [pid 35469:tid 35495] [client 51.103.121.234:51520] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ac-6c6GvTIc8-wY3jUSKUQAAARg"]
[Fri Apr 03 21:02:44.007767 2026] [:error] [pid 35469:tid 35491] [client 51.103.121.234:3031] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ac-6dKGvTIc8-wY3jUSKVQAAARQ"]
[Fri Apr 03 21:02:44.480192 2026] [:error] [pid 40562:tid 40566] [client 51.103.121.234:3013] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ac-6dDfFMXuP9zvqCep_gwAAAYE"]
[Fri Apr 03 21:02:44.957130 2026] [:error] [pid 33446:tid 33477] [client 51.103.121.234:3035] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ac-6dNg3dCqFYIIdw0pf7wAAAEA"]
[Fri Apr 03 21:02:45.439111 2026] [:error] [pid 33446:tid 33499] [client 51.103.121.234:51574] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "ac-6ddg3dCqFYIIdw0pf8QAAAFY"]
[Fri Apr 03 21:02:45.911786 2026] [:error] [pid 40562:tid 40569] [client 51.103.121.234:51557] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "ac-6dTfFMXuP9zvqCep_hwAAAYQ"]
[Fri Apr 03 21:02:46.385704 2026] [:error] [pid 35469:tid 35491] [client 51.103.121.234:3061] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "ac-6dqGvTIc8-wY3jUSKXgAAARQ"]
[Fri Apr 03 21:02:46.857883 2026] [:error] [pid 35469:tid 35494] [client 51.103.121.234:3048] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "ac-6dqGvTIc8-wY3jUSKYwAAARc"]
[Fri Apr 03 21:02:47.342803 2026] [:error] [pid 33445:tid 33463] [client 51.103.121.234:3064] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ac-6d1lRNZ0iDVmJWM0C1wAAAA0"]
[Fri Apr 03 21:02:47.813343 2026] [:error] [pid 33445:tid 33470] [client 51.103.121.234:3003] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ac-6d1lRNZ0iDVmJWM0C2AAAABQ"]
[Fri Apr 03 21:02:48.288915 2026] [:error] [pid 35469:tid 35474] [client 51.103.121.234:3056] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ac-6eKGvTIc8-wY3jUSKbQAAAQM"]
[Fri Apr 03 21:02:48.766417 2026] [:error] [pid 35469:tid 35482] [client 51.103.121.234:51561] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ac-6eKGvTIc8-wY3jUSKcQAAAQs"]
[Fri Apr 03 21:02:49.237533 2026] [:error] [pid 35469:tid 35494] [client 51.103.121.234:60778] [client 51.103.121.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "ac-6eaGvTIc8-wY3jUSKdgAAARc"]
[Fri Apr 03 21:02:49.724641 2026] [:error] [pid 35469:tid 35491] [client 51.103.121.234:3060] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "ac-6eaGvTIc8-wY3jUSKegAAARQ"]
[Fri Apr 03 21:02:50.198170 2026] [:error] [pid 40562:tid 40579] [client 51.103.121.234:3042] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "ac-6ejfFMXuP9zvqCep_igAAAY4"]
[Fri Apr 03 21:02:50.682250 2026] [:error] [pid 35469:tid 35489] [client 51.103.121.234:3038] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "ac-6eqGvTIc8-wY3jUSKgQAAARI"]
[Fri Apr 03 21:02:51.157397 2026] [:error] [pid 35469:tid 35492] [client 51.103.121.234:2994] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac-6e6GvTIc8-wY3jUSKhQAAARU"]
[Fri Apr 03 21:02:51.631250 2026] [:error] [pid 33446:tid 33487] [client 51.103.121.234:3037] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac-6e9g3dCqFYIIdw0pgAQAAAEo"]
[Fri Apr 03 21:02:52.103334 2026] [:error] [pid 33446:tid 33494] [client 51.103.121.234:2923] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac-6fNg3dCqFYIIdw0pgBAAAAFE"]
[Fri Apr 03 21:02:52.582366 2026] [:error] [pid 33446:tid 33482] [client 51.103.121.234:2981] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "ac-6fNg3dCqFYIIdw0pgBgAAAEU"]
[Fri Apr 03 21:02:53.052981 2026] [:error] [pid 33446:tid 33496] [client 51.103.121.234:51583] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "ac-6fdg3dCqFYIIdw0pgDAAAAFM"]
[Fri Apr 03 21:02:53.534751 2026] [:error] [pid 33446:tid 33497] [client 51.103.121.234:2972] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "ac-6fdg3dCqFYIIdw0pgEQAAAFQ"]
[Fri Apr 03 21:02:54.005080 2026] [:error] [pid 40533:tid 40537] [client 51.103.121.234:2911] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "ac-6fvbIAA8AViDmwsusIQAAAUI"]
[Fri Apr 03 21:02:54.481317 2026] [:error] [pid 33445:tid 33453] [client 51.103.121.234:51582] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "ac-6fllRNZ0iDVmJWM0C4wAAAAM"]
[Fri Apr 03 21:02:54.955274 2026] [:error] [pid 33542:tid 33559] [client 51.103.121.234:51566] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-6fnwb6uB1LaGtepb3nQAAAM4"]
[Fri Apr 03 21:02:55.426716 2026] [:error] [pid 35469:tid 35485] [client 51.103.121.234:2937] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-6f6GvTIc8-wY3jUSKigAAAQ4"]
[Fri Apr 03 21:02:55.907696 2026] [:error] [pid 33542:tid 33548] [client 51.103.121.234:2955] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-6f3wb6uB1LaGtepb3nwAAAMM"]
[Fri Apr 03 21:02:56.390862 2026] [:error] [pid 33542:tid 33545] [client 51.103.121.234:60744] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-6gHwb6uB1LaGtepb3oQAAAMA"]
[Fri Apr 03 21:02:56.865023 2026] [:error] [pid 40562:tid 40586] [client 51.103.121.234:60752] [client 51.103.121.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac-6gDfFMXuP9zvqCep_lgAAAZU"]
[Fri Apr 03 21:02:57.339278 2026] [:error] [pid 33447:tid 33507] [client 51.103.121.234:2975] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "ac-6gUgaPmDHz92j4lNIaAAAAIM"]
[Fri Apr 03 21:02:57.816532 2026] [:error] [pid 33445:tid 33461] [client 51.103.121.234:60742] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "ac-6gVlRNZ0iDVmJWM0C8QAAAAs"]
[Fri Apr 03 21:02:58.291434 2026] [:error] [pid 35469:tid 35489] [client 51.103.121.234:51572] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "ac-6gqGvTIc8-wY3jUSKjgAAARI"]
[Fri Apr 03 21:02:58.767540 2026] [:error] [pid 35469:tid 35484] [client 51.103.121.234:3057] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "ac-6gqGvTIc8-wY3jUSKjwAAAQ0"]
[Fri Apr 03 21:02:59.240205 2026] [:error] [pid 55174:tid 55181] [client 51.103.121.234:2965] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "ac-6g5_WKqUonPNUHYzwaQAAAcU"]
[Fri Apr 03 21:02:59.713535 2026] [:error] [pid 33446:tid 33483] [client 51.103.121.234:2889] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "ac-6g9g3dCqFYIIdw0pgGwAAAEY"]
[Fri Apr 03 21:03:00.186557 2026] [:error] [pid 33446:tid 33496] [client 51.103.121.234:2880] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "ac-6hNg3dCqFYIIdw0pgIAAAAFM"]
[Fri Apr 03 21:03:00.657603 2026] [:error] [pid 40562:tid 40573] [client 51.103.121.234:51573] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-6hDfFMXuP9zvqCep_nQAAAYg"]
[Fri Apr 03 21:03:01.135383 2026] [:error] [pid 40562:tid 40578] [client 51.103.121.234:3049] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-6hTfFMXuP9zvqCep_ngAAAY0"]
[Fri Apr 03 21:03:01.607254 2026] [:error] [pid 33542:tid 33567] [client 51.103.121.234:2920] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-6hXwb6uB1LaGtepb3pwAAANY"]
[Fri Apr 03 21:03:02.078729 2026] [:error] [pid 33542:tid 33548] [client 51.103.121.234:3052] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-6hnwb6uB1LaGtepb3qQAAAMM"]
[Fri Apr 03 21:03:02.550203 2026] [:error] [pid 33446:tid 33480] [client 51.103.121.234:2959] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-6htg3dCqFYIIdw0pgKQAAAEM"]
[Fri Apr 03 21:03:03.024591 2026] [:error] [pid 33447:tid 33522] [client 51.103.121.234:3054] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-6h0gaPmDHz92j4lNIawAAAJI"]
[Fri Apr 03 21:03:03.498381 2026] [:error] [pid 33446:tid 33482] [client 51.103.121.234:51575] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-6h9g3dCqFYIIdw0pgLQAAAEU"]
[Fri Apr 03 21:03:03.973138 2026] [:error] [pid 40562:tid 40574] [client 51.103.121.234:51558] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-6hzfFMXuP9zvqCep_qAAAAYk"]
[Fri Apr 03 21:03:04.472423 2026] [:error] [pid 40533:tid 40556] [client 51.103.121.234:2816] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dlu.php"] [unique_id "ac-6iPbIAA8AViDmwsusLAAAAVU"]
[Fri Apr 03 21:03:04.972067 2026] [:error] [pid 33445:tid 33465] [client 51.103.121.234:51554] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dlu.php"] [unique_id "ac-6iFlRNZ0iDVmJWM0DBgAAAA8"]
[Fri Apr 03 21:03:05.462049 2026] [:error] [pid 33542:tid 33556] [client 51.103.121.234:3036] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dlu.php"] [unique_id "ac-6iXwb6uB1LaGtepb3qgAAAMs"]
[Fri Apr 03 21:03:05.937672 2026] [:error] [pid 33542:tid 33558] [client 51.103.121.234:3053] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dlu.php"] [unique_id "ac-6iXwb6uB1LaGtepb3qwAAAM0"]
[Fri Apr 03 21:03:06.414894 2026] [:error] [pid 33446:tid 33491] [client 51.103.121.234:60739] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "ac-6itg3dCqFYIIdw0pgOAAAAE4"]
[Fri Apr 03 21:03:06.888939 2026] [:error] [pid 35469:tid 35495] [client 51.103.121.234:2991] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "ac-6iqGvTIc8-wY3jUSKnAAAARg"]
[Fri Apr 03 21:03:07.371153 2026] [:error] [pid 35469:tid 35491] [client 51.103.121.234:3016] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "ac-6i6GvTIc8-wY3jUSKogAAARQ"]
[Fri Apr 03 21:03:07.858228 2026] [:error] [pid 55174:tid 55176] [client 51.103.121.234:2985] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "ac-6i5_WKqUonPNUHYzwbQAAAcA"]
[Fri Apr 03 21:03:08.329878 2026] [:error] [pid 33446:tid 33487] [client 51.103.121.234:2958] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "ac-6jNg3dCqFYIIdw0pgPQAAAEo"]
[Fri Apr 03 21:03:08.803057 2026] [:error] [pid 40562:tid 40584] [client 51.103.121.234:2949] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "ac-6jDfFMXuP9zvqCep_qgAAAZM"]
[Fri Apr 03 21:03:09.278633 2026] [:error] [pid 40533:tid 40542] [client 51.103.121.234:60782] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "ac-6jfbIAA8AViDmwsusPgAAAUc"]
[Fri Apr 03 21:03:09.751687 2026] [:error] [pid 33446:tid 33497] [client 51.103.121.234:2988] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "ac-6jdg3dCqFYIIdw0pgSAAAAFQ"]
[Fri Apr 03 21:03:10.222294 2026] [:error] [pid 33542:tid 33551] [client 51.103.121.234:2817] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ac-6jnwb6uB1LaGtepb3rwAAAMY"]
[Fri Apr 03 21:03:10.704806 2026] [:error] [pid 40533:tid 40550] [client 51.103.121.234:2957] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ac-6jvbIAA8AViDmwsusQAAAAU8"]
[Fri Apr 03 21:03:11.207212 2026] [:error] [pid 33447:tid 33514] [client 51.103.121.234:2979] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ac-6j0gaPmDHz92j4lNIeQAAAIo"]
[Fri Apr 03 21:03:11.683627 2026] [:error] [pid 33445:tid 33465] [client 51.103.121.234:2834] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ac-6j1lRNZ0iDVmJWM0DDQAAAA8"]
[Fri Apr 03 21:03:12.157273 2026] [:error] [pid 33446:tid 33478] [client 51.103.121.234:3065] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "ac-6kNg3dCqFYIIdw0pgUgAAAEE"]
[Fri Apr 03 21:03:12.630248 2026] [:error] [pid 40533:tid 40557] [client 51.103.121.234:2999] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "ac-6kPbIAA8AViDmwsusQgAAAVY"]
[Fri Apr 03 21:03:13.103483 2026] [:error] [pid 33447:tid 33509] [client 51.103.121.234:51524] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "ac-6kUgaPmDHz92j4lNIewAAAIU"]
[Fri Apr 03 21:03:13.575515 2026] [:error] [pid 35469:tid 35486] [client 51.103.121.234:60751] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "ac-6kaGvTIc8-wY3jUSKwQAAAQ8"]
[Fri Apr 03 21:03:14.048390 2026] [:error] [pid 33447:tid 33520] [client 51.103.121.234:2823] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ac-6kkgaPmDHz92j4lNIfAAAAJA"]
[Fri Apr 03 21:03:14.532782 2026] [:error] [pid 35469:tid 35481] [client 51.103.121.234:51563] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ac-6kqGvTIc8-wY3jUSKyAAAAQo"]
[Fri Apr 03 21:03:15.014728 2026] [:error] [pid 33446:tid 33477] [client 51.103.121.234:3044] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ac-6k9g3dCqFYIIdw0pgXAAAAEA"]
[Fri Apr 03 21:03:15.495972 2026] [:error] [pid 33445:tid 33466] [client 51.103.121.234:3059] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ac-6k1lRNZ0iDVmJWM0DGgAAABA"]
[Fri Apr 03 21:03:15.973680 2026] [:error] [pid 33446:tid 33479] [client 51.103.121.234:3066] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "ac-6k9g3dCqFYIIdw0pgYQAAAEI"]
[Fri Apr 03 21:03:16.459737 2026] [:error] [pid 40562:tid 40574] [client 51.103.121.234:2984] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "ac-6lDfFMXuP9zvqCep_rQAAAYk"]
[Fri Apr 03 21:03:16.935778 2026] [:error] [pid 33445:tid 33453] [client 51.103.121.234:51570] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "ac-6lFlRNZ0iDVmJWM0DHQAAAAM"]
[Fri Apr 03 21:03:17.439361 2026] [:error] [pid 55174:tid 55178] [client 51.103.121.234:2887] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "ac-6lZ_WKqUonPNUHYzwcAAAAcI"]
[Fri Apr 03 21:03:17.910519 2026] [:error] [pid 33542:tid 33548] [client 51.103.121.234:51567] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ac-6lXwb6uB1LaGtepb3twAAAMM"]
[Fri Apr 03 21:03:18.391422 2026] [:error] [pid 33446:tid 33486] [client 51.103.121.234:2967] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ac-6ltg3dCqFYIIdw0pgbAAAAEk"]
[Fri Apr 03 21:03:18.867587 2026] [:error] [pid 40533:tid 40559] [client 51.103.121.234:2992] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ac-6lvbIAA8AViDmwsusSAAAAVg"]
[Fri Apr 03 21:03:19.342333 2026] [:error] [pid 33542:tid 33549] [client 51.103.121.234:3067] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ac-6l3wb6uB1LaGtepb3ugAAAMQ"]
[Fri Apr 03 21:03:19.814196 2026] [:error] [pid 33542:tid 33550] [client 51.103.121.234:2978] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "ac-6l3wb6uB1LaGtepb3vwAAAMU"]
[Fri Apr 03 21:03:20.305566 2026] [:error] [pid 33447:tid 33512] [client 51.103.121.234:2956] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "ac-6mEgaPmDHz92j4lNIgAAAAIg"]
[Fri Apr 03 21:03:20.775422 2026] [:error] [pid 55174:tid 55187] [client 51.103.121.234:3000] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "ac-6mJ_WKqUonPNUHYzwcQAAAcs"]
[Fri Apr 03 21:03:21.248410 2026] [:error] [pid 33542:tid 33564] [client 51.103.121.234:2945] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "ac-6mXwb6uB1LaGtepb3wwAAANM"]
[Fri Apr 03 21:03:21.727910 2026] [:error] [pid 35469:tid 35484] [client 51.103.121.234:2995] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "ac-6maGvTIc8-wY3jUSK8AAAAQ0"]
[Fri Apr 03 21:03:22.203267 2026] [:error] [pid 33446:tid 33481] [client 51.103.121.234:3023] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "ac-6mtg3dCqFYIIdw0pgcQAAAEQ"]
[Fri Apr 03 21:03:22.679418 2026] [:error] [pid 55174:tid 55185] [client 51.103.121.234:2828] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "ac-6mp_WKqUonPNUHYzwdgAAAck"]
[Fri Apr 03 21:03:23.157077 2026] [:error] [pid 33542:tid 33561] [client 51.103.121.234:3023] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "ac-6m3wb6uB1LaGtepb3xwAAANA"]
[Fri Apr 03 21:03:23.634176 2026] [:error] [pid 33446:tid 33492] [client 51.103.121.234:3043] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/te.php"] [unique_id "ac-6m9g3dCqFYIIdw0pgdgAAAE8"]
[Fri Apr 03 21:03:24.112343 2026] [:error] [pid 33446:tid 33501] [client 51.103.121.234:3052] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/te.php"] [unique_id "ac-6nNg3dCqFYIIdw0pgfAAAAFg"]
[Fri Apr 03 21:03:24.588380 2026] [:error] [pid 35469:tid 35491] [client 51.103.121.234:3063] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/te.php"] [unique_id "ac-6nKGvTIc8-wY3jUSK_AAAARQ"]
[Fri Apr 03 21:03:25.060128 2026] [:error] [pid 35469:tid 35481] [client 51.103.121.234:2918] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/te.php"] [unique_id "ac-6naGvTIc8-wY3jUSLAQAAAQo"]
[Fri Apr 03 21:03:25.531976 2026] [:error] [pid 40562:tid 40577] [client 51.103.121.234:2946] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac-6nTfFMXuP9zvqCep_uQAAAYw"]
[Fri Apr 03 21:03:26.004510 2026] [:error] [pid 40562:tid 40573] [client 51.103.121.234:60767] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac-6njfFMXuP9zvqCep_vQAAAYg"]
[Fri Apr 03 21:03:26.481526 2026] [:error] [pid 35469:tid 35476] [client 51.103.121.234:2938] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac-6nqGvTIc8-wY3jUSLCAAAAQU"]
[Fri Apr 03 21:03:26.954183 2026] [:error] [pid 55174:tid 55199] [client 51.103.121.234:3050] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "ac-6np_WKqUonPNUHYzwewAAAdc"]
[Fri Apr 03 21:03:27.445080 2026] [:error] [pid 33446:tid 33495] [client 51.103.121.234:2980] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ac-6n9g3dCqFYIIdw0pggwAAAFI"]
[Fri Apr 03 21:03:27.923644 2026] [:error] [pid 55174:tid 55196] [client 51.103.121.234:2929] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ac-6n5_WKqUonPNUHYzwfQAAAdQ"]
[Fri Apr 03 21:03:28.398246 2026] [:error] [pid 40562:tid 40565] [client 51.103.121.234:2961] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ac-6oDfFMXuP9zvqCep_ygAAAYA"]
[Fri Apr 03 21:03:28.868627 2026] [:error] [pid 33542:tid 33545] [client 51.103.121.234:2952] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ac-6oHwb6uB1LaGtepb3ygAAAMA"]
[Fri Apr 03 21:03:29.346822 2026] [:error] [pid 33446:tid 33501] [client 51.103.121.234:2854] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ac-6odg3dCqFYIIdw0pgjAAAAFg"]
[Fri Apr 03 21:03:29.821287 2026] [:error] [pid 55174:tid 55186] [client 51.103.121.234:51531] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ac-6oZ_WKqUonPNUHYzwggAAAco"]
[Fri Apr 03 21:03:30.293573 2026] [:error] [pid 55174:tid 55185] [client 51.103.121.234:2935] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ac-6op_WKqUonPNUHYzwhQAAAck"]
[Fri Apr 03 21:03:30.779558 2026] [:error] [pid 55174:tid 55190] [client 51.103.121.234:2892] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ac-6op_WKqUonPNUHYzwiwAAAc4"]
[Fri Apr 03 21:03:31.253979 2026] [:error] [pid 33542:tid 33546] [client 51.103.121.234:3055] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac-6o3wb6uB1LaGtepb3zAAAAME"]
[Fri Apr 03 21:03:31.735371 2026] [:error] [pid 33445:tid 33455] [client 51.103.121.234:2969] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac-6o1lRNZ0iDVmJWM0DKQAAAAU"]
[Fri Apr 03 21:03:32.208891 2026] [:error] [pid 40562:tid 40565] [client 51.103.121.234:2977] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac-6pDfFMXuP9zvqCep_1AAAAYA"]
[Fri Apr 03 21:03:32.683111 2026] [:error] [pid 33542:tid 33549] [client 51.103.121.234:2914] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ac-6pHwb6uB1LaGtepb30QAAAMQ"]
[Fri Apr 03 21:03:33.153906 2026] [:error] [pid 35469:tid 35488] [client 51.103.121.234:3033] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "ac-6paGvTIc8-wY3jUSLLgAAARE"]
[Fri Apr 03 21:03:33.634177 2026] [:error] [pid 33446:tid 33486] [client 51.103.121.234:2941] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "ac-6pdg3dCqFYIIdw0pgoAAAAEk"]
[Fri Apr 03 21:03:34.107035 2026] [:error] [pid 33446:tid 33479] [client 51.103.121.234:3024] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "ac-6ptg3dCqFYIIdw0pgpAAAAEI"]
[Fri Apr 03 21:03:34.580675 2026] [:error] [pid 35469:tid 35489] [client 51.103.121.234:2922] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "ac-6pqGvTIc8-wY3jUSLMQAAARI"]
[Fri Apr 03 21:03:35.056247 2026] [:error] [pid 35469:tid 35493] [client 51.103.121.234:2934] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/manager.php"] [unique_id "ac-6p6GvTIc8-wY3jUSLNgAAARY"]
[Fri Apr 03 21:03:35.535536 2026] [:error] [pid 35469:tid 35483] [client 51.103.121.234:2907] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/manager.php"] [unique_id "ac-6p6GvTIc8-wY3jUSLOQAAAQw"]
[Fri Apr 03 21:03:36.022511 2026] [:error] [pid 40562:tid 40574] [client 51.103.121.234:2895] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/manager.php"] [unique_id "ac-6qDfFMXuP9zvqCep_3wAAAYk"]
[Fri Apr 03 21:03:36.496528 2026] [:error] [pid 33445:tid 33457] [client 51.103.121.234:2963] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/manager.php"] [unique_id "ac-6qFlRNZ0iDVmJWM0DMgAAAAc"]
[Fri Apr 03 21:03:36.969968 2026] [:error] [pid 33445:tid 33474] [client 51.103.121.234:2916] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "ac-6qFlRNZ0iDVmJWM0DNQAAABg"]
[Fri Apr 03 21:03:37.456820 2026] [proxy_fcgi:error] [pid 33445:tid 33459] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:37.697579 2026] [proxy_fcgi:error] [pid 33445:tid 33472] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:37.952540 2026] [proxy_fcgi:error] [pid 33445:tid 33466] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:38.441207 2026] [proxy_fcgi:error] [pid 33445:tid 33473] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:38.681094 2026] [proxy_fcgi:error] [pid 33445:tid 33465] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:38.921190 2026] [proxy_fcgi:error] [pid 33445:tid 33450] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:39.160771 2026] [proxy_fcgi:error] [pid 33445:tid 33458] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:39.410738 2026] [proxy_fcgi:error] [pid 33445:tid 33451] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:39.651131 2026] [proxy_fcgi:error] [pid 33445:tid 33460] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:39.890462 2026] [proxy_fcgi:error] [pid 33445:tid 33456] [client 51.103.121.234:3008] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:03:40.126881 2026] [:error] [pid 33445:tid 33461] [client 51.103.121.234:3008] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "ac-6rFlRNZ0iDVmJWM0DSAAAAAs"]
[Fri Apr 03 21:03:40.598861 2026] [:error] [pid 40562:tid 40579] [client 51.103.121.234:2968] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "ac-6rDfFMXuP9zvqCep_6QAAAY4"]
[Fri Apr 03 21:03:41.102679 2026] [:error] [pid 33542:tid 33556] [client 51.103.121.234:2917] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "ac-6rXwb6uB1LaGtepb33QAAAMs"]
[Fri Apr 03 21:03:41.587152 2026] [:error] [pid 33446:tid 33481] [client 51.103.121.234:3009] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "ac-6rdg3dCqFYIIdw0pgqQAAAEQ"]
[Fri Apr 03 21:03:42.067977 2026] [:error] [pid 55174:tid 55190] [client 51.103.121.234:2878] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-6rp_WKqUonPNUHYzwpgAAAc4"]
[Fri Apr 03 21:03:42.539557 2026] [:error] [pid 40533:tid 40544] [client 51.103.121.234:2903] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-6rvbIAA8AViDmwsusVwAAAUk"]
[Fri Apr 03 21:03:43.011964 2026] [:error] [pid 33447:tid 33522] [client 51.103.121.234:2912] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-6r0gaPmDHz92j4lNImwAAAJI"]
[Fri Apr 03 21:03:43.490536 2026] [:error] [pid 40562:tid 40587] [client 51.103.121.234:2996] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-6rzfFMXuP9zvqCep_7wAAAZY"]
[Fri Apr 03 21:03:43.970835 2026] [:error] [pid 40562:tid 40583] [client 51.103.121.234:2971] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ac-6rzfFMXuP9zvqCep_8AAAAZI"]
[Fri Apr 03 21:03:44.455060 2026] [:error] [pid 40533:tid 40545] [client 51.103.121.234:2982] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ac-6sPbIAA8AViDmwsusWgAAAUo"]
[Fri Apr 03 21:03:44.944172 2026] [:error] [pid 33446:tid 33490] [client 51.103.121.234:2921] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ac-6sNg3dCqFYIIdw0pgsQAAAE0"]
[Fri Apr 03 21:03:45.434301 2026] [:error] [pid 33446:tid 33500] [client 51.103.121.234:3068] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ac-6sdg3dCqFYIIdw0pgswAAAFc"]
[Fri Apr 03 21:03:45.916720 2026] [:error] [pid 33446:tid 33494] [client 51.103.121.234:51577] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxin.php"] [unique_id "ac-6sdg3dCqFYIIdw0pgugAAAFE"]
[Fri Apr 03 21:03:46.394833 2026] [:error] [pid 33446:tid 33479] [client 51.103.121.234:2891] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxin.php"] [unique_id "ac-6stg3dCqFYIIdw0pgvwAAAEI"]
[Fri Apr 03 21:03:46.882570 2026] [:error] [pid 33445:tid 33456] [client 51.103.121.234:3006] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxin.php"] [unique_id "ac-6sllRNZ0iDVmJWM0DTQAAAAY"]
[Fri Apr 03 21:03:47.361322 2026] [:error] [pid 33445:tid 33468] [client 51.103.121.234:60754] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxin.php"] [unique_id "ac-6s1lRNZ0iDVmJWM0DUAAAABI"]
[Fri Apr 03 21:03:47.834727 2026] [:error] [pid 35469:tid 35479] [client 51.103.121.234:2939] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "ac-6s6GvTIc8-wY3jUSLVQAAAQg"]
[Fri Apr 03 21:03:48.318852 2026] [:error] [pid 35469:tid 35489] [client 51.103.121.234:60736] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "ac-6tKGvTIc8-wY3jUSLWgAAARI"]
[Fri Apr 03 21:03:48.789516 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:2910] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "ac-6tKGvTIc8-wY3jUSLXQAAARM"]
[Fri Apr 03 21:03:49.278482 2026] [:error] [pid 40562:tid 40579] [client 51.103.121.234:2990] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "ac-6tTfFMXuP9zvqCep_9gAAAY4"]
[Fri Apr 03 21:03:49.756872 2026] [:error] [pid 40562:tid 40577] [client 51.103.121.234:2998] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/NewFile.php"] [unique_id "ac-6tTfFMXuP9zvqCep_-AAAAYw"]
[Fri Apr 03 21:03:50.231922 2026] [:error] [pid 33446:tid 33477] [client 51.103.121.234:2930] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/NewFile.php"] [unique_id "ac-6ttg3dCqFYIIdw0pgyAAAAEA"]
[Fri Apr 03 21:03:50.705957 2026] [:error] [pid 33446:tid 33491] [client 51.103.121.234:3069] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/NewFile.php"] [unique_id "ac-6ttg3dCqFYIIdw0pgygAAAE4"]
[Fri Apr 03 21:03:51.185300 2026] [:error] [pid 33446:tid 33487] [client 51.103.121.234:2888] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/NewFile.php"] [unique_id "ac-6t9g3dCqFYIIdw0pg0AAAAEo"]
[Fri Apr 03 21:03:51.658892 2026] [:error] [pid 33445:tid 33474] [client 51.103.121.234:60748] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac-6t1lRNZ0iDVmJWM0DXAAAABg"]
[Fri Apr 03 21:03:52.134827 2026] [:error] [pid 33445:tid 33466] [client 51.103.121.234:2899] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac-6uFlRNZ0iDVmJWM0DYgAAABA"]
[Fri Apr 03 21:03:52.620488 2026] [:error] [pid 33446:tid 33491] [client 51.103.121.234:2970] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac-6uNg3dCqFYIIdw0pg1AAAAE4"]
[Fri Apr 03 21:03:53.090250 2026] [:error] [pid 33446:tid 33478] [client 51.103.121.234:60780] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "ac-6udg3dCqFYIIdw0pg1gAAAEE"]
[Fri Apr 03 21:03:53.573550 2026] [:error] [pid 35469:tid 35472] [client 51.103.121.234:2838] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "ac-6uaGvTIc8-wY3jUSLZAAAAQE"]
[Fri Apr 03 21:03:54.047296 2026] [:error] [pid 33542:tid 33565] [client 51.103.121.234:3018] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "ac-6unwb6uB1LaGtepb34gAAANQ"]
[Fri Apr 03 21:03:54.546897 2026] [:error] [pid 55174:tid 55191] [client 51.103.121.234:3039] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "ac-6up_WKqUonPNUHYzwrQAAAc8"]
[Fri Apr 03 21:03:55.022940 2026] [:error] [pid 35469:tid 35494] [client 51.103.121.234:2987] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "ac-6u6GvTIc8-wY3jUSLawAAARc"]
[Fri Apr 03 21:03:55.502352 2026] [:error] [pid 55174:tid 55185] [client 51.103.121.234:2927] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geck.php"] [unique_id "ac-6u5_WKqUonPNUHYzwrgAAAck"]
[Fri Apr 03 21:03:55.976151 2026] [:error] [pid 35469:tid 35482] [client 51.103.121.234:2948] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geck.php"] [unique_id "ac-6u6GvTIc8-wY3jUSLcAAAAQs"]
[Fri Apr 03 21:03:56.456787 2026] [:error] [pid 35469:tid 35492] [client 51.103.121.234:2931] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geck.php"] [unique_id "ac-6vKGvTIc8-wY3jUSLcQAAARU"]
[Fri Apr 03 21:03:56.928260 2026] [:error] [pid 40562:tid 40566] [client 51.103.121.234:3007] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geck.php"] [unique_id "ac-6vDfFMXuP9zvqCep_-wAAAYE"]
[Fri Apr 03 21:03:57.403933 2026] [:error] [pid 33447:tid 33523] [client 51.103.121.234:2915] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "ac-6vUgaPmDHz92j4lNIpQAAAJM"]
[Fri Apr 03 21:03:57.873364 2026] [:error] [pid 40562:tid 40578] [client 51.103.121.234:3012] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "ac-6vTfFMXuP9zvqCep__QAAAY0"]
[Fri Apr 03 21:03:58.347746 2026] [:error] [pid 55174:tid 55181] [client 51.103.121.234:3034] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "ac-6vp_WKqUonPNUHYzwsQAAAcU"]
[Fri Apr 03 21:03:58.817341 2026] [:error] [pid 40533:tid 40536] [client 51.103.121.234:2851] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "ac-6vvbIAA8AViDmwsusYwAAAUE"]
[Fri Apr 03 21:03:59.296455 2026] [:error] [pid 33447:tid 33508] [client 51.103.121.234:2884] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ac-6v0gaPmDHz92j4lNIqgAAAIQ"]
[Fri Apr 03 21:03:59.770956 2026] [:error] [pid 33446:tid 33482] [client 51.103.121.234:2926] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ac-6v9g3dCqFYIIdw0pg5wAAAEU"]
[Fri Apr 03 21:04:00.258086 2026] [:error] [pid 33447:tid 33524] [client 51.103.121.234:2925] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ac-6wEgaPmDHz92j4lNIsQAAAJQ"]
[Fri Apr 03 21:04:00.741086 2026] [:error] [pid 35469:tid 35491] [client 51.103.121.234:2879] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ac-6wKGvTIc8-wY3jUSLdwAAARQ"]
[Fri Apr 03 21:04:01.224675 2026] [:error] [pid 33542:tid 33561] [client 51.103.121.234:2933] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "ac-6wXwb6uB1LaGtepb36QAAANA"]
[Fri Apr 03 21:04:01.701565 2026] [:error] [pid 33447:tid 33504] [client 51.103.121.234:2848] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "ac-6wUgaPmDHz92j4lNItwAAAIA"]
[Fri Apr 03 21:04:02.185812 2026] [:error] [pid 40562:tid 40577] [client 51.103.121.234:2894] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "ac-6wjfFMXuP9zvqCeqAAgAAAYw"]
[Fri Apr 03 21:04:02.665061 2026] [:error] [pid 33445:tid 33470] [client 51.103.121.234:2924] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "ac-6wllRNZ0iDVmJWM0DbQAAABQ"]
[Fri Apr 03 21:04:03.138595 2026] [:error] [pid 33446:tid 33483] [client 51.103.121.234:2950] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "ac-6w9g3dCqFYIIdw0pg6gAAAEY"]
[Fri Apr 03 21:04:03.635800 2026] [:error] [pid 33446:tid 33494] [client 51.103.121.234:3026] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "ac-6w9g3dCqFYIIdw0pg6wAAAFE"]
[Fri Apr 03 21:04:04.117926 2026] [:error] [pid 33447:tid 33516] [client 51.103.121.234:2898] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "ac-6xEgaPmDHz92j4lNIuAAAAIw"]
[Fri Apr 03 21:04:04.615418 2026] [:error] [pid 33542:tid 33562] [client 51.103.121.234:2830] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/manager.php"] [unique_id "ac-6xHwb6uB1LaGtepb37QAAANE"]
[Fri Apr 03 21:04:05.097082 2026] [:error] [pid 33445:tid 33459] [client 51.103.121.234:2859] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "ac-6xVlRNZ0iDVmJWM0DeAAAAAk"]
[Fri Apr 03 21:04:05.577780 2026] [:error] [pid 55174:tid 55183] [client 51.103.121.234:2942] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "ac-6xZ_WKqUonPNUHYzwtAAAAcc"]
[Fri Apr 03 21:04:06.057815 2026] [:error] [pid 33447:tid 33514] [client 51.103.121.234:2713] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "ac-6xkgaPmDHz92j4lNIwQAAAIo"]
[Fri Apr 03 21:04:06.535625 2026] [:error] [pid 35469:tid 35495] [client 51.103.121.234:2900] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "ac-6xqGvTIc8-wY3jUSLfAAAARg"]
[Fri Apr 03 21:04:07.008819 2026] [:error] [pid 33447:tid 33508] [client 51.103.121.234:2893] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "ac-6x0gaPmDHz92j4lNIxQAAAIQ"]
[Fri Apr 03 21:04:07.486371 2026] [:error] [pid 33542:tid 33568] [client 51.103.121.234:2824] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "ac-6x3wb6uB1LaGtepb37gAAANc"]
[Fri Apr 03 21:04:07.978592 2026] [:error] [pid 33445:tid 33460] [client 51.103.121.234:2897] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "ac-6x1lRNZ0iDVmJWM0DgQAAAAo"]
[Fri Apr 03 21:04:08.459430 2026] [:error] [pid 33446:tid 33479] [client 51.103.121.234:3005] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "ac-6yNg3dCqFYIIdw0pg-QAAAEI"]
[Fri Apr 03 21:04:08.932282 2026] [:error] [pid 33445:tid 33459] [client 51.103.121.234:2909] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media.php"] [unique_id "ac-6yFlRNZ0iDVmJWM0DgwAAAAk"]
[Fri Apr 03 21:04:09.409331 2026] [:error] [pid 33445:tid 33465] [client 51.103.121.234:2853] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media.php"] [unique_id "ac-6yVlRNZ0iDVmJWM0DhwAAAA8"]
[Fri Apr 03 21:04:09.899872 2026] [:error] [pid 33446:tid 33493] [client 51.103.121.234:3001] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media.php"] [unique_id "ac-6ydg3dCqFYIIdw0phHAAAAFA"]
[Fri Apr 03 21:04:10.388690 2026] [:error] [pid 33542:tid 33549] [client 51.103.121.234:2775] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media.php"] [unique_id "ac-6ynwb6uB1LaGtepb38wAAAMQ"]
[Fri Apr 03 21:04:10.860794 2026] [:error] [pid 55174:tid 55200] [client 51.103.121.234:2692] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-6yp_WKqUonPNUHYzwtwAAAdg"]
[Fri Apr 03 21:04:11.338582 2026] [:error] [pid 40562:tid 40572] [client 51.103.121.234:3048] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-6yzfFMXuP9zvqCeqABAAAAYc"]
[Fri Apr 03 21:04:11.813541 2026] [:error] [pid 33542:tid 33547] [client 51.103.121.234:2843] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-6y3wb6uB1LaGtepb39QAAAMI"]
[Fri Apr 03 21:04:12.298386 2026] [:error] [pid 33446:tid 33501] [client 51.103.121.234:2908] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-6zNg3dCqFYIIdw0phIwAAAFg"]
[Fri Apr 03 21:04:12.775333 2026] [:error] [pid 55174:tid 55182] [client 51.103.121.234:2868] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "ac-6zJ_WKqUonPNUHYzwvgAAAcY"]
[Fri Apr 03 21:04:13.247298 2026] [:error] [pid 35469:tid 35481] [client 51.103.121.234:2832] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "ac-6zaGvTIc8-wY3jUSLhQAAAQo"]
[Fri Apr 03 21:04:13.735360 2026] [:error] [pid 35469:tid 35492] [client 51.103.121.234:2882] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "ac-6zaGvTIc8-wY3jUSLhwAAARU"]
[Fri Apr 03 21:04:14.227410 2026] [:error] [pid 35469:tid 35485] [client 51.103.121.234:2902] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admir.php"] [unique_id "ac-6zqGvTIc8-wY3jUSLigAAAQ4"]
[Fri Apr 03 21:04:14.712022 2026] [:error] [pid 55174:tid 55183] [client 51.103.121.234:2863] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ac-6zp_WKqUonPNUHYzwwwAAAcc"]
[Fri Apr 03 21:04:15.208279 2026] [:error] [pid 55174:tid 55189] [client 51.103.121.234:2821] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ac-6z5_WKqUonPNUHYzwxQAAAc0"]
[Fri Apr 03 21:04:15.685813 2026] [:error] [pid 35469:tid 35486] [client 51.103.121.234:2904] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ac-6z6GvTIc8-wY3jUSLjAAAAQ8"]
[Fri Apr 03 21:04:16.157155 2026] [:error] [pid 33447:tid 33513] [client 51.103.121.234:51578] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ac-60EgaPmDHz92j4lNI0QAAAIk"]
[Fri Apr 03 21:04:16.649792 2026] [:error] [pid 33445:tid 33451] [client 51.103.121.234:2822] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "ac-60FlRNZ0iDVmJWM0DnQAAAAE"]
[Fri Apr 03 21:04:17.136456 2026] [:error] [pid 55174:tid 55196] [client 51.103.121.234:2842] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "ac-60Z_WKqUonPNUHYzwxgAAAdQ"]
[Fri Apr 03 21:04:17.608726 2026] [:error] [pid 55174:tid 55178] [client 51.103.121.234:2850] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "ac-60Z_WKqUonPNUHYzwyAAAAcI"]
[Fri Apr 03 21:04:18.081399 2026] [:error] [pid 35469:tid 35485] [client 51.103.121.234:2875] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "ac-60qGvTIc8-wY3jUSLkAAAAQ4"]
[Fri Apr 03 21:04:18.580365 2026] [:error] [pid 40562:tid 40575] [client 51.103.121.234:2874] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-60jfFMXuP9zvqCeqACwAAAYo"]
[Fri Apr 03 21:04:19.050380 2026] [:error] [pid 35469:tid 35477] [client 51.103.121.234:2795] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-606GvTIc8-wY3jUSLlQAAAQY"]
[Fri Apr 03 21:04:19.523532 2026] [:error] [pid 40562:tid 40581] [client 51.103.121.234:2839] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-60zfFMXuP9zvqCeqADwAAAZA"]
[Fri Apr 03 21:04:20.000079 2026] [:error] [pid 40562:tid 40572] [client 51.103.121.234:2818] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-60zfFMXuP9zvqCeqAFAAAAYc"]
[Fri Apr 03 21:04:20.488725 2026] [:error] [pid 33446:tid 33483] [client 51.103.121.234:2869] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc.php"] [unique_id "ac-61Ng3dCqFYIIdw0phKAAAAEY"]
[Fri Apr 03 21:04:20.970829 2026] [:error] [pid 33445:tid 33455] [client 51.103.121.234:2858] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc.php"] [unique_id "ac-61FlRNZ0iDVmJWM0DpAAAAAU"]
[Fri Apr 03 21:04:21.445588 2026] [:error] [pid 40562:tid 40578] [client 51.103.121.234:2883] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc.php"] [unique_id "ac-61TfFMXuP9zvqCeqAFwAAAY0"]
[Fri Apr 03 21:04:21.929049 2026] [:error] [pid 40562:tid 40584] [client 51.103.121.234:2753] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc.php"] [unique_id "ac-61TfFMXuP9zvqCeqAGgAAAZM"]
[Fri Apr 03 21:04:22.418002 2026] [:error] [pid 35469:tid 35475] [client 51.103.121.234:2951] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkxzo.php"] [unique_id "ac-61qGvTIc8-wY3jUSLmgAAAQQ"]
[Fri Apr 03 21:04:22.896768 2026] [:error] [pid 40533:tid 40538] [client 51.103.121.234:2905] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkxzo.php"] [unique_id "ac-61vbIAA8AViDmwsuskgAAAUM"]
[Fri Apr 03 21:04:23.378958 2026] [:error] [pid 35469:tid 35474] [client 51.103.121.234:2876] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkxzo.php"] [unique_id "ac-616GvTIc8-wY3jUSLnwAAAQM"]
[Fri Apr 03 21:04:23.848059 2026] [:error] [pid 40533:tid 40535] [client 51.103.121.234:2785] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkxzo.php"] [unique_id "ac-61_bIAA8AViDmwsuskwAAAUA"]
[Fri Apr 03 21:04:24.327129 2026] [:error] [pid 33445:tid 33467] [client 51.103.121.234:2867] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "ac-62FlRNZ0iDVmJWM0DqAAAABE"]
[Fri Apr 03 21:04:24.797458 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:2825] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "ac-62KGvTIc8-wY3jUSLqgAAARM"]
[Fri Apr 03 21:04:25.327705 2026] [:error] [pid 40562:tid 40580] [client 51.103.121.234:2780] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "ac-62TfFMXuP9zvqCeqAIAAAAY8"]
[Fri Apr 03 21:04:25.798549 2026] [:error] [pid 40562:tid 40569] [client 51.103.121.234:2877] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "ac-62TfFMXuP9zvqCeqAIgAAAYQ"]
[Fri Apr 03 21:04:26.298376 2026] [:error] [pid 40562:tid 40565] [client 51.103.121.234:2829] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ac-62jfFMXuP9zvqCeqAJQAAAYA"]
[Fri Apr 03 21:04:26.781065 2026] [:error] [pid 33446:tid 33495] [client 51.103.121.234:2695] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ac-62tg3dCqFYIIdw0phLgAAAFI"]
[Fri Apr 03 21:04:27.283359 2026] [:error] [pid 33446:tid 33488] [client 51.103.121.234:2788] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ac-629g3dCqFYIIdw0phMQAAAEs"]
[Fri Apr 03 21:04:27.767336 2026] [:error] [pid 35469:tid 35490] [client 51.103.121.234:2776] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ac-626GvTIc8-wY3jUSLtQAAARM"]
[Fri Apr 03 21:04:28.253028 2026] [:error] [pid 40533:tid 40540] [client 51.103.121.234:2844] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "ac-63PbIAA8AViDmwsuslAAAAUU"]
[Fri Apr 03 21:04:28.728011 2026] [:error] [pid 33445:tid 33452] [client 51.103.121.234:2861] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "ac-63FlRNZ0iDVmJWM0DqwAAAAI"]
[Fri Apr 03 21:04:29.221412 2026] [:error] [pid 33446:tid 33486] [client 51.103.121.234:2906] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "ac-63dg3dCqFYIIdw0phNgAAAEk"]
[Fri Apr 03 21:04:29.694753 2026] [:error] [pid 33446:tid 33501] [client 51.103.121.234:2786] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "ac-63dg3dCqFYIIdw0phOwAAAFg"]
[Fri Apr 03 21:04:30.171338 2026] [:error] [pid 40562:tid 40587] [client 51.103.121.234:2783] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-63jfFMXuP9zvqCeqAKgAAAZY"]
[Fri Apr 03 21:04:30.649832 2026] [:error] [pid 35469:tid 35483] [client 51.103.121.234:2896] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-63qGvTIc8-wY3jUSLugAAAQw"]
[Fri Apr 03 21:04:31.129557 2026] [:error] [pid 35469:tid 35486] [client 51.103.121.234:2836] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-636GvTIc8-wY3jUSLvgAAAQ8"]
[Fri Apr 03 21:04:31.605665 2026] [:error] [pid 55174:tid 55188] [client 51.103.121.234:2799] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-635_WKqUonPNUHYzw0gAAAcw"]
[Fri Apr 03 21:04:32.077399 2026] [:error] [pid 35469:tid 35477] [client 51.103.121.234:2794] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-64KGvTIc8-wY3jUSLxAAAAQY"]
[Fri Apr 03 21:04:32.549528 2026] [:error] [pid 33445:tid 33459] [client 51.103.121.234:51569] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-64FlRNZ0iDVmJWM0DrgAAAAk"]
[Fri Apr 03 21:04:33.029006 2026] [:error] [pid 33445:tid 33468] [client 51.103.121.234:2756] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-64VlRNZ0iDVmJWM0DsAAAABI"]
[Fri Apr 03 21:04:33.503121 2026] [:error] [pid 33446:tid 33485] [client 51.103.121.234:2857] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-64dg3dCqFYIIdw0phQgAAAEg"]
[Fri Apr 03 21:04:33.979752 2026] [:error] [pid 33446:tid 33483] [client 51.103.121.234:2940] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "ac-64dg3dCqFYIIdw0phRQAAAEY"]
[Fri Apr 03 21:04:34.465431 2026] [:error] [pid 55174:tid 55186] [client 51.103.121.234:2837] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "ac-64p_WKqUonPNUHYzw0wAAAco"]
[Fri Apr 03 21:04:34.957851 2026] [:error] [pid 33446:tid 33496] [client 51.103.121.234:2913] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "ac-64tg3dCqFYIIdw0phRgAAAFM"]
[Fri Apr 03 21:04:35.433742 2026] [:error] [pid 33446:tid 33488] [client 51.103.121.234:2871] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "ac-649g3dCqFYIIdw0phSgAAAEs"]
[Fri Apr 03 21:04:35.917551 2026] [:error] [pid 33446:tid 33486] [client 51.103.121.234:2845] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "ac-649g3dCqFYIIdw0phTQAAAEk"]
[Fri Apr 03 21:04:36.392082 2026] [:error] [pid 33446:tid 33484] [client 51.103.121.234:2932] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "ac-65Ng3dCqFYIIdw0phTwAAAEc"]
[Fri Apr 03 21:04:36.866303 2026] [:error] [pid 33446:tid 33501] [client 51.103.121.234:2772] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "ac-65Ng3dCqFYIIdw0phUgAAAFg"]
[Fri Apr 03 21:04:37.339582 2026] [:error] [pid 40533:tid 40551] [client 51.103.121.234:2974] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-configs.php"] [unique_id "ac-65fbIAA8AViDmwsusmQAAAVA"]
[Fri Apr 03 21:04:37.809188 2026] [:error] [pid 33542:tid 33552] [client 51.103.121.234:2827] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "ac-65Xwb6uB1LaGtepb4CgAAAMc"]
[Fri Apr 03 21:04:38.284774 2026] [:error] [pid 33447:tid 33523] [client 51.103.121.234:2820] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "ac-65kgaPmDHz92j4lNI2wAAAJM"]
[Fri Apr 03 21:04:38.760676 2026] [:error] [pid 33447:tid 33510] [client 51.103.121.234:2865] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "ac-65kgaPmDHz92j4lNI3QAAAIY"]
[Fri Apr 03 21:04:39.248715 2026] [proxy_fcgi:error] [pid 55174:tid 55190] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:39.488279 2026] [proxy_fcgi:error] [pid 55174:tid 55181] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:40.338378 2026] [proxy_fcgi:error] [pid 55174:tid 55196] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:40.822038 2026] [proxy_fcgi:error] [pid 55174:tid 55200] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:41.308534 2026] [proxy_fcgi:error] [pid 55174:tid 55176] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:41.547644 2026] [proxy_fcgi:error] [pid 55174:tid 55197] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:41.787998 2026] [proxy_fcgi:error] [pid 55174:tid 55188] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:42.029294 2026] [proxy_fcgi:error] [pid 55174:tid 55184] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:42.268783 2026] [proxy_fcgi:error] [pid 55174:tid 55179] [client 51.103.121.234:2870] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 21:04:42.507847 2026] [:error] [pid 55174:tid 55186] [client 51.103.121.234:2870] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m.php"] [unique_id "ac-66p_WKqUonPNUHYzw4wAAAco"]
[Fri Apr 03 21:04:42.996585 2026] [:error] [pid 33446:tid 33488] [client 51.103.121.234:2886] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m.php"] [unique_id "ac-66tg3dCqFYIIdw0phagAAAEs"]
[Fri Apr 03 21:04:43.474418 2026] [:error] [pid 33446:tid 33487] [client 51.103.121.234:2864] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m.php"] [unique_id "ac-669g3dCqFYIIdw0phbgAAAEo"]
[Fri Apr 03 21:04:43.945328 2026] [:error] [pid 40533:tid 40548] [client 51.103.121.234:2803] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m.php"] [unique_id "ac-66_bIAA8AViDmwsusngAAAU0"]
[Fri Apr 03 21:04:44.418244 2026] [:error] [pid 40562:tid 40582] [client 51.103.121.234:2752] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-is.php"] [unique_id "ac-67DfFMXuP9zvqCeqAPwAAAZE"]
[Fri Apr 03 21:04:44.904949 2026] [:error] [pid 55174:tid 55191] [client 51.103.121.234:60747] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-is.php"] [unique_id "ac-67J_WKqUonPNUHYzw5wAAAc8"]
[Fri Apr 03 21:04:45.379678 2026] [:error] [pid 33446:tid 33494] [client 51.103.121.234:2898] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-is.php"] [unique_id "ac-67dg3dCqFYIIdw0phcwAAAFE"]
[Fri Apr 03 21:04:45.850273 2026] [:error] [pid 33446:tid 33480] [client 51.103.121.234:2768] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-is.php"] [unique_id "ac-67dg3dCqFYIIdw0phdwAAAEM"]
[Fri Apr 03 21:04:46.321541 2026] [:error] [pid 33447:tid 33518] [client 51.103.121.234:2997] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "ac-67kgaPmDHz92j4lNI6QAAAI4"]
[Fri Apr 03 21:04:46.820972 2026] [:error] [pid 33542:tid 33547] [client 51.103.121.234:2976] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "ac-67nwb6uB1LaGtepb4EgAAAMI"]
[Fri Apr 03 21:04:47.292723 2026] [:error] [pid 33542:tid 33552] [client 51.103.121.234:2835] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "ac-673wb6uB1LaGtepb4FAAAAMc"]
[Fri Apr 03 21:04:47.763823 2026] [:error] [pid 55174:tid 55180] [client 51.103.121.234:2849] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file15.php"] [unique_id "ac-675_WKqUonPNUHYzw7QAAAcQ"]
[Fri Apr 03 21:04:48.241017 2026] [:error] [pid 35469:tid 35473] [client 51.103.121.234:2936] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "ac-68KGvTIc8-wY3jUSLzQAAAQI"]
[Fri Apr 03 21:04:48.727843 2026] [:error] [pid 33447:tid 33509] [client 51.103.121.234:2708] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "ac-68EgaPmDHz92j4lNI7gAAAIU"]
[Fri Apr 03 21:04:49.205158 2026] [:error] [pid 35469:tid 35474] [client 51.103.121.234:2778] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "ac-68aGvTIc8-wY3jUSL0QAAAQM"]
[Fri Apr 03 21:04:49.679975 2026] [:error] [pid 35469:tid 35478] [client 51.103.121.234:2890] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsd.php"] [unique_id "ac-68aGvTIc8-wY3jUSL0gAAAQc"]
[Fri Apr 03 21:04:50.158626 2026] [:error] [pid 55174:tid 55195] [client 51.103.121.234:2866] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ac-68p_WKqUonPNUHYzw7wAAAdM"]
[Fri Apr 03 21:04:50.670570 2026] [:error] [pid 35469:tid 35476] [client 51.103.121.234:2758] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ac-68qGvTIc8-wY3jUSL2gAAAQU"]
[Fri Apr 03 21:04:51.170887 2026] [:error] [pid 40533:tid 40545] [client 51.103.121.234:2733] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ac-68_bIAA8AViDmwsusogAAAUo"]
[Fri Apr 03 21:04:51.645304 2026] [:error] [pid 40533:tid 40543] [client 51.103.121.234:2777] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ac-68_bIAA8AViDmwsusowAAAUg"]
[Fri Apr 03 21:04:52.119512 2026] [:error] [pid 55174:tid 55193] [client 51.103.121.234:2767] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "ac-69J_WKqUonPNUHYzw9gAAAdE"]
[Fri Apr 03 21:04:52.593083 2026] [:error] [pid 40562:tid 40567] [client 51.103.121.234:2757] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "ac-69DfFMXuP9zvqCeqAQQAAAYI"]
[Fri Apr 03 21:04:53.094046 2026] [:error] [pid 33447:tid 33504] [client 51.103.121.234:2810] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "ac-69UgaPmDHz92j4lNI8gAAAIA"]
[Fri Apr 03 21:04:53.580127 2026] [:error] [pid 35469:tid 35480] [client 51.103.121.234:2802] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "ac-69aGvTIc8-wY3jUSL4QAAAQk"]
[Fri Apr 03 21:04:54.061768 2026] [:error] [pid 55174:tid 55183] [client 51.103.121.234:2943] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "ac-69p_WKqUonPNUHYzw-AAAAcc"]
[Fri Apr 03 21:04:54.536673 2026] [:error] [pid 33542:tid 33556] [client 51.103.121.234:2787] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "ac-69nwb6uB1LaGtepb4GAAAAMs"]
[Fri Apr 03 21:04:55.014990 2026] [:error] [pid 33446:tid 33483] [client 51.103.121.234:2697] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "ac-699g3dCqFYIIdw0phgQAAAEY"]
[Fri Apr 03 21:04:55.506843 2026] [:error] [pid 55174:tid 55190] [client 51.103.121.234:2819] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/404.php"] [unique_id "ac-695_WKqUonPNUHYzw-gAAAc4"]
[Fri Apr 03 21:04:56.008901 2026] [:error] [pid 33445:tid 33473] [client 51.103.121.234:2852] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lol.php"] [unique_id "ac-6-FlRNZ0iDVmJWM0DwgAAABc"]
[Fri Apr 03 21:04:56.489698 2026] [:error] [pid 55174:tid 55184] [client 51.103.121.234:2855] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lol.php"] [unique_id "ac-6-J_WKqUonPNUHYzw_wAAAcg"]
[Fri Apr 03 21:04:56.962007 2026] [:error] [pid 55174:tid 55194] [client 51.103.121.234:2781] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lol.php"] [unique_id "ac-6-J_WKqUonPNUHYzxAQAAAdI"]
[Fri Apr 03 21:04:57.439038 2026] [:error] [pid 55174:tid 55193] [client 51.103.121.234:2769] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lol.php"] [unique_id "ac-6-Z_WKqUonPNUHYzxBAAAAdE"]
[Fri Apr 03 21:04:57.909845 2026] [:error] [pid 55174:tid 55190] [client 51.103.121.234:2766] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/radio.php"] [unique_id "ac-6-Z_WKqUonPNUHYzxBwAAAc4"]
[Fri Apr 03 21:04:58.388172 2026] [:error] [pid 35469:tid 35484] [client 51.103.121.234:2840] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/radio.php"] [unique_id "ac-6-qGvTIc8-wY3jUSL6QAAAQ0"]
[Fri Apr 03 21:04:58.863612 2026] [:error] [pid 33445:tid 33459] [client 51.103.121.234:2847] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/radio.php"] [unique_id "ac-6-llRNZ0iDVmJWM0DyQAAAAk"]
[Fri Apr 03 21:04:59.346919 2026] [:error] [pid 55174:tid 55177] [client 51.103.121.234:2856] [client 51.103.121.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/radio.php"] [unique_id "ac-6-5_WKqUonPNUHYzxCQAAAcE"]
[Fri Apr 03 22:56:11.404550 2026] [:error] [pid 33446:tid 33495] [client 176.28.166.230:14746] [client 176.28.166.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.28.166.230, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ac_VC9g3dCqFYIIdw0qQxgAAAFI"]
[Fri Apr 03 22:56:11.416351 2026] [proxy_fcgi:error] [pid 33446:tid 33495] [client 176.28.166.230:14746] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 07:05:15.091582 2026] [:error] [pid 2567:tid 2596] [client 45.92.1.112:54397] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adBHq2JJmfRsTrAKjdSTrgAAANY"]
[Sat Apr 04 07:05:15.701944 2026] [:error] [pid 2457:tid 2498] [client 45.92.1.112:63530] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adBHq0mNHppaMd92ZpdnNwAAABU"]
[Sat Apr 04 07:05:16.199584 2026] [:error] [pid 2567:tid 2594] [client 45.92.1.112:50454] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adBHrGJJmfRsTrAKjdSTtgAAANQ"]
[Sat Apr 04 07:05:16.746403 2026] [:error] [pid 2457:tid 2481] [client 45.92.1.112:49780] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adBHrEmNHppaMd92ZpdnPAAAAAQ"]
[Sat Apr 04 07:05:17.259618 2026] [:error] [pid 2457:tid 2491] [client 45.92.1.112:60047] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adBHrUmNHppaMd92ZpdnQQAAAA4"]
[Sat Apr 04 16:52:03.079579 2026] [:error] [pid 2459:tid 2543] [client 49.207.230.119:43087] [client 49.207.230.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.230.119, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adDRMwefyCmu4LR_PlprXAAAAIs"]
[Sat Apr 04 16:52:03.090092 2026] [proxy_fcgi:error] [pid 2459:tid 2543] [client 49.207.230.119:43087] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 20:52:27.586509 2026] [:error] [pid 2458:tid 2521] [client 45.131.195.60:26035] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adEJiyNozic5SuWqclkdfgAAAFE"]
[Sun Apr 05 02:27:01.803957 2026] [:error] [pid 63313:tid 63323] [client 217.216.37.55:49278] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adFX9e1cPeVj2b7ZXSRnXQAAAQQ"]
[Sun Apr 05 02:27:02.015303 2026] [:error] [pid 53821:tid 53937] [client 217.216.37.55:64297] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adFX9or_VtuiSAUdPhmcLgAAAIk"]
[Sun Apr 05 02:27:02.226551 2026] [:error] [pid 53819:tid 53881] [client 217.216.37.55:50005] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/media/system/js/core.js"] [unique_id "adFX9mkolvq4mv6siDP92gAAAAg"]
[Sun Apr 05 07:37:42.825738 2026] [proxy_fcgi:error] [pid 45409:tid 45430] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:43.071023 2026] [proxy_fcgi:error] [pid 45409:tid 45414] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:43.315589 2026] [proxy_fcgi:error] [pid 45409:tid 45424] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:43.575911 2026] [proxy_fcgi:error] [pid 45409:tid 45413] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:43.819827 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:44.065246 2026] [proxy_fcgi:error] [pid 45409:tid 45419] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:44.316083 2026] [proxy_fcgi:error] [pid 45409:tid 45435] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:44.559708 2026] [proxy_fcgi:error] [pid 45409:tid 45416] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:44.825500 2026] [proxy_fcgi:error] [pid 45409:tid 45418] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:45.069095 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 68.221.137.197:27421] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:45.308769 2026] [:error] [pid 45409:tid 45428] [client 68.221.137.197:27421] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGgydHt_Oyw03gjCNgIzgAAANE"]
[Sun Apr 05 07:37:47.662149 2026] [:error] [pid 45409:tid 45416] [client 68.221.137.197:45273] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGgy9Ht_Oyw03gjCNgI2gAAAMU"]
[Sun Apr 05 07:37:50.267758 2026] [:error] [pid 45305:tid 45375] [client 68.221.137.197:8064] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGgzujDQjr7aWhjflBrUAAAAIQ"]
[Sun Apr 05 07:37:51.894363 2026] [:error] [pid 45305:tid 45372] [client 68.221.137.197:47533] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGgz-jDQjr7aWhjflBrUwAAAIE"]
[Sun Apr 05 07:37:53.416179 2026] [:error] [pid 45303:tid 45337] [client 68.221.137.197:47495] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGg0bboQ9eViZ4hdnmmcwAAABQ"]
[Sun Apr 05 07:37:54.908425 2026] [:error] [pid 30921:tid 30938] [client 68.221.137.197:24095] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGg0mFGQVn8Q0ueB26aSQAAAQ8"]
[Sun Apr 05 07:37:56.718326 2026] [:error] [pid 30921:tid 30942] [client 68.221.137.197:7295] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGg1GFGQVn8Q0ueB26aUQAAARM"]
[Sun Apr 05 07:37:57.461781 2026] [:error] [pid 45304:tid 45363] [client 68.221.137.197:32649] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGg1Q5jnqDKKovdRkkjWgAAAFM"]
[Sun Apr 05 07:37:58.943820 2026] [:error] [pid 45409:tid 45434] [client 68.221.137.197:39521] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGg1tHt_Oyw03gjCNgJAAAAANc"]
[Sun Apr 05 07:37:59.647270 2026] [:error] [pid 30921:tid 30932] [client 68.221.137.197:39492] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGg12FGQVn8Q0ueB26aWQAAAQk"]
[Sun Apr 05 07:38:01.096504 2026] [:error] [pid 45303:tid 45331] [client 68.221.137.197:8143] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGg2bboQ9eViZ4hdnmmgAAAAA4"]
[Sun Apr 05 07:38:05.225456 2026] [:error] [pid 45304:tid 45351] [client 68.221.137.197:37371] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGg3Q5jnqDKKovdRkkjawAAAEc"]
[Sun Apr 05 07:38:09.312181 2026] [:error] [pid 45305:tid 45393] [client 68.221.137.197:48301] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "adGg4ejDQjr7aWhjflBreQAAAJY"]
[Sun Apr 05 07:38:14.375285 2026] [:error] [pid 45303:tid 45329] [client 68.221.137.197:43650] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "adGg5rboQ9eViZ4hdnmmqwAAAAw"]
[Sun Apr 05 07:38:18.294065 2026] [:error] [pid 45304:tid 45356] [client 68.221.137.197:40822] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "adGg6g5jnqDKKovdRkkjkgAAAEw"]
[Sun Apr 05 07:38:19.664140 2026] [:error] [pid 45304:tid 45363] [client 68.221.137.197:40798] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "adGg6w5jnqDKKovdRkkjmAAAAFM"]
[Sun Apr 05 07:38:23.186698 2026] [:error] [pid 30921:tid 30935] [client 68.221.137.197:43186] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "adGg72FGQVn8Q0ueB26akAAAAQw"]
[Sun Apr 05 07:38:23.916864 2026] [:error] [pid 45305:tid 45384] [client 68.221.137.197:43191] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "adGg7-jDQjr7aWhjflBrrwAAAI0"]
[Sun Apr 05 07:38:26.167115 2026] [:error] [pid 45304:tid 45367] [client 68.221.137.197:44038] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "adGg8g5jnqDKKovdRkkjowAAAFc"]
[Sun Apr 05 07:38:28.841653 2026] [:error] [pid 45305:tid 45386] [client 68.221.137.197:28973] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "adGg9OjDQjr7aWhjflBrvAAAAI8"]
[Sun Apr 05 07:38:30.604767 2026] [:error] [pid 30921:tid 30924] [client 68.221.137.197:44058] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/HLA-dd.php"] [unique_id "adGg9mFGQVn8Q0ueB26anAAAAQE"]
[Sun Apr 05 07:38:33.775320 2026] [:error] [pid 45303:tid 45324] [client 68.221.137.197:40826] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/HLA-dd.php"] [unique_id "adGg-bboQ9eViZ4hdnmmvgAAAAc"]
[Sun Apr 05 07:38:35.487307 2026] [:error] [pid 45305:tid 45378] [client 68.221.137.197:44093] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/HLA-dd.php"] [unique_id "adGg--jDQjr7aWhjflBr4gAAAIc"]
[Sun Apr 05 07:38:37.618338 2026] [:error] [pid 45409:tid 45433] [client 68.221.137.197:28941] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/HLA-dd.php"] [unique_id "adGg_dHt_Oyw03gjCNgJPQAAANY"]
[Sun Apr 05 07:38:39.418511 2026] [:error] [pid 45305:tid 45390] [client 68.221.137.197:43657] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsc.php"] [unique_id "adGg_-jDQjr7aWhjflBr-QAAAJM"]
[Sun Apr 05 07:38:40.676570 2026] [:error] [pid 45305:tid 45389] [client 68.221.137.197:35472] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wsc.php"] [unique_id "adGhAOjDQjr7aWhjflBsBAAAAJI"]
[Sun Apr 05 07:38:45.376322 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 68.221.137.197:48047] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:45.633679 2026] [proxy_fcgi:error] [pid 45409:tid 45412] [client 68.221.137.197:48047] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:45.877923 2026] [proxy_fcgi:error] [pid 45409:tid 45419] [client 68.221.137.197:48047] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:46.132528 2026] [proxy_fcgi:error] [pid 45409:tid 45432] [client 68.221.137.197:48047] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:46.373605 2026] [proxy_fcgi:error] [pid 45409:tid 45415] [client 68.221.137.197:48047] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:45.033602 2026] [proxy_fcgi:error] [pid 45304:tid 45352] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:45.276804 2026] [proxy_fcgi:error] [pid 45304:tid 45367] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:45.752546 2026] [proxy_fcgi:error] [pid 45304:tid 45351] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:46.015275 2026] [proxy_fcgi:error] [pid 45304:tid 45344] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:46.258476 2026] [proxy_fcgi:error] [pid 45304:tid 45350] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:46.502993 2026] [proxy_fcgi:error] [pid 45304:tid 45348] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:46.913649 2026] [proxy_fcgi:error] [pid 45304:tid 45354] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:47.174965 2026] [proxy_fcgi:error] [pid 45304:tid 45361] [client 68.221.137.197:13748] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:56:48.695898 2026] [:error] [pid 45304:tid 45360] [client 68.221.137.197:13748] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "adGlQA5jnqDKKovdRkkoewAAAFA"]
[Sun Apr 05 07:56:49.806680 2026] [:error] [pid 45409:tid 45416] [client 68.221.137.197:50312] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "adGlQdHt_Oyw03gjCNgRyQAAAMU"]
[Sun Apr 05 07:56:51.077630 2026] [:error] [pid 45409:tid 45423] [client 68.221.137.197:36588] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "adGlQ9Ht_Oyw03gjCNgRzgAAAMw"]
[Sun Apr 05 07:56:53.031409 2026] [:error] [pid 45305:tid 45395] [client 68.221.137.197:1788] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "adGlRejDQjr7aWhjflB4mAAAAJg"]
[Sun Apr 05 07:56:58.108283 2026] [:error] [pid 30921:tid 30929] [client 68.221.137.197:30261] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "adGlSmFGQVn8Q0ueB26hDwAAAQY"]
[Sun Apr 05 07:56:59.639455 2026] [:error] [pid 45409:tid 45430] [client 68.221.137.197:1786] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "adGlS9Ht_Oyw03gjCNgR1wAAANM"]
[Sun Apr 05 07:57:02.630767 2026] [:error] [pid 30921:tid 30940] [client 68.221.137.197:14405] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "adGlTmFGQVn8Q0ueB26hFwAAARE"]
[Sun Apr 05 07:57:05.259329 2026] [:error] [pid 30921:tid 30927] [client 68.221.137.197:15861] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "adGlUWFGQVn8Q0ueB26hHQAAAQQ"]
[Sun Apr 05 07:57:10.671026 2026] [:error] [pid 45409:tid 45414] [client 68.221.137.197:14431] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGlVtHt_Oyw03gjCNgR7wAAAMM"]
[Sun Apr 05 07:57:13.648164 2026] [:error] [pid 45303:tid 45324] [client 68.221.137.197:35220] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGlWbboQ9eViZ4hdnmsUwAAAAc"]
[Sun Apr 05 07:57:19.094423 2026] [:error] [pid 45305:tid 45381] [client 68.221.137.197:35211] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGlX-jDQjr7aWhjflB4vgAAAIo"]
[Sun Apr 05 07:57:23.839656 2026] [:error] [pid 45305:tid 45374] [client 68.221.137.197:10073] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGlY-jDQjr7aWhjflB4zAAAAIM"]
[Sun Apr 05 07:57:28.633868 2026] [:error] [pid 45409:tid 45419] [client 68.221.137.197:59303] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGlaNHt_Oyw03gjCNgSDQAAAMg"]
[Sun Apr 05 07:57:37.346526 2026] [:error] [pid 45409:tid 45435] [client 68.221.137.197:1398] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGlcdHt_Oyw03gjCNgSGgAAANg"]
[Sun Apr 05 07:57:43.871629 2026] [:error] [pid 45305:tid 45378] [client 68.221.137.197:10806] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGld-jDQjr7aWhjflB48QAAAIc"]
[Sun Apr 05 07:57:48.070621 2026] [proxy_fcgi:error] [pid 30921:tid 30945] [client 68.221.137.197:60814] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:57:48.314381 2026] [proxy_fcgi:error] [pid 30921:tid 30934] [client 68.221.137.197:60814] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:57:48.556835 2026] [proxy_fcgi:error] [pid 30921:tid 30941] [client 68.221.137.197:60814] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:57:48.799451 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 68.221.137.197:60814] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:57:49.041713 2026] [proxy_fcgi:error] [pid 30921:tid 30926] [client 68.221.137.197:60814] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:57:49.284609 2026] [proxy_fcgi:error] [pid 30921:tid 30943] [client 68.221.137.197:60814] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:57:49.524538 2026] [:error] [pid 30921:tid 30923] [client 68.221.137.197:60814] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "adGlfWFGQVn8Q0ueB26hWgAAAQA"]
[Sun Apr 05 07:57:55.441836 2026] [:error] [pid 30921:tid 30926] [client 68.221.137.197:1631] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "adGlg2FGQVn8Q0ueB26hZwAAAQM"]
[Sun Apr 05 07:57:57.751141 2026] [:error] [pid 30921:tid 30941] [client 68.221.137.197:59305] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "adGlhWFGQVn8Q0ueB26hcgAAARI"]
[Sun Apr 05 07:58:03.921948 2026] [:error] [pid 45409:tid 45425] [client 68.221.137.197:10435] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "adGli9Ht_Oyw03gjCNgSVAAAAM4"]
[Sun Apr 05 07:58:07.233690 2026] [:error] [pid 45304:tid 45357] [client 68.221.137.197:35152] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dczem.php"] [unique_id "adGljw5jnqDKKovdRkkovAAAAE0"]
[Sun Apr 05 07:58:12.076748 2026] [:error] [pid 45409:tid 45426] [client 68.221.137.197:14110] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dczem.php"] [unique_id "adGllNHt_Oyw03gjCNgSaAAAAM8"]
[Sun Apr 05 07:58:15.919101 2026] [:error] [pid 45305:tid 45374] [client 68.221.137.197:9531] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dczem.php"] [unique_id "adGll-jDQjr7aWhjflB5PQAAAIM"]
[Sun Apr 05 07:58:17.572546 2026] [:error] [pid 45409:tid 45421] [client 68.221.137.197:10799] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dczem.php"] [unique_id "adGlmdHt_Oyw03gjCNgSbwAAAMo"]
[Sun Apr 05 07:58:20.655149 2026] [:error] [pid 45303:tid 45319] [client 68.221.137.197:33697] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albrt.php"] [unique_id "adGlnLboQ9eViZ4hdnmskAAAAAI"]
[Sun Apr 05 07:58:22.533054 2026] [:error] [pid 45303:tid 45326] [client 68.221.137.197:64193] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albrt.php"] [unique_id "adGlnrboQ9eViZ4hdnmskwAAAAk"]
[Sun Apr 05 07:58:24.877409 2026] [:error] [pid 45305:tid 45377] [client 68.221.137.197:15634] [client 68.221.137.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albrt.php"] [unique_id "adGloOjDQjr7aWhjflB5WgAAAIY"]
[Sun Apr 05 08:28:53.013014 2026] [proxy_fcgi:error] [pid 45409:tid 45434] [client 74.234.80.3:5181] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:28:53.265608 2026] [proxy_fcgi:error] [pid 45409:tid 45418] [client 74.234.80.3:5181] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:28:53.519619 2026] [proxy_fcgi:error] [pid 45409:tid 45412] [client 74.234.80.3:5181] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:28:53.774725 2026] [proxy_fcgi:error] [pid 45409:tid 45433] [client 74.234.80.3:5181] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:28:54.028463 2026] [proxy_fcgi:error] [pid 45409:tid 45411] [client 74.234.80.3:5181] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:28:54.289308 2026] [:error] [pid 45409:tid 45432] [client 74.234.80.3:5181] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "adGsxtHt_Oyw03gjCNgkBgAAANU"]
[Sun Apr 05 08:29:01.963361 2026] [:error] [pid 45409:tid 45432] [client 74.234.80.3:34123] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "adGszdHt_Oyw03gjCNgkGAAAANU"]
[Sun Apr 05 08:29:03.964406 2026] [:error] [pid 45305:tid 45372] [client 74.234.80.3:34159] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "adGsz-jDQjr7aWhjflCSowAAAIE"]
[Sun Apr 05 08:29:09.924490 2026] [:error] [pid 45303:tid 45337] [client 74.234.80.3:35839] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "adGs1bboQ9eViZ4hdnm2DAAAABQ"]
[Sun Apr 05 08:29:13.521628 2026] [:error] [pid 45305:tid 45395] [client 74.234.80.3:35792] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "adGs2ejDQjr7aWhjflCSpQAAAJg"]
[Sun Apr 05 08:29:17.773818 2026] [:error] [pid 45305:tid 45374] [client 74.234.80.3:34174] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "adGs3ejDQjr7aWhjflCSqQAAAIM"]
[Sun Apr 05 08:29:19.213295 2026] [:error] [pid 45305:tid 45394] [client 74.234.80.3:5482] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "adGs3-jDQjr7aWhjflCSuAAAAJc"]
[Sun Apr 05 08:29:21.853546 2026] [:error] [pid 45409:tid 45429] [client 74.234.80.3:35806] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "adGs4dHt_Oyw03gjCNgkQwAAANI"]
[Sun Apr 05 08:29:26.470775 2026] [:error] [pid 30921:tid 30941] [client 74.234.80.3:18219] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxc.php"] [unique_id "adGs5mFGQVn8Q0ueB26tCgAAARI"]
[Sun Apr 05 08:29:35.263304 2026] [:error] [pid 45303:tid 45336] [client 74.234.80.3:33840] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxc.php"] [unique_id "adGs77boQ9eViZ4hdnm2JwAAABM"]
[Sun Apr 05 08:29:40.834467 2026] [:error] [pid 45303:tid 45331] [client 74.234.80.3:5501] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "adGs9LboQ9eViZ4hdnm2LgAAAA4"]
[Sun Apr 05 08:30:14.264179 2026] [:error] [pid 45304:tid 45363] [client 74.234.80.3:5183] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGtFg5jnqDKKovdRkkwvgAAAFM"]
[Sun Apr 05 08:30:20.257833 2026] [:error] [pid 30921:tid 30937] [client 74.234.80.3:41075] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGtHGFGQVn8Q0ueB26tXgAAAQ4"]
[Sun Apr 05 08:30:21.174213 2026] [:error] [pid 30921:tid 30942] [client 74.234.80.3:25277] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGtHWFGQVn8Q0ueB26tYQAAARM"]
[Sun Apr 05 08:30:25.013898 2026] [:error] [pid 45304:tid 45345] [client 74.234.80.3:31057] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55l453.php"] [unique_id "adGtIQ5jnqDKKovdRkkw0gAAAEE"]
[Sun Apr 05 08:30:34.507928 2026] [:error] [pid 45409:tid 45427] [client 74.234.80.3:5474] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGtKtHt_Oyw03gjCNgk0AAAANA"]
[Sun Apr 05 08:30:38.304450 2026] [:error] [pid 30921:tid 30928] [client 74.234.80.3:31060] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adGtLmFGQVn8Q0ueB26tgwAAAQU"]
[Sun Apr 05 08:30:45.201905 2026] [:error] [pid 45305:tid 45374] [client 74.234.80.3:53118] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGtNejDQjr7aWhjflCTkgAAAIM"]
[Sun Apr 05 08:30:50.546716 2026] [:error] [pid 30921:tid 30944] [client 74.234.80.3:33821] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGtOmFGQVn8Q0ueB26tmQAAARU"]
[Sun Apr 05 08:30:54.803251 2026] [:error] [pid 45305:tid 45384] [client 74.234.80.3:41063] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "adGtPujDQjr7aWhjflCTpgAAAI0"]
[Sun Apr 05 08:31:38.951912 2026] [proxy_fcgi:error] [pid 30921:tid 30943] [client 74.234.80.3:6105] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:31:39.207031 2026] [proxy_fcgi:error] [pid 30921:tid 30932] [client 74.234.80.3:6105] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:31:39.470778 2026] [proxy_fcgi:error] [pid 30921:tid 30944] [client 74.234.80.3:6105] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:31:39.723985 2026] [proxy_fcgi:error] [pid 30921:tid 30929] [client 74.234.80.3:6105] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:31:39.980780 2026] [proxy_fcgi:error] [pid 30921:tid 30935] [client 74.234.80.3:6105] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:31:40.261576 2026] [proxy_fcgi:error] [pid 30921:tid 30931] [client 74.234.80.3:6105] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:20:15.049667 2026] [proxy_fcgi:error] [pid 45409:tid 45411] [client 20.89.241.241:20796] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:20:15.172263 2026] [proxy_fcgi:error] [pid 45409:tid 45434] [client 20.89.241.241:20796] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:20:15.543786 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 20.89.241.241:20796] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:20:15.668301 2026] [proxy_fcgi:error] [pid 45409:tid 45422] [client 20.89.241.241:20796] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:20:16.174005 2026] [proxy_fcgi:error] [pid 45409:tid 45414] [client 20.89.241.241:20796] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:20:16.420457 2026] [:error] [pid 45409:tid 45429] [client 20.89.241.241:20796] [client 20.89.241.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "adHG4NHt_Oyw03gjCNhiLQAAANI"]
[Sun Apr 05 10:20:16.925671 2026] [:error] [pid 45305:tid 45390] [client 20.89.241.241:24458] [client 20.89.241.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "adHG4OjDQjr7aWhjflDqFwAAAJM"]
[Sun Apr 05 10:20:17.433477 2026] [:error] [pid 45409:tid 45433] [client 20.89.241.241:14800] [client 20.89.241.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "adHG4dHt_Oyw03gjCNhiNAAAANY"]
[Sun Apr 05 10:20:17.918847 2026] [:error] [pid 45303:tid 45329] [client 20.89.241.241:22942] [client 20.89.241.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "adHG4bboQ9eViZ4hdnnbKgAAAAw"]
[Sun Apr 05 11:57:57.451641 2026] [proxy_fcgi:error] [pid 45303:tid 45332] [client 20.199.97.195:34560] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:48.581504 2026] [proxy_fcgi:error] [pid 30921:tid 30946] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:48.837901 2026] [proxy_fcgi:error] [pid 30921:tid 30926] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:49.077778 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:49.318988 2026] [proxy_fcgi:error] [pid 30921:tid 30923] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:49.588699 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:49.914850 2026] [proxy_fcgi:error] [pid 30921:tid 30924] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:50.155097 2026] [proxy_fcgi:error] [pid 30921:tid 30928] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:50.395009 2026] [proxy_fcgi:error] [pid 30921:tid 30947] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:50.636386 2026] [proxy_fcgi:error] [pid 30921:tid 30936] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:50.877805 2026] [proxy_fcgi:error] [pid 30921:tid 30943] [client 20.199.99.25:12669] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:09:51.113550 2026] [:error] [pid 30921:tid 30931] [client 20.199.99.25:12669] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adHgj2FGQVn8Q0ueB24QagAAAQg"]
[Sun Apr 05 12:09:51.759730 2026] [:error] [pid 45305:tid 45391] [client 20.199.99.25:13318] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adHgj-jDQjr7aWhjflBI0QAAAJQ"]
[Sun Apr 05 12:09:52.649424 2026] [:error] [pid 45305:tid 45394] [client 20.199.99.25:61839] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adHgkOjDQjr7aWhjflBI2QAAAJc"]
[Sun Apr 05 12:09:53.205457 2026] [:error] [pid 45305:tid 45392] [client 20.199.99.25:37263] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adHgkejDQjr7aWhjflBI3QAAAJU"]
[Sun Apr 05 12:09:53.710306 2026] [:error] [pid 45305:tid 45374] [client 20.199.99.25:30130] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adHgkejDQjr7aWhjflBI5QAAAIM"]
[Sun Apr 05 12:09:54.260345 2026] [:error] [pid 45305:tid 45384] [client 20.199.99.25:23817] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adHgkujDQjr7aWhjflBI6AAAAI0"]
[Sun Apr 05 12:09:54.758576 2026] [:error] [pid 45409:tid 45433] [client 20.199.99.25:40199] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adHgktHt_Oyw03gjCNioJQAAANY"]
[Sun Apr 05 12:09:55.348467 2026] [:error] [pid 45303:tid 45321] [client 20.199.99.25:22083] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adHgk7boQ9eViZ4hdnkElwAAAAQ"]
[Sun Apr 05 12:09:55.844056 2026] [:error] [pid 45409:tid 45411] [client 20.199.99.25:7549] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "adHgk9Ht_Oyw03gjCNioJwAAAMA"]
[Sun Apr 05 12:09:56.340646 2026] [:error] [pid 30921:tid 30929] [client 20.199.99.25:7513] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "adHglGFGQVn8Q0ueB24QcQAAAQY"]
[Sun Apr 05 12:09:56.876285 2026] [:error] [pid 45409:tid 45425] [client 20.199.99.25:61847] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "adHglNHt_Oyw03gjCNioKgAAAM4"]
[Sun Apr 05 12:09:57.640195 2026] [:error] [pid 30921:tid 30931] [client 20.199.99.25:7505] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "adHglWFGQVn8Q0ueB24QdQAAAQg"]
[Sun Apr 05 12:09:58.400675 2026] [:error] [pid 45409:tid 45415] [client 20.199.99.25:12632] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHgltHt_Oyw03gjCNioLAAAAMQ"]
[Sun Apr 05 12:09:58.936036 2026] [:error] [pid 30921:tid 30940] [client 20.199.99.25:2846] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHglmFGQVn8Q0ueB24QegAAARE"]
[Sun Apr 05 12:09:59.541278 2026] [:error] [pid 45409:tid 45424] [client 20.199.99.25:13358] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHgl9Ht_Oyw03gjCNioLwAAAM0"]
[Sun Apr 05 12:10:00.946536 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:23065] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHgmNHt_Oyw03gjCNioNQAAAMM"]
[Sun Apr 05 12:10:02.358786 2026] [:error] [pid 30921:tid 30931] [client 20.199.99.25:20740] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "adHgmmFGQVn8Q0ueB24QhAAAAQg"]
[Sun Apr 05 12:10:03.318638 2026] [:error] [pid 45409:tid 45422] [client 20.199.99.25:23060] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "adHgm9Ht_Oyw03gjCNioQgAAAMs"]
[Sun Apr 05 12:10:03.984925 2026] [:error] [pid 45304:tid 45344] [client 20.199.99.25:12095] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "adHgmw5jnqDKKovdRkl0XwAAAEA"]
[Sun Apr 05 12:10:04.807720 2026] [:error] [pid 45305:tid 45378] [client 20.199.99.25:40171] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "adHgnOjDQjr7aWhjflBJDgAAAIc"]
[Sun Apr 05 12:10:05.589150 2026] [:error] [pid 45305:tid 45380] [client 20.199.99.25:2821] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHgnejDQjr7aWhjflBJGAAAAIk"]
[Sun Apr 05 12:10:06.657679 2026] [:error] [pid 45305:tid 45371] [client 20.199.99.25:61833] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHgnujDQjr7aWhjflBJHwAAAIA"]
[Sun Apr 05 12:10:07.852403 2026] [:error] [pid 45409:tid 45417] [client 20.199.99.25:12654] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHgn9Ht_Oyw03gjCNioTgAAAMY"]
[Sun Apr 05 12:10:10.726422 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:12635] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHgotHt_Oyw03gjCNioXQAAAMM"]
[Sun Apr 05 12:10:11.576029 2026] [:error] [pid 45303:tid 45318] [client 20.199.99.25:12043] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adHgo7boQ9eViZ4hdnkEugAAAAE"]
[Sun Apr 05 12:10:12.734374 2026] [:error] [pid 30921:tid 30947] [client 20.199.99.25:19099] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adHgpGFGQVn8Q0ueB24QjgAAARg"]
[Sun Apr 05 12:10:13.584149 2026] [:error] [pid 45305:tid 45376] [client 20.199.99.25:22100] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adHgpejDQjr7aWhjflBJQAAAAIU"]
[Sun Apr 05 12:10:14.415029 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:22141] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adHgptHt_Oyw03gjCNioaAAAAMM"]
[Sun Apr 05 12:10:15.056331 2026] [:error] [pid 45409:tid 45413] [client 20.199.99.25:23088] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHgp9Ht_Oyw03gjCNioawAAAMI"]
[Sun Apr 05 12:10:15.582655 2026] [:error] [pid 30921:tid 30926] [client 20.199.99.25:13330] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHgp2FGQVn8Q0ueB24QkAAAAQM"]
[Sun Apr 05 12:10:16.100857 2026] [:error] [pid 45304:tid 45367] [client 20.199.99.25:39153] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHgqA5jnqDKKovdRkl0cAAAAFc"]
[Sun Apr 05 12:10:16.758047 2026] [:error] [pid 45409:tid 45411] [client 20.199.99.25:34897] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHgqNHt_Oyw03gjCNiodAAAAMA"]
[Sun Apr 05 12:10:17.646157 2026] [:error] [pid 45303:tid 45334] [client 20.199.99.25:34898] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "adHgqbboQ9eViZ4hdnkEzwAAABE"]
[Sun Apr 05 12:10:20.398340 2026] [:error] [pid 30921:tid 30928] [client 20.199.99.25:2865] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "adHgrGFGQVn8Q0ueB24QmgAAAQU"]
[Sun Apr 05 12:10:23.322816 2026] [:error] [pid 45409:tid 45429] [client 20.199.99.25:23097] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "adHgr9Ht_Oyw03gjCNiohgAAANI"]
[Sun Apr 05 12:10:25.298444 2026] [:error] [pid 45305:tid 45376] [client 20.199.99.25:5476] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "adHgsejDQjr7aWhjflBJZgAAAIU"]
[Sun Apr 05 12:10:27.141841 2026] [:error] [pid 45304:tid 45362] [client 20.199.99.25:20755] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adHgsw5jnqDKKovdRkl0hwAAAFI"]
[Sun Apr 05 12:10:28.417759 2026] [:error] [pid 45303:tid 45321] [client 20.199.99.25:12042] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adHgtLboQ9eViZ4hdnkE4gAAAAQ"]
[Sun Apr 05 12:10:30.759854 2026] [:error] [pid 30921:tid 30936] [client 20.199.99.25:12050] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adHgtmFGQVn8Q0ueB24QpwAAAQ0"]
[Sun Apr 05 12:10:31.883097 2026] [:error] [pid 30921:tid 30938] [client 20.199.99.25:12670] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adHgt2FGQVn8Q0ueB24QqAAAAQ8"]
[Sun Apr 05 12:10:33.393754 2026] [:error] [pid 45409:tid 45422] [client 20.199.99.25:22441] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adHgudHt_Oyw03gjCNiopQAAAMs"]
[Sun Apr 05 12:10:34.537392 2026] [:error] [pid 45304:tid 45350] [client 20.199.99.25:14634] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adHgug5jnqDKKovdRkl0lAAAAEY"]
[Sun Apr 05 12:10:35.345770 2026] [:error] [pid 45303:tid 45319] [client 20.199.99.25:27372] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adHgu7boQ9eViZ4hdnkE9wAAAAI"]
[Sun Apr 05 12:10:36.628400 2026] [:error] [pid 45409:tid 45425] [client 20.199.99.25:20763] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adHgvNHt_Oyw03gjCNiorwAAAM4"]
[Sun Apr 05 12:10:37.354936 2026] [:error] [pid 45304:tid 45352] [client 20.199.99.25:61845] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "adHgvQ5jnqDKKovdRkl0lQAAAEg"]
[Sun Apr 05 12:10:38.429901 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:20753] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "adHgvujDQjr7aWhjflBJjgAAAJg"]
[Sun Apr 05 12:10:39.464591 2026] [:error] [pid 45409:tid 45417] [client 20.199.99.25:22412] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "adHgv9Ht_Oyw03gjCNiotQAAAMY"]
[Sun Apr 05 12:10:41.299414 2026] [:error] [pid 45409:tid 45411] [client 20.199.99.25:20793] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "adHgwdHt_Oyw03gjCNiovAAAAMA"]
[Sun Apr 05 12:10:42.464867 2026] [:error] [pid 30921:tid 30938] [client 20.199.99.25:61877] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "adHgwmFGQVn8Q0ueB24QswAAAQ8"]
[Sun Apr 05 12:10:43.668564 2026] [:error] [pid 45409:tid 45422] [client 20.199.99.25:13322] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "adHgw9Ht_Oyw03gjCNiozQAAAMs"]
[Sun Apr 05 12:10:45.082280 2026] [:error] [pid 45305:tid 45387] [client 20.199.99.25:12076] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "adHgxejDQjr7aWhjflBJoAAAAJA"]
[Sun Apr 05 12:10:45.988838 2026] [:error] [pid 45305:tid 45385] [client 20.199.99.25:22429] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "adHgxejDQjr7aWhjflBJpgAAAI4"]
[Sun Apr 05 12:10:47.347057 2026] [:error] [pid 45303:tid 45327] [client 20.199.99.25:34937] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "adHgx7boQ9eViZ4hdnkFEAAAAAo"]
[Sun Apr 05 12:10:48.832672 2026] [:error] [pid 45305:tid 45377] [client 20.199.99.25:20457] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "adHgyOjDQjr7aWhjflBJsAAAAIY"]
[Sun Apr 05 12:10:50.026974 2026] [proxy_fcgi:error] [pid 45303:tid 45334] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:50.304851 2026] [proxy_fcgi:error] [pid 45303:tid 45333] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:50.545865 2026] [proxy_fcgi:error] [pid 45303:tid 45335] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:50.789493 2026] [proxy_fcgi:error] [pid 45303:tid 45323] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:51.030546 2026] [proxy_fcgi:error] [pid 45303:tid 45317] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:51.295627 2026] [proxy_fcgi:error] [pid 45303:tid 45322] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:51.536286 2026] [proxy_fcgi:error] [pid 45303:tid 45332] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:51.806998 2026] [proxy_fcgi:error] [pid 45303:tid 45319] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:52.054633 2026] [proxy_fcgi:error] [pid 45303:tid 45329] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:52.299049 2026] [proxy_fcgi:error] [pid 45303:tid 45318] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:52.539648 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 20.199.99.25:13369] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:10:52.776582 2026] [:error] [pid 45303:tid 45328] [client 20.199.99.25:13369] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "adHgzLboQ9eViZ4hdnkFIgAAAAs"]
[Sun Apr 05 12:10:53.532432 2026] [:error] [pid 45409:tid 45416] [client 20.199.99.25:13105] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "adHgzdHt_Oyw03gjCNio6gAAAMU"]
[Sun Apr 05 12:10:54.267452 2026] [:error] [pid 45409:tid 45434] [client 20.199.99.25:13105] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "adHgztHt_Oyw03gjCNio6wAAANc"]
[Sun Apr 05 12:10:54.855282 2026] [:error] [pid 45304:tid 45365] [client 20.199.99.25:14614] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "adHgzg5jnqDKKovdRkl0pQAAAFU"]
[Sun Apr 05 12:10:55.762998 2026] [:error] [pid 45304:tid 45359] [client 20.199.99.25:9984] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHgzw5jnqDKKovdRkl0pwAAAE8"]
[Sun Apr 05 12:10:56.664582 2026] [:error] [pid 45304:tid 45356] [client 20.199.99.25:27342] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHg0A5jnqDKKovdRkl0qgAAAEw"]
[Sun Apr 05 12:10:57.468672 2026] [:error] [pid 45304:tid 45346] [client 20.199.99.25:5451] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHg0Q5jnqDKKovdRkl0sQAAAEI"]
[Sun Apr 05 12:10:58.484401 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:19162] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHg0ujDQjr7aWhjflBJxgAAAJg"]
[Sun Apr 05 12:10:59.159299 2026] [:error] [pid 45304:tid 45350] [client 20.199.99.25:22402] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "adHg0w5jnqDKKovdRkl0tgAAAEY"]
[Sun Apr 05 12:11:00.306272 2026] [:error] [pid 45305:tid 45388] [client 20.199.99.25:22408] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "adHg1OjDQjr7aWhjflBJygAAAJE"]
[Sun Apr 05 12:11:02.376037 2026] [:error] [pid 45409:tid 45429] [client 20.199.99.25:9061] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "adHg1tHt_Oyw03gjCNipBAAAANI"]
[Sun Apr 05 12:11:04.650478 2026] [:error] [pid 45305:tid 45381] [client 20.199.99.25:2056] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "adHg2OjDQjr7aWhjflBJ1QAAAIo"]
[Sun Apr 05 12:11:06.631750 2026] [:error] [pid 30921:tid 30931] [client 20.199.99.25:17290] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adHg2mFGQVn8Q0ueB24Q1QAAAQg"]
[Sun Apr 05 12:11:07.709169 2026] [:error] [pid 30921:tid 30938] [client 20.199.99.25:39657] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adHg22FGQVn8Q0ueB24Q2QAAAQ8"]
[Sun Apr 05 12:11:09.413396 2026] [:error] [pid 30921:tid 30926] [client 20.199.99.25:6171] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adHg3WFGQVn8Q0ueB24Q4AAAAQM"]
[Sun Apr 05 12:11:10.016468 2026] [:error] [pid 45304:tid 45358] [client 20.199.99.25:60233] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adHg3g5jnqDKKovdRkl0zQAAAE4"]
[Sun Apr 05 12:11:12.109099 2026] [:error] [pid 30921:tid 30934] [client 20.199.99.25:19515] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adHg4GFGQVn8Q0ueB24Q4gAAAQs"]
[Sun Apr 05 12:11:13.280930 2026] [:error] [pid 45409:tid 45424] [client 20.199.99.25:6774] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adHg4dHt_Oyw03gjCNipJAAAAM0"]
[Sun Apr 05 12:11:14.555510 2026] [:error] [pid 45305:tid 45392] [client 20.199.99.25:32891] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adHg4ujDQjr7aWhjflBKAQAAAJU"]
[Sun Apr 05 12:11:15.409553 2026] [:error] [pid 45305:tid 45382] [client 20.199.99.25:61818] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adHg4-jDQjr7aWhjflBKBgAAAIs"]
[Sun Apr 05 12:11:16.089107 2026] [:error] [pid 45303:tid 45334] [client 20.199.99.25:53666] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "adHg5LboQ9eViZ4hdnkFPgAAABE"]
[Sun Apr 05 12:11:17.038442 2026] [:error] [pid 45305:tid 45381] [client 20.199.99.25:53639] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "adHg5ejDQjr7aWhjflBKDAAAAIo"]
[Sun Apr 05 12:11:17.738673 2026] [:error] [pid 45304:tid 45347] [client 20.199.99.25:37233] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "adHg5Q5jnqDKKovdRkl01gAAAEM"]
[Sun Apr 05 12:11:18.360904 2026] [:error] [pid 45303:tid 45335] [client 20.199.99.25:8711] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "adHg5rboQ9eViZ4hdnkFRAAAABI"]
[Sun Apr 05 12:11:19.127741 2026] [:error] [pid 45305:tid 45391] [client 20.199.99.25:11119] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "adHg5-jDQjr7aWhjflBKDgAAAJQ"]
[Sun Apr 05 12:11:20.165376 2026] [:error] [pid 45303:tid 45320] [client 20.199.99.25:13404] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "adHg6LboQ9eViZ4hdnkFRwAAAAM"]
[Sun Apr 05 12:11:21.683726 2026] [:error] [pid 45409:tid 45434] [client 20.199.99.25:53030] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "adHg6dHt_Oyw03gjCNipPgAAANc"]
[Sun Apr 05 12:11:22.542295 2026] [:error] [pid 45305:tid 45378] [client 20.199.99.25:13406] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "adHg6ujDQjr7aWhjflBKFQAAAIc"]
[Sun Apr 05 12:11:24.191045 2026] [:error] [pid 45303:tid 45328] [client 20.199.99.25:13900] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "adHg7LboQ9eViZ4hdnkFVAAAAAs"]
[Sun Apr 05 12:11:25.329120 2026] [:error] [pid 45409:tid 45430] [client 20.199.99.25:38523] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "adHg7dHt_Oyw03gjCNipSgAAANM"]
[Sun Apr 05 12:11:26.715438 2026] [:error] [pid 45305:tid 45372] [client 20.199.99.25:53642] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "adHg7ujDQjr7aWhjflBKGwAAAIE"]
[Sun Apr 05 12:11:28.098162 2026] [:error] [pid 45303:tid 45318] [client 20.199.99.25:5227] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gpt-sh.php"] [unique_id "adHg8LboQ9eViZ4hdnkFYgAAAAE"]
[Sun Apr 05 12:11:29.949860 2026] [:error] [pid 45304:tid 45355] [client 20.199.99.25:2130] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHg8Q5jnqDKKovdRkl05wAAAEs"]
[Sun Apr 05 12:11:34.024452 2026] [:error] [pid 45305:tid 45389] [client 20.199.99.25:13607] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHg9ujDQjr7aWhjflBKNwAAAJI"]
[Sun Apr 05 12:11:35.522015 2026] [:error] [pid 45304:tid 45366] [client 20.199.99.25:2956] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHg9w5jnqDKKovdRkl06wAAAFY"]
[Sun Apr 05 12:11:37.384197 2026] [:error] [pid 30921:tid 30945] [client 20.199.99.25:36456] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHg-WFGQVn8Q0ueB24REQAAARY"]
[Sun Apr 05 12:11:38.980044 2026] [:error] [pid 45304:tid 45353] [client 20.199.99.25:27325] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adHg-g5jnqDKKovdRkl07gAAAEk"]
[Sun Apr 05 12:11:39.836062 2026] [:error] [pid 45409:tid 45420] [client 20.199.99.25:27985] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adHg-9Ht_Oyw03gjCNiprQAAAMk"]
[Sun Apr 05 12:11:40.514996 2026] [:error] [pid 45303:tid 45339] [client 20.199.99.25:13174] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adHg_LboQ9eViZ4hdnkFeAAAABY"]
[Sun Apr 05 12:11:41.638347 2026] [:error] [pid 45303:tid 45329] [client 20.199.99.25:14274] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adHg_bboQ9eViZ4hdnkFfgAAAAw"]
[Sun Apr 05 12:11:42.777297 2026] [:error] [pid 45303:tid 45327] [client 20.199.99.25:23470] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adHg_rboQ9eViZ4hdnkFhQAAAAo"]
[Sun Apr 05 12:11:43.392910 2026] [:error] [pid 45303:tid 45326] [client 20.199.99.25:2543] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adHg_7boQ9eViZ4hdnkFiAAAAAk"]
[Sun Apr 05 12:11:44.522932 2026] [:error] [pid 45305:tid 45377] [client 20.199.99.25:39716] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adHhAOjDQjr7aWhjflBKZAAAAIY"]
[Sun Apr 05 12:11:46.633491 2026] [:error] [pid 45303:tid 45338] [client 20.199.99.25:16188] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adHhArboQ9eViZ4hdnkFkwAAABU"]
[Sun Apr 05 12:11:48.069021 2026] [:error] [pid 30921:tid 30935] [client 20.199.99.25:8800] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adHhBGFGQVn8Q0ueB24RJAAAAQw"]
[Sun Apr 05 12:11:48.985547 2026] [:error] [pid 45303:tid 45327] [client 20.199.99.25:7841] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adHhBLboQ9eViZ4hdnkFpgAAAAo"]
[Sun Apr 05 12:11:51.453660 2026] [:error] [pid 45303:tid 45339] [client 20.199.99.25:2812] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adHhB7boQ9eViZ4hdnkFqAAAABY"]
[Sun Apr 05 12:11:53.037596 2026] [proxy_fcgi:error] [pid 45409:tid 45418] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:53.277297 2026] [proxy_fcgi:error] [pid 45409:tid 45423] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:53.516613 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:53.777732 2026] [proxy_fcgi:error] [pid 45409:tid 45411] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:54.016560 2026] [proxy_fcgi:error] [pid 45409:tid 45413] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:54.268441 2026] [proxy_fcgi:error] [pid 45409:tid 45414] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:54.528440 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:54.767982 2026] [proxy_fcgi:error] [pid 45409:tid 45421] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:55.028443 2026] [proxy_fcgi:error] [pid 45409:tid 45432] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:55.276786 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:55.516797 2026] [proxy_fcgi:error] [pid 45409:tid 45420] [client 20.199.99.25:34898] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:11:55.753424 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:34898] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "adHhC9Ht_Oyw03gjCNip2gAAANQ"]
[Sun Apr 05 12:11:56.724400 2026] [:error] [pid 45305:tid 45373] [client 20.199.99.25:7869] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "adHhDOjDQjr7aWhjflBK2gAAAII"]
[Sun Apr 05 12:11:57.901308 2026] [:error] [pid 45305:tid 45388] [client 20.199.99.25:7829] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "adHhDejDQjr7aWhjflBK4gAAAJE"]
[Sun Apr 05 12:11:58.575923 2026] [:error] [pid 45305:tid 45386] [client 20.199.99.25:7855] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "adHhDujDQjr7aWhjflBK5QAAAI8"]
[Sun Apr 05 12:11:59.242729 2026] [:error] [pid 45304:tid 45359] [client 20.199.99.25:59301] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adHhDw5jnqDKKovdRkl1BgAAAE8"]
[Sun Apr 05 12:12:00.007605 2026] [:error] [pid 45409:tid 45430] [client 20.199.99.25:23428] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adHhENHt_Oyw03gjCNip6AAAANM"]
[Sun Apr 05 12:12:00.814766 2026] [:error] [pid 45305:tid 45375] [client 20.199.99.25:39704] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adHhEOjDQjr7aWhjflBK8QAAAIQ"]
[Sun Apr 05 12:12:01.520700 2026] [:error] [pid 45304:tid 45348] [client 20.199.99.25:7845] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adHhEQ5jnqDKKovdRkl1CQAAAEQ"]
[Sun Apr 05 12:12:04.113587 2026] [:error] [pid 30921:tid 30947] [client 20.199.99.25:17926] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "adHhFGFGQVn8Q0ueB24ROwAAARg"]
[Sun Apr 05 12:12:07.313028 2026] [:error] [pid 45303:tid 45340] [client 20.199.99.25:37852] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "adHhF7boQ9eViZ4hdnkFugAAABc"]
[Sun Apr 05 12:12:08.471747 2026] [:error] [pid 45409:tid 45421] [client 20.199.99.25:18750] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "adHhGNHt_Oyw03gjCNip7gAAAMo"]
[Sun Apr 05 12:12:11.126533 2026] [:error] [pid 45305:tid 45376] [client 20.199.99.25:28003] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ta0ol.php"] [unique_id "adHhG-jDQjr7aWhjflBLGQAAAIU"]
[Sun Apr 05 12:12:13.625531 2026] [:error] [pid 30921:tid 30944] [client 20.199.99.25:17730] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "adHhHWFGQVn8Q0ueB24RTAAAARU"]
[Sun Apr 05 12:12:16.205652 2026] [:error] [pid 45409:tid 45421] [client 20.199.99.25:17930] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "adHhINHt_Oyw03gjCNiqBgAAAMo"]
[Sun Apr 05 12:12:17.799279 2026] [:error] [pid 45305:tid 45379] [client 20.199.99.25:9333] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "adHhIejDQjr7aWhjflBLNAAAAIg"]
[Sun Apr 05 12:12:18.501786 2026] [:error] [pid 45304:tid 45362] [client 20.199.99.25:9289] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "adHhIg5jnqDKKovdRkl1HQAAAFI"]
[Sun Apr 05 12:12:23.513000 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:22466] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHhJ9Ht_Oyw03gjCNiqGwAAAMM"]
[Sun Apr 05 12:12:27.328092 2026] [:error] [pid 45305:tid 45379] [client 20.199.99.25:17767] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHhK-jDQjr7aWhjflBLWAAAAIg"]
[Sun Apr 05 12:12:29.566332 2026] [:error] [pid 45409:tid 45411] [client 20.199.99.25:16915] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHhLdHt_Oyw03gjCNiqKgAAAMA"]
[Sun Apr 05 12:12:33.578698 2026] [:error] [pid 45305:tid 45379] [client 20.199.99.25:22033] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adHhMejDQjr7aWhjflBLZwAAAIg"]
[Sun Apr 05 12:12:38.115131 2026] [:error] [pid 45305:tid 45390] [client 20.199.99.25:17018] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "adHhNujDQjr7aWhjflBLeQAAAJM"]
[Sun Apr 05 12:12:40.441293 2026] [:error] [pid 45305:tid 45376] [client 20.199.99.25:59234] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "adHhOOjDQjr7aWhjflBLggAAAIU"]
[Sun Apr 05 12:12:43.359774 2026] [:error] [pid 45409:tid 45432] [client 20.199.99.25:37896] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "adHhO9Ht_Oyw03gjCNiqVAAAANU"]
[Sun Apr 05 12:12:44.559955 2026] [:error] [pid 30921:tid 30925] [client 20.199.99.25:37906] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "adHhPGFGQVn8Q0ueB24RpwAAAQI"]
[Sun Apr 05 12:12:50.348488 2026] [:error] [pid 45409:tid 45424] [client 20.199.99.25:7482] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "adHhQtHt_Oyw03gjCNiqxQAAAM0"]
[Sun Apr 05 12:12:55.724296 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:55.964545 2026] [proxy_fcgi:error] [pid 30921:tid 30947] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:56.221268 2026] [proxy_fcgi:error] [pid 30921:tid 30941] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:56.461160 2026] [proxy_fcgi:error] [pid 30921:tid 30934] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:56.724018 2026] [proxy_fcgi:error] [pid 30921:tid 30946] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:56.990449 2026] [proxy_fcgi:error] [pid 30921:tid 30933] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:57.251896 2026] [proxy_fcgi:error] [pid 30921:tid 30924] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:57.491293 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:57.729097 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:57.987406 2026] [proxy_fcgi:error] [pid 30921:tid 30947] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:59.149174 2026] [proxy_fcgi:error] [pid 30921:tid 30940] [client 20.199.99.25:12870] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:12:59.489665 2026] [:error] [pid 30921:tid 30941] [client 20.199.99.25:12870] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "adHhS2FGQVn8Q0ueB24R2wAAARI"]
[Sun Apr 05 12:13:00.819897 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:23521] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "adHhTOjDQjr7aWhjflBL_AAAAJg"]
[Sun Apr 05 12:13:02.461879 2026] [:error] [pid 30921:tid 30931] [client 20.199.99.25:16545] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "adHhTmFGQVn8Q0ueB24R4gAAAQg"]
[Sun Apr 05 12:13:03.575418 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:6257] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gfd.php"] [unique_id "adHhT9Ht_Oyw03gjCNirVwAAANQ"]
[Sun Apr 05 12:13:04.806532 2026] [:error] [pid 45305:tid 45391] [client 20.199.99.25:9523] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "adHhUOjDQjr7aWhjflBMIAAAAJQ"]
[Sun Apr 05 12:13:06.106729 2026] [:error] [pid 45305:tid 45379] [client 20.199.99.25:60967] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "adHhUujDQjr7aWhjflBMLQAAAIg"]
[Sun Apr 05 12:13:08.488344 2026] [:error] [pid 30921:tid 30937] [client 20.199.99.25:8564] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "adHhVGFGQVn8Q0ueB24R7QAAAQ4"]
[Sun Apr 05 12:13:09.469539 2026] [:error] [pid 45409:tid 45430] [client 20.199.99.25:12567] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "adHhVdHt_Oyw03gjCNirXgAAANM"]
[Sun Apr 05 12:13:10.721034 2026] [:error] [pid 45305:tid 45388] [client 20.199.99.25:60946] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adHhVujDQjr7aWhjflBMUQAAAJE"]
[Sun Apr 05 12:13:12.126888 2026] [:error] [pid 45305:tid 45392] [client 20.199.99.25:34446] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adHhWOjDQjr7aWhjflBMWgAAAJU"]
[Sun Apr 05 12:13:12.882551 2026] [:error] [pid 45305:tid 45376] [client 20.199.99.25:16561] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adHhWOjDQjr7aWhjflBMXgAAAIU"]
[Sun Apr 05 12:13:14.378384 2026] [:error] [pid 45303:tid 45318] [client 20.199.99.25:60945] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adHhWrboQ9eViZ4hdnkGKgAAAAE"]
[Sun Apr 05 12:13:15.441484 2026] [:error] [pid 45409:tid 45429] [client 20.199.99.25:12598] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adHhW9Ht_Oyw03gjCNircgAAANI"]
[Sun Apr 05 12:13:17.545858 2026] [:error] [pid 30921:tid 30946] [client 20.199.99.25:34451] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adHhXWFGQVn8Q0ueB24SBwAAARc"]
[Sun Apr 05 12:13:20.503408 2026] [:error] [pid 45409:tid 45434] [client 20.199.99.25:12135] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adHhYNHt_Oyw03gjCNirjAAAANc"]
[Sun Apr 05 12:13:22.417881 2026] [:error] [pid 45303:tid 45340] [client 20.199.99.25:48502] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adHhYrboQ9eViZ4hdnkGQgAAABc"]
[Sun Apr 05 12:13:23.191183 2026] [:error] [pid 30921:tid 30926] [client 20.199.99.25:12110] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "adHhY2FGQVn8Q0ueB24SGAAAAQM"]
[Sun Apr 05 12:13:24.478599 2026] [:error] [pid 45303:tid 45319] [client 20.199.99.25:12134] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "adHhZLboQ9eViZ4hdnkGRgAAAAI"]
[Sun Apr 05 12:13:25.561505 2026] [:error] [pid 45305:tid 45391] [client 20.199.99.25:9553] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "adHhZejDQjr7aWhjflBMewAAAJQ"]
[Sun Apr 05 12:13:26.364682 2026] [:error] [pid 45305:tid 45394] [client 20.199.99.25:29024] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "adHhZujDQjr7aWhjflBMfwAAAJc"]
[Sun Apr 05 12:13:27.643072 2026] [:error] [pid 45409:tid 45418] [client 20.199.99.25:28514] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/green.php"] [unique_id "adHhZ9Ht_Oyw03gjCNiroAAAAMc"]
[Sun Apr 05 12:13:28.629314 2026] [:error] [pid 45304:tid 45346] [client 20.199.99.25:9554] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/green.php"] [unique_id "adHhaA5jnqDKKovdRkl1bgAAAEI"]
[Sun Apr 05 12:13:29.367487 2026] [:error] [pid 45409:tid 45413] [client 20.199.99.25:12550] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/green.php"] [unique_id "adHhadHt_Oyw03gjCNirqwAAAMI"]
[Sun Apr 05 12:13:30.512320 2026] [:error] [pid 45305:tid 45374] [client 20.199.99.25:12148] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/green.php"] [unique_id "adHhaujDQjr7aWhjflBMjwAAAIM"]
[Sun Apr 05 12:13:31.193032 2026] [:error] [pid 45304:tid 45355] [client 20.199.99.25:29042] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "adHhaw5jnqDKKovdRkl1dAAAAEs"]
[Sun Apr 05 12:13:32.266763 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:34419] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "adHhbOjDQjr7aWhjflBMmwAAAJg"]
[Sun Apr 05 12:13:33.492003 2026] [:error] [pid 45305:tid 45381] [client 20.199.99.25:9564] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "adHhbejDQjr7aWhjflBMowAAAIo"]
[Sun Apr 05 12:13:35.635230 2026] [:error] [pid 45305:tid 45374] [client 20.199.99.25:53750] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "adHhb-jDQjr7aWhjflBMsgAAAIM"]
[Sun Apr 05 12:13:37.543648 2026] [:error] [pid 45409:tid 45432] [client 20.199.99.25:36488] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adHhcdHt_Oyw03gjCNiruwAAANU"]
[Sun Apr 05 12:13:38.772685 2026] [:error] [pid 45304:tid 45363] [client 20.199.99.25:14252] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adHhcg5jnqDKKovdRkl1gQAAAFM"]
[Sun Apr 05 12:13:39.938769 2026] [:error] [pid 45409:tid 45432] [client 20.199.99.25:28504] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adHhc9Ht_Oyw03gjCNirxwAAANU"]
[Sun Apr 05 12:13:40.895485 2026] [:error] [pid 45304:tid 45347] [client 20.199.99.25:6428] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adHhdA5jnqDKKovdRkl1iAAAAEM"]
[Sun Apr 05 12:13:41.519107 2026] [:error] [pid 45303:tid 45321] [client 20.199.99.25:29046] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adHhdbboQ9eViZ4hdnkGYAAAAAQ"]
[Sun Apr 05 12:13:42.693115 2026] [:error] [pid 45304:tid 45349] [client 20.199.99.25:14215] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adHhdg5jnqDKKovdRkl1kAAAAEU"]
[Sun Apr 05 12:13:43.336624 2026] [:error] [pid 45303:tid 45328] [client 20.199.99.25:34391] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adHhd7boQ9eViZ4hdnkGaQAAAAs"]
[Sun Apr 05 12:13:43.897887 2026] [:error] [pid 30921:tid 30927] [client 20.199.99.25:19777] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adHhd2FGQVn8Q0ueB24SNQAAAQQ"]
[Sun Apr 05 12:13:44.535140 2026] [:error] [pid 45304:tid 45366] [client 20.199.99.25:19839] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adHheA5jnqDKKovdRkl1mAAAAFY"]
[Sun Apr 05 12:13:45.535863 2026] [:error] [pid 45304:tid 45350] [client 20.199.99.25:14250] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adHheQ5jnqDKKovdRkl1mQAAAEY"]
[Sun Apr 05 12:13:47.853980 2026] [:error] [pid 45304:tid 45349] [client 20.199.99.25:5383] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adHhew5jnqDKKovdRkl1ngAAAEU"]
[Sun Apr 05 12:13:53.701411 2026] [:error] [pid 45304:tid 45356] [client 20.199.99.25:36521] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adHhgQ5jnqDKKovdRkl1tgAAAEw"]
[Sun Apr 05 12:13:59.685540 2026] [proxy_fcgi:error] [pid 30921:tid 30929] [client 20.199.99.25:8983] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 12:13:59.940290 2026] [proxy_fcgi:error] [pid 30921:tid 30938] [client 20.199.99.25:8983] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 13:38:39.770427 2026] [proxy_fcgi:error] [pid 45409:tid 45420] [client 51.107.75.125:53004] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:01.596108 2026] [proxy_fcgi:error] [pid 35687:tid 35738] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:02.018418 2026] [proxy_fcgi:error] [pid 35687:tid 35726] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:02.440612 2026] [proxy_fcgi:error] [pid 35687:tid 35735] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:02.859364 2026] [proxy_fcgi:error] [pid 35687:tid 35731] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:03.295655 2026] [proxy_fcgi:error] [pid 35687:tid 35746] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:03.712383 2026] [proxy_fcgi:error] [pid 35687:tid 35739] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:04.132770 2026] [proxy_fcgi:error] [pid 35687:tid 35727] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:04.550696 2026] [proxy_fcgi:error] [pid 35687:tid 35748] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:04.969097 2026] [proxy_fcgi:error] [pid 35687:tid 35745] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:05.394699 2026] [proxy_fcgi:error] [pid 35687:tid 35723] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:06.236886 2026] [proxy_fcgi:error] [pid 35687:tid 35724] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:06.653915 2026] [proxy_fcgi:error] [pid 35687:tid 35744] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:07.076775 2026] [proxy_fcgi:error] [pid 35687:tid 35743] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:07.495676 2026] [proxy_fcgi:error] [pid 35687:tid 35736] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:07.918430 2026] [proxy_fcgi:error] [pid 35687:tid 35742] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:08.337312 2026] [proxy_fcgi:error] [pid 35687:tid 35729] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:08.756286 2026] [proxy_fcgi:error] [pid 35687:tid 35740] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:09.175075 2026] [proxy_fcgi:error] [pid 35687:tid 35734] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:09.592812 2026] [proxy_fcgi:error] [pid 35687:tid 35738] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:10.013435 2026] [proxy_fcgi:error] [pid 35687:tid 35726] [client 62.197.144.85:43440] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:16.345437 2026] [:error] [pid 35687:tid 35732] [client 62.197.144.85:43440] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adOXaJ3LtDozV0i8BitfyQAAAEk"]
[Mon Apr 06 19:22:18.406606 2026] [:error] [pid 35688:tid 35772] [client 62.197.144.85:51712] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adOXauZ85qg4jLsRpQyFZwAAAJY"]
[Mon Apr 06 19:22:20.487788 2026] [proxy_fcgi:error] [pid 38562:tid 38567] [client 62.197.144.85:51776] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:21.740794 2026] [:error] [pid 38562:tid 38580] [client 62.197.144.85:51776] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adOXbaeD6Ohe6wzRuy5wpQAAAU8"]
[Mon Apr 06 19:22:22.984371 2026] [proxy_fcgi:error] [pid 9442:tid 9446] [client 62.197.144.85:51870] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:23.397187 2026] [proxy_fcgi:error] [pid 9442:tid 9450] [client 62.197.144.85:51870] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:23.812445 2026] [:error] [pid 9442:tid 9467] [client 62.197.144.85:51870] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adOXb0PsNnAJTnmz6sacPgAAARc"]
[Mon Apr 06 19:22:25.062798 2026] [proxy_fcgi:error] [pid 1827:tid 1850] [client 62.197.144.85:52012] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 19:22:27.136967 2026] [:error] [pid 1827:tid 1830] [client 62.197.144.85:52012] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adOXc-Veb6S_DnjZ2xEAGwAAAgE"]
[Mon Apr 06 19:22:28.374630 2026] [:error] [pid 9442:tid 9463] [client 62.197.144.85:53866] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adOXdEPsNnAJTnmz6sacagAAARM"]
[Mon Apr 06 19:22:29.219315 2026] [:error] [pid 9442:tid 9454] [client 62.197.144.85:53926] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adOXdUPsNnAJTnmz6sacdgAAAQo"]
[Mon Apr 06 19:22:30.057620 2026] [:error] [pid 1827:tid 1831] [client 62.197.144.85:53960] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adOXduVeb6S_DnjZ2xEAHAAAAgI"]
[Mon Apr 06 19:22:30.928104 2026] [:error] [pid 35688:tid 35752] [client 62.197.144.85:54014] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adOXduZ85qg4jLsRpQyFxQAAAII"]
[Mon Apr 06 19:22:31.760543 2026] [:error] [pid 35688:tid 35768] [client 62.197.144.85:54078] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adOXd-Z85qg4jLsRpQyFygAAAJI"]
[Mon Apr 06 19:22:33.020901 2026] [:error] [pid 35686:tid 35716] [client 62.197.144.85:54122] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adOXecMKdea6oORd2fzJJQAAABQ"]
[Mon Apr 06 19:22:33.841460 2026] [:error] [pid 35786:tid 35798] [client 62.197.144.85:54152] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inc.php"] [unique_id "adOXeWgkfCKTaLhwaKQVNwAAAMU"]
[Mon Apr 06 19:22:34.659551 2026] [:error] [pid 10280:tid 10307] [client 62.197.144.85:54178] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inc.php"] [unique_id "adOXel8QUJkf8g-BFfPbKAAAAdg"]
[Mon Apr 06 19:22:35.521589 2026] [:error] [pid 35688:tid 35762] [client 62.197.144.85:52770] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inc.php"] [unique_id "adOXe-Z85qg4jLsRpQyF5QAAAIw"]
[Mon Apr 06 19:22:36.353252 2026] [:error] [pid 10280:tid 10293] [client 62.197.144.85:52786] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inc.php"] [unique_id "adOXfF8QUJkf8g-BFfPbMAAAAco"]
[Mon Apr 06 19:22:40.088817 2026] [:error] [pid 38562:tid 38567] [client 62.197.144.85:52836] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOXgKeD6Ohe6wzRuy5wyQAAAUI"]
[Mon Apr 06 19:22:40.929143 2026] [:error] [pid 10280:tid 10307] [client 62.197.144.85:52892] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOXgF8QUJkf8g-BFfPbQwAAAdg"]
[Mon Apr 06 19:22:41.750701 2026] [:error] [pid 9442:tid 9461] [client 62.197.144.85:52896] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOXgUPsNnAJTnmz6sacrgAAARE"]
[Mon Apr 06 19:22:42.575965 2026] [:error] [pid 9413:tid 9431] [client 62.197.144.85:27092] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOXgnllvEK3chn01wG6yQAAAZA"]
[Mon Apr 06 19:22:43.401779 2026] [:error] [pid 35688:tid 35750] [client 62.197.144.85:52924] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOXg-Z85qg4jLsRpQyGCQAAAIA"]
[Tue Apr 07 08:07:21.666436 2026] [proxy_fcgi:error] [pid 12948:tid 12966] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:21.936759 2026] [proxy_fcgi:error] [pid 12948:tid 12954] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:22.201000 2026] [proxy_fcgi:error] [pid 12948:tid 12958] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:22.464489 2026] [proxy_fcgi:error] [pid 12948:tid 12973] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:22.729695 2026] [proxy_fcgi:error] [pid 12948:tid 12951] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:22.989721 2026] [proxy_fcgi:error] [pid 12948:tid 12968] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:23.258304 2026] [proxy_fcgi:error] [pid 12948:tid 12972] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:23.528357 2026] [proxy_fcgi:error] [pid 12948:tid 12963] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:23.800947 2026] [proxy_fcgi:error] [pid 12948:tid 12967] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:24.324540 2026] [proxy_fcgi:error] [pid 12948:tid 12961] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:24.587013 2026] [proxy_fcgi:error] [pid 12948:tid 12974] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:24.862801 2026] [proxy_fcgi:error] [pid 12948:tid 12962] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:25.125073 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:25.385134 2026] [proxy_fcgi:error] [pid 12948:tid 12967] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:25.681521 2026] [proxy_fcgi:error] [pid 12948:tid 12956] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:25.945684 2026] [proxy_fcgi:error] [pid 12948:tid 12966] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:26.210905 2026] [proxy_fcgi:error] [pid 12948:tid 12960] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:26.472308 2026] [proxy_fcgi:error] [pid 12948:tid 12974] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:26.732418 2026] [proxy_fcgi:error] [pid 12948:tid 12968] [client 192.145.125.70:26894] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:30.454872 2026] [:error] [pid 12948:tid 12968] [client 192.145.125.70:26894] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adRKwsbeSPAN8LvMqsaTbwAAARE"]
[Tue Apr 07 08:07:31.802636 2026] [:error] [pid 12948:tid 12968] [client 192.145.125.70:58942] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adRKw8beSPAN8LvMqsaTeQAAARE"]
[Tue Apr 07 08:07:33.091948 2026] [proxy_fcgi:error] [pid 12948:tid 12956] [client 192.145.125.70:58950] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:33.865557 2026] [:error] [pid 12948:tid 12971] [client 192.145.125.70:58950] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adRKxcbeSPAN8LvMqsaThQAAARQ"]
[Tue Apr 07 08:07:34.643325 2026] [proxy_fcgi:error] [pid 37719:tid 37740] [client 192.145.125.70:58958] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:34.904350 2026] [proxy_fcgi:error] [pid 37719:tid 37729] [client 192.145.125.70:58958] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:35.160503 2026] [:error] [pid 37719:tid 37724] [client 192.145.125.70:58958] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adRKx009Xv52u2xXGLCASAAAAMI"]
[Tue Apr 07 08:07:35.983000 2026] [proxy_fcgi:error] [pid 37596:tid 37611] [client 192.145.125.70:43394] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:37.294810 2026] [:error] [pid 37596:tid 37618] [client 192.145.125.70:43394] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adRKyapaAOZHEjRWjP0fogAAAAw"]
[Tue Apr 07 08:07:38.080742 2026] [:error] [pid 12948:tid 12956] [client 192.145.125.70:32628] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adRKysbeSPAN8LvMqsaTiwAAAQU"]
[Tue Apr 07 08:07:38.670753 2026] [:error] [pid 37597:tid 37657] [client 192.145.125.70:49496] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adRKyg6uAY0QAy-8EEJ8RgAAAFc"]
[Tue Apr 07 08:07:39.199424 2026] [:error] [pid 37598:tid 37682] [client 192.145.125.70:49506] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adRKy-9g7q_cV2WhPay8iQAAAJU"]
[Tue Apr 07 08:07:39.719747 2026] [:error] [pid 12948:tid 12951] [client 192.145.125.70:8302] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adRKy8beSPAN8LvMqsaTjAAAAQA"]
[Tue Apr 07 08:07:40.235261 2026] [:error] [pid 12948:tid 12952] [client 192.145.125.70:30893] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adRKzMbeSPAN8LvMqsaTkgAAAQE"]
[Tue Apr 07 08:07:41.011894 2026] [:error] [pid 37596:tid 37618] [client 192.145.125.70:49524] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adRKzapaAOZHEjRWjP0frQAAAAw"]
[Tue Apr 07 08:07:41.621300 2026] [proxy_fcgi:error] [pid 37598:tid 37663] [client 192.145.125.70:18985] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:42.146033 2026] [:error] [pid 37598:tid 37672] [client 192.145.125.70:18985] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "adRKzu9g7q_cV2WhPay8kAAAAIs"]
[Tue Apr 07 08:07:42.656455 2026] [proxy_fcgi:error] [pid 37598:tid 37679] [client 192.145.125.70:49532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:42.915799 2026] [proxy_fcgi:error] [pid 37598:tid 37683] [client 192.145.125.70:49532] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:43.169376 2026] [:error] [pid 37598:tid 37682] [client 192.145.125.70:49532] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adRKz-9g7q_cV2WhPay8mAAAAJU"]
[Tue Apr 07 08:07:44.009995 2026] [:error] [pid 37596:tid 37614] [client 192.145.125.70:42263] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adRK0KpaAOZHEjRWjP0fuQAAAAg"]
[Tue Apr 07 08:07:44.544121 2026] [proxy_fcgi:error] [pid 37598:tid 37665] [client 192.145.125.70:49562] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:44.805506 2026] [:error] [pid 37598:tid 37671] [client 192.145.125.70:49562] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adRK0O9g7q_cV2WhPay8nwAAAIo"]
[Tue Apr 07 08:07:45.351634 2026] [proxy_fcgi:error] [pid 37598:tid 37682] [client 192.145.125.70:49574] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:46.128822 2026] [proxy_fcgi:error] [pid 37598:tid 37670] [client 192.145.125.70:49574] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:46.901759 2026] [:error] [pid 37598:tid 37666] [client 192.145.125.70:49574] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adRK0u9g7q_cV2WhPay8rgAAAIU"]
[Tue Apr 07 08:07:47.486628 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 192.145.125.70:32150] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:47.745012 2026] [:error] [pid 12948:tid 12967] [client 192.145.125.70:32150] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adRK08beSPAN8LvMqsaTpAAAARA"]
[Tue Apr 07 08:07:48.259443 2026] [proxy_fcgi:error] [pid 37719:tid 37733] [client 192.145.125.70:38431] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:48.782822 2026] [:error] [pid 37719:tid 37734] [client 192.145.125.70:38431] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adRK1E09Xv52u2xXGLCAZgAAAMw"]
[Tue Apr 07 08:07:49.666642 2026] [:error] [pid 12948:tid 12956] [client 192.145.125.70:46312] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adRK1cbeSPAN8LvMqsaTsAAAAQU"]
[Tue Apr 07 08:07:50.449990 2026] [proxy_fcgi:error] [pid 12948:tid 12961] [client 192.145.125.70:46326] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:50.747658 2026] [proxy_fcgi:error] [pid 12948:tid 12960] [client 192.145.125.70:46326] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:51.303643 2026] [:error] [pid 12948:tid 12956] [client 192.145.125.70:46326] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adRK18beSPAN8LvMqsaTugAAAQU"]
[Tue Apr 07 08:07:52.082976 2026] [:error] [pid 12948:tid 12962] [client 192.145.125.70:14905] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adRK2MbeSPAN8LvMqsaTwAAAAQs"]
[Tue Apr 07 08:07:52.852444 2026] [:error] [pid 12948:tid 12958] [client 192.145.125.70:46344] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adRK2MbeSPAN8LvMqsaTwwAAAQc"]
[Tue Apr 07 08:07:53.421046 2026] [:error] [pid 12948:tid 12973] [client 192.145.125.70:46354] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adRK2cbeSPAN8LvMqsaTxQAAARY"]
[Tue Apr 07 08:07:53.948180 2026] [:error] [pid 37598:tid 37675] [client 192.145.125.70:34439] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adRK2e9g7q_cV2WhPay8vQAAAI4"]
[Tue Apr 07 08:07:55.071145 2026] [proxy_fcgi:error] [pid 37598:tid 37675] [client 192.145.125.70:46358] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:55.332093 2026] [:error] [pid 37598:tid 37676] [client 192.145.125.70:46358] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adRK2-9g7q_cV2WhPay8ygAAAI8"]
[Tue Apr 07 08:07:55.918653 2026] [:error] [pid 37598:tid 37683] [client 192.145.125.70:46360] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adRK2-9g7q_cV2WhPay8zAAAAJY"]
[Tue Apr 07 08:07:56.438483 2026] [:error] [pid 12948:tid 12970] [client 192.145.125.70:48095] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adRK3MbeSPAN8LvMqsaTyQAAARM"]
[Tue Apr 07 08:07:57.580322 2026] [proxy_fcgi:error] [pid 37598:tid 37671] [client 192.145.125.70:3369] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:58.109795 2026] [proxy_fcgi:error] [pid 37598:tid 37662] [client 192.145.125.70:3369] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:58.372068 2026] [proxy_fcgi:error] [pid 37598:tid 37676] [client 192.145.125.70:3369] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:07:59.181747 2026] [:error] [pid 37598:tid 37674] [client 192.145.125.70:3369] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adRK3-9g7q_cV2WhPay82gAAAI0"]
[Tue Apr 07 08:08:00.541203 2026] [:error] [pid 37596:tid 37629] [client 192.145.125.70:60676] [client 192.145.125.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.125.70, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adRK4KpaAOZHEjRWjP0fwwAAABc"]
[Tue Apr 07 08:08:00.813890 2026] [proxy_fcgi:error] [pid 37596:tid 37626] [client 192.145.125.70:60676] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:03.518970 2026] [proxy_fcgi:error] [pid 37596:tid 37607] [client 192.145.125.70:60676] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:03.785798 2026] [proxy_fcgi:error] [pid 37596:tid 37606] [client 192.145.125.70:60676] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:05.146329 2026] [:error] [pid 37596:tid 37618] [client 192.145.125.70:60676] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adRK5apaAOZHEjRWjP0f0AAAAAw"]
[Tue Apr 07 08:08:05.961570 2026] [proxy_fcgi:error] [pid 12948:tid 12960] [client 192.145.125.70:60680] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:06.222700 2026] [:error] [pid 12948:tid 12957] [client 192.145.125.70:60680] [client 192.145.125.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.125.70, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adRK5sbeSPAN8LvMqsaT8AAAAQY"]
[Tue Apr 07 08:08:06.757169 2026] [:error] [pid 12948:tid 12955] [client 192.145.125.70:60680] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "adRK5sbeSPAN8LvMqsaT9wAAAQQ"]
[Tue Apr 07 08:08:07.545929 2026] [proxy_fcgi:error] [pid 12948:tid 12975] [client 192.145.125.70:60692] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:08.330207 2026] [proxy_fcgi:error] [pid 12948:tid 12961] [client 192.145.125.70:60692] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:08.854726 2026] [proxy_fcgi:error] [pid 12948:tid 12962] [client 192.145.125.70:60692] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:09.369728 2026] [:error] [pid 12948:tid 12970] [client 192.145.125.70:60692] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adRK6cbeSPAN8LvMqsaUCAAAARM"]
[Tue Apr 07 08:08:09.893720 2026] [proxy_fcgi:error] [pid 37598:tid 37680] [client 192.145.125.70:45810] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:10.678342 2026] [proxy_fcgi:error] [pid 37598:tid 37681] [client 192.145.125.70:45810] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:11.225887 2026] [proxy_fcgi:error] [pid 37598:tid 37669] [client 192.145.125.70:45810] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:11.756451 2026] [proxy_fcgi:error] [pid 37598:tid 37674] [client 192.145.125.70:45810] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:12.014721 2026] [:error] [pid 37598:tid 37661] [client 192.145.125.70:45810] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adRK7O9g7q_cV2WhPay89QAAAIA"]
[Tue Apr 07 08:08:14.152875 2026] [proxy_fcgi:error] [pid 12948:tid 12972] [client 192.145.125.70:45814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:14.415918 2026] [proxy_fcgi:error] [pid 12948:tid 12975] [client 192.145.125.70:45814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:14.672683 2026] [:error] [pid 12948:tid 12954] [client 192.145.125.70:45814] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adRK7sbeSPAN8LvMqsaUHQAAAQM"]
[Tue Apr 07 08:08:15.460050 2026] [proxy_fcgi:error] [pid 37598:tid 37665] [client 192.145.125.70:21331] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:16.011711 2026] [:error] [pid 37598:tid 37674] [client 192.145.125.70:21331] [client 192.145.125.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.125.70, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adRK8O9g7q_cV2WhPay8_gAAAI0"]
[Tue Apr 07 08:08:16.274408 2026] [:error] [pid 37598:tid 37676] [client 192.145.125.70:21331] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adRK8O9g7q_cV2WhPay8_wAAAI8"]
[Tue Apr 07 08:08:19.414831 2026] [proxy_fcgi:error] [pid 12948:tid 12968] [client 192.145.125.70:4376] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:20.447081 2026] [proxy_fcgi:error] [pid 12948:tid 12959] [client 192.145.125.70:4376] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:20.964282 2026] [proxy_fcgi:error] [pid 12948:tid 12967] [client 192.145.125.70:4376] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:21.217628 2026] [:error] [pid 12948:tid 12973] [client 192.145.125.70:4376] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adRK9cbeSPAN8LvMqsaUQQAAARY"]
[Tue Apr 07 08:08:21.729307 2026] [proxy_fcgi:error] [pid 37719:tid 37722] [client 192.145.125.70:34767] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:22.500988 2026] [:error] [pid 37719:tid 37732] [client 192.145.125.70:34767] [client 192.145.125.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.125.70, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adRK9k09Xv52u2xXGLCAkQAAAMo"]
[Tue Apr 07 08:08:22.761105 2026] [proxy_fcgi:error] [pid 37719:tid 37724] [client 192.145.125.70:34767] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:23.145121 2026] [proxy_fcgi:error] [pid 37719:tid 37731] [client 192.145.125.70:34767] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:23.403843 2026] [proxy_fcgi:error] [pid 37719:tid 37736] [client 192.145.125.70:34767] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:23.659830 2026] [:error] [pid 37719:tid 37725] [client 192.145.125.70:34767] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adRK9009Xv52u2xXGLCAmAAAAMM"]
[Tue Apr 07 08:08:24.170416 2026] [proxy_fcgi:error] [pid 37598:tid 37678] [client 192.145.125.70:36364] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:24.426755 2026] [:error] [pid 37598:tid 37670] [client 192.145.125.70:36364] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adRK-O9g7q_cV2WhPay9FAAAAIk"]
[Tue Apr 07 08:08:25.206735 2026] [proxy_fcgi:error] [pid 37719:tid 37732] [client 192.145.125.70:36380] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:25.463813 2026] [:error] [pid 37719:tid 37744] [client 192.145.125.70:36380] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adRK-U09Xv52u2xXGLCAowAAANY"]
[Tue Apr 07 08:08:26.499086 2026] [proxy_fcgi:error] [pid 37719:tid 37726] [client 192.145.125.70:21088] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:26.761720 2026] [:error] [pid 37719:tid 37742] [client 192.145.125.70:21088] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adRK-k09Xv52u2xXGLCArQAAANQ"]
[Tue Apr 07 08:08:27.273957 2026] [:error] [pid 12948:tid 12960] [client 192.145.125.70:36402] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adRK-8beSPAN8LvMqsaURgAAAQk"]
[Tue Apr 07 08:08:27.782679 2026] [proxy_fcgi:error] [pid 37719:tid 37732] [client 192.145.125.70:39814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:28.040742 2026] [proxy_fcgi:error] [pid 37719:tid 37728] [client 192.145.125.70:39814] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:29.068496 2026] [:error] [pid 37719:tid 37739] [client 192.145.125.70:39814] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adRK_U09Xv52u2xXGLCAwwAAANE"]
[Tue Apr 07 08:08:31.201988 2026] [:error] [pid 37598:tid 37677] [client 192.145.125.70:39828] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adRK_-9g7q_cV2WhPay9HgAAAJA"]
[Tue Apr 07 08:08:31.716827 2026] [proxy_fcgi:error] [pid 12948:tid 12975] [client 192.145.125.70:39844] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:32.503308 2026] [:error] [pid 12948:tid 12956] [client 192.145.125.70:39844] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adRLAMbeSPAN8LvMqsaUYQAAAQU"]
[Tue Apr 07 08:08:33.024864 2026] [proxy_fcgi:error] [pid 37597:tid 37647] [client 192.145.125.70:39856] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:33.556721 2026] [proxy_fcgi:error] [pid 37597:tid 37638] [client 192.145.125.70:39856] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:33.829009 2026] [:error] [pid 37597:tid 37655] [client 192.145.125.70:39856] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adRLAQ6uAY0QAy-8EEJ8nwAAAFU"]
[Tue Apr 07 08:08:34.374830 2026] [proxy_fcgi:error] [pid 37598:tid 37678] [client 192.145.125.70:39868] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:34.892681 2026] [:error] [pid 37598:tid 37682] [client 192.145.125.70:39868] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "adRLAu9g7q_cV2WhPay9LAAAAJU"]
[Tue Apr 07 08:08:35.406716 2026] [proxy_fcgi:error] [pid 37719:tid 37745] [client 192.145.125.70:39874] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:36.187376 2026] [:error] [pid 37719:tid 37742] [client 192.145.125.70:39874] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adRLBE09Xv52u2xXGLCA2QAAANQ"]
[Tue Apr 07 08:08:36.957503 2026] [proxy_fcgi:error] [pid 37719:tid 37730] [client 192.145.125.70:39886] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:37.472958 2026] [proxy_fcgi:error] [pid 37719:tid 37733] [client 192.145.125.70:39886] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:37.739172 2026] [proxy_fcgi:error] [pid 37719:tid 37739] [client 192.145.125.70:39886] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:38.278473 2026] [proxy_fcgi:error] [pid 37719:tid 37726] [client 192.145.125.70:39886] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:38.533002 2026] [:error] [pid 37719:tid 37740] [client 192.145.125.70:39886] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adRLBk09Xv52u2xXGLCA6gAAANI"]
[Tue Apr 07 08:08:39.047405 2026] [:error] [pid 37597:tid 37651] [client 192.145.125.70:60038] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adRLBw6uAY0QAy-8EEJ8owAAAFE"]
[Tue Apr 07 08:08:39.565897 2026] [:error] [pid 37597:tid 37653] [client 192.145.125.70:60042] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adRLBw6uAY0QAy-8EEJ8pgAAAFM"]
[Tue Apr 07 08:08:40.085315 2026] [:error] [pid 37598:tid 37664] [client 192.145.125.70:9095] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adRLCO9g7q_cV2WhPay9QAAAAIM"]
[Tue Apr 07 08:08:40.596643 2026] [proxy_fcgi:error] [pid 37719:tid 37743] [client 192.145.125.70:47751] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:40.852564 2026] [:error] [pid 37719:tid 37729] [client 192.145.125.70:47751] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adRLCE09Xv52u2xXGLCA8gAAAMc"]
[Tue Apr 07 08:08:41.380946 2026] [:error] [pid 12948:tid 12955] [client 192.145.125.70:60070] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adRLCcbeSPAN8LvMqsaUewAAAQQ"]
[Tue Apr 07 08:08:41.898741 2026] [proxy_fcgi:error] [pid 12948:tid 12970] [client 192.145.125.70:60076] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:42.425563 2026] [:error] [pid 12948:tid 12971] [client 192.145.125.70:60076] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adRLCsbeSPAN8LvMqsaUhQAAARQ"]
[Tue Apr 07 08:08:42.931506 2026] [:error] [pid 12948:tid 12958] [client 192.145.125.70:60084] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adRLCsbeSPAN8LvMqsaUigAAAQc"]
[Tue Apr 07 08:08:43.449047 2026] [:error] [pid 12948:tid 12961] [client 192.145.125.70:60100] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adRLC8beSPAN8LvMqsaUjAAAAQo"]
[Tue Apr 07 08:08:43.975206 2026] [:error] [pid 37597:tid 37646] [client 192.145.125.70:60104] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adRLCw6uAY0QAy-8EEJ8rwAAAEw"]
[Tue Apr 07 08:08:44.747300 2026] [:error] [pid 37598:tid 37679] [client 192.145.125.70:12560] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adRLDO9g7q_cV2WhPay9RwAAAJI"]
[Tue Apr 07 08:08:45.838946 2026] [:error] [pid 37719:tid 37738] [client 192.145.125.70:60112] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adRLDU09Xv52u2xXGLCBAQAAANA"]
[Tue Apr 07 08:08:46.352068 2026] [proxy_fcgi:error] [pid 12948:tid 12952] [client 192.145.125.70:60118] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:47.122795 2026] [proxy_fcgi:error] [pid 12948:tid 12962] [client 192.145.125.70:60118] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:47.378351 2026] [:error] [pid 12948:tid 12967] [client 192.145.125.70:60118] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adRLD8beSPAN8LvMqsaUqAAAARA"]
[Tue Apr 07 08:08:48.157609 2026] [proxy_fcgi:error] [pid 37598:tid 37678] [client 192.145.125.70:41412] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:48.420222 2026] [proxy_fcgi:error] [pid 37598:tid 37684] [client 192.145.125.70:41412] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:49.551734 2026] [proxy_fcgi:error] [pid 37598:tid 37685] [client 192.145.125.70:41412] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:49.815423 2026] [:error] [pid 37598:tid 37674] [client 192.145.125.70:41412] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adRLEe9g7q_cV2WhPay9WgAAAI0"]
[Tue Apr 07 08:08:50.328596 2026] [proxy_fcgi:error] [pid 37719:tid 37746] [client 192.145.125.70:41426] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:51.106775 2026] [:error] [pid 37719:tid 37724] [client 192.145.125.70:41426] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adRLE009Xv52u2xXGLCBIgAAAMI"]
[Tue Apr 07 08:08:51.618525 2026] [:error] [pid 37597:tid 37655] [client 192.145.125.70:41434] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adRLEw6uAY0QAy-8EEJ8tAAAAFU"]
[Tue Apr 07 08:08:53.169282 2026] [:error] [pid 37597:tid 37645] [client 192.145.125.70:41436] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adRLFQ6uAY0QAy-8EEJ8uQAAAEs"]
[Tue Apr 07 08:08:54.224971 2026] [proxy_fcgi:error] [pid 37596:tid 37612] [client 192.145.125.70:41446] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:54.489788 2026] [proxy_fcgi:error] [pid 37596:tid 37627] [client 192.145.125.70:41446] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:54.753870 2026] [proxy_fcgi:error] [pid 37596:tid 37607] [client 192.145.125.70:41446] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:55.019748 2026] [proxy_fcgi:error] [pid 37596:tid 37621] [client 192.145.125.70:41446] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:08:56.344445 2026] [:error] [pid 37596:tid 37617] [client 192.145.125.70:41446] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adRLGKpaAOZHEjRWjP0gDQAAAAs"]
[Tue Apr 07 08:08:56.861165 2026] [:error] [pid 37598:tid 37661] [client 192.145.125.70:21819] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adRLGO9g7q_cV2WhPay9aQAAAIA"]
[Tue Apr 07 08:08:57.368406 2026] [:error] [pid 37597:tid 37657] [client 192.145.125.70:41474] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adRLGQ6uAY0QAy-8EEJ8vQAAAFc"]
[Tue Apr 07 08:08:57.882610 2026] [:error] [pid 37719:tid 37736] [client 192.145.125.70:12422] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adRLGU09Xv52u2xXGLCBPQAAAM4"]
[Tue Apr 07 08:08:58.390759 2026] [:error] [pid 12948:tid 12951] [client 192.145.125.70:59682] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adRLGsbeSPAN8LvMqsaU1AAAAQA"]
[Tue Apr 07 08:08:58.926607 2026] [:error] [pid 37597:tid 37656] [client 192.145.125.70:59686] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adRLGg6uAY0QAy-8EEJ8wQAAAFY"]
[Tue Apr 07 08:08:59.712809 2026] [:error] [pid 37598:tid 37678] [client 192.145.125.70:59698] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adRLG-9g7q_cV2WhPay9eQAAAJE"]
[Tue Apr 07 08:09:00.233694 2026] [:error] [pid 37598:tid 37685] [client 192.145.125.70:59710] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adRLHO9g7q_cV2WhPay9fgAAAJg"]
[Tue Apr 07 08:09:00.773667 2026] [:error] [pid 37719:tid 37738] [client 192.145.125.70:22446] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adRLHE09Xv52u2xXGLCBSwAAANA"]
[Tue Apr 07 08:09:01.287066 2026] [:error] [pid 37597:tid 37648] [client 192.145.125.70:41400] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adRLHQ6uAY0QAy-8EEJ8wwAAAE4"]
[Tue Apr 07 08:09:02.343582 2026] [:error] [pid 12948:tid 12955] [client 192.145.125.70:59744] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adRLHsbeSPAN8LvMqsaU6gAAAQQ"]
[Tue Apr 07 08:09:03.174140 2026] [:error] [pid 37719:tid 37737] [client 192.145.125.70:64938] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adRLH009Xv52u2xXGLCBVgAAAM8"]
[Tue Apr 07 08:09:03.696601 2026] [proxy_fcgi:error] [pid 37719:tid 37722] [client 192.145.125.70:59762] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:04.239278 2026] [:error] [pid 37719:tid 37741] [client 192.145.125.70:59762] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adRLIE09Xv52u2xXGLCBYQAAANM"]
[Tue Apr 07 08:09:05.267365 2026] [:error] [pid 12948:tid 12961] [client 192.145.125.70:41503] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adRLIcbeSPAN8LvMqsaU9AAAAQo"]
[Tue Apr 07 08:09:05.792003 2026] [proxy_fcgi:error] [pid 37719:tid 37743] [client 192.145.125.70:17862] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:06.345372 2026] [proxy_fcgi:error] [pid 37719:tid 37729] [client 192.145.125.70:17862] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:06.606824 2026] [:error] [pid 37719:tid 37734] [client 192.145.125.70:17862] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adRLIk09Xv52u2xXGLCBawAAAMw"]
[Tue Apr 07 08:09:08.756953 2026] [proxy_fcgi:error] [pid 12948:tid 12966] [client 192.145.125.70:59782] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:09.019952 2026] [proxy_fcgi:error] [pid 12948:tid 12968] [client 192.145.125.70:59782] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:09.283661 2026] [proxy_fcgi:error] [pid 12948:tid 12969] [client 192.145.125.70:59782] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:09.540196 2026] [:error] [pid 12948:tid 12965] [client 192.145.125.70:59782] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adRLJcbeSPAN8LvMqsaVDwAAAQ4"]
[Tue Apr 07 08:09:10.062269 2026] [proxy_fcgi:error] [pid 12948:tid 12973] [client 192.145.125.70:42074] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:10.325181 2026] [:error] [pid 12948:tid 12959] [client 192.145.125.70:42074] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adRLJsbeSPAN8LvMqsaVFQAAAQg"]
[Tue Apr 07 08:09:11.363851 2026] [proxy_fcgi:error] [pid 37719:tid 37724] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:11.625218 2026] [proxy_fcgi:error] [pid 37719:tid 37726] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:11.889131 2026] [proxy_fcgi:error] [pid 37719:tid 37737] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:12.411654 2026] [proxy_fcgi:error] [pid 37719:tid 37731] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:13.197344 2026] [proxy_fcgi:error] [pid 37719:tid 37735] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:13.459853 2026] [proxy_fcgi:error] [pid 37719:tid 37732] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:13.719636 2026] [proxy_fcgi:error] [pid 37719:tid 37723] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:13.979494 2026] [proxy_fcgi:error] [pid 37719:tid 37739] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:14.760591 2026] [proxy_fcgi:error] [pid 37719:tid 37741] [client 192.145.125.70:42090] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:15.017377 2026] [:error] [pid 37719:tid 37728] [client 192.145.125.70:42090] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adRLK009Xv52u2xXGLCBnQAAAMY"]
[Tue Apr 07 08:09:15.531789 2026] [:error] [pid 37597:tid 37648] [client 192.145.125.70:38067] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adRLKw6uAY0QAy-8EEJ8zgAAAE4"]
[Tue Apr 07 08:09:16.044757 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 192.145.125.70:41292] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:16.298107 2026] [:error] [pid 12948:tid 12972] [client 192.145.125.70:41292] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adRLLMbeSPAN8LvMqsaVKQAAARU"]
[Tue Apr 07 08:09:17.071136 2026] [proxy_fcgi:error] [pid 37719:tid 37744] [client 192.145.125.70:42128] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:17.329612 2026] [:error] [pid 37719:tid 37731] [client 192.145.125.70:42128] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adRLLU09Xv52u2xXGLCBpQAAAMk"]
[Tue Apr 07 08:09:17.839182 2026] [:error] [pid 12948:tid 12966] [client 192.145.125.70:55756] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adRLLcbeSPAN8LvMqsaVMAAAAQ8"]
[Tue Apr 07 08:09:19.397365 2026] [:error] [pid 12948:tid 12955] [client 192.145.125.70:55772] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adRLL8beSPAN8LvMqsaVQAAAAQQ"]
[Tue Apr 07 08:09:19.904524 2026] [:error] [pid 37719:tid 37725] [client 192.145.125.70:55786] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "adRLL009Xv52u2xXGLCBsgAAAMM"]
[Tue Apr 07 08:09:21.206553 2026] [proxy_fcgi:error] [pid 37596:tid 37609] [client 192.145.125.70:55796] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:21.728228 2026] [:error] [pid 37596:tid 37612] [client 192.145.125.70:55796] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adRLMapaAOZHEjRWjP0gKgAAAAY"]
[Tue Apr 07 08:09:22.514017 2026] [proxy_fcgi:error] [pid 37598:tid 37677] [client 192.145.125.70:55798] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:23.034752 2026] [:error] [pid 37598:tid 37668] [client 192.145.125.70:55798] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "adRLM-9g7q_cV2WhPay9swAAAIc"]
[Tue Apr 07 08:09:23.545659 2026] [:error] [pid 37598:tid 37663] [client 192.145.125.70:55800] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adRLM-9g7q_cV2WhPay9tAAAAII"]
[Tue Apr 07 08:09:24.324904 2026] [proxy_fcgi:error] [pid 37598:tid 37665] [client 192.145.125.70:55808] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:24.582485 2026] [:error] [pid 37598:tid 37681] [client 192.145.125.70:55808] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adRLNO9g7q_cV2WhPay9ugAAAJQ"]
[Tue Apr 07 08:09:25.095032 2026] [:error] [pid 12948:tid 12953] [client 192.145.125.70:55824] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adRLNcbeSPAN8LvMqsaVSAAAAQI"]
[Tue Apr 07 08:09:26.127360 2026] [proxy_fcgi:error] [pid 37596:tid 37629] [client 192.145.125.70:55832] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:26.385818 2026] [proxy_fcgi:error] [pid 37596:tid 37611] [client 192.145.125.70:55832] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:26.903373 2026] [proxy_fcgi:error] [pid 37596:tid 37610] [client 192.145.125.70:55832] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:29.100864 2026] [:error] [pid 37596:tid 37619] [client 192.145.125.70:55832] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adRLOapaAOZHEjRWjP0gPgAAAA0"]
[Tue Apr 07 08:09:29.612180 2026] [:error] [pid 37719:tid 37729] [client 192.145.125.70:44936] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adRLOU09Xv52u2xXGLCBzQAAAMc"]
[Tue Apr 07 08:09:30.134098 2026] [proxy_fcgi:error] [pid 37719:tid 37734] [client 192.145.125.70:21562] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:30.399508 2026] [proxy_fcgi:error] [pid 37719:tid 37743] [client 192.145.125.70:21562] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:30.923412 2026] [proxy_fcgi:error] [pid 37719:tid 37742] [client 192.145.125.70:21562] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:31.180174 2026] [:error] [pid 37719:tid 37730] [client 192.145.125.70:21562] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "adRLO009Xv52u2xXGLCB2QAAAMg"]
[Tue Apr 07 08:09:31.695129 2026] [:error] [pid 37719:tid 37740] [client 192.145.125.70:44958] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adRLO009Xv52u2xXGLCB2wAAANI"]
[Tue Apr 07 08:09:32.205442 2026] [:error] [pid 12948:tid 12964] [client 192.145.125.70:10995] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adRLPMbeSPAN8LvMqsaVagAAAQ0"]
[Tue Apr 07 08:09:33.768931 2026] [proxy_fcgi:error] [pid 37596:tid 37618] [client 192.145.125.70:44982] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:34.027878 2026] [:error] [pid 37596:tid 37608] [client 192.145.125.70:44982] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adRLPqpaAOZHEjRWjP0gVAAAAAI"]
[Tue Apr 07 08:09:34.790321 2026] [:error] [pid 12948:tid 12954] [client 192.145.125.70:63993] [client 192.145.125.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adRLPsbeSPAN8LvMqsaVcAAAAQM"]
[Tue Apr 07 08:09:35.310365 2026] [proxy_fcgi:error] [pid 12948:tid 12971] [client 192.145.125.70:45010] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:35.570810 2026] [proxy_fcgi:error] [pid 12948:tid 12961] [client 192.145.125.70:45010] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:36.094084 2026] [proxy_fcgi:error] [pid 12948:tid 12959] [client 192.145.125.70:45010] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:37.132494 2026] [:error] [pid 12948:tid 12963] [client 192.145.125.70:45010] [client 192.145.125.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.125.70, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "adRLQcbeSPAN8LvMqsaVjAAAAQw"]
[Tue Apr 07 08:09:37.658453 2026] [:error] [pid 12948:tid 12971] [client 192.145.125.70:45010] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Tue Apr 07 08:09:37.918246 2026] [proxy_fcgi:error] [pid 12948:tid 12966] [client 192.145.125.70:45010] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:38.179163 2026] [proxy_fcgi:error] [pid 12948:tid 12968] [client 192.145.125.70:45010] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:38.439851 2026] [proxy_fcgi:error] [pid 12948:tid 12960] [client 192.145.125.70:45010] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:38.695886 2026] [:error] [pid 12948:tid 12958] [client 192.145.125.70:45010] [client 192.145.125.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.125.70, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adRLQsbeSPAN8LvMqsaVlAAAAQc"]
[Tue Apr 07 08:09:38.959427 2026] [proxy_fcgi:error] [pid 12948:tid 12965] [client 192.145.125.70:45010] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 08:09:39.478154 2026] [:error] [pid 12948:tid 12972] [client 192.145.125.70:45010] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "adRLQ8beSPAN8LvMqsaVmAAAARU"]
[Tue Apr 07 08:09:39.985262 2026] [:error] [pid 37598:tid 37673] [client 192.145.125.70:9754] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "adRLQ-9g7q_cV2WhPay9zgAAAIw"]
[Tue Apr 07 08:09:40.496343 2026] [:error] [pid 37598:tid 37675] [client 192.145.125.70:33828] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "adRLRO9g7q_cV2WhPay91gAAAI4"]
[Tue Apr 07 08:09:41.004195 2026] [:error] [pid 37719:tid 37732] [client 192.145.125.70:33830] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "adRLRU09Xv52u2xXGLCB8wAAAMo"]
[Tue Apr 07 08:09:41.517989 2026] [:error] [pid 12948:tid 12972] [client 192.145.125.70:47144] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "adRLRcbeSPAN8LvMqsaVpAAAARU"]
[Tue Apr 07 08:09:46.691291 2026] [:error] [pid 37719:tid 37745] [client 192.145.125.70:33858] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "adRLSk09Xv52u2xXGLCCDAAAANc"]
[Tue Apr 07 08:09:47.199489 2026] [:error] [pid 12948:tid 12962] [client 192.145.125.70:33870] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "adRLS8beSPAN8LvMqsaV0AAAAQs"]
[Tue Apr 07 08:09:47.714003 2026] [:error] [pid 37719:tid 37735] [client 192.145.125.70:30628] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "adRLS009Xv52u2xXGLCCDgAAAM0"]
[Tue Apr 07 08:09:48.226626 2026] [:error] [pid 37597:tid 37635] [client 192.145.125.70:15328] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "adRLTA6uAY0QAy-8EEJ8-wAAAEE"]
[Tue Apr 07 08:09:48.748434 2026] [:error] [pid 12948:tid 12961] [client 192.145.125.70:41602] [client 192.145.125.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "adRLTMbeSPAN8LvMqsaV2AAAAQo"]
[Tue Apr 07 10:56:55.148642 2026] [:error] [pid 37719:tid 37739] [client 217.216.72.68:50845] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adRyd009Xv52u2xXGLDvEAAAANE"]
[Tue Apr 07 10:56:59.051493 2026] [:error] [pid 37598:tid 37680] [client 217.216.72.68:51035] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/"] [unique_id "adRye-9g7q_cV2WhPawTSQAAAJM"]
[Tue Apr 07 10:56:59.160157 2026] [:error] [pid 37598:tid 37682] [client 217.216.72.68:57615] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "adRye-9g7q_cV2WhPawTTQAAAJU"]
[Tue Apr 07 10:57:08.357787 2026] [:error] [pid 59490:tid 59507] [client 217.216.72.68:61094] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "adRyhEcw8OFbiUZ7Rx0R7QAAAU8"]
[Tue Apr 07 10:57:11.552352 2026] [:error] [pid 37597:tid 37653] [client 217.216.72.68:61564] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adRyhw6uAY0QAy-8EELABQAAAFM"]
[Tue Apr 07 10:57:22.228006 2026] [:error] [pid 59490:tid 59502] [client 217.216.72.68:63134] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/"] [unique_id "adRykkcw8OFbiUZ7Rx0SNwAAAUo"]
[Tue Apr 07 10:57:29.208209 2026] [:error] [pid 37598:tid 37664] [client 217.216.72.68:54263] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "adRyme9g7q_cV2WhPawT6QAAAIM"]
[Tue Apr 07 10:57:30.338214 2026] [:error] [pid 37598:tid 37671] [client 217.216.72.68:54579] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adRymu9g7q_cV2WhPawT7QAAAIo"]
[Tue Apr 07 13:08:56.328459 2026] [:error] [pid 37597:tid 37640] [client 170.64.239.58:50324] [client 170.64.239.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adSRaA6uAY0QAy-8EEItZwAAAEY"]
[Tue Apr 07 13:08:57.673122 2026] [:error] [pid 59804:tid 59821] [client 170.64.239.58:59910] [client 170.64.239.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adSRaXYVIXiPh5_eJTkX6gAAAg8"]
[Tue Apr 07 17:45:08.153411 2026] [:error] [pid 37719:tid 37746] [client 54.183.182.214:35394] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "adTSJE09Xv52u2xXGLCyQwAAANg"]
[Tue Apr 07 17:45:08.814683 2026] [:error] [pid 37596:tid 37611] [client 54.183.182.214:35404] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "adTSJKpaAOZHEjRWjP2EzAAAAAU"]
[Tue Apr 07 17:45:09.473077 2026] [:error] [pid 59804:tid 59806] [client 54.183.182.214:35408] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "adTSJXYVIXiPh5_eJTlosgAAAgA"]
[Tue Apr 07 17:45:10.131152 2026] [:error] [pid 37597:tid 37652] [client 54.183.182.214:35414] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "adTSJg6uAY0QAy-8EELrigAAAFI"]
[Tue Apr 07 17:45:10.811179 2026] [:error] [pid 59551:tid 59558] [client 54.183.182.214:35428] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.development"] [unique_id "adTSJl7LN7Ubyqs-sVu8EgAAAYU"]
[Tue Apr 07 17:45:11.464617 2026] [:error] [pid 37597:tid 37653] [client 54.183.182.214:35444] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.test"] [unique_id "adTSJw6uAY0QAy-8EELrmgAAAFM"]
[Tue Apr 07 17:45:12.122833 2026] [:error] [pid 37597:tid 37640] [client 54.183.182.214:35456] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.remote"] [unique_id "adTSKA6uAY0QAy-8EELroAAAAEY"]
[Tue Apr 07 17:45:12.782330 2026] [:error] [pid 59551:tid 59566] [client 54.183.182.214:35472] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "adTSKF7LN7Ubyqs-sVu8HAAAAY0"]
[Tue Apr 07 17:45:13.444340 2026] [:error] [pid 37719:tid 37731] [client 54.183.182.214:35474] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "adTSKU09Xv52u2xXGLCyTgAAAMk"]
[Tue Apr 07 17:45:14.102807 2026] [:error] [pid 37597:tid 37650] [client 54.183.182.214:47102] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.save"] [unique_id "adTSKg6uAY0QAy-8EELrpQAAAFA"]
[Tue Apr 07 17:45:14.764855 2026] [:error] [pid 37597:tid 37634] [client 54.183.182.214:47112] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.old"] [unique_id "adTSKg6uAY0QAy-8EELrqgAAAEA"]
[Tue Apr 07 17:45:15.423562 2026] [:error] [pid 59660:tid 59669] [client 54.183.182.214:47118] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "adTSKzp3-oiX2o5bTszwGQAAAcc"]
[Tue Apr 07 17:45:16.081543 2026] [:error] [pid 37597:tid 37656] [client 54.183.182.214:47134] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.example"] [unique_id "adTSLA6uAY0QAy-8EELrtgAAAFY"]
[Tue Apr 07 17:45:16.739779 2026] [:error] [pid 37719:tid 37739] [client 54.183.182.214:47142] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "adTSLE09Xv52u2xXGLCyWwAAANE"]
[Tue Apr 07 17:45:17.397157 2026] [:error] [pid 37597:tid 37644] [client 54.183.182.214:47154] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "adTSLQ6uAY0QAy-8EELrwgAAAEo"]
[Tue Apr 07 17:45:18.055400 2026] [:error] [pid 37598:tid 37666] [client 54.183.182.214:47166] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.stage"] [unique_id "adTSLu9g7q_cV2WhPayEgwAAAIU"]
[Tue Apr 07 17:45:18.708314 2026] [:error] [pid 37597:tid 37652] [client 54.183.182.214:47172] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.ci"] [unique_id "adTSLg6uAY0QAy-8EELrzgAAAFI"]
[Tue Apr 07 17:45:19.378089 2026] [:error] [pid 37719:tid 37735] [client 54.183.182.214:47182] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.docker"] [unique_id "adTSL009Xv52u2xXGLCyXwAAAM0"]
[Tue Apr 07 17:45:20.034776 2026] [:error] [pid 37719:tid 37730] [client 54.183.182.214:47198] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.live"] [unique_id "adTSME09Xv52u2xXGLCyZAAAAMg"]
[Tue Apr 07 17:45:20.692370 2026] [:error] [pid 37596:tid 37610] [client 54.183.182.214:47206] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.preprod"] [unique_id "adTSMKpaAOZHEjRWjP2E2wAAAAQ"]
[Tue Apr 07 17:45:21.354334 2026] [:error] [pid 59551:tid 59571] [client 54.183.182.214:47210] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.uat"] [unique_id "adTSMV7LN7Ubyqs-sVu8OQAAAZI"]
[Tue Apr 07 17:45:22.016608 2026] [:error] [pid 37596:tid 37611] [client 54.183.182.214:47222] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "adTSMqpaAOZHEjRWjP2E3gAAAAU"]
[Tue Apr 07 17:45:22.676157 2026] [:error] [pid 59490:tid 59502] [client 54.183.182.214:47234] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "adTSMkcw8OFbiUZ7Rx1KdAAAAUo"]
[Tue Apr 07 17:45:23.332319 2026] [:error] [pid 12948:tid 12957] [client 54.183.182.214:47242] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env~"] [unique_id "adTSM8beSPAN8LvMqsaHpQAAAQY"]
[Tue Apr 07 17:45:23.996880 2026] [:error] [pid 12948:tid 12958] [client 54.183.182.214:53244] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "adTSM8beSPAN8LvMqsaHqQAAAQc"]
[Tue Apr 07 17:45:24.651487 2026] [:error] [pid 37719:tid 37742] [client 54.183.182.214:53258] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/apps/.env"] [unique_id "adTSNE09Xv52u2xXGLCyfAAAANQ"]
[Tue Apr 07 17:45:25.307679 2026] [:error] [pid 37597:tid 37646] [client 54.183.182.214:53272] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "adTSNQ6uAY0QAy-8EELr8AAAAEw"]
[Tue Apr 07 17:45:25.967659 2026] [:error] [pid 37597:tid 37652] [client 54.183.182.214:53282] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/web/.env"] [unique_id "adTSNQ6uAY0QAy-8EELr-wAAAFI"]
[Tue Apr 07 17:45:26.628835 2026] [:error] [pid 37719:tid 37745] [client 54.183.182.214:53298] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/site/.env"] [unique_id "adTSNk09Xv52u2xXGLCyhQAAANc"]
[Tue Apr 07 17:45:27.289603 2026] [:error] [pid 59804:tid 59821] [client 54.183.182.214:53314] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/public/.env"] [unique_id "adTSN3YVIXiPh5_eJTlo8gAAAg8"]
[Tue Apr 07 17:45:27.943789 2026] [:error] [pid 37719:tid 37736] [client 54.183.182.214:53322] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env"] [unique_id "adTSN009Xv52u2xXGLCykwAAAM4"]
[Tue Apr 07 17:45:28.605148 2026] [:error] [pid 37598:tid 37669] [client 54.183.182.214:53334] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/backend/.env"] [unique_id "adTSOO9g7q_cV2WhPayEjwAAAIg"]
[Tue Apr 07 17:45:29.268122 2026] [:error] [pid 59551:tid 59563] [client 54.183.182.214:53340] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/server/.env"] [unique_id "adTSOV7LN7Ubyqs-sVu8UgAAAYo"]
[Tue Apr 07 17:45:29.928690 2026] [:error] [pid 37598:tid 37681] [client 54.183.182.214:53342] [client 54.183.182.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/frontend/.env"] [unique_id "adTSOe9g7q_cV2WhPayEkgAAAJQ"]
[Tue Apr 07 19:04:23.927113 2026] [:error] [pid 37598:tid 37684] [client 54.177.14.143:43546] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "adTkt-9g7q_cV2WhPaye9wAAAJc"]
[Tue Apr 07 19:04:24.865998 2026] [:error] [pid 37598:tid 37666] [client 54.177.14.143:43560] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.local"] [unique_id "adTkuO9g7q_cV2WhPaye-gAAAIU"]
[Tue Apr 07 19:04:25.616066 2026] [:error] [pid 59490:tid 59502] [client 54.177.14.143:43572] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.production"] [unique_id "adTkuUcw8OFbiUZ7Rx1a3gAAAUo"]
[Tue Apr 07 19:04:26.371579 2026] [:error] [pid 37719:tid 37744] [client 54.177.14.143:43588] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "adTkuk09Xv52u2xXGLDlFAAAANY"]
[Tue Apr 07 19:04:27.226559 2026] [:error] [pid 59551:tid 59574] [client 54.177.14.143:43594] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.development"] [unique_id "adTku17LN7Ubyqs-sVvjCgAAAZU"]
[Tue Apr 07 19:04:28.013199 2026] [:error] [pid 37597:tid 37647] [client 54.177.14.143:51702] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.test"] [unique_id "adTkvA6uAY0QAy-8EEIxewAAAE0"]
[Tue Apr 07 19:04:28.903800 2026] [:error] [pid 37597:tid 37638] [client 54.177.14.143:51704] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.remote"] [unique_id "adTkvA6uAY0QAy-8EEIxgAAAAEQ"]
[Tue Apr 07 19:04:29.656899 2026] [:error] [pid 37597:tid 37649] [client 54.177.14.143:51708] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "adTkvQ6uAY0QAy-8EEIxhgAAAE8"]
[Tue Apr 07 19:04:30.459349 2026] [:error] [pid 37719:tid 37740] [client 54.177.14.143:51718] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "adTkvk09Xv52u2xXGLDlJgAAANI"]
[Tue Apr 07 19:04:31.240875 2026] [:error] [pid 59551:tid 59577] [client 54.177.14.143:51724] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.save"] [unique_id "adTkv17LN7Ubyqs-sVvjHAAAAZg"]
[Tue Apr 07 19:04:32.009812 2026] [:error] [pid 59551:tid 59553] [client 54.177.14.143:51740] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.old"] [unique_id "adTkwF7LN7Ubyqs-sVvjIQAAAYA"]
[Tue Apr 07 19:04:32.690251 2026] [:error] [pid 59551:tid 59576] [client 54.177.14.143:51742] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "adTkwF7LN7Ubyqs-sVvjKgAAAZc"]
[Tue Apr 07 19:04:33.353296 2026] [:error] [pid 37719:tid 37731] [client 54.177.14.143:51754] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.example"] [unique_id "adTkwU09Xv52u2xXGLDlLQAAAMk"]
[Tue Apr 07 19:04:34.015580 2026] [:error] [pid 37719:tid 37736] [client 54.177.14.143:51766] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "adTkwk09Xv52u2xXGLDlMQAAAM4"]
[Tue Apr 07 19:04:34.675433 2026] [:error] [pid 59804:tid 59809] [client 54.177.14.143:51778] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "adTkwnYVIXiPh5_eJTmI6QAAAgM"]
[Tue Apr 07 19:04:35.386824 2026] [:error] [pid 37597:tid 37640] [client 54.177.14.143:51782] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.stage"] [unique_id "adTkww6uAY0QAy-8EEIxpgAAAEY"]
[Tue Apr 07 19:04:36.253841 2026] [:error] [pid 37719:tid 37743] [client 54.177.14.143:51796] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.ci"] [unique_id "adTkxE09Xv52u2xXGLDlRgAAANU"]
[Tue Apr 07 19:04:37.020005 2026] [:error] [pid 37719:tid 37740] [client 54.177.14.143:51802] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.docker"] [unique_id "adTkxU09Xv52u2xXGLDlUwAAANI"]
[Tue Apr 07 19:04:37.823860 2026] [:error] [pid 59804:tid 59820] [client 54.177.14.143:48862] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.live"] [unique_id "adTkxXYVIXiPh5_eJTmI7wAAAg4"]
[Tue Apr 07 19:04:38.724255 2026] [:error] [pid 37597:tid 37637] [client 54.177.14.143:48872] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.preprod"] [unique_id "adTkxg6uAY0QAy-8EEIxuQAAAEM"]
[Tue Apr 07 19:04:39.494335 2026] [:error] [pid 59804:tid 59819] [client 54.177.14.143:48884] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.uat"] [unique_id "adTkx3YVIXiPh5_eJTmI9gAAAg0"]
[Tue Apr 07 19:04:42.450287 2026] [:error] [pid 59551:tid 59576] [client 54.177.14.143:48890] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "adTkyl7LN7Ubyqs-sVvjRAAAAZc"]
[Tue Apr 07 19:04:43.207115 2026] [:error] [pid 37719:tid 37744] [client 54.177.14.143:48894] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env~"] [unique_id "adTky009Xv52u2xXGLDlbQAAANY"]
[Tue Apr 07 19:04:43.975746 2026] [:error] [pid 37719:tid 37734] [client 54.177.14.143:48910] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/app/.env"] [unique_id "adTky009Xv52u2xXGLDlcAAAAMw"]
[Tue Apr 07 19:04:44.724788 2026] [:error] [pid 37719:tid 37735] [client 54.177.14.143:48916] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/apps/.env"] [unique_id "adTkzE09Xv52u2xXGLDleQAAAM0"]
[Tue Apr 07 19:04:45.495473 2026] [:error] [pid 37597:tid 37654] [client 54.177.14.143:48924] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/api/.env"] [unique_id "adTkzQ6uAY0QAy-8EEIx7gAAAFQ"]
[Tue Apr 07 19:04:46.418739 2026] [:error] [pid 59490:tid 59510] [client 54.177.14.143:48932] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/web/.env"] [unique_id "adTkzkcw8OFbiUZ7Rx1a6QAAAVI"]
[Tue Apr 07 19:04:47.200051 2026] [:error] [pid 59551:tid 59574] [client 54.177.14.143:48948] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/site/.env"] [unique_id "adTkz17LN7Ubyqs-sVvjXAAAAZU"]
[Tue Apr 07 19:04:48.037957 2026] [:error] [pid 59551:tid 59567] [client 54.177.14.143:54262] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/public/.env"] [unique_id "adTk0F7LN7Ubyqs-sVvjYwAAAY4"]
[Tue Apr 07 19:04:48.774888 2026] [:error] [pid 59551:tid 59574] [client 54.177.14.143:54272] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/admin/.env"] [unique_id "adTk0F7LN7Ubyqs-sVvjagAAAZU"]
[Tue Apr 07 19:04:49.646549 2026] [:error] [pid 37719:tid 37744] [client 54.177.14.143:54280] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/backend/.env"] [unique_id "adTk0U09Xv52u2xXGLDllgAAANY"]
[Tue Apr 07 19:04:50.525144 2026] [:error] [pid 37596:tid 37618] [client 54.177.14.143:54286] [client 54.177.14.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/server/.env"] [unique_id "adTk0qpaAOZHEjRWjP2RdwAAAAw"]
[Tue Apr 07 19:47:49.976307 2026] [:error] [pid 59490:tid 59513] [client 185.98.171.4:39480] [client 185.98.171.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.98.171.4, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adTu5Ucw8OFbiUZ7Rx1kVAAAAVU"]
[Tue Apr 07 19:47:49.988592 2026] [proxy_fcgi:error] [pid 59490:tid 59513] [client 185.98.171.4:39480] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 20:59:00.948663 2026] [:error] [pid 59804:tid 59828] [client 159.89.55.133:55428] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adT_lHYVIXiPh5_eJTmxAAAAAhY"]
[Wed Apr 08 04:18:50.306275 2026] [:error] [pid 16630:tid 16635] [client 137.184.28.107:52946] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adVmqijfVAkPG-jgJEpDngAAAQM"]
[Wed Apr 08 04:18:52.315199 2026] [:error] [pid 47627:tid 47699] [client 137.184.28.107:44328] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adVmrHOljf1Quv_kDjlqEQAAAIA"]
[Wed Apr 08 04:43:20.892047 2026] [:error] [pid 47732:tid 47739] [client 20.208.44.100:25289] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVsaIm4N5QW9Mh7G10VaAAAAMU"]
[Wed Apr 08 04:43:21.623961 2026] [:error] [pid 47732:tid 47755] [client 20.208.44.100:2576] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVsaYm4N5QW9Mh7G10VcQAAANU"]
[Wed Apr 08 04:43:22.202128 2026] [:error] [pid 47627:tid 47713] [client 20.208.44.100:25311] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVsanOljf1Quv_kDjl6BgAAAI4"]
[Wed Apr 08 04:43:22.795575 2026] [:error] [pid 47626:tid 47680] [client 20.208.44.100:2589] [client 20.208.44.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVsaqjWI8TWtHx2sdbq-AAAAEw"]
[Wed Apr 08 05:16:02.515411 2026] [:error] [pid 47627:tid 47706] [client 104.28.163.34:41670] [client 104.28.163.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adV0EnOljf1Quv_kDjmNqAAAAIc"]
[Wed Apr 08 05:16:02.857799 2026] [:error] [pid 16630:tid 16647] [client 104.28.163.34:41702] [client 104.28.163.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "adV0EijfVAkPG-jgJEqD-AAAAQ8"]
[Wed Apr 08 05:41:18.372524 2026] [proxy_fcgi:error] [pid 47732:tid 47746] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:41:18.612313 2026] [proxy_fcgi:error] [pid 47732:tid 47736] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:41:18.851859 2026] [proxy_fcgi:error] [pid 47732:tid 47744] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:41:19.092104 2026] [proxy_fcgi:error] [pid 47732:tid 47755] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:41:19.331302 2026] [proxy_fcgi:error] [pid 47732:tid 47742] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:41:19.571893 2026] [proxy_fcgi:error] [pid 47732:tid 47745] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:41:20.049967 2026] [proxy_fcgi:error] [pid 47732:tid 47746] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:41:20.518754 2026] [proxy_fcgi:error] [pid 47732:tid 47736] [client 51.103.35.9:7568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:39:41.118817 2026] [:error] [pid 47732:tid 47742] [client 137.184.28.107:50218] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adWjzYm4N5QW9Mh7G12mIAAAAMg"]
[Wed Apr 08 08:39:43.316167 2026] [:error] [pid 16630:tid 16649] [client 137.184.28.107:60116] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adWjzyjfVAkPG-jgJEotnAAAARE"]
[Wed Apr 08 09:25:37.413887 2026] [:error] [pid 47626:tid 47682] [client 103.168.67.159:6136] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adWukajWI8TWtHx2sdZKUQAAAE4"]
[Wed Apr 08 09:25:38.124305 2026] [:error] [pid 47732:tid 47736] [client 103.168.67.159:6642] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adWukom4N5QW9Mh7G128RAAAAMI"]
[Wed Apr 08 09:25:38.841404 2026] [:error] [pid 544:tid 573] [client 103.168.67.159:7098] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adWukjieLKSoiLVA6YfDLAAAAZg"]
[Wed Apr 08 09:25:39.547681 2026] [:error] [pid 47626:tid 47673] [client 103.168.67.159:7584] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "adWuk6jWI8TWtHx2sdZKZwAAAEU"]
[Wed Apr 08 09:25:40.259964 2026] [:error] [pid 47625:tid 47657] [client 103.168.67.159:7994] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dashboard"] [unique_id "adWulCVuHyNWzZlE8PA3NQAAABc"]
[Wed Apr 08 09:25:40.976467 2026] [:error] [pid 544:tid 569] [client 103.168.67.159:8374] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dashboard"] [unique_id "adWulDieLKSoiLVA6YfDRQAAAZQ"]
[Wed Apr 08 09:25:41.675497 2026] [:error] [pid 544:tid 561] [client 103.168.67.159:63968] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dashboard"] [unique_id "adWulTieLKSoiLVA6YfDUQAAAYw"]
[Wed Apr 08 09:25:42.377768 2026] [:error] [pid 544:tid 569] [client 103.168.67.159:64314] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dashboard"] [unique_id "adWuljieLKSoiLVA6YfDVgAAAZQ"]
[Wed Apr 08 11:16:40.815317 2026] [:error] [pid 47625:tid 47637] [client 137.184.28.107:48578] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adXImCVuHyNWzZlE8PCTnAAAAAM"]
[Wed Apr 08 11:16:42.234342 2026] [:error] [pid 16630:tid 16645] [client 137.184.28.107:53268] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adXImijfVAkPG-jgJEp9ewAAAQ0"]
[Wed Apr 08 13:17:01.594850 2026] [:error] [pid 12453:tid 12462] [client 182.188.233.139:12545] [client 182.188.233.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.188.233.139, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adXkzRjtW7S6XsLPvrQI5QAAAIc"]
[Wed Apr 08 13:17:01.610358 2026] [proxy_fcgi:error] [pid 12453:tid 12462] [client 182.188.233.139:12545] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 14:04:42.665061 2026] [:error] [pid 12386:tid 12437] [client 137.184.28.107:51572] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adXv-hLhhLtqHi2gK7VmGgAAARU"]
[Wed Apr 08 14:04:44.910674 2026] [:error] [pid 12490:tid 12494] [client 137.184.28.107:33388] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adXv_G1Fea4F4fbumr2XqwAAAMI"]
[Wed Apr 08 15:43:09.908707 2026] [:error] [pid 12453:tid 12475] [client 137.184.28.107:55132] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adYHDRjtW7S6XsLPvrR4aQAAAJQ"]
[Wed Apr 08 15:43:12.046762 2026] [:error] [pid 12386:tid 12436] [client 137.184.28.107:34714] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adYHEBLhhLtqHi2gK7WiOAAAARQ"]
[Wed Apr 08 23:35:52.148620 2026] [proxy_fcgi:error] [pid 12490:tid 12514] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:52.648720 2026] [proxy_fcgi:error] [pid 12490:tid 12510] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:53.147874 2026] [proxy_fcgi:error] [pid 12490:tid 12506] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:53.648091 2026] [proxy_fcgi:error] [pid 12490:tid 12505] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:54.145605 2026] [proxy_fcgi:error] [pid 12490:tid 12496] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:54.644166 2026] [proxy_fcgi:error] [pid 12490:tid 12493] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:55.141375 2026] [proxy_fcgi:error] [pid 12490:tid 12495] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:55.640069 2026] [proxy_fcgi:error] [pid 12490:tid 12494] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:56.632648 2026] [proxy_fcgi:error] [pid 12490:tid 12516] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:57.132565 2026] [proxy_fcgi:error] [pid 12490:tid 12512] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:58.636212 2026] [proxy_fcgi:error] [pid 12490:tid 12500] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:59.134289 2026] [proxy_fcgi:error] [pid 12490:tid 12504] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:35:59.637366 2026] [proxy_fcgi:error] [pid 12490:tid 12499] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:00.134674 2026] [proxy_fcgi:error] [pid 12490:tid 12515] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:00.636435 2026] [proxy_fcgi:error] [pid 12490:tid 12503] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:01.135645 2026] [proxy_fcgi:error] [pid 12490:tid 12513] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:01.642080 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:02.138741 2026] [proxy_fcgi:error] [pid 12490:tid 12511] [client 193.19.204.87:35112] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:09.128968 2026] [:error] [pid 12490:tid 12505] [client 193.19.204.87:35112] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adZ16W1Fea4F4fbumr1FzwAAAM0"]
[Wed Apr 08 23:36:11.604670 2026] [:error] [pid 35642:tid 35659] [client 193.19.204.87:60666] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adZ16w-CqryxdEs5DN914wAAAE8"]
[Wed Apr 08 23:36:14.071159 2026] [proxy_fcgi:error] [pid 64066:tid 64072] [client 193.19.204.87:37192] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:15.564264 2026] [:error] [pid 64066:tid 64089] [client 193.19.204.87:37192] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adZ171R3WucJgr2vZGaaYgAAAVQ"]
[Wed Apr 08 23:36:17.047258 2026] [proxy_fcgi:error] [pid 64066:tid 64081] [client 193.19.204.87:37202] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:17.541601 2026] [proxy_fcgi:error] [pid 64066:tid 64077] [client 193.19.204.87:37202] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:18.034915 2026] [:error] [pid 64066:tid 64080] [client 193.19.204.87:37202] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adZ18lR3WucJgr2vZGaabAAAAUs"]
[Wed Apr 08 23:36:19.526833 2026] [proxy_fcgi:error] [pid 7189:tid 7198] [client 193.19.204.87:37208] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:22.048744 2026] [:error] [pid 7189:tid 7201] [client 193.19.204.87:37208] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adZ19haBqhBSu0L37lr-wAAAAco"]
[Wed Apr 08 23:36:25.052361 2026] [:error] [pid 64066:tid 64081] [client 193.19.204.87:34478] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adZ1-VR3WucJgr2vZGaadgAAAUw"]
[Wed Apr 08 23:36:26.037678 2026] [:error] [pid 35642:tid 35651] [client 193.19.204.87:34482] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adZ1-g-CqryxdEs5DN917wAAAEc"]
[Wed Apr 08 23:36:27.020338 2026] [:error] [pid 12386:tid 12427] [client 193.19.204.87:34496] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adZ1-xLhhLtqHi2gK7UwsgAAAQs"]
[Wed Apr 08 23:36:28.006298 2026] [:error] [pid 12490:tid 12511] [client 193.19.204.87:34506] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adZ1_G1Fea4F4fbumr1GKgAAANM"]
[Wed Apr 08 23:36:28.995152 2026] [:error] [pid 64066:tid 64088] [client 193.19.204.87:34516] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adZ1_FR3WucJgr2vZGaaeQAAAVM"]
[Wed Apr 08 23:36:30.479713 2026] [:error] [pid 12385:tid 12403] [client 193.19.204.87:34528] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adZ1_iAjtvRQEkLosq2y8wAAAA4"]
[Wed Apr 08 23:36:31.475058 2026] [proxy_fcgi:error] [pid 64066:tid 64080] [client 193.19.204.87:42464] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:32.469653 2026] [:error] [pid 64066:tid 64069] [client 193.19.204.87:42464] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "adZ2AFR3WucJgr2vZGaajQAAAUA"]
[Wed Apr 08 23:36:33.463776 2026] [proxy_fcgi:error] [pid 7189:tid 7195] [client 193.19.204.87:29501] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:33.961088 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 193.19.204.87:29501] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:34.452858 2026] [:error] [pid 7189:tid 7196] [client 193.19.204.87:29501] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adZ2AhaBqhBSu0L37lr_JQAAAcU"]
[Wed Apr 08 23:36:35.942612 2026] [:error] [pid 64066:tid 64092] [client 193.19.204.87:42482] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adZ2A1R3WucJgr2vZGaanwAAAVc"]
[Wed Apr 08 23:36:36.930000 2026] [proxy_fcgi:error] [pid 12385:tid 12408] [client 193.19.204.87:42486] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:37.420956 2026] [:error] [pid 12385:tid 12404] [client 193.19.204.87:42486] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adZ2BSAjtvRQEkLosq2y-wAAAA8"]
[Wed Apr 08 23:36:38.408482 2026] [proxy_fcgi:error] [pid 35642:tid 35657] [client 193.19.204.87:42498] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:39.897120 2026] [proxy_fcgi:error] [pid 35642:tid 35664] [client 193.19.204.87:42498] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:41.385313 2026] [:error] [pid 35642:tid 35648] [client 193.19.204.87:42498] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adZ2CQ-CqryxdEs5DN92BQAAAEQ"]
[Wed Apr 08 23:36:42.376625 2026] [proxy_fcgi:error] [pid 12453:tid 12459] [client 193.19.204.87:47074] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:42.871192 2026] [:error] [pid 12453:tid 12456] [client 193.19.204.87:47074] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adZ2ChjtW7S6XsLPvrRqqAAAAIE"]
[Wed Apr 08 23:36:43.877671 2026] [proxy_fcgi:error] [pid 12490:tid 12493] [client 193.19.204.87:47080] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:44.885059 2026] [:error] [pid 12490:tid 12492] [client 193.19.204.87:47080] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adZ2DG1Fea4F4fbumr1GPAAAAMA"]
[Wed Apr 08 23:36:46.373035 2026] [:error] [pid 12490:tid 12499] [client 193.19.204.87:47084] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adZ2Dm1Fea4F4fbumr1GRAAAAMc"]
[Wed Apr 08 23:36:47.861310 2026] [proxy_fcgi:error] [pid 12453:tid 12460] [client 193.19.204.87:47092] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:48.364848 2026] [proxy_fcgi:error] [pid 12453:tid 12455] [client 193.19.204.87:47092] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:49.365419 2026] [:error] [pid 12453:tid 12467] [client 193.19.204.87:47092] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adZ2ERjtW7S6XsLPvrRqsAAAAIw"]
[Wed Apr 08 23:36:50.849971 2026] [:error] [pid 12386:tid 12434] [client 193.19.204.87:47106] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adZ2EhLhhLtqHi2gK7UwuQAAARI"]
[Wed Apr 08 23:36:52.329834 2026] [:error] [pid 7189:tid 7212] [client 193.19.204.87:58434] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adZ2FBaBqhBSu0L37lr_owAAAdU"]
[Wed Apr 08 23:36:53.315962 2026] [:error] [pid 12386:tid 12418] [client 193.19.204.87:58440] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adZ2FRLhhLtqHi2gK7UwugAAAQI"]
[Wed Apr 08 23:36:54.306603 2026] [:error] [pid 7047:tid 7070] [client 193.19.204.87:58456] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adZ2FuNh3oGO3pKiCzxUagAAAZU"]
[Wed Apr 08 23:36:56.294298 2026] [proxy_fcgi:error] [pid 64066:tid 64090] [client 193.19.204.87:58470] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:36:56.792029 2026] [:error] [pid 64066:tid 64069] [client 193.19.204.87:58470] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adZ2GFR3WucJgr2vZGabPAAAAUA"]
[Wed Apr 08 23:36:57.780953 2026] [:error] [pid 35642:tid 35646] [client 193.19.204.87:58486] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adZ2GQ-CqryxdEs5DN92DQAAAEI"]
[Wed Apr 08 23:36:58.769748 2026] [:error] [pid 12490:tid 12516] [client 193.19.204.87:58502] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adZ2Gm1Fea4F4fbumr1GxQAAANg"]
[Wed Apr 08 23:37:00.837778 2026] [proxy_fcgi:error] [pid 12453:tid 12475] [client 193.19.204.87:58510] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:01.835630 2026] [proxy_fcgi:error] [pid 12453:tid 12461] [client 193.19.204.87:58510] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:02.333347 2026] [proxy_fcgi:error] [pid 12453:tid 12477] [client 193.19.204.87:58510] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:03.828298 2026] [:error] [pid 12453:tid 12458] [client 193.19.204.87:58510] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adZ2HxjtW7S6XsLPvrRrBQAAAIM"]
[Wed Apr 08 23:37:07.545653 2026] [:error] [pid 12453:tid 12473] [client 193.19.204.87:50630] [client 193.19.204.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.87, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adZ2IxjtW7S6XsLPvrRrDAAAAJI"]
[Wed Apr 08 23:37:08.049594 2026] [proxy_fcgi:error] [pid 12453:tid 12477] [client 193.19.204.87:50630] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:10.540535 2026] [proxy_fcgi:error] [pid 12453:tid 12458] [client 193.19.204.87:50630] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:11.038408 2026] [proxy_fcgi:error] [pid 12453:tid 12472] [client 193.19.204.87:50630] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:13.517896 2026] [:error] [pid 12453:tid 12462] [client 193.19.204.87:50630] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adZ2KRjtW7S6XsLPvrRrIQAAAIc"]
[Wed Apr 08 23:37:15.013110 2026] [proxy_fcgi:error] [pid 12453:tid 12469] [client 193.19.204.87:36700] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:15.512573 2026] [:error] [pid 12453:tid 12474] [client 193.19.204.87:36700] [client 193.19.204.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.87, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adZ2KxjtW7S6XsLPvrRrJQAAAJM"]
[Wed Apr 08 23:37:16.517921 2026] [:error] [pid 12453:tid 12471] [client 193.19.204.87:36700] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "adZ2LBjtW7S6XsLPvrRrKQAAAJA"]
[Wed Apr 08 23:37:18.008426 2026] [proxy_fcgi:error] [pid 7047:tid 7068] [client 193.19.204.87:36706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:19.489046 2026] [proxy_fcgi:error] [pid 7047:tid 7067] [client 193.19.204.87:36706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:20.486523 2026] [proxy_fcgi:error] [pid 7047:tid 7050] [client 193.19.204.87:36706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:21.468665 2026] [:error] [pid 7047:tid 7054] [client 193.19.204.87:36706] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adZ2MeNh3oGO3pKiCzxUuQAAAYU"]
[Wed Apr 08 23:37:22.480448 2026] [proxy_fcgi:error] [pid 64066:tid 64075] [client 193.19.204.87:32850] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:23.991660 2026] [proxy_fcgi:error] [pid 64066:tid 64084] [client 193.19.204.87:32850] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:24.998674 2026] [proxy_fcgi:error] [pid 64066:tid 64080] [client 193.19.204.87:32850] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:26.989248 2026] [proxy_fcgi:error] [pid 64066:tid 64086] [client 193.19.204.87:32850] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:27.485892 2026] [:error] [pid 64066:tid 64091] [client 193.19.204.87:32850] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adZ2N1R3WucJgr2vZGacSAAAAVY"]
[Wed Apr 08 23:37:28.483806 2026] [proxy_fcgi:error] [pid 7047:tid 7058] [client 193.19.204.87:32864] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:28.981833 2026] [proxy_fcgi:error] [pid 7047:tid 7053] [client 193.19.204.87:32864] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:29.474422 2026] [:error] [pid 7047:tid 7063] [client 193.19.204.87:32864] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adZ2OeNh3oGO3pKiCzxU1AAAAY4"]
[Wed Apr 08 23:37:30.960515 2026] [proxy_fcgi:error] [pid 64066:tid 64069] [client 193.19.204.87:32874] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:31.948543 2026] [:error] [pid 64066:tid 64083] [client 193.19.204.87:32874] [client 193.19.204.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.87, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adZ2O1R3WucJgr2vZGacVwAAAU4"]
[Wed Apr 08 23:37:32.453422 2026] [:error] [pid 64066:tid 64078] [client 193.19.204.87:32874] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adZ2PFR3WucJgr2vZGacWAAAAUk"]
[Wed Apr 08 23:37:38.403804 2026] [proxy_fcgi:error] [pid 12490:tid 12507] [client 193.19.204.87:35324] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:40.391080 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 193.19.204.87:35324] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:41.386905 2026] [proxy_fcgi:error] [pid 12490:tid 12510] [client 193.19.204.87:35324] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:41.877213 2026] [:error] [pid 12490:tid 12505] [client 193.19.204.87:35324] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adZ2RW1Fea4F4fbumr1HLAAAAM0"]
[Wed Apr 08 23:37:42.873642 2026] [proxy_fcgi:error] [pid 12453:tid 12462] [client 193.19.204.87:55706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:44.369420 2026] [:error] [pid 12453:tid 12464] [client 193.19.204.87:55706] [client 193.19.204.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.87, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adZ2SBjtW7S6XsLPvrRriQAAAIk"]
[Wed Apr 08 23:37:44.868683 2026] [proxy_fcgi:error] [pid 12453:tid 12458] [client 193.19.204.87:55706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:45.368589 2026] [proxy_fcgi:error] [pid 12453:tid 12467] [client 193.19.204.87:55706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:45.864677 2026] [proxy_fcgi:error] [pid 12453:tid 12466] [client 193.19.204.87:55706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:46.356999 2026] [:error] [pid 12453:tid 12471] [client 193.19.204.87:55706] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adZ2ShjtW7S6XsLPvrRrlwAAAJA"]
[Wed Apr 08 23:37:47.349008 2026] [proxy_fcgi:error] [pid 12490:tid 12505] [client 193.19.204.87:55714] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:47.845451 2026] [:error] [pid 12490:tid 12502] [client 193.19.204.87:55714] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adZ2S21Fea4F4fbumr1HTgAAAMo"]
[Wed Apr 08 23:37:49.353645 2026] [proxy_fcgi:error] [pid 64066:tid 64074] [client 193.19.204.87:55728] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:50.356476 2026] [:error] [pid 64066:tid 64093] [client 193.19.204.87:55728] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adZ2TlR3WucJgr2vZGaczgAAAVg"]
[Wed Apr 08 23:37:52.341298 2026] [proxy_fcgi:error] [pid 12490:tid 12512] [client 193.19.204.87:38746] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:52.840503 2026] [:error] [pid 12490:tid 12514] [client 193.19.204.87:38746] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adZ2UG1Fea4F4fbumr1HYQAAANY"]
[Wed Apr 08 23:37:53.828368 2026] [:error] [pid 7189:tid 7205] [client 193.19.204.87:38754] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adZ2URaBqhBSu0L37lr_zQAAAc4"]
[Wed Apr 08 23:37:54.812662 2026] [proxy_fcgi:error] [pid 64066:tid 64080] [client 193.19.204.87:38762] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:55.336803 2026] [proxy_fcgi:error] [pid 64066:tid 64072] [client 193.19.204.87:38762] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:37:58.023533 2026] [:error] [pid 64066:tid 64082] [client 193.19.204.87:38762] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adZ2VlR3WucJgr2vZGac-AAAAU0"]
[Wed Apr 08 23:37:59.519637 2026] [:error] [pid 12490:tid 12505] [client 193.19.204.87:38764] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adZ2V21Fea4F4fbumr1HbwAAAM0"]
[Wed Apr 08 23:38:00.514315 2026] [proxy_fcgi:error] [pid 12453:tid 12469] [client 193.19.204.87:38768] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:02.007772 2026] [:error] [pid 12453:tid 12472] [client 193.19.204.87:38768] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adZ2WhjtW7S6XsLPvrRr8gAAAJE"]
[Wed Apr 08 23:38:02.995194 2026] [proxy_fcgi:error] [pid 12453:tid 12466] [client 193.19.204.87:57190] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:03.994402 2026] [proxy_fcgi:error] [pid 12453:tid 12465] [client 193.19.204.87:57190] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:04.492539 2026] [:error] [pid 12453:tid 12463] [client 193.19.204.87:57190] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adZ2XBjtW7S6XsLPvrRsBgAAAIg"]
[Wed Apr 08 23:38:05.484160 2026] [proxy_fcgi:error] [pid 12385:tid 12399] [client 193.19.204.87:57196] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:06.485648 2026] [:error] [pid 12385:tid 12394] [client 193.19.204.87:57196] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "adZ2XiAjtvRQEkLosq2zEgAAAAU"]
[Wed Apr 08 23:38:07.495463 2026] [proxy_fcgi:error] [pid 12490:tid 12499] [client 193.19.204.87:57200] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:08.996993 2026] [:error] [pid 12490:tid 12499] [client 193.19.204.87:57200] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adZ2YG1Fea4F4fbumr1H3QAAAMc"]
[Wed Apr 08 23:38:10.491391 2026] [proxy_fcgi:error] [pid 7189:tid 7212] [client 193.19.204.87:57204] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:11.487776 2026] [proxy_fcgi:error] [pid 7189:tid 7215] [client 193.19.204.87:57204] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:12.002634 2026] [proxy_fcgi:error] [pid 7189:tid 7202] [client 193.19.204.87:57204] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:12.999342 2026] [proxy_fcgi:error] [pid 7189:tid 7192] [client 193.19.204.87:57204] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:13.510545 2026] [:error] [pid 7189:tid 7213] [client 193.19.204.87:57204] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adZ2ZRaBqhBSu0L37lr_6wAAAdY"]
[Wed Apr 08 23:38:14.508934 2026] [:error] [pid 12490:tid 12513] [client 193.19.204.87:42804] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adZ2Zm1Fea4F4fbumr1H6QAAANU"]
[Wed Apr 08 23:38:15.493012 2026] [:error] [pid 12453:tid 12470] [client 193.19.204.87:42810] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adZ2ZxjtW7S6XsLPvrRsLQAAAI8"]
[Wed Apr 08 23:38:16.478137 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.87:42820] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adZ2aFR3WucJgr2vZGadVgAAAUo"]
[Wed Apr 08 23:38:17.482338 2026] [proxy_fcgi:error] [pid 64066:tid 64091] [client 193.19.204.87:25332] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:17.975688 2026] [:error] [pid 64066:tid 64092] [client 193.19.204.87:25332] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adZ2aVR3WucJgr2vZGadZAAAAVc"]
[Wed Apr 08 23:38:18.961253 2026] [:error] [pid 64066:tid 64093] [client 193.19.204.87:42838] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adZ2alR3WucJgr2vZGadagAAAVg"]
[Wed Apr 08 23:38:19.954873 2026] [proxy_fcgi:error] [pid 12453:tid 12473] [client 193.19.204.87:42707] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:20.951317 2026] [:error] [pid 12453:tid 12457] [client 193.19.204.87:42707] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adZ2bBjtW7S6XsLPvrRsNwAAAII"]
[Wed Apr 08 23:38:21.942677 2026] [:error] [pid 12490:tid 12515] [client 193.19.204.87:48548] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adZ2bW1Fea4F4fbumr1IAQAAANc"]
[Wed Apr 08 23:38:22.931035 2026] [:error] [pid 64066:tid 64077] [client 193.19.204.87:48550] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adZ2blR3WucJgr2vZGaddAAAAUg"]
[Wed Apr 08 23:38:23.935448 2026] [:error] [pid 12490:tid 12509] [client 193.19.204.87:48552] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adZ2b21Fea4F4fbumr1IDAAAANE"]
[Wed Apr 08 23:38:25.413608 2026] [:error] [pid 12490:tid 12508] [client 193.19.204.87:48560] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adZ2cW1Fea4F4fbumr1IIQAAANA"]
[Wed Apr 08 23:38:27.383466 2026] [:error] [pid 12490:tid 12500] [client 193.19.204.87:48574] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adZ2c21Fea4F4fbumr1IOQAAAMg"]
[Wed Apr 08 23:38:28.372084 2026] [proxy_fcgi:error] [pid 64066:tid 64087] [client 193.19.204.87:48588] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:29.857966 2026] [proxy_fcgi:error] [pid 64066:tid 64085] [client 193.19.204.87:48588] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:30.349912 2026] [:error] [pid 64066:tid 64078] [client 193.19.204.87:48588] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adZ2dlR3WucJgr2vZGadrwAAAUk"]
[Wed Apr 08 23:38:31.828800 2026] [proxy_fcgi:error] [pid 64066:tid 64078] [client 193.19.204.87:44900] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:32.323280 2026] [proxy_fcgi:error] [pid 64066:tid 64092] [client 193.19.204.87:44900] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:34.306027 2026] [proxy_fcgi:error] [pid 64066:tid 64083] [client 193.19.204.87:44900] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:34.795800 2026] [:error] [pid 64066:tid 64070] [client 193.19.204.87:44900] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adZ2elR3WucJgr2vZGadwQAAAUE"]
[Wed Apr 08 23:38:35.784739 2026] [proxy_fcgi:error] [pid 64066:tid 64076] [client 193.19.204.87:44910] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:37.269034 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.87:44910] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adZ2fVR3WucJgr2vZGadzAAAAUo"]
[Wed Apr 08 23:38:38.260153 2026] [:error] [pid 12385:tid 12389] [client 193.19.204.87:44918] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adZ2fiAjtvRQEkLosq2zGAAAAAA"]
[Wed Apr 08 23:38:41.267321 2026] [:error] [pid 12490:tid 12497] [client 193.19.204.87:44932] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adZ2gW1Fea4F4fbumr1IdAAAAMU"]
[Wed Apr 08 23:38:44.040216 2026] [proxy_fcgi:error] [pid 12490:tid 12501] [client 193.19.204.87:35140] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:44.536452 2026] [proxy_fcgi:error] [pid 12490:tid 12497] [client 193.19.204.87:35140] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:45.034470 2026] [proxy_fcgi:error] [pid 12490:tid 12495] [client 193.19.204.87:35140] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:45.533792 2026] [proxy_fcgi:error] [pid 12490:tid 12505] [client 193.19.204.87:35140] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:38:48.013594 2026] [:error] [pid 12490:tid 12510] [client 193.19.204.87:35140] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adZ2iG1Fea4F4fbumr1IlgAAANI"]
[Wed Apr 08 23:38:48.996716 2026] [:error] [pid 12490:tid 12497] [client 193.19.204.87:35148] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adZ2iG1Fea4F4fbumr1ImAAAAMU"]
[Wed Apr 08 23:38:49.983492 2026] [:error] [pid 12490:tid 12505] [client 193.19.204.87:35152] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adZ2iW1Fea4F4fbumr1InAAAAM0"]
[Wed Apr 08 23:38:50.968096 2026] [:error] [pid 35642:tid 35665] [client 193.19.204.87:35168] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adZ2ig-CqryxdEs5DN92kQAAAFU"]
[Wed Apr 08 23:38:51.956501 2026] [:error] [pid 12453:tid 12455] [client 193.19.204.87:38080] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adZ2ixjtW7S6XsLPvrRsTQAAAIA"]
[Wed Apr 08 23:38:52.957419 2026] [:error] [pid 7189:tid 7201] [client 193.19.204.87:38094] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adZ2jBaBqhBSu0L37lr_-QAAAco"]
[Wed Apr 08 23:38:54.436970 2026] [:error] [pid 35642:tid 35651] [client 193.19.204.87:38098] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adZ2jg-CqryxdEs5DN92lQAAAEc"]
[Wed Apr 08 23:38:55.426980 2026] [:error] [pid 7189:tid 7208] [client 193.19.204.87:4586] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adZ2jxaBqhBSu0L37lr__AAAAdE"]
[Wed Apr 08 23:38:56.419200 2026] [:error] [pid 12453:tid 12466] [client 193.19.204.87:38108] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adZ2kBjtW7S6XsLPvrRsVgAAAIs"]
[Wed Apr 08 23:38:57.411006 2026] [:error] [pid 7189:tid 7195] [client 193.19.204.87:38118] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adZ2kRaBqhBSu0L37loAAQAAAcQ"]
[Wed Apr 08 23:38:59.424042 2026] [:error] [pid 64066:tid 64090] [client 193.19.204.87:38120] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adZ2k1R3WucJgr2vZGad4QAAAVU"]
[Wed Apr 08 23:39:00.916537 2026] [:error] [pid 12385:tid 12413] [client 193.19.204.87:38126] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adZ2lCAjtvRQEkLosq2zIwAAABg"]
[Wed Apr 08 23:39:01.910722 2026] [proxy_fcgi:error] [pid 7047:tid 7062] [client 193.19.204.87:56448] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:02.908172 2026] [:error] [pid 7047:tid 7069] [client 193.19.204.87:56448] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adZ2luNh3oGO3pKiCzxVMQAAAZQ"]
[Wed Apr 08 23:39:04.901025 2026] [:error] [pid 64066:tid 64070] [client 193.19.204.87:14576] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adZ2mFR3WucJgr2vZGad8AAAAUE"]
[Wed Apr 08 23:39:05.901471 2026] [proxy_fcgi:error] [pid 12490:tid 12516] [client 193.19.204.87:56470] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:06.907464 2026] [proxy_fcgi:error] [pid 12490:tid 12513] [client 193.19.204.87:56470] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:07.404806 2026] [:error] [pid 12490:tid 12496] [client 193.19.204.87:56470] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adZ2m21Fea4F4fbumr1IrgAAAMQ"]
[Wed Apr 08 23:39:08.891180 2026] [proxy_fcgi:error] [pid 64066:tid 64089] [client 193.19.204.87:56478] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:09.385270 2026] [proxy_fcgi:error] [pid 64066:tid 64083] [client 193.19.204.87:56478] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:09.881036 2026] [proxy_fcgi:error] [pid 64066:tid 64082] [client 193.19.204.87:56478] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:10.372003 2026] [:error] [pid 64066:tid 64076] [client 193.19.204.87:56478] [client 193.19.204.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adZ2nlR3WucJgr2vZGaeBgAAAUc"]
[Wed Apr 08 23:39:12.949172 2026] [proxy_fcgi:error] [pid 7047:tid 7060] [client 193.19.204.81:38188] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:13.446133 2026] [:error] [pid 7047:tid 7050] [client 193.19.204.81:38188] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adZ2oeNh3oGO3pKiCzxVOQAAAYE"]
[Wed Apr 08 23:39:17.039817 2026] [proxy_fcgi:error] [pid 12453:tid 12460] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:17.535623 2026] [proxy_fcgi:error] [pid 12453:tid 12468] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:18.030817 2026] [proxy_fcgi:error] [pid 12453:tid 12464] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:19.024297 2026] [proxy_fcgi:error] [pid 12453:tid 12457] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:20.510986 2026] [proxy_fcgi:error] [pid 12453:tid 12479] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:21.005963 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:21.500375 2026] [proxy_fcgi:error] [pid 12453:tid 12476] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:21.995303 2026] [proxy_fcgi:error] [pid 12453:tid 12458] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:23.484439 2026] [proxy_fcgi:error] [pid 12453:tid 12465] [client 193.19.204.81:38198] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:23.977791 2026] [:error] [pid 12453:tid 12462] [client 193.19.204.81:38198] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adZ2qxjtW7S6XsLPvrRtHgAAAIc"]
[Wed Apr 08 23:39:24.965419 2026] [:error] [pid 12385:tid 12393] [client 193.19.204.81:41838] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adZ2rCAjtvRQEkLosq2zKAAAAAQ"]
[Wed Apr 08 23:39:25.960161 2026] [proxy_fcgi:error] [pid 64066:tid 64069] [client 193.19.204.81:41850] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:26.453172 2026] [:error] [pid 64066:tid 64081] [client 193.19.204.81:41850] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adZ2rlR3WucJgr2vZGaeOQAAAUw"]
[Wed Apr 08 23:39:27.940675 2026] [proxy_fcgi:error] [pid 12386:tid 12416] [client 193.19.204.81:41864] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:28.430398 2026] [:error] [pid 12386:tid 12426] [client 193.19.204.81:41864] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adZ2sBLhhLtqHi2gK7UxJgAAAQo"]
[Wed Apr 08 23:39:29.410169 2026] [:error] [pid 35642:tid 35646] [client 193.19.204.81:41870] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adZ2sQ-CqryxdEs5DN92nAAAAEI"]
[Wed Apr 08 23:39:32.392278 2026] [:error] [pid 7047:tid 7065] [client 193.19.204.81:41876] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adZ2tONh3oGO3pKiCzxVXgAAAZA"]
[Wed Apr 08 23:39:33.375504 2026] [:error] [pid 7189:tid 7205] [client 193.19.204.81:58454] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "adZ2tRaBqhBSu0L37loAPwAAAc4"]
[Wed Apr 08 23:39:35.846977 2026] [proxy_fcgi:error] [pid 7047:tid 7064] [client 193.19.204.81:58460] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:36.836725 2026] [:error] [pid 7047:tid 7053] [client 193.19.204.81:58460] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adZ2uONh3oGO3pKiCzxVawAAAYQ"]
[Wed Apr 08 23:39:38.327878 2026] [proxy_fcgi:error] [pid 7047:tid 7054] [client 193.19.204.81:58464] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:39.324959 2026] [:error] [pid 7047:tid 7057] [client 193.19.204.81:58464] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "adZ2u-Nh3oGO3pKiCzxVcgAAAYg"]
[Wed Apr 08 23:39:40.322721 2026] [:error] [pid 64066:tid 64093] [client 193.19.204.81:58474] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adZ2vFR3WucJgr2vZGaeagAAAVg"]
[Wed Apr 08 23:39:41.807266 2026] [proxy_fcgi:error] [pid 7047:tid 7059] [client 193.19.204.81:55118] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:42.300304 2026] [:error] [pid 7047:tid 7051] [client 193.19.204.81:55118] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adZ2vuNh3oGO3pKiCzxVeAAAAYI"]
[Wed Apr 08 23:39:43.289170 2026] [:error] [pid 12490:tid 12513] [client 193.19.204.81:55132] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adZ2v21Fea4F4fbumr1JJwAAANU"]
[Wed Apr 08 23:39:45.277660 2026] [proxy_fcgi:error] [pid 7047:tid 7072] [client 193.19.204.81:55136] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:45.774674 2026] [proxy_fcgi:error] [pid 7047:tid 7058] [client 193.19.204.81:55136] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:46.770321 2026] [proxy_fcgi:error] [pid 7047:tid 7061] [client 193.19.204.81:55136] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:47.761401 2026] [:error] [pid 7047:tid 7072] [client 193.19.204.81:55136] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adZ2w-Nh3oGO3pKiCzxVjQAAAZc"]
[Wed Apr 08 23:39:48.753065 2026] [:error] [pid 12453:tid 12477] [client 193.19.204.81:55142] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adZ2xBjtW7S6XsLPvrRtRwAAAJY"]
[Wed Apr 08 23:39:49.745752 2026] [proxy_fcgi:error] [pid 12490:tid 12506] [client 193.19.204.81:55156] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:50.245611 2026] [proxy_fcgi:error] [pid 12490:tid 12492] [client 193.19.204.81:55156] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:51.254274 2026] [proxy_fcgi:error] [pid 12490:tid 12511] [client 193.19.204.81:55156] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:51.751798 2026] [:error] [pid 12490:tid 12506] [client 193.19.204.81:55156] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "adZ2x21Fea4F4fbumr1JoQAAAM4"]
[Wed Apr 08 23:39:52.739654 2026] [:error] [pid 12453:tid 12476] [client 193.19.204.81:33980] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adZ2yBjtW7S6XsLPvrRtSgAAAJU"]
[Wed Apr 08 23:39:53.727078 2026] [:error] [pid 64066:tid 64089] [client 193.19.204.81:33990] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adZ2yVR3WucJgr2vZGaedQAAAVQ"]
[Wed Apr 08 23:39:57.130610 2026] [proxy_fcgi:error] [pid 12490:tid 12497] [client 193.19.204.81:33992] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:39:57.622654 2026] [:error] [pid 12490:tid 12511] [client 193.19.204.81:33992] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adZ2zW1Fea4F4fbumr1JrgAAANM"]
[Wed Apr 08 23:39:59.112624 2026] [:error] [pid 64066:tid 64074] [client 193.19.204.81:34004] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adZ2z1R3WucJgr2vZGaejQAAAUU"]
[Wed Apr 08 23:40:00.097601 2026] [proxy_fcgi:error] [pid 35642:tid 35649] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:00.594298 2026] [proxy_fcgi:error] [pid 35642:tid 35647] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:01.587615 2026] [proxy_fcgi:error] [pid 35642:tid 35655] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:03.589913 2026] [:error] [pid 35642:tid 35664] [client 193.19.204.81:34012] [client 193.19.204.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.81, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "adZ20w-CqryxdEs5DN920wAAAFQ"]
[Wed Apr 08 23:40:04.580713 2026] [:error] [pid 35642:tid 35645] [client 193.19.204.81:34012] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Wed Apr 08 23:40:06.116728 2026] [proxy_fcgi:error] [pid 35642:tid 35653] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:06.610877 2026] [proxy_fcgi:error] [pid 35642:tid 35663] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:07.108250 2026] [proxy_fcgi:error] [pid 35642:tid 35649] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:07.599277 2026] [:error] [pid 35642:tid 35644] [client 193.19.204.81:34012] [client 193.19.204.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.81, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adZ21w-CqryxdEs5DN925gAAAEA"]
[Wed Apr 08 23:40:08.122353 2026] [proxy_fcgi:error] [pid 35642:tid 35664] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:09.119640 2026] [proxy_fcgi:error] [pid 35642:tid 35659] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:09.615783 2026] [proxy_fcgi:error] [pid 35642:tid 35657] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:10.617153 2026] [proxy_fcgi:error] [pid 35642:tid 35658] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:11.623730 2026] [proxy_fcgi:error] [pid 35642:tid 35661] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:13.106129 2026] [proxy_fcgi:error] [pid 35642:tid 35655] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:16.623480 2026] [proxy_fcgi:error] [pid 35642:tid 35657] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:17.120420 2026] [proxy_fcgi:error] [pid 35642:tid 35650] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:18.622198 2026] [proxy_fcgi:error] [pid 35642:tid 35662] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:19.608546 2026] [proxy_fcgi:error] [pid 35642:tid 35668] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:20.107354 2026] [proxy_fcgi:error] [pid 35642:tid 35656] [client 193.19.204.81:34012] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:20.597541 2026] [:error] [pid 35642:tid 35655] [client 193.19.204.81:34012] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adZ25A-CqryxdEs5DN93CwAAAEs"]
[Wed Apr 08 23:40:22.089370 2026] [proxy_fcgi:error] [pid 64066:tid 64071] [client 193.19.204.81:60404] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:23.315904 2026] [proxy_fcgi:error] [pid 64066:tid 64075] [client 193.19.204.81:60404] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:23.812128 2026] [:error] [pid 64066:tid 64070] [client 193.19.204.81:60404] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adZ251R3WucJgr2vZGafMgAAAUE"]
[Wed Apr 08 23:40:25.305304 2026] [proxy_fcgi:error] [pid 12490:tid 12514] [client 193.19.204.81:60406] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:25.797681 2026] [:error] [pid 12490:tid 12502] [client 193.19.204.81:60406] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adZ26W1Fea4F4fbumr1J6wAAAMo"]
[Wed Apr 08 23:40:27.790516 2026] [proxy_fcgi:error] [pid 7047:tid 7071] [client 193.19.204.81:60408] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:30.903152 2026] [proxy_fcgi:error] [pid 7047:tid 7065] [client 193.19.204.81:60408] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:31.399469 2026] [proxy_fcgi:error] [pid 7047:tid 7073] [client 193.19.204.81:60408] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:31.893865 2026] [proxy_fcgi:error] [pid 7047:tid 7060] [client 193.19.204.81:60408] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:32.390501 2026] [proxy_fcgi:error] [pid 7047:tid 7050] [client 193.19.204.81:60408] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:33.383460 2026] [:error] [pid 7047:tid 7070] [client 193.19.204.81:60408] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adZ28eNh3oGO3pKiCzxV9wAAAZU"]
[Wed Apr 08 23:40:34.372879 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 193.19.204.81:45914] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:34.870888 2026] [proxy_fcgi:error] [pid 12453:tid 12455] [client 193.19.204.81:45914] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:35.369900 2026] [:error] [pid 12453:tid 12473] [client 193.19.204.81:45914] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adZ28xjtW7S6XsLPvrRtdwAAAJI"]
[Wed Apr 08 23:40:36.854572 2026] [:error] [pid 12490:tid 12498] [client 193.19.204.81:45926] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adZ29G1Fea4F4fbumr1KFgAAAMY"]
[Wed Apr 08 23:40:38.347580 2026] [proxy_fcgi:error] [pid 64066:tid 64083] [client 193.19.204.81:45928] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:39.848999 2026] [proxy_fcgi:error] [pid 64066:tid 64087] [client 193.19.204.81:45928] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:40.354121 2026] [proxy_fcgi:error] [pid 64066:tid 64070] [client 193.19.204.81:45928] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:40.845448 2026] [:error] [pid 64066:tid 64080] [client 193.19.204.81:45928] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adZ2-FR3WucJgr2vZGafkgAAAUs"]
[Wed Apr 08 23:40:41.834743 2026] [:error] [pid 12490:tid 12503] [client 193.19.204.81:51000] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adZ2-W1Fea4F4fbumr1KIAAAAMs"]
[Wed Apr 08 23:40:45.310136 2026] [proxy_fcgi:error] [pid 64066:tid 64085] [client 193.19.204.81:51004] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:46.296421 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.81:51004] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adZ2_lR3WucJgr2vZGaf8AAAAUo"]
[Wed Apr 08 23:40:47.788142 2026] [:error] [pid 7189:tid 7212] [client 193.19.204.81:51006] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "adZ2_xaBqhBSu0L37loAkAAAAdU"]
[Wed Apr 08 23:40:49.281051 2026] [proxy_fcgi:error] [pid 12490:tid 12507] [client 193.19.204.81:51016] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:49.781130 2026] [proxy_fcgi:error] [pid 12490:tid 12501] [client 193.19.204.81:51016] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:50.276359 2026] [:error] [pid 12490:tid 12504] [client 193.19.204.81:51016] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adZ3Am1Fea4F4fbumr1KKgAAAMw"]
[Wed Apr 08 23:40:51.755081 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 193.19.204.81:39734] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:52.252600 2026] [proxy_fcgi:error] [pid 7189:tid 7205] [client 193.19.204.81:39734] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:53.244795 2026] [proxy_fcgi:error] [pid 7189:tid 7213] [client 193.19.204.81:39734] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:54.731657 2026] [:error] [pid 7189:tid 7203] [client 193.19.204.81:39734] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adZ3BhaBqhBSu0L37loAnQAAAcw"]
[Wed Apr 08 23:40:55.722161 2026] [proxy_fcgi:error] [pid 7047:tid 7059] [client 193.19.204.81:39750] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:40:57.238914 2026] [:error] [pid 7047:tid 7071] [client 193.19.204.81:39750] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adZ3CeNh3oGO3pKiCzxWHAAAAZY"]
[Wed Apr 08 23:40:58.758067 2026] [proxy_fcgi:error] [pid 12385:tid 12400] [client 193.19.204.81:39764] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:00.267613 2026] [proxy_fcgi:error] [pid 12385:tid 12403] [client 193.19.204.81:39764] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:00.774071 2026] [proxy_fcgi:error] [pid 12385:tid 12392] [client 193.19.204.81:39764] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:01.784920 2026] [:error] [pid 12385:tid 12398] [client 193.19.204.81:39764] [client 193.19.204.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.81, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adZ3DSAjtvRQEkLosq2zlAAAAAk"]
[Wed Apr 08 23:41:02.783528 2026] [proxy_fcgi:error] [pid 12385:tid 12412] [client 193.19.204.81:39764] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:04.282452 2026] [:error] [pid 12385:tid 12404] [client 193.19.204.81:39764] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adZ3ECAjtvRQEkLosq2zmgAAAA8"]
[Wed Apr 08 23:41:05.271053 2026] [proxy_fcgi:error] [pid 7047:tid 7049] [client 193.19.204.81:55334] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:05.766560 2026] [:error] [pid 7047:tid 7050] [client 193.19.204.81:55334] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adZ3EeNh3oGO3pKiCzxWIwAAAYE"]
[Wed Apr 08 23:41:06.758183 2026] [proxy_fcgi:error] [pid 12386:tid 12433] [client 193.19.204.81:55350] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:07.761607 2026] [proxy_fcgi:error] [pid 12386:tid 12429] [client 193.19.204.81:55350] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:08.764781 2026] [:error] [pid 12386:tid 12434] [client 193.19.204.81:55350] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adZ3FBLhhLtqHi2gK7UxPAAAARI"]
[Wed Apr 08 23:41:10.262604 2026] [proxy_fcgi:error] [pid 12385:tid 12390] [client 193.19.204.81:55362] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:10.759386 2026] [proxy_fcgi:error] [pid 12385:tid 12410] [client 193.19.204.81:55362] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:11.252135 2026] [:error] [pid 12385:tid 12391] [client 193.19.204.81:55362] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adZ3FyAjtvRQEkLosq2zngAAAAI"]
[Wed Apr 08 23:41:12.247340 2026] [:error] [pid 35642:tid 35656] [client 193.19.204.81:60228] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adZ3GA-CqryxdEs5DN93FAAAAEw"]
[Wed Apr 08 23:41:13.243726 2026] [proxy_fcgi:error] [pid 12453:tid 12472] [client 193.19.204.81:60238] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:13.743402 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 193.19.204.81:60238] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:14.741454 2026] [:error] [pid 12453:tid 12476] [client 193.19.204.81:60238] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adZ3GhjtW7S6XsLPvrRuLAAAAJU"]
[Wed Apr 08 23:41:15.733427 2026] [proxy_fcgi:error] [pid 64066:tid 64090] [client 193.19.204.81:60254] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:16.725427 2026] [proxy_fcgi:error] [pid 64066:tid 64074] [client 193.19.204.81:60254] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:17.215788 2026] [:error] [pid 64066:tid 64091] [client 193.19.204.81:60254] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adZ3HVR3WucJgr2vZGagKgAAAVY"]
[Wed Apr 08 23:41:18.704179 2026] [:error] [pid 12490:tid 12511] [client 193.19.204.81:60262] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/db.php"] [unique_id "adZ3Hm1Fea4F4fbumr1KwAAAANM"]
[Wed Apr 08 23:41:19.693451 2026] [:error] [pid 12453:tid 12478] [client 193.19.204.81:60266] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adZ3HxjtW7S6XsLPvrRuOgAAAJc"]
[Wed Apr 08 23:41:20.713393 2026] [:error] [pid 64066:tid 64092] [client 193.19.204.81:60270] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adZ3IFR3WucJgr2vZGagOgAAAVc"]
[Wed Apr 08 23:41:21.703076 2026] [:error] [pid 64066:tid 64075] [client 193.19.204.81:39854] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adZ3IVR3WucJgr2vZGagPwAAAUY"]
[Wed Apr 08 23:41:22.693363 2026] [:error] [pid 7047:tid 7055] [client 193.19.204.81:39866] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adZ3IuNh3oGO3pKiCzxWNgAAAYY"]
[Wed Apr 08 23:41:23.683197 2026] [:error] [pid 12490:tid 12504] [client 193.19.204.81:39882] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adZ3I21Fea4F4fbumr1K2QAAAMw"]
[Wed Apr 08 23:41:25.673928 2026] [:error] [pid 12490:tid 12512] [client 193.19.204.81:39888] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adZ3JW1Fea4F4fbumr1K5gAAANQ"]
[Wed Apr 08 23:41:28.198733 2026] [:error] [pid 64066:tid 64082] [client 193.19.204.81:39896] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adZ3KFR3WucJgr2vZGagUQAAAU0"]
[Wed Apr 08 23:41:29.205780 2026] [:error] [pid 35642:tid 35646] [client 193.19.204.81:39898] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adZ3KQ-CqryxdEs5DN93GAAAAEI"]
[Wed Apr 08 23:41:30.194783 2026] [:error] [pid 64066:tid 64091] [client 193.19.204.81:39900] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adZ3KlR3WucJgr2vZGagXQAAAVY"]
[Wed Apr 08 23:41:31.193711 2026] [:error] [pid 64066:tid 64078] [client 193.19.204.81:56508] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adZ3K1R3WucJgr2vZGagZgAAAUk"]
[Wed Apr 08 23:41:32.191800 2026] [proxy_fcgi:error] [pid 7047:tid 7057] [client 193.19.204.81:56510] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:33.686118 2026] [:error] [pid 7047:tid 7063] [client 193.19.204.81:56510] [client 193.19.204.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.81, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adZ3LeNh3oGO3pKiCzxWRAAAAY4"]
[Wed Apr 08 23:41:36.189109 2026] [:error] [pid 7047:tid 7069] [client 193.19.204.81:56510] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adZ3MONh3oGO3pKiCzxWTgAAAZQ"]
[Wed Apr 08 23:41:38.172856 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:38.666713 2026] [proxy_fcgi:error] [pid 7189:tid 7194] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:40.651073 2026] [proxy_fcgi:error] [pid 7189:tid 7206] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:41.146503 2026] [proxy_fcgi:error] [pid 7189:tid 7199] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:43.130624 2026] [proxy_fcgi:error] [pid 7189:tid 7202] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:43.626951 2026] [proxy_fcgi:error] [pid 7189:tid 7209] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:44.120833 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:44.616036 2026] [proxy_fcgi:error] [pid 7189:tid 7191] [client 193.19.204.81:56526] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:45.117068 2026] [:error] [pid 7189:tid 7194] [client 193.19.204.81:56526] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adZ3ORaBqhBSu0L37loA3AAAAcM"]
[Wed Apr 08 23:41:46.132054 2026] [:error] [pid 64066:tid 64075] [client 193.19.204.81:58738] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adZ3OlR3WucJgr2vZGagjwAAAUY"]
[Wed Apr 08 23:41:47.123223 2026] [:error] [pid 12490:tid 12514] [client 193.19.204.81:58746] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adZ3O21Fea4F4fbumr1LYwAAANY"]
[Wed Apr 08 23:41:48.652406 2026] [proxy_fcgi:error] [pid 64066:tid 64075] [client 193.19.204.81:58756] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:49.162795 2026] [proxy_fcgi:error] [pid 64066:tid 64076] [client 193.19.204.81:58756] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:50.165210 2026] [proxy_fcgi:error] [pid 64066:tid 64089] [client 193.19.204.81:58756] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:41:51.162245 2026] [:error] [pid 64066:tid 64073] [client 193.19.204.81:58756] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adZ3P1R3WucJgr2vZGagsQAAAUQ"]
[Wed Apr 08 23:41:52.145742 2026] [:error] [pid 12490:tid 12498] [client 193.19.204.81:38354] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adZ3QG1Fea4F4fbumr1LZQAAAMY"]
[Wed Apr 08 23:41:53.130903 2026] [:error] [pid 12453:tid 12473] [client 193.19.204.81:38366] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adZ3QRjtW7S6XsLPvrRuxgAAAJI"]
[Wed Apr 08 23:41:56.117615 2026] [:error] [pid 64066:tid 64082] [client 193.19.204.81:38382] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adZ3RFR3WucJgr2vZGagvwAAAU0"]
[Wed Apr 08 23:41:57.596937 2026] [:error] [pid 12386:tid 12433] [client 193.19.204.81:38398] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adZ3RRLhhLtqHi2gK7UxVQAAARE"]
[Wed Apr 08 23:41:59.569314 2026] [:error] [pid 12490:tid 12492] [client 193.19.204.81:38414] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adZ3R21Fea4F4fbumr1LggAAAMA"]
[Wed Apr 08 23:42:01.567838 2026] [proxy_fcgi:error] [pid 12453:tid 12455] [client 193.19.204.81:38424] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:03.759564 2026] [proxy_fcgi:error] [pid 12453:tid 12466] [client 193.19.204.81:38424] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:07.250846 2026] [:error] [pid 12453:tid 12472] [client 193.19.204.81:38424] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adZ3TxjtW7S6XsLPvrRvAQAAAJE"]
[Wed Apr 08 23:42:08.239951 2026] [proxy_fcgi:error] [pid 64066:tid 64079] [client 193.19.204.81:48316] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:08.733052 2026] [:error] [pid 64066:tid 64075] [client 193.19.204.81:48316] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "adZ3UFR3WucJgr2vZGahDQAAAUY"]
[Wed Apr 08 23:42:10.732844 2026] [proxy_fcgi:error] [pid 64066:tid 64070] [client 193.19.204.81:48330] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:12.247325 2026] [proxy_fcgi:error] [pid 64066:tid 64090] [client 193.19.204.81:48330] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:12.742107 2026] [:error] [pid 64066:tid 64069] [client 193.19.204.81:48330] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adZ3VFR3WucJgr2vZGahLAAAAUA"]
[Wed Apr 08 23:42:14.742126 2026] [:error] [pid 12453:tid 12477] [client 193.19.204.81:39220] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adZ3VhjtW7S6XsLPvrRvHQAAAJY"]
[Wed Apr 08 23:42:16.239552 2026] [proxy_fcgi:error] [pid 12490:tid 12510] [client 193.19.204.81:39224] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:17.761674 2026] [:error] [pid 12490:tid 12504] [client 193.19.204.81:39224] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adZ3WW1Fea4F4fbumr1MFgAAAMw"]
[Wed Apr 08 23:42:20.736918 2026] [:error] [pid 64066:tid 64085] [client 193.19.204.81:39230] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adZ3XFR3WucJgr2vZGahYQAAAVA"]
[Wed Apr 08 23:42:21.724056 2026] [proxy_fcgi:error] [pid 64066:tid 64086] [client 193.19.204.81:54354] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:22.219901 2026] [proxy_fcgi:error] [pid 64066:tid 64089] [client 193.19.204.81:54354] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:22.710913 2026] [:error] [pid 64066:tid 64076] [client 193.19.204.81:54354] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adZ3XlR3WucJgr2vZGahaQAAAUc"]
[Wed Apr 08 23:42:23.700135 2026] [:error] [pid 12453:tid 12459] [client 193.19.204.81:54360] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adZ3XxjtW7S6XsLPvrRvSAAAAIQ"]
[Wed Apr 08 23:42:26.204378 2026] [proxy_fcgi:error] [pid 64066:tid 64086] [client 193.19.204.81:54364] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:27.203150 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.81:54364] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adZ3Y1R3WucJgr2vZGahiQAAAUo"]
[Wed Apr 08 23:42:28.189554 2026] [proxy_fcgi:error] [pid 64066:tid 64074] [client 193.19.204.81:54368] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:30.176612 2026] [proxy_fcgi:error] [pid 64066:tid 64089] [client 193.19.204.81:54368] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:31.748178 2026] [:error] [pid 64066:tid 64076] [client 193.19.204.81:54368] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adZ3Z1R3WucJgr2vZGahxAAAAUc"]
[Wed Apr 08 23:42:33.740576 2026] [proxy_fcgi:error] [pid 35642:tid 35655] [client 193.19.204.81:60860] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:35.633557 2026] [:error] [pid 35642:tid 35646] [client 193.19.204.81:60860] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adZ3aw-CqryxdEs5DN93pgAAAEI"]
[Wed Apr 08 23:42:36.618431 2026] [:error] [pid 64066:tid 64085] [client 193.19.204.81:60864] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adZ3bFR3WucJgr2vZGahzQAAAVA"]
[Wed Apr 08 23:42:38.104541 2026] [:error] [pid 12453:tid 12478] [client 193.19.204.81:60874] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adZ3bhjtW7S6XsLPvrRvawAAAJc"]
[Wed Apr 08 23:42:40.074047 2026] [:error] [pid 7047:tid 7056] [client 193.19.204.81:60878] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adZ3cONh3oGO3pKiCzxWpQAAAYc"]
[Wed Apr 08 23:42:41.059563 2026] [:error] [pid 12490:tid 12493] [client 193.19.204.81:60882] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adZ3cW1Fea4F4fbumr1MQwAAAME"]
[Wed Apr 08 23:42:42.537496 2026] [proxy_fcgi:error] [pid 35642:tid 35653] [client 193.19.204.81:46984] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:45.005447 2026] [:error] [pid 35642:tid 35660] [client 193.19.204.81:46984] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adZ3dQ-CqryxdEs5DN93sAAAAFA"]
[Wed Apr 08 23:42:47.400130 2026] [:error] [pid 7047:tid 7055] [client 193.19.204.81:46990] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adZ3d-Nh3oGO3pKiCzxWrwAAAYY"]
[Wed Apr 08 23:42:48.389651 2026] [:error] [pid 12490:tid 12496] [client 193.19.204.81:47000] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adZ3eG1Fea4F4fbumr1MZQAAAMQ"]
[Wed Apr 08 23:42:49.872157 2026] [proxy_fcgi:error] [pid 12453:tid 12478] [client 193.19.204.81:47008] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:50.366202 2026] [:error] [pid 12453:tid 12464] [client 193.19.204.81:47008] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adZ3ehjtW7S6XsLPvrRvpAAAAIk"]
[Wed Apr 08 23:42:51.860369 2026] [:error] [pid 64066:tid 64080] [client 193.19.204.81:60228] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adZ3e1R3WucJgr2vZGah5wAAAUs"]
[Wed Apr 08 23:42:55.498704 2026] [:error] [pid 7047:tid 7064] [client 193.19.204.81:60230] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adZ3f-Nh3oGO3pKiCzxWuQAAAY8"]
[Wed Apr 08 23:42:57.011824 2026] [proxy_fcgi:error] [pid 12453:tid 12458] [client 193.19.204.81:60246] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:42:57.515330 2026] [:error] [pid 12453:tid 12462] [client 193.19.204.81:60246] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adZ3gRjtW7S6XsLPvrRvrQAAAIc"]
[Wed Apr 08 23:42:59.501784 2026] [:error] [pid 35642:tid 35657] [client 193.19.204.81:60256] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adZ3gw-CqryxdEs5DN93tgAAAE0"]
[Wed Apr 08 23:43:00.996291 2026] [:error] [pid 64066:tid 64073] [client 193.19.204.81:60260] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/as.php"] [unique_id "adZ3hFR3WucJgr2vZGaiZQAAAUQ"]
[Wed Apr 08 23:43:02.513720 2026] [:error] [pid 12490:tid 12506] [client 193.19.204.81:53100] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adZ3hm1Fea4F4fbumr1MegAAAM4"]
[Wed Apr 08 23:43:03.508113 2026] [:error] [pid 12386:tid 12422] [client 193.19.204.81:53112] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/install.php"] [unique_id "adZ3hxLhhLtqHi2gK7UxzgAAAQY"]
[Wed Apr 08 23:43:04.499521 2026] [:error] [pid 35642:tid 35667] [client 193.19.204.81:53120] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adZ3iA-CqryxdEs5DN93uAAAAFc"]
[Wed Apr 08 23:43:08.488563 2026] [:error] [pid 64066:tid 64085] [client 193.19.204.81:53130] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adZ3jFR3WucJgr2vZGailgAAAVA"]
[Wed Apr 08 23:43:10.964384 2026] [:error] [pid 12453:tid 12462] [client 193.19.204.81:53134] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adZ3jhjtW7S6XsLPvrRvtwAAAIc"]
[Wed Apr 08 23:43:12.466398 2026] [proxy_fcgi:error] [pid 64066:tid 64092] [client 193.19.204.81:50922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:12.973380 2026] [:error] [pid 64066:tid 64090] [client 193.19.204.81:50922] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adZ3kFR3WucJgr2vZGaipQAAAVU"]
[Wed Apr 08 23:43:14.954588 2026] [:error] [pid 12490:tid 12492] [client 193.19.204.81:50932] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adZ3km1Fea4F4fbumr1MtgAAAMA"]
[Wed Apr 08 23:43:15.949811 2026] [proxy_fcgi:error] [pid 12386:tid 12418] [client 193.19.204.81:50936] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:18.872165 2026] [:error] [pid 12386:tid 12427] [client 193.19.204.81:50936] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adZ3lhLhhLtqHi2gK7Ux6AAAAQs"]
[Wed Apr 08 23:43:20.378277 2026] [:error] [pid 35642:tid 35647] [client 193.19.204.81:50948] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adZ3mA-CqryxdEs5DN93wAAAAEM"]
[Wed Apr 08 23:43:22.504922 2026] [:error] [pid 64066:tid 64078] [client 193.19.204.81:45058] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adZ3mlR3WucJgr2vZGaiuAAAAUk"]
[Wed Apr 08 23:43:23.996063 2026] [proxy_fcgi:error] [pid 7189:tid 7193] [client 193.19.204.81:45066] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:24.490704 2026] [:error] [pid 7189:tid 7194] [client 193.19.204.81:45066] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adZ3nBaBqhBSu0L37loBcgAAAcM"]
[Wed Apr 08 23:43:29.470853 2026] [:error] [pid 12386:tid 12439] [client 193.19.204.81:45078] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adZ3oRLhhLtqHi2gK7UyBQAAARc"]
[Wed Apr 08 23:43:30.464141 2026] [:error] [pid 12490:tid 12506] [client 193.19.204.81:45080] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adZ3om1Fea4F4fbumr1M6QAAAM4"]
[Wed Apr 08 23:43:32.977775 2026] [:error] [pid 12490:tid 12510] [client 193.19.204.81:42882] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adZ3pG1Fea4F4fbumr1NLAAAANI"]
[Wed Apr 08 23:43:33.969916 2026] [:error] [pid 64066:tid 64091] [client 193.19.204.81:42886] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adZ3pVR3WucJgr2vZGai1wAAAVY"]
[Wed Apr 08 23:43:35.951110 2026] [:error] [pid 64066:tid 64076] [client 193.19.204.81:42902] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adZ3p1R3WucJgr2vZGai3QAAAUc"]
[Wed Apr 08 23:43:36.933326 2026] [:error] [pid 7189:tid 7193] [client 193.19.204.81:42910] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adZ3qBaBqhBSu0L37loBeQAAAcI"]
[Wed Apr 08 23:43:37.926782 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.81:42914] [client 193.19.204.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.81, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adZ3qVR3WucJgr2vZGai4gAAAUo"]
[Wed Apr 08 23:43:37.930382 2026] [proxy_fcgi:error] [pid 64066:tid 64079] [client 193.19.204.81:42914] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:38.439990 2026] [:error] [pid 64066:tid 64084] [client 193.19.204.81:42914] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adZ3qlR3WucJgr2vZGai6AAAAU8"]
[Wed Apr 08 23:43:39.946495 2026] [proxy_fcgi:error] [pid 64066:tid 64073] [client 193.19.204.81:42926] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:40.441809 2026] [:error] [pid 64066:tid 64086] [client 193.19.204.81:42926] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adZ3rFR3WucJgr2vZGai9AAAAVE"]
[Wed Apr 08 23:43:41.425511 2026] [:error] [pid 7047:tid 7066] [client 193.19.204.81:34890] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/network.php"] [unique_id "adZ3reNh3oGO3pKiCzxW-QAAAZE"]
[Wed Apr 08 23:43:42.416019 2026] [proxy_fcgi:error] [pid 7047:tid 7052] [client 193.19.204.81:34898] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:47.849923 2026] [:error] [pid 7047:tid 7064] [client 193.19.204.81:34898] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adZ3s-Nh3oGO3pKiCzxXJQAAAY8"]
[Wed Apr 08 23:43:48.882974 2026] [:error] [pid 64066:tid 64081] [client 193.19.204.81:34914] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adZ3tFR3WucJgr2vZGai-AAAAUw"]
[Wed Apr 08 23:43:50.861970 2026] [:error] [pid 12490:tid 12515] [client 193.19.204.81:34920] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adZ3tm1Fea4F4fbumr1NfgAAANc"]
[Wed Apr 08 23:43:51.848948 2026] [:error] [pid 12453:tid 12477] [client 193.19.204.81:50068] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adZ3txjtW7S6XsLPvrRv4wAAAJY"]
[Wed Apr 08 23:43:52.839599 2026] [proxy_fcgi:error] [pid 64066:tid 64080] [client 193.19.204.81:50072] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:53.334974 2026] [:error] [pid 64066:tid 64083] [client 193.19.204.81:50072] [client 193.19.204.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.81, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adZ3uVR3WucJgr2vZGajBQAAAU4"]
[Wed Apr 08 23:43:54.332085 2026] [:error] [pid 64066:tid 64086] [client 193.19.204.81:50072] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adZ3ulR3WucJgr2vZGajBwAAAVE"]
[Wed Apr 08 23:43:56.807180 2026] [:error] [pid 12453:tid 12474] [client 193.19.204.81:50074] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adZ3vBjtW7S6XsLPvrRwBgAAAJM"]
[Wed Apr 08 23:43:57.794666 2026] [proxy_fcgi:error] [pid 12490:tid 12513] [client 193.19.204.81:50078] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:43:58.287779 2026] [:error] [pid 12490:tid 12512] [client 193.19.204.81:50078] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adZ3vm1Fea4F4fbumr1NiwAAANQ"]
[Wed Apr 08 23:43:59.278483 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.81:50086] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adZ3v1R3WucJgr2vZGajEQAAAUo"]
[Wed Apr 08 23:44:00.268916 2026] [proxy_fcgi:error] [pid 64066:tid 64093] [client 193.19.204.81:50098] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:01.762702 2026] [:error] [pid 64066:tid 64071] [client 193.19.204.81:50098] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adZ3wVR3WucJgr2vZGajGgAAAUI"]
[Wed Apr 08 23:44:03.771070 2026] [:error] [pid 12386:tid 12423] [client 193.19.204.81:53522] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adZ3wxLhhLtqHi2gK7UyIQAAAQc"]
[Wed Apr 08 23:44:04.764208 2026] [proxy_fcgi:error] [pid 12490:tid 12512] [client 193.19.204.81:53524] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:05.758848 2026] [proxy_fcgi:error] [pid 12490:tid 12496] [client 193.19.204.81:53524] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:06.748143 2026] [:error] [pid 12490:tid 12505] [client 193.19.204.81:53524] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adZ3xm1Fea4F4fbumr1NpAAAAM0"]
[Wed Apr 08 23:44:07.741975 2026] [:error] [pid 12490:tid 12514] [client 193.19.204.81:53534] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adZ3x21Fea4F4fbumr1NqwAAANY"]
[Wed Apr 08 23:44:09.223010 2026] [:error] [pid 12453:tid 12474] [client 193.19.204.81:53540] [client 193.19.204.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/count.php"] [unique_id "adZ3yRjtW7S6XsLPvrRwOgAAAJM"]
[Wed Apr 08 23:44:10.211827 2026] [proxy_fcgi:error] [pid 7047:tid 7071] [client 193.19.204.81:53542] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:18.700590 2026] [:error] [pid 12453:tid 12473] [client 193.19.204.73:34344] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adZ30hjtW7S6XsLPvrRwRwAAAJI"]
[Wed Apr 08 23:44:20.687355 2026] [:error] [pid 7047:tid 7064] [client 193.19.204.73:34348] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||stratapluswa.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "stratapluswa.com.au"] [uri "/images/stories/themes.php"] [unique_id "adZ31ONh3oGO3pKiCzxXUwAAAY8"]
[Wed Apr 08 23:44:21.182248 2026] [:error] [pid 7047:tid 7066] [client 193.19.204.73:34348] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adZ31eNh3oGO3pKiCzxXVgAAAZE"]
[Wed Apr 08 23:44:23.160749 2026] [:error] [pid 12490:tid 12506] [client 193.19.204.73:56732] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adZ3121Fea4F4fbumr1OAAAAAM4"]
[Wed Apr 08 23:44:24.153971 2026] [:error] [pid 64066:tid 64072] [client 193.19.204.73:56744] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adZ32FR3WucJgr2vZGaj1wAAAUM"]
[Wed Apr 08 23:44:26.148816 2026] [proxy_fcgi:error] [pid 12453:tid 12461] [client 193.19.204.73:56750] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:28.160717 2026] [:error] [pid 12453:tid 12476] [client 193.19.204.73:56750] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adZ33BjtW7S6XsLPvrRwVwAAAJU"]
[Wed Apr 08 23:44:30.133121 2026] [:error] [pid 64066:tid 64081] [client 193.19.204.73:56752] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adZ33lR3WucJgr2vZGakCgAAAUw"]
[Wed Apr 08 23:44:31.615890 2026] [:error] [pid 64066:tid 64076] [client 193.19.204.73:56754] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adZ331R3WucJgr2vZGakMgAAAUc"]
[Wed Apr 08 23:44:32.608524 2026] [proxy_fcgi:error] [pid 64066:tid 64077] [client 193.19.204.73:38138] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:35.106229 2026] [:error] [pid 64066:tid 64091] [client 193.19.204.73:38138] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adZ341R3WucJgr2vZGakSgAAAVY"]
[Wed Apr 08 23:44:36.090953 2026] [:error] [pid 12453:tid 12467] [client 193.19.204.73:38150] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adZ35BjtW7S6XsLPvrRwZgAAAIw"]
[Wed Apr 08 23:44:37.083924 2026] [proxy_fcgi:error] [pid 12386:tid 12431] [client 193.19.204.73:38156] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:37.575645 2026] [:error] [pid 12386:tid 12427] [client 193.19.204.73:38156] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adZ35RLhhLtqHi2gK7UyPwAAAQs"]
[Wed Apr 08 23:44:38.580657 2026] [:error] [pid 12385:tid 12394] [client 193.19.204.73:38158] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adZ35iAjtvRQEkLosq20cQAAAAU"]
[Wed Apr 08 23:44:40.618155 2026] [:error] [pid 12453:tid 12478] [client 193.19.204.73:38168] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adZ36BjtW7S6XsLPvrRwbQAAAJc"]
[Wed Apr 08 23:44:42.597061 2026] [:error] [pid 12385:tid 12413] [client 193.19.204.73:36282] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adZ36iAjtvRQEkLosq20dAAAABg"]
[Wed Apr 08 23:44:43.585097 2026] [:error] [pid 64066:tid 64080] [client 193.19.204.73:36292] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adZ361R3WucJgr2vZGakiAAAAUs"]
[Wed Apr 08 23:44:46.062312 2026] [proxy_fcgi:error] [pid 12490:tid 12495] [client 193.19.204.73:36302] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:46.556067 2026] [:error] [pid 12490:tid 12508] [client 193.19.204.73:36302] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adZ37m1Fea4F4fbumr1OYgAAANA"]
[Wed Apr 08 23:44:48.533295 2026] [:error] [pid 7047:tid 7049] [client 193.19.204.73:36308] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adZ38ONh3oGO3pKiCzxXiwAAAYA"]
[Wed Apr 08 23:44:49.528715 2026] [proxy_fcgi:error] [pid 7189:tid 7208] [client 193.19.204.73:36324] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:51.022990 2026] [:error] [pid 7189:tid 7212] [client 193.19.204.73:36324] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adZ38xaBqhBSu0L37loBwQAAAdU"]
[Wed Apr 08 23:44:52.017300 2026] [:error] [pid 12453:tid 12477] [client 193.19.204.73:49324] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adZ39BjtW7S6XsLPvrRwhwAAAJY"]
[Wed Apr 08 23:44:53.007435 2026] [:error] [pid 35642:tid 35655] [client 193.19.204.73:49326] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adZ39Q-CqryxdEs5DN94OgAAAEs"]
[Wed Apr 08 23:44:53.992933 2026] [proxy_fcgi:error] [pid 64066:tid 64071] [client 193.19.204.73:49340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:54.977977 2026] [:error] [pid 64066:tid 64085] [client 193.19.204.73:49340] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adZ39lR3WucJgr2vZGak1wAAAVA"]
[Wed Apr 08 23:44:55.967620 2026] [proxy_fcgi:error] [pid 12385:tid 12390] [client 193.19.204.73:49354] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:44:56.954822 2026] [:error] [pid 12385:tid 12389] [client 193.19.204.73:49354] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adZ3-CAjtvRQEkLosq20eAAAAAA"]
[Wed Apr 08 23:44:57.934853 2026] [:error] [pid 7047:tid 7067] [client 193.19.204.73:49362] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adZ3-eNh3oGO3pKiCzxXnAAAAZI"]
[Wed Apr 08 23:44:59.410345 2026] [:error] [pid 64066:tid 64076] [client 193.19.204.73:49374] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adZ3-1R3WucJgr2vZGalCAAAAUc"]
[Wed Apr 08 23:45:00.400973 2026] [:error] [pid 12490:tid 12501] [client 193.19.204.73:49382] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adZ3_G1Fea4F4fbumr1OigAAAMk"]
[Wed Apr 08 23:45:02.406894 2026] [:error] [pid 64066:tid 64092] [client 193.19.204.73:35816] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adZ3_lR3WucJgr2vZGalEAAAAVc"]
[Wed Apr 08 23:45:03.890254 2026] [:error] [pid 7047:tid 7072] [client 193.19.204.73:35826] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adZ3_-Nh3oGO3pKiCzxXpAAAAZc"]
[Wed Apr 08 23:45:04.874909 2026] [:error] [pid 12385:tid 12396] [client 193.19.204.73:35836] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adZ4ACAjtvRQEkLosq20fwAAAAc"]
[Wed Apr 08 23:45:05.864563 2026] [:error] [pid 64066:tid 64091] [client 193.19.204.73:35844] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adZ4AVR3WucJgr2vZGalKQAAAVY"]
[Wed Apr 08 23:45:07.849149 2026] [:error] [pid 12453:tid 12478] [client 193.19.204.73:35860] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adZ4AxjtW7S6XsLPvrRwxAAAAJc"]
[Wed Apr 08 23:45:09.818990 2026] [:error] [pid 64066:tid 64086] [client 193.19.204.73:35870] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adZ4BVR3WucJgr2vZGalhgAAAVE"]
[Wed Apr 08 23:45:11.308745 2026] [:error] [pid 7189:tid 7212] [client 193.19.204.73:35874] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adZ4BxaBqhBSu0L37loB0AAAAdU"]
[Wed Apr 08 23:45:12.790972 2026] [:error] [pid 7189:tid 7192] [client 193.19.204.73:52336] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adZ4CBaBqhBSu0L37loB0wAAAcE"]
[Wed Apr 08 23:45:14.787711 2026] [proxy_fcgi:error] [pid 64066:tid 64072] [client 193.19.204.73:52344] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:16.780588 2026] [:error] [pid 64066:tid 64069] [client 193.19.204.73:52344] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adZ4DFR3WucJgr2vZGaluQAAAUA"]
[Wed Apr 08 23:45:17.772616 2026] [:error] [pid 12453:tid 12461] [client 193.19.204.73:52352] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adZ4DRjtW7S6XsLPvrRw6AAAAIY"]
[Wed Apr 08 23:45:20.245676 2026] [proxy_fcgi:error] [pid 12453:tid 12475] [client 193.19.204.73:52354] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:20.738142 2026] [:error] [pid 12453:tid 12469] [client 193.19.204.73:52354] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adZ4EBjtW7S6XsLPvrRw7wAAAI4"]
[Wed Apr 08 23:45:23.722955 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.73:60496] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adZ4E1R3WucJgr2vZGalzAAAAUo"]
[Wed Apr 08 23:45:25.216483 2026] [proxy_fcgi:error] [pid 12490:tid 12495] [client 193.19.204.73:60504] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:25.715861 2026] [:error] [pid 12490:tid 12503] [client 193.19.204.73:60504] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adZ4FW1Fea4F4fbumr1PEwAAAMs"]
[Wed Apr 08 23:45:27.689780 2026] [:error] [pid 35642:tid 35646] [client 193.19.204.73:60516] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adZ4Fw-CqryxdEs5DN94TAAAAEI"]
[Wed Apr 08 23:45:28.683304 2026] [proxy_fcgi:error] [pid 7189:tid 7194] [client 193.19.204.73:60532] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:29.179901 2026] [:error] [pid 7189:tid 7201] [client 193.19.204.73:60532] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adZ4GRaBqhBSu0L37loB6gAAAco"]
[Wed Apr 08 23:45:30.679585 2026] [:error] [pid 35642:tid 35655] [client 193.19.204.73:60536] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adZ4Gg-CqryxdEs5DN94UQAAAEs"]
[Wed Apr 08 23:45:34.204315 2026] [proxy_fcgi:error] [pid 12453:tid 12478] [client 193.19.204.73:54034] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:34.695125 2026] [:error] [pid 12453:tid 12462] [client 193.19.204.73:54034] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adZ4HhjtW7S6XsLPvrRxFwAAAIc"]
[Wed Apr 08 23:45:37.158357 2026] [:error] [pid 64066:tid 64085] [client 193.19.204.73:54046] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adZ4IVR3WucJgr2vZGamAAAAAVA"]
[Wed Apr 08 23:45:38.151777 2026] [proxy_fcgi:error] [pid 35642:tid 35666] [client 193.19.204.73:54056] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:38.654190 2026] [:error] [pid 35642:tid 35648] [client 193.19.204.73:54056] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adZ4Ig-CqryxdEs5DN94bAAAAEQ"]
[Wed Apr 08 23:45:39.647753 2026] [:error] [pid 35642:tid 35667] [client 193.19.204.73:54058] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adZ4Iw-CqryxdEs5DN94cgAAAFc"]
[Wed Apr 08 23:45:40.641429 2026] [proxy_fcgi:error] [pid 7189:tid 7209] [client 193.19.204.73:54066] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:41.640668 2026] [:error] [pid 7189:tid 7207] [client 193.19.204.73:54066] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adZ4JRaBqhBSu0L37loCDwAAAdA"]
[Wed Apr 08 23:45:42.628406 2026] [:error] [pid 64066:tid 64090] [client 193.19.204.73:49876] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adZ4JlR3WucJgr2vZGamJQAAAVU"]
[Wed Apr 08 23:45:47.683625 2026] [:error] [pid 12490:tid 12505] [client 193.19.204.73:49884] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adZ4K21Fea4F4fbumr1PiQAAAM0"]
[Wed Apr 08 23:45:48.673133 2026] [:error] [pid 64066:tid 64080] [client 193.19.204.73:49896] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adZ4LFR3WucJgr2vZGamPgAAAUs"]
[Wed Apr 08 23:45:50.184609 2026] [:error] [pid 64066:tid 64090] [client 193.19.204.73:49910] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/log.php"] [unique_id "adZ4LlR3WucJgr2vZGamWAAAAVU"]
[Wed Apr 08 23:45:51.172380 2026] [:error] [pid 64066:tid 64077] [client 193.19.204.73:49916] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adZ4L1R3WucJgr2vZGamdgAAAUg"]
[Wed Apr 08 23:45:52.154632 2026] [:error] [pid 7047:tid 7049] [client 193.19.204.73:40216] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adZ4MONh3oGO3pKiCzxYAAAAAYA"]
[Wed Apr 08 23:45:53.143085 2026] [:error] [pid 35642:tid 35652] [client 193.19.204.73:40232] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adZ4MQ-CqryxdEs5DN94gwAAAEg"]
[Wed Apr 08 23:45:56.143155 2026] [:error] [pid 64066:tid 64082] [client 193.19.204.73:40238] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adZ4NFR3WucJgr2vZGamqQAAAU0"]
[Wed Apr 08 23:45:57.148888 2026] [:error] [pid 64066:tid 64092] [client 193.19.204.73:40252] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adZ4NVR3WucJgr2vZGamqwAAAVc"]
[Wed Apr 08 23:45:58.643325 2026] [proxy_fcgi:error] [pid 7189:tid 7195] [client 193.19.204.73:40264] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:45:59.140658 2026] [:error] [pid 7189:tid 7214] [client 193.19.204.73:40264] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adZ4NxaBqhBSu0L37loCIAAAAdc"]
[Wed Apr 08 23:46:00.129745 2026] [:error] [pid 12453:tid 12461] [client 193.19.204.73:40278] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adZ4OBjtW7S6XsLPvrRxQAAAAIY"]
[Wed Apr 08 23:46:02.126985 2026] [:error] [pid 12453:tid 12464] [client 193.19.204.73:40288] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adZ4OhjtW7S6XsLPvrRxQwAAAIk"]
[Wed Apr 08 23:46:03.113266 2026] [:error] [pid 12453:tid 12471] [client 193.19.204.73:51136] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adZ4OxjtW7S6XsLPvrRxSAAAAJA"]
[Wed Apr 08 23:46:07.590960 2026] [:error] [pid 12490:tid 12504] [client 193.19.204.73:51146] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adZ4P21Fea4F4fbumr1PwgAAAMw"]
[Wed Apr 08 23:46:08.581040 2026] [:error] [pid 35642:tid 35666] [client 193.19.204.73:51152] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adZ4QA-CqryxdEs5DN94mQAAAFY"]
[Wed Apr 08 23:46:10.565386 2026] [:error] [pid 64066:tid 64087] [client 193.19.204.73:51156] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/file.php"] [unique_id "adZ4QlR3WucJgr2vZGam9AAAAVI"]
[Wed Apr 08 23:46:12.040614 2026] [:error] [pid 12490:tid 12495] [client 193.19.204.73:35528] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adZ4RG1Fea4F4fbumr1P1AAAAMM"]
[Wed Apr 08 23:46:13.527407 2026] [:error] [pid 12453:tid 12472] [client 193.19.204.73:35536] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/load.php"] [unique_id "adZ4RRjtW7S6XsLPvrRxXQAAAJE"]
[Wed Apr 08 23:46:14.512904 2026] [:error] [pid 12490:tid 12515] [client 193.19.204.73:35552] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adZ4Rm1Fea4F4fbumr1P4wAAANc"]
[Wed Apr 08 23:46:15.501989 2026] [:error] [pid 7189:tid 7215] [client 193.19.204.73:35562] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adZ4RxaBqhBSu0L37loCRQAAAdg"]
[Wed Apr 08 23:46:18.008175 2026] [:error] [pid 7189:tid 7192] [client 193.19.204.73:35568] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adZ4ShaBqhBSu0L37loCTQAAAcE"]
[Wed Apr 08 23:46:19.005556 2026] [proxy_fcgi:error] [pid 12386:tid 12419] [client 193.19.204.73:35576] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:46:19.504643 2026] [:error] [pid 12386:tid 12432] [client 193.19.204.73:35576] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adZ4SxLhhLtqHi2gK7UyowAAARA"]
[Wed Apr 08 23:46:20.992590 2026] [proxy_fcgi:error] [pid 12490:tid 12512] [client 193.19.204.73:35580] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:46:21.484778 2026] [:error] [pid 12490:tid 12507] [client 193.19.204.73:35580] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adZ4TW1Fea4F4fbumr1QDQAAAM8"]
[Wed Apr 08 23:46:22.466357 2026] [:error] [pid 12453:tid 12469] [client 193.19.204.73:53516] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adZ4ThjtW7S6XsLPvrRxbgAAAI4"]
[Wed Apr 08 23:46:23.448784 2026] [:error] [pid 12453:tid 12460] [client 193.19.204.73:53518] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adZ4TxjtW7S6XsLPvrRxdQAAAIU"]
[Wed Apr 08 23:46:26.428525 2026] [proxy_fcgi:error] [pid 12385:tid 12409] [client 193.19.204.73:53524] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 23:46:28.417368 2026] [:error] [pid 12385:tid 12401] [client 193.19.204.73:53524] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adZ4VCAjtvRQEkLosq20wAAAAAw"]
[Wed Apr 08 23:46:29.912417 2026] [:error] [pid 7047:tid 7068] [client 193.19.204.73:53534] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adZ4VeNh3oGO3pKiCzxYNgAAAZM"]
[Wed Apr 08 23:46:31.888076 2026] [:error] [pid 12490:tid 12501] [client 193.19.204.73:53538] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adZ4V21Fea4F4fbumr1QQQAAAMk"]
[Wed Apr 08 23:46:32.869954 2026] [:error] [pid 12386:tid 12425] [client 193.19.204.73:43578] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adZ4WBLhhLtqHi2gK7UysAAAAQk"]
[Wed Apr 08 23:46:33.853981 2026] [:error] [pid 12453:tid 12457] [client 193.19.204.73:43592] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adZ4WRjtW7S6XsLPvrRxhQAAAII"]
[Wed Apr 08 23:46:35.833992 2026] [:error] [pid 7189:tid 7209] [client 193.19.204.73:43602] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adZ4WxaBqhBSu0L37loCYAAAAdI"]
[Wed Apr 08 23:46:41.391301 2026] [:error] [pid 64066:tid 64082] [client 193.19.204.73:43614] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adZ4YVR3WucJgr2vZGankwAAAU0"]
[Wed Apr 08 23:46:44.366742 2026] [:error] [pid 64066:tid 64088] [client 193.19.204.73:38836] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adZ4ZFR3WucJgr2vZGanmQAAAVM"]
[Wed Apr 08 23:46:46.338059 2026] [:error] [pid 64066:tid 64079] [client 193.19.204.73:38850] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adZ4ZlR3WucJgr2vZGanowAAAUo"]
[Wed Apr 08 23:46:47.320298 2026] [:error] [pid 12490:tid 12500] [client 193.19.204.73:38862] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adZ4Z21Fea4F4fbumr1QdgAAAMg"]
[Wed Apr 08 23:46:53.776379 2026] [:error] [pid 64066:tid 64085] [client 193.19.204.73:38868] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adZ4bVR3WucJgr2vZGanwgAAAVA"]
[Wed Apr 08 23:46:54.761063 2026] [:error] [pid 12453:tid 12478] [client 193.19.204.73:41648] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adZ4bhjtW7S6XsLPvrRxswAAAJc"]
[Wed Apr 08 23:46:55.748953 2026] [:error] [pid 7189:tid 7206] [client 193.19.204.73:41654] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adZ4bxaBqhBSu0L37loCfQAAAc8"]
[Wed Apr 08 23:46:57.223940 2026] [:error] [pid 7189:tid 7200] [client 193.19.204.73:41662] [client 193.19.204.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.204.73, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adZ4cRaBqhBSu0L37loCjAAAAck"]
[Wed Apr 08 23:46:58.215699 2026] [:error] [pid 7189:tid 7210] [client 193.19.204.73:41662] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adZ4chaBqhBSu0L37loCkQAAAdM"]
[Wed Apr 08 23:46:59.205186 2026] [:error] [pid 64066:tid 64083] [client 193.19.204.73:41676] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adZ4c1R3WucJgr2vZGanxgAAAU4"]
[Wed Apr 08 23:47:00.193721 2026] [:error] [pid 12453:tid 12477] [client 193.19.204.73:41686] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adZ4dBjtW7S6XsLPvrRxwQAAAJY"]
[Wed Apr 08 23:47:04.152396 2026] [:error] [pid 12386:tid 12421] [client 193.19.204.73:51952] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adZ4eBLhhLtqHi2gK7Uy_wAAAQU"]
[Wed Apr 08 23:47:08.624369 2026] [:error] [pid 64066:tid 64073] [client 193.19.204.73:51966] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adZ4fFR3WucJgr2vZGan_gAAAUQ"]
[Wed Apr 08 23:47:10.606060 2026] [:error] [pid 7047:tid 7054] [client 193.19.204.73:51976] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adZ4fuNh3oGO3pKiCzxYYwAAAYU"]
[Wed Apr 08 23:47:18.524887 2026] [:error] [pid 12385:tid 12413] [client 193.19.204.73:35960] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adZ4hiAjtvRQEkLosq207QAAABg"]
[Wed Apr 08 23:47:19.520811 2026] [:error] [pid 64066:tid 64089] [client 193.19.204.73:35974] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adZ4h1R3WucJgr2vZGaoEwAAAVQ"]
[Wed Apr 08 23:47:20.510206 2026] [:error] [pid 12453:tid 12462] [client 193.19.204.73:35976] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adZ4iBjtW7S6XsLPvrRx4wAAAIc"]
[Wed Apr 08 23:47:21.499881 2026] [:error] [pid 12490:tid 12501] [client 193.19.204.73:47926] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adZ4iW1Fea4F4fbumr1Q0QAAAMk"]
[Wed Apr 08 23:47:24.028803 2026] [:error] [pid 12453:tid 12461] [client 193.19.204.73:47938] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adZ4jBjtW7S6XsLPvrRx7AAAAIY"]
[Wed Apr 08 23:47:25.018523 2026] [:error] [pid 12490:tid 12506] [client 193.19.204.73:47940] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adZ4jW1Fea4F4fbumr1Q3QAAAM4"]
[Wed Apr 08 23:47:28.486276 2026] [:error] [pid 64066:tid 64078] [client 193.19.204.73:47942] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adZ4kFR3WucJgr2vZGaoNAAAAUk"]
[Wed Apr 08 23:47:31.461336 2026] [:error] [pid 12490:tid 12513] [client 193.19.204.73:47958] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adZ4k21Fea4F4fbumr1Q_gAAANU"]
[Wed Apr 08 23:47:32.446685 2026] [:error] [pid 64066:tid 64091] [client 193.19.204.73:58564] [client 193.19.204.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adZ4lFR3WucJgr2vZGaoPwAAAVY"]
[Wed Apr 08 23:47:43.614487 2026] [autoindex:error] [pid 12385:tid 12399] [client 193.19.204.73:58570] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 23:48:21.594613 2026] [autoindex:error] [pid 12385:tid 12392] [client 193.19.204.73:58570] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 00:33:17.858886 2026] [proxy_fcgi:error] [pid 12385:tid 12413] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:18.095691 2026] [proxy_fcgi:error] [pid 12385:tid 12394] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:18.333359 2026] [proxy_fcgi:error] [pid 12385:tid 12409] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:18.568278 2026] [proxy_fcgi:error] [pid 12385:tid 12405] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:18.806804 2026] [proxy_fcgi:error] [pid 12385:tid 12406] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:19.067418 2026] [proxy_fcgi:error] [pid 12385:tid 12400] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:19.498731 2026] [proxy_fcgi:error] [pid 12385:tid 12404] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:19.760495 2026] [proxy_fcgi:error] [pid 12385:tid 12407] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:19.996941 2026] [proxy_fcgi:error] [pid 12385:tid 12412] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:20.252656 2026] [proxy_fcgi:error] [pid 12385:tid 12389] [client 72.146.17.168:24865] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:33:20.572554 2026] [:error] [pid 12385:tid 12402] [client 72.146.17.168:24865] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "adaDUCAjtvRQEkLosq27bQAAAA0"]
[Thu Apr 09 00:33:26.128043 2026] [:error] [pid 12453:tid 12477] [client 72.146.17.168:18919] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "adaDVhjtW7S6XsLPvrSE_wAAAJY"]
[Thu Apr 09 00:33:28.049812 2026] [:error] [pid 64066:tid 64069] [client 72.146.17.168:45970] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "adaDWFR3WucJgr2vZGbM-QAAAUA"]
[Thu Apr 09 00:33:29.233346 2026] [:error] [pid 64066:tid 64083] [client 72.146.17.168:28549] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shout.php"] [unique_id "adaDWVR3WucJgr2vZGbM-wAAAU4"]
[Thu Apr 09 00:33:31.465619 2026] [:error] [pid 7189:tid 7191] [client 72.146.17.168:24872] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "adaDWxaBqhBSu0L37loNTgAAAcA"]
[Thu Apr 09 00:33:33.953773 2026] [:error] [pid 7189:tid 7195] [client 72.146.17.168:24834] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "adaDXRaBqhBSu0L37loNTwAAAcQ"]
[Thu Apr 09 00:33:37.189747 2026] [:error] [pid 7189:tid 7205] [client 72.146.17.168:28600] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "adaDYRaBqhBSu0L37loNUwAAAc4"]
[Thu Apr 09 00:33:38.393484 2026] [:error] [pid 64066:tid 64092] [client 72.146.17.168:58979] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/size.php"] [unique_id "adaDYlR3WucJgr2vZGbNCwAAAVc"]
[Thu Apr 09 00:33:42.990377 2026] [:error] [pid 64066:tid 64069] [client 72.146.17.168:57004] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "adaDZlR3WucJgr2vZGbNHQAAAUA"]
[Thu Apr 09 00:34:14.076135 2026] [:error] [pid 7189:tid 7214] [client 72.146.17.168:27474] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "adaDhhaBqhBSu0L37loNmgAAAdc"]
[Thu Apr 09 00:34:15.406606 2026] [:error] [pid 64066:tid 64074] [client 72.146.17.168:62787] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "adaDh1R3WucJgr2vZGbNZQAAAUU"]
[Thu Apr 09 00:34:19.454570 2026] [:error] [pid 64066:tid 64088] [client 72.146.17.168:62843] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "adaDi1R3WucJgr2vZGbNbgAAAVM"]
[Thu Apr 09 00:34:23.192094 2026] [proxy_fcgi:error] [pid 7189:tid 7208] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:23.428426 2026] [proxy_fcgi:error] [pid 7189:tid 7210] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:23.687923 2026] [proxy_fcgi:error] [pid 7189:tid 7215] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:23.925059 2026] [proxy_fcgi:error] [pid 7189:tid 7197] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:24.320153 2026] [proxy_fcgi:error] [pid 7189:tid 7195] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:24.565957 2026] [proxy_fcgi:error] [pid 7189:tid 7192] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:24.836161 2026] [proxy_fcgi:error] [pid 7189:tid 7203] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:25.072821 2026] [proxy_fcgi:error] [pid 7189:tid 7201] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:25.323815 2026] [proxy_fcgi:error] [pid 7189:tid 7191] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:25.598771 2026] [proxy_fcgi:error] [pid 7189:tid 7199] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:25.835251 2026] [proxy_fcgi:error] [pid 7189:tid 7198] [client 72.146.17.168:64257] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:34:26.153618 2026] [:error] [pid 7189:tid 7212] [client 72.146.17.168:64257] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "adaDkhaBqhBSu0L37loNrwAAAdU"]
[Thu Apr 09 00:34:27.140673 2026] [:error] [pid 12490:tid 12502] [client 72.146.17.168:23696] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "adaDk21Fea4F4fbumr1rwgAAAMo"]
[Thu Apr 09 00:34:30.107002 2026] [:error] [pid 12490:tid 12513] [client 72.146.17.168:25409] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "adaDlm1Fea4F4fbumr1r0wAAANU"]
[Thu Apr 09 00:34:31.746703 2026] [:error] [pid 12490:tid 12499] [client 72.146.17.168:53459] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v.php"] [unique_id "adaDl21Fea4F4fbumr1r3AAAAMc"]
[Thu Apr 09 00:34:36.432170 2026] [:error] [pid 12453:tid 12466] [client 72.146.17.168:43123] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ar.php"] [unique_id "adaDnBjtW7S6XsLPvrSFlQAAAIs"]
[Thu Apr 09 00:34:38.006438 2026] [:error] [pid 64066:tid 64086] [client 72.146.17.168:13394] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ar.php"] [unique_id "adaDnlR3WucJgr2vZGbNkgAAAVE"]
[Thu Apr 09 00:34:39.882312 2026] [:error] [pid 64066:tid 64077] [client 72.146.17.168:61614] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ar.php"] [unique_id "adaDn1R3WucJgr2vZGbNmQAAAUg"]
[Thu Apr 09 00:34:41.275596 2026] [:error] [pid 64066:tid 64085] [client 72.146.17.168:43122] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ar.php"] [unique_id "adaDoVR3WucJgr2vZGbNnwAAAVA"]
[Thu Apr 09 00:34:55.117438 2026] [:error] [pid 12386:tid 12437] [client 72.146.17.168:33260] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qing.php"] [unique_id "adaDrxLhhLtqHi2gK7U7VAAAARU"]
[Thu Apr 09 00:34:58.121335 2026] [:error] [pid 12385:tid 12406] [client 72.146.17.168:11064] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "adaDsiAjtvRQEkLosq27oQAAABE"]
[Thu Apr 09 00:34:59.742003 2026] [:error] [pid 7047:tid 7053] [client 72.146.17.168:60224] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "adaDs-Nh3oGO3pKiCzxnoQAAAYQ"]
[Thu Apr 09 00:35:01.636111 2026] [:error] [pid 12490:tid 12492] [client 72.146.17.168:27088] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "adaDtW1Fea4F4fbumr1sNwAAAMA"]
[Thu Apr 09 00:35:03.077856 2026] [:error] [pid 12453:tid 12466] [client 72.146.17.168:27128] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "adaDtxjtW7S6XsLPvrSFuAAAAIs"]
[Thu Apr 09 00:35:21.480871 2026] [:error] [pid 64066:tid 64087] [client 72.146.17.168:26332] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gmo.php"] [unique_id "adaDyVR3WucJgr2vZGbN8wAAAVI"]
[Thu Apr 09 00:35:25.749283 2026] [proxy_fcgi:error] [pid 12453:tid 12457] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:26.057533 2026] [proxy_fcgi:error] [pid 12453:tid 12472] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:26.413071 2026] [proxy_fcgi:error] [pid 12453:tid 12479] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:26.730546 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:27.064557 2026] [proxy_fcgi:error] [pid 12453:tid 12467] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:27.301750 2026] [proxy_fcgi:error] [pid 12453:tid 12470] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:27.542336 2026] [proxy_fcgi:error] [pid 12453:tid 12468] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:27.785098 2026] [proxy_fcgi:error] [pid 12453:tid 12475] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:28.023205 2026] [proxy_fcgi:error] [pid 12453:tid 12465] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:28.264125 2026] [proxy_fcgi:error] [pid 12453:tid 12466] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:28.552085 2026] [proxy_fcgi:error] [pid 12453:tid 12459] [client 72.146.17.168:50373] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:35:28.935472 2026] [:error] [pid 12453:tid 12456] [client 72.146.17.168:50373] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "adaD0BjtW7S6XsLPvrSGBAAAAIE"]
[Thu Apr 09 00:35:29.788561 2026] [:error] [pid 12386:tid 12421] [client 72.146.17.168:34788] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "adaD0RLhhLtqHi2gK7U7ZwAAAQU"]
[Thu Apr 09 00:35:34.042816 2026] [:error] [pid 64066:tid 64070] [client 72.146.17.168:59855] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "adaD1lR3WucJgr2vZGbOEAAAAUE"]
[Thu Apr 09 00:35:38.279746 2026] [:error] [pid 35642:tid 35650] [client 72.146.17.168:31510] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "adaD2g-CqryxdEs5DN-BkQAAAEY"]
[Thu Apr 09 00:35:39.039040 2026] [:error] [pid 64066:tid 64074] [client 72.146.17.168:59887] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/02.php"] [unique_id "adaD21R3WucJgr2vZGbOKwAAAUU"]
[Thu Apr 09 00:35:40.364104 2026] [:error] [pid 12490:tid 12507] [client 72.146.17.168:50393] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/02.php"] [unique_id "adaD3G1Fea4F4fbumr1suQAAAM8"]
[Thu Apr 09 00:36:23.951851 2026] [:error] [pid 64066:tid 64076] [client 72.146.17.168:26901] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "adaEB1R3WucJgr2vZGbO5AAAAUc"]
[Thu Apr 09 00:36:31.887488 2026] [proxy_fcgi:error] [pid 64066:tid 64083] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:32.148480 2026] [proxy_fcgi:error] [pid 64066:tid 64079] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:32.396561 2026] [proxy_fcgi:error] [pid 64066:tid 64089] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:32.645044 2026] [proxy_fcgi:error] [pid 64066:tid 64075] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:32.895608 2026] [proxy_fcgi:error] [pid 64066:tid 64077] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:33.131561 2026] [proxy_fcgi:error] [pid 64066:tid 64073] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:33.368408 2026] [proxy_fcgi:error] [pid 64066:tid 64079] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:33.604197 2026] [proxy_fcgi:error] [pid 64066:tid 64085] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:34.007027 2026] [proxy_fcgi:error] [pid 64066:tid 64087] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:34.377132 2026] [proxy_fcgi:error] [pid 64066:tid 64075] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:34.613380 2026] [proxy_fcgi:error] [pid 64066:tid 64078] [client 72.146.17.168:29779] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:36:34.850620 2026] [:error] [pid 64066:tid 64090] [client 72.146.17.168:29779] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adaEElR3WucJgr2vZGbPGgAAAVU"]
[Thu Apr 09 00:36:38.731863 2026] [:error] [pid 7047:tid 7063] [client 72.146.17.168:24552] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adaEFuNh3oGO3pKiCzxoHgAAAY4"]
[Thu Apr 09 00:36:44.838659 2026] [:error] [pid 12453:tid 12461] [client 72.146.17.168:30142] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adaEHBjtW7S6XsLPvrSGkQAAAIY"]
[Thu Apr 09 00:36:46.013579 2026] [:error] [pid 64066:tid 64074] [client 72.146.17.168:29353] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adaEHlR3WucJgr2vZGbPYwAAAUU"]
[Thu Apr 09 00:36:47.126523 2026] [:error] [pid 12490:tid 12498] [client 72.146.17.168:20370] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "adaEH21Fea4F4fbumr1tlgAAAMY"]
[Thu Apr 09 00:37:08.630591 2026] [:error] [pid 64066:tid 64085] [client 72.146.17.168:27106] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "adaENFR3WucJgr2vZGbPxAAAAVA"]
[Thu Apr 09 00:37:10.129032 2026] [:error] [pid 12490:tid 12503] [client 72.146.17.168:31297] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "adaENm1Fea4F4fbumr1txAAAAMs"]
[Thu Apr 09 00:37:12.617349 2026] [:error] [pid 12385:tid 12392] [client 72.146.17.168:56549] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "adaEOCAjtvRQEkLosq274AAAAAM"]
[Thu Apr 09 00:37:16.316606 2026] [:error] [pid 12386:tid 12426] [client 72.146.17.168:58357] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pepe.php"] [unique_id "adaEPBLhhLtqHi2gK7U7vQAAAQo"]
[Thu Apr 09 00:37:27.023439 2026] [:error] [pid 12386:tid 12423] [client 72.146.17.168:29243] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "adaERxLhhLtqHi2gK7U7wwAAAQc"]
[Thu Apr 09 00:37:28.332978 2026] [:error] [pid 64066:tid 64071] [client 72.146.17.168:51893] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "adaESFR3WucJgr2vZGbP-wAAAUI"]
[Thu Apr 09 00:37:29.535733 2026] [:error] [pid 12490:tid 12516] [client 72.146.17.168:29299] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "adaESW1Fea4F4fbumr1t5AAAANg"]
[Thu Apr 09 00:37:30.505130 2026] [:error] [pid 12453:tid 12472] [client 72.146.17.168:51961] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "adaEShjtW7S6XsLPvrSG6wAAAJE"]
[Thu Apr 09 00:37:31.894209 2026] [:error] [pid 12386:tid 12417] [client 72.146.17.168:19365] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "adaESxLhhLtqHi2gK7U7yQAAAQE"]
[Thu Apr 09 00:37:35.962183 2026] [proxy_fcgi:error] [pid 64066:tid 64090] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:36.200775 2026] [proxy_fcgi:error] [pid 64066:tid 64089] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:36.489542 2026] [proxy_fcgi:error] [pid 64066:tid 64080] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:36.833198 2026] [proxy_fcgi:error] [pid 64066:tid 64076] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:37.069162 2026] [proxy_fcgi:error] [pid 64066:tid 64070] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:37.545159 2026] [proxy_fcgi:error] [pid 64066:tid 64081] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:37.783768 2026] [proxy_fcgi:error] [pid 64066:tid 64091] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:38.020594 2026] [proxy_fcgi:error] [pid 64066:tid 64082] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:38.260025 2026] [proxy_fcgi:error] [pid 64066:tid 64077] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:38.510339 2026] [proxy_fcgi:error] [pid 64066:tid 64088] [client 72.146.17.168:19347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 00:37:38.743174 2026] [:error] [pid 64066:tid 64071] [client 72.146.17.168:19347] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adaEUlR3WucJgr2vZGbQGwAAAUI"]
[Thu Apr 09 00:37:40.936810 2026] [:error] [pid 64066:tid 64075] [client 72.146.17.168:13544] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adaEVFR3WucJgr2vZGbQLAAAAUY"]
[Thu Apr 09 00:37:42.099513 2026] [:error] [pid 12490:tid 12506] [client 72.146.17.168:51967] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adaEVm1Fea4F4fbumr1t8QAAAM4"]
[Thu Apr 09 00:37:43.396253 2026] [:error] [pid 64066:tid 64090] [client 72.146.17.168:23869] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "adaEV1R3WucJgr2vZGbQNgAAAVU"]
[Thu Apr 09 00:37:44.268618 2026] [:error] [pid 12490:tid 12515] [client 72.146.17.168:20470] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "adaEWG1Fea4F4fbumr1t8gAAANc"]
[Thu Apr 09 00:37:53.651567 2026] [:error] [pid 12453:tid 12468] [client 72.146.17.168:19341] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "adaEYRjtW7S6XsLPvrSHKQAAAI0"]
[Thu Apr 09 00:37:55.099362 2026] [:error] [pid 12453:tid 12467] [client 72.146.17.168:25890] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "adaEYxjtW7S6XsLPvrSHKwAAAIw"]
[Thu Apr 09 00:37:56.250777 2026] [:error] [pid 12490:tid 12515] [client 72.146.17.168:26688] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mn.php"] [unique_id "adaEZG1Fea4F4fbumr1uAAAAANc"]
[Thu Apr 09 00:37:58.904173 2026] [:error] [pid 64066:tid 64078] [client 72.146.17.168:25865] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "adaEZlR3WucJgr2vZGbQgAAAAUk"]
[Thu Apr 09 00:38:07.319773 2026] [:error] [pid 7047:tid 7051] [client 72.146.17.168:22941] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "adaEb-Nh3oGO3pKiCzxoeQAAAYI"]
[Thu Apr 09 00:38:14.026078 2026] [:error] [pid 12386:tid 12423] [client 72.146.17.168:22974] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "adaEdhLhhLtqHi2gK7U76AAAAQc"]
[Thu Apr 09 00:38:15.403485 2026] [:error] [pid 64066:tid 64084] [client 72.146.17.168:14037] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "adaEd1R3WucJgr2vZGbQnwAAAU8"]
[Thu Apr 09 00:38:18.114349 2026] [:error] [pid 64066:tid 64077] [client 72.146.17.168:28038] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "adaEelR3WucJgr2vZGbQrAAAAUg"]
[Thu Apr 09 00:38:24.139853 2026] [:error] [pid 64066:tid 64088] [client 72.146.17.168:22968] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "adaEgFR3WucJgr2vZGbQxwAAAVM"]
[Thu Apr 09 00:38:26.050810 2026] [:error] [pid 35642:tid 35659] [client 72.146.17.168:14079] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adaEgg-CqryxdEs5DN-CDwAAAE8"]
[Thu Apr 09 00:38:28.510689 2026] [:error] [pid 12490:tid 12504] [client 72.146.17.168:22949] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adaEhG1Fea4F4fbumr1uOwAAAMw"]
[Thu Apr 09 00:38:34.469901 2026] [:error] [pid 12453:tid 12471] [client 72.146.17.168:26736] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adaEihjtW7S6XsLPvrSHigAAAJA"]
[Thu Apr 09 00:38:36.405077 2026] [:error] [pid 7047:tid 7050] [client 72.146.17.168:23788] [client 72.146.17.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adaEjONh3oGO3pKiCzxorAAAAYE"]
[Thu Apr 09 00:38:39.159974 2026] [proxy_fcgi:error] [pid 12386:tid 12422] [client 72.146.17.168:28604] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:53.814423 2026] [proxy_fcgi:error] [pid 40054:tid 40113] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:53.916058 2026] [proxy_fcgi:error] [pid 40054:tid 40099] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.017882 2026] [proxy_fcgi:error] [pid 40054:tid 40114] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.129043 2026] [proxy_fcgi:error] [pid 40054:tid 40118] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.234425 2026] [proxy_fcgi:error] [pid 40054:tid 40117] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.337120 2026] [proxy_fcgi:error] [pid 40054:tid 40102] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.445185 2026] [proxy_fcgi:error] [pid 40054:tid 40103] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.548716 2026] [proxy_fcgi:error] [pid 40054:tid 40100] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.754369 2026] [proxy_fcgi:error] [pid 40054:tid 40119] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.858492 2026] [proxy_fcgi:error] [pid 40054:tid 40109] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:54.961281 2026] [proxy_fcgi:error] [pid 40054:tid 40101] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:55.065069 2026] [proxy_fcgi:error] [pid 40054:tid 40107] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:55.167825 2026] [proxy_fcgi:error] [pid 40054:tid 40116] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:55.272216 2026] [proxy_fcgi:error] [pid 40054:tid 40110] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:55.376073 2026] [proxy_fcgi:error] [pid 40054:tid 40123] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:55.478410 2026] [proxy_fcgi:error] [pid 40054:tid 40115] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:55.582157 2026] [proxy_fcgi:error] [pid 40054:tid 40108] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:55.688877 2026] [proxy_fcgi:error] [pid 40054:tid 40105] [client 149.88.106.131:61259] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:57.223918 2026] [:error] [pid 40054:tid 40116] [client 149.88.106.131:61259] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adaNiaymwSVk3s67lDd-cwAAARE"]
[Thu Apr 09 01:16:57.749445 2026] [:error] [pid 40054:tid 40121] [client 149.88.106.131:3136] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adaNiaymwSVk3s67lDd-dwAAARU"]
[Thu Apr 09 01:16:58.265047 2026] [proxy_fcgi:error] [pid 40053:tid 40072] [client 149.88.106.131:58998] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:58.577267 2026] [:error] [pid 40053:tid 40062] [client 149.88.106.131:58998] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adaNitdyKTqfO6aiQ6UOKgAAAAQ"]
[Thu Apr 09 01:16:58.882324 2026] [proxy_fcgi:error] [pid 40054:tid 40109] [client 149.88.106.131:59010] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:58.984783 2026] [proxy_fcgi:error] [pid 40054:tid 40101] [client 149.88.106.131:59010] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:59.089449 2026] [:error] [pid 40054:tid 40124] [client 149.88.106.131:59010] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adaNi6ymwSVk3s67lDd-fgAAARg"]
[Thu Apr 09 01:16:59.398027 2026] [proxy_fcgi:error] [pid 40055:tid 40141] [client 149.88.106.131:59020] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:16:59.919618 2026] [:error] [pid 40055:tid 40139] [client 149.88.106.131:59020] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adaNi3_5SjAJycOw5k-8lQAAAIk"]
[Thu Apr 09 01:17:00.229672 2026] [:error] [pid 40055:tid 40136] [client 149.88.106.131:59022] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adaNjH_5SjAJycOw5k-8mAAAAIY"]
[Thu Apr 09 01:17:00.430539 2026] [:error] [pid 40054:tid 40121] [client 149.88.106.131:59036] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adaNjKymwSVk3s67lDd-ggAAARU"]
[Thu Apr 09 01:17:00.627481 2026] [:error] [pid 40054:tid 40114] [client 149.88.106.131:59050] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adaNjKymwSVk3s67lDd-hAAAAQ8"]
[Thu Apr 09 01:17:00.826953 2026] [:error] [pid 22056:tid 22072] [client 149.88.106.131:59066] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adaNjGQ3CidOGkmVXZglogAAAM4"]
[Thu Apr 09 01:17:01.025070 2026] [:error] [pid 40460:tid 40479] [client 149.88.106.131:59070] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adaNjYw-4-9CKD2kKMYfNwAAAFA"]
[Thu Apr 09 01:17:01.341616 2026] [:error] [pid 22056:tid 22063] [client 149.88.106.131:59072] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adaNjWQ3CidOGkmVXZglpQAAAMU"]
[Thu Apr 09 01:17:01.543693 2026] [proxy_fcgi:error] [pid 22056:tid 22068] [client 149.88.106.131:59080] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:01.755896 2026] [:error] [pid 22056:tid 22073] [client 149.88.106.131:59080] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "adaNjWQ3CidOGkmVXZglqAAAAM8"]
[Thu Apr 09 01:17:01.963367 2026] [proxy_fcgi:error] [pid 40054:tid 40098] [client 149.88.106.131:59094] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:02.075882 2026] [proxy_fcgi:error] [pid 40054:tid 40119] [client 149.88.106.131:59094] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:02.189397 2026] [:error] [pid 40054:tid 40100] [client 149.88.106.131:59094] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adaNjqymwSVk3s67lDd-iQAAAQI"]
[Thu Apr 09 01:17:02.495907 2026] [:error] [pid 40054:tid 40122] [client 149.88.106.131:32507] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adaNjqymwSVk3s67lDd-jQAAARY"]
[Thu Apr 09 01:17:02.699315 2026] [proxy_fcgi:error] [pid 40055:tid 40141] [client 149.88.106.131:59110] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:02.799768 2026] [:error] [pid 40055:tid 40150] [client 149.88.106.131:59110] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adaNjn_5SjAJycOw5k-8mwAAAJQ"]
[Thu Apr 09 01:17:03.012174 2026] [proxy_fcgi:error] [pid 40055:tid 40147] [client 149.88.106.131:59118] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:03.332304 2026] [proxy_fcgi:error] [pid 40055:tid 40134] [client 149.88.106.131:59118] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:03.639641 2026] [:error] [pid 40055:tid 40143] [client 149.88.106.131:59118] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adaNj3_5SjAJycOw5k-8owAAAI0"]
[Thu Apr 09 01:17:03.850103 2026] [proxy_fcgi:error] [pid 40053:tid 40058] [client 149.88.106.131:59132] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:03.951859 2026] [:error] [pid 40053:tid 40068] [client 149.88.106.131:59132] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adaNj9dyKTqfO6aiQ6UOLgAAAAo"]
[Thu Apr 09 01:17:04.162853 2026] [proxy_fcgi:error] [pid 40053:tid 40073] [client 149.88.106.131:59146] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:04.376094 2026] [:error] [pid 40053:tid 40072] [client 149.88.106.131:59146] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adaNkNdyKTqfO6aiQ6UOMgAAAA4"]
[Thu Apr 09 01:17:04.687379 2026] [:error] [pid 22056:tid 22069] [client 149.88.106.131:59154] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adaNkGQ3CidOGkmVXZglrAAAAMs"]
[Thu Apr 09 01:17:05.027212 2026] [proxy_fcgi:error] [pid 40460:tid 40486] [client 149.88.106.131:59164] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:05.132851 2026] [proxy_fcgi:error] [pid 40460:tid 40482] [client 149.88.106.131:59164] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:05.351061 2026] [:error] [pid 40460:tid 40479] [client 149.88.106.131:59164] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adaNkYw-4-9CKD2kKMYfQgAAAFA"]
[Thu Apr 09 01:17:05.663938 2026] [:error] [pid 40460:tid 40469] [client 149.88.106.131:59180] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adaNkYw-4-9CKD2kKMYfRAAAAEY"]
[Thu Apr 09 01:17:05.971888 2026] [:error] [pid 22056:tid 22080] [client 149.88.106.131:59188] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adaNkWQ3CidOGkmVXZglsAAAANY"]
[Thu Apr 09 01:17:06.170760 2026] [:error] [pid 40055:tid 40133] [client 149.88.106.131:59196] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adaNkn_5SjAJycOw5k-8qAAAAIM"]
[Thu Apr 09 01:17:06.380251 2026] [:error] [pid 22056:tid 22062] [client 149.88.106.131:59204] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adaNkmQ3CidOGkmVXZglsgAAAMQ"]
[Thu Apr 09 01:17:06.890219 2026] [proxy_fcgi:error] [pid 22056:tid 22068] [client 149.88.106.131:59210] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:06.995888 2026] [:error] [pid 22056:tid 22075] [client 149.88.106.131:59210] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adaNkmQ3CidOGkmVXZgluQAAANE"]
[Thu Apr 09 01:17:07.194881 2026] [:error] [pid 40053:tid 40063] [client 149.88.106.131:59224] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adaNk9dyKTqfO6aiQ6UONAAAAAU"]
[Thu Apr 09 01:17:07.428603 2026] [:error] [pid 40053:tid 40081] [client 149.88.106.131:42298] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adaNk9dyKTqfO6aiQ6UONQAAABc"]
[Thu Apr 09 01:17:07.908578 2026] [proxy_fcgi:error] [pid 22056:tid 22076] [client 149.88.106.131:42310] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:08.164898 2026] [proxy_fcgi:error] [pid 22056:tid 22080] [client 149.88.106.131:42310] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:08.273015 2026] [proxy_fcgi:error] [pid 22056:tid 22071] [client 149.88.106.131:42310] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:08.591320 2026] [:error] [pid 22056:tid 22074] [client 149.88.106.131:42310] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adaNlGQ3CidOGkmVXZglyAAAANA"]
[Thu Apr 09 01:17:09.184782 2026] [:error] [pid 40460:tid 40471] [client 149.88.106.131:42326] [client 149.88.106.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.106.131, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adaNlYw-4-9CKD2kKMYfTwAAAEg"]
[Thu Apr 09 01:17:09.292872 2026] [proxy_fcgi:error] [pid 40460:tid 40465] [client 149.88.106.131:42326] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:09.813970 2026] [proxy_fcgi:error] [pid 40460:tid 40466] [client 149.88.106.131:42326] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:09.917035 2026] [proxy_fcgi:error] [pid 40460:tid 40483] [client 149.88.106.131:42326] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:10.467362 2026] [:error] [pid 40460:tid 40477] [client 149.88.106.131:42326] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adaNlow-4-9CKD2kKMYfYAAAAE4"]
[Thu Apr 09 01:17:10.812110 2026] [proxy_fcgi:error] [pid 40054:tid 40122] [client 149.88.106.131:18427] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:10.923556 2026] [:error] [pid 40054:tid 40112] [client 149.88.106.131:18427] [client 149.88.106.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.106.131, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adaNlqymwSVk3s67lDd-mgAAAQ0"]
[Thu Apr 09 01:17:11.146558 2026] [:error] [pid 40054:tid 40109] [client 149.88.106.131:18427] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "adaNl6ymwSVk3s67lDd-nQAAAQs"]
[Thu Apr 09 01:17:11.456245 2026] [proxy_fcgi:error] [pid 40460:tid 40485] [client 149.88.106.131:12614] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:11.833639 2026] [proxy_fcgi:error] [pid 40460:tid 40478] [client 149.88.106.131:12614] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:12.089955 2026] [proxy_fcgi:error] [pid 40460:tid 40466] [client 149.88.106.131:12614] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:12.331539 2026] [:error] [pid 40460:tid 40473] [client 149.88.106.131:12614] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adaNmIw-4-9CKD2kKMYfbAAAAEo"]
[Thu Apr 09 01:17:14.186249 2026] [proxy_fcgi:error] [pid 22056:tid 22074] [client 149.88.106.131:42346] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:14.508360 2026] [proxy_fcgi:error] [pid 22056:tid 22077] [client 149.88.106.131:42346] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:14.717828 2026] [proxy_fcgi:error] [pid 22056:tid 22061] [client 149.88.106.131:42346] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:14.924716 2026] [proxy_fcgi:error] [pid 22056:tid 22079] [client 149.88.106.131:42346] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:15.024027 2026] [:error] [pid 22056:tid 22076] [client 149.88.106.131:42346] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adaNm2Q3CidOGkmVXZgl5gAAANI"]
[Thu Apr 09 01:17:15.225395 2026] [proxy_fcgi:error] [pid 40053:tid 40080] [client 149.88.106.131:42362] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:15.332600 2026] [proxy_fcgi:error] [pid 40053:tid 40072] [client 149.88.106.131:42362] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:15.431897 2026] [:error] [pid 40053:tid 40064] [client 149.88.106.131:42362] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adaNm9dyKTqfO6aiQ6UOPQAAAAY"]
[Thu Apr 09 01:17:15.734190 2026] [proxy_fcgi:error] [pid 40053:tid 40074] [client 149.88.106.131:35077] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:15.935815 2026] [:error] [pid 40053:tid 40066] [client 149.88.106.131:35077] [client 149.88.106.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.106.131, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adaNm9dyKTqfO6aiQ6UOQQAAAAg"]
[Thu Apr 09 01:17:16.039195 2026] [:error] [pid 40053:tid 40081] [client 149.88.106.131:35077] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adaNnNdyKTqfO6aiQ6UOQgAAABc"]
[Thu Apr 09 01:17:17.292995 2026] [proxy_fcgi:error] [pid 40055:tid 40141] [client 149.88.106.131:51074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:17.712666 2026] [proxy_fcgi:error] [pid 40055:tid 40142] [client 149.88.106.131:51074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:17.923576 2026] [proxy_fcgi:error] [pid 40055:tid 40133] [client 149.88.106.131:51074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:18.023142 2026] [:error] [pid 40055:tid 40132] [client 149.88.106.131:51074] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adaNnn_5SjAJycOw5k-8zQAAAII"]
[Thu Apr 09 01:17:18.223647 2026] [proxy_fcgi:error] [pid 40460:tid 40476] [client 149.88.106.131:43114] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:18.527638 2026] [:error] [pid 40460:tid 40484] [client 149.88.106.131:43114] [client 149.88.106.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.106.131, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adaNnow-4-9CKD2kKMYfdgAAAFU"]
[Thu Apr 09 01:17:18.635794 2026] [proxy_fcgi:error] [pid 40460:tid 40477] [client 149.88.106.131:43114] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:18.745286 2026] [proxy_fcgi:error] [pid 40460:tid 40470] [client 149.88.106.131:43114] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:18.851160 2026] [proxy_fcgi:error] [pid 40460:tid 40487] [client 149.88.106.131:43114] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:18.959844 2026] [:error] [pid 40460:tid 40474] [client 149.88.106.131:43114] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adaNnow-4-9CKD2kKMYfewAAAEs"]
[Thu Apr 09 01:17:19.163907 2026] [proxy_fcgi:error] [pid 22056:tid 22065] [client 149.88.106.131:43116] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:19.264099 2026] [:error] [pid 22056:tid 22059] [client 149.88.106.131:43116] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adaNn2Q3CidOGkmVXZgl8AAAAME"]
[Thu Apr 09 01:17:19.594823 2026] [proxy_fcgi:error] [pid 40055:tid 40149] [client 149.88.106.131:43120] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:19.696650 2026] [:error] [pid 40055:tid 40152] [client 149.88.106.131:43120] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adaNn3_5SjAJycOw5k-80AAAAJY"]
[Thu Apr 09 01:17:20.112079 2026] [proxy_fcgi:error] [pid 40055:tid 40146] [client 149.88.106.131:43124] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:20.225924 2026] [:error] [pid 40055:tid 40153] [client 149.88.106.131:43124] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adaNoH_5SjAJycOw5k-81gAAAJc"]
[Thu Apr 09 01:17:20.449842 2026] [:error] [pid 40055:tid 40133] [client 149.88.106.131:26825] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adaNoH_5SjAJycOw5k-82AAAAIM"]
[Thu Apr 09 01:17:20.667206 2026] [proxy_fcgi:error] [pid 40053:tid 40064] [client 149.88.106.131:43148] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:20.777163 2026] [proxy_fcgi:error] [pid 40053:tid 40075] [client 149.88.106.131:43148] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:21.185953 2026] [:error] [pid 40053:tid 40077] [client 149.88.106.131:43148] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adaNoddyKTqfO6aiQ6UOTQAAABM"]
[Thu Apr 09 01:17:21.544360 2026] [:error] [pid 40460:tid 40485] [client 149.88.106.131:43158] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adaNoYw-4-9CKD2kKMYffgAAAFY"]
[Thu Apr 09 01:17:21.755472 2026] [proxy_fcgi:error] [pid 40055:tid 40140] [client 149.88.106.131:43174] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:22.072749 2026] [:error] [pid 40055:tid 40133] [client 149.88.106.131:43174] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adaNon_5SjAJycOw5k-84QAAAIM"]
[Thu Apr 09 01:17:22.273399 2026] [proxy_fcgi:error] [pid 40053:tid 40069] [client 149.88.106.131:43176] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:22.478876 2026] [proxy_fcgi:error] [pid 40053:tid 40068] [client 149.88.106.131:43176] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:22.580469 2026] [:error] [pid 40053:tid 40071] [client 149.88.106.131:43176] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adaNotdyKTqfO6aiQ6UOUQAAAA0"]
[Thu Apr 09 01:17:22.783204 2026] [proxy_fcgi:error] [pid 40055:tid 40131] [client 149.88.106.131:43190] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:22.988328 2026] [:error] [pid 40055:tid 40137] [client 149.88.106.131:43190] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "adaNon_5SjAJycOw5k-85gAAAIc"]
[Thu Apr 09 01:17:23.191556 2026] [proxy_fcgi:error] [pid 40460:tid 40483] [client 149.88.106.131:43206] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:23.501061 2026] [:error] [pid 40460:tid 40473] [client 149.88.106.131:43206] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adaNo4w-4-9CKD2kKMYfgwAAAEo"]
[Thu Apr 09 01:17:23.824126 2026] [proxy_fcgi:error] [pid 40055:tid 40141] [client 149.88.106.131:43222] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:24.031680 2026] [proxy_fcgi:error] [pid 40055:tid 40146] [client 149.88.106.131:43222] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:24.135890 2026] [proxy_fcgi:error] [pid 40055:tid 40138] [client 149.88.106.131:43222] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:24.345579 2026] [proxy_fcgi:error] [pid 40055:tid 40133] [client 149.88.106.131:43222] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:24.447200 2026] [:error] [pid 40055:tid 40132] [client 149.88.106.131:43222] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adaNpH_5SjAJycOw5k-88gAAAII"]
[Thu Apr 09 01:17:24.664416 2026] [:error] [pid 40054:tid 40122] [client 149.88.106.131:43226] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adaNpKymwSVk3s67lDd-pQAAARY"]
[Thu Apr 09 01:17:24.866418 2026] [:error] [pid 40460:tid 40486] [client 149.88.106.131:43230] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adaNpIw-4-9CKD2kKMYfhAAAAFc"]
[Thu Apr 09 01:17:25.075386 2026] [:error] [pid 40054:tid 40115] [client 149.88.106.131:43236] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adaNpaymwSVk3s67lDd-pgAAARA"]
[Thu Apr 09 01:17:25.278386 2026] [proxy_fcgi:error] [pid 40460:tid 40478] [client 149.88.106.131:43248] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:25.379356 2026] [:error] [pid 40460:tid 40481] [client 149.88.106.131:43248] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adaNpYw-4-9CKD2kKMYfiQAAAFI"]
[Thu Apr 09 01:17:25.588797 2026] [:error] [pid 22056:tid 22058] [client 149.88.106.131:43262] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adaNpWQ3CidOGkmVXZgl_QAAAMA"]
[Thu Apr 09 01:17:25.787665 2026] [proxy_fcgi:error] [pid 40055:tid 40139] [client 149.88.106.131:43264] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:25.988595 2026] [:error] [pid 40055:tid 40140] [client 149.88.106.131:43264] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adaNpX_5SjAJycOw5k-89wAAAIo"]
[Thu Apr 09 01:17:26.223774 2026] [:error] [pid 40460:tid 40476] [client 149.88.106.131:43266] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adaNpow-4-9CKD2kKMYfjAAAAE0"]
[Thu Apr 09 01:17:26.421656 2026] [:error] [pid 40460:tid 40484] [client 149.88.106.131:43268] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adaNpow-4-9CKD2kKMYfjgAAAFU"]
[Thu Apr 09 01:17:26.624834 2026] [:error] [pid 40460:tid 40470] [client 149.88.106.131:43276] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adaNpow-4-9CKD2kKMYfjwAAAEc"]
[Thu Apr 09 01:17:26.928249 2026] [:error] [pid 40460:tid 40485] [client 149.88.106.131:43286] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adaNpow-4-9CKD2kKMYfkgAAAFY"]
[Thu Apr 09 01:17:27.348036 2026] [:error] [pid 40460:tid 40467] [client 149.88.106.131:43294] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adaNp4w-4-9CKD2kKMYflwAAAEQ"]
[Thu Apr 09 01:17:27.552142 2026] [proxy_fcgi:error] [pid 40460:tid 40480] [client 149.88.106.131:48700] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:27.863508 2026] [proxy_fcgi:error] [pid 40460:tid 40484] [client 149.88.106.131:48700] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:27.966693 2026] [:error] [pid 40460:tid 40466] [client 149.88.106.131:48700] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adaNp4w-4-9CKD2kKMYfnQAAAEM"]
[Thu Apr 09 01:17:28.295569 2026] [proxy_fcgi:error] [pid 22056:tid 22081] [client 149.88.106.131:48712] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:28.398949 2026] [proxy_fcgi:error] [pid 22056:tid 22064] [client 149.88.106.131:48712] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:28.814695 2026] [proxy_fcgi:error] [pid 22056:tid 22060] [client 149.88.106.131:48712] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:28.914147 2026] [:error] [pid 22056:tid 22061] [client 149.88.106.131:48712] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adaNqGQ3CidOGkmVXZgmBwAAAMM"]
[Thu Apr 09 01:17:29.115502 2026] [proxy_fcgi:error] [pid 40460:tid 40486] [client 149.88.106.131:48716] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:29.428824 2026] [:error] [pid 40460:tid 40478] [client 149.88.106.131:48716] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adaNqYw-4-9CKD2kKMYfpAAAAE8"]
[Thu Apr 09 01:17:29.628625 2026] [:error] [pid 40055:tid 40130] [client 149.88.106.131:48730] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adaNqX_5SjAJycOw5k-8-wAAAIA"]
[Thu Apr 09 01:17:30.264960 2026] [:error] [pid 40055:tid 40131] [client 149.88.106.131:48736] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adaNqn_5SjAJycOw5k-9AQAAAIE"]
[Thu Apr 09 01:17:30.724597 2026] [proxy_fcgi:error] [pid 22056:tid 22082] [client 149.88.106.131:48748] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:30.829086 2026] [proxy_fcgi:error] [pid 22056:tid 22074] [client 149.88.106.131:48748] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:30.939243 2026] [proxy_fcgi:error] [pid 22056:tid 22081] [client 149.88.106.131:48748] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:31.047846 2026] [proxy_fcgi:error] [pid 22056:tid 22064] [client 149.88.106.131:48748] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:31.573088 2026] [:error] [pid 22056:tid 22061] [client 149.88.106.131:48748] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adaNq2Q3CidOGkmVXZgmHQAAAMM"]
[Thu Apr 09 01:17:31.814165 2026] [:error] [pid 40053:tid 40062] [client 149.88.106.131:48756] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adaNq9dyKTqfO6aiQ6UOUwAAAAQ"]
[Thu Apr 09 01:17:32.080982 2026] [:error] [pid 40054:tid 40104] [client 149.88.106.131:48762] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adaNrKymwSVk3s67lDd-qAAAAQY"]
[Thu Apr 09 01:17:32.348211 2026] [:error] [pid 22056:tid 22059] [client 149.88.106.131:48768] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adaNrGQ3CidOGkmVXZgmIAAAAME"]
[Thu Apr 09 01:17:32.574130 2026] [:error] [pid 22056:tid 22066] [client 149.88.106.131:48776] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adaNrGQ3CidOGkmVXZgmIQAAAMg"]
[Thu Apr 09 01:17:32.772334 2026] [:error] [pid 22056:tid 22082] [client 149.88.106.131:48778] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adaNrGQ3CidOGkmVXZgmIgAAANg"]
[Thu Apr 09 01:17:33.082665 2026] [:error] [pid 22056:tid 22064] [client 149.88.106.131:36135] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adaNrWQ3CidOGkmVXZgmJAAAAMY"]
[Thu Apr 09 01:17:33.286853 2026] [:error] [pid 22056:tid 22068] [client 149.88.106.131:48798] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adaNrWQ3CidOGkmVXZgmJgAAAMo"]
[Thu Apr 09 01:17:33.495134 2026] [:error] [pid 22056:tid 22076] [client 149.88.106.131:48802] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adaNrWQ3CidOGkmVXZgmKAAAANI"]
[Thu Apr 09 01:17:33.728481 2026] [:error] [pid 22056:tid 22075] [client 149.88.106.131:48812] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adaNrWQ3CidOGkmVXZgmKQAAANE"]
[Thu Apr 09 01:17:35.651937 2026] [:error] [pid 40054:tid 40098] [client 149.88.106.131:48822] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adaNr6ymwSVk3s67lDd-rgAAAQA"]
[Thu Apr 09 01:17:35.961031 2026] [:error] [pid 40054:tid 40122] [client 149.88.106.131:48832] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adaNr6ymwSVk3s67lDd-sQAAARY"]
[Thu Apr 09 01:17:36.171821 2026] [proxy_fcgi:error] [pid 40460:tid 40465] [client 149.88.106.131:3795] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:36.387792 2026] [:error] [pid 40460:tid 40466] [client 149.88.106.131:3795] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adaNsIw-4-9CKD2kKMYfqwAAAEM"]
[Thu Apr 09 01:17:38.319396 2026] [:error] [pid 22056:tid 22081] [client 149.88.106.131:48856] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adaNsmQ3CidOGkmVXZgmPgAAANc"]
[Thu Apr 09 01:17:38.524157 2026] [proxy_fcgi:error] [pid 40460:tid 40463] [client 149.88.106.131:49106] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:38.755291 2026] [proxy_fcgi:error] [pid 40460:tid 40479] [client 149.88.106.131:49106] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:38.873283 2026] [:error] [pid 40460:tid 40471] [client 149.88.106.131:49106] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adaNsow-4-9CKD2kKMYfswAAAEg"]
[Thu Apr 09 01:17:39.183779 2026] [proxy_fcgi:error] [pid 40053:tid 40061] [client 149.88.106.131:1880] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:40.804118 2026] [proxy_fcgi:error] [pid 40053:tid 40079] [client 149.88.106.131:1880] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:40.907307 2026] [proxy_fcgi:error] [pid 40053:tid 40059] [client 149.88.106.131:1880] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:41.007331 2026] [:error] [pid 40053:tid 40067] [client 149.88.106.131:1880] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adaNtddyKTqfO6aiQ6UOXgAAAAk"]
[Thu Apr 09 01:17:41.209768 2026] [proxy_fcgi:error] [pid 40053:tid 40078] [client 149.88.106.131:49126] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:41.325637 2026] [:error] [pid 40053:tid 40073] [client 149.88.106.131:49126] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adaNtddyKTqfO6aiQ6UOYAAAAA8"]
[Thu Apr 09 01:17:41.737302 2026] [proxy_fcgi:error] [pid 40053:tid 40074] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:41.841898 2026] [proxy_fcgi:error] [pid 40053:tid 40077] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:41.962757 2026] [proxy_fcgi:error] [pid 40053:tid 40075] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:42.174523 2026] [proxy_fcgi:error] [pid 40053:tid 40082] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:42.492412 2026] [proxy_fcgi:error] [pid 40053:tid 40081] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:42.597795 2026] [proxy_fcgi:error] [pid 40053:tid 40060] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:42.701529 2026] [proxy_fcgi:error] [pid 40053:tid 40069] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:42.805764 2026] [proxy_fcgi:error] [pid 40053:tid 40061] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:43.123390 2026] [proxy_fcgi:error] [pid 40053:tid 40067] [client 149.88.106.131:49128] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:43.240810 2026] [:error] [pid 40053:tid 40071] [client 149.88.106.131:49128] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adaNt9dyKTqfO6aiQ6UOcQAAAA0"]
[Thu Apr 09 01:17:43.492320 2026] [:error] [pid 40460:tid 40473] [client 149.88.106.131:14930] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adaNt4w-4-9CKD2kKMYfugAAAEo"]
[Thu Apr 09 01:17:43.699029 2026] [proxy_fcgi:error] [pid 40460:tid 40485] [client 149.88.106.131:49146] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:43.797555 2026] [:error] [pid 40460:tid 40467] [client 149.88.106.131:49146] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adaNt4w-4-9CKD2kKMYfvAAAAEQ"]
[Thu Apr 09 01:17:44.101716 2026] [proxy_fcgi:error] [pid 40460:tid 40480] [client 149.88.106.131:49156] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:44.209559 2026] [:error] [pid 40460:tid 40465] [client 149.88.106.131:49156] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adaNuIw-4-9CKD2kKMYfwAAAAEI"]
[Thu Apr 09 01:17:44.409080 2026] [:error] [pid 22056:tid 22076] [client 149.88.106.131:49172] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adaNuGQ3CidOGkmVXZgmTwAAANI"]
[Thu Apr 09 01:17:45.024872 2026] [:error] [pid 40054:tid 40099] [client 149.88.106.131:49174] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adaNuaymwSVk3s67lDd-vwAAAQE"]
[Thu Apr 09 01:17:45.223882 2026] [:error] [pid 40460:tid 40468] [client 149.88.106.131:59956] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "adaNuYw-4-9CKD2kKMYfwQAAAEU"]
[Thu Apr 09 01:17:45.783630 2026] [proxy_fcgi:error] [pid 22056:tid 22078] [client 149.88.106.131:49204] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:45.985993 2026] [:error] [pid 22056:tid 22070] [client 149.88.106.131:49204] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adaNuWQ3CidOGkmVXZgmWQAAAMw"]
[Thu Apr 09 01:17:46.306935 2026] [proxy_fcgi:error] [pid 22056:tid 22073] [client 149.88.106.131:49208] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 01:17:46.514073 2026] [:error] [pid 22056:tid 22061] [client 149.88.106.131:49208] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "adaNumQ3CidOGkmVXZgmYAAAAMM"]
[Thu Apr 09 01:17:46.735211 2026] [:error] [pid 22056:tid 22065] [client 149.88.106.131:13355] [client 149.88.106.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adaNumQ3CidOGkmVXZgmYgAAAMc"]
[Thu Apr 09 01:17:47.051928 2026] [:error] [pid 22056:tid 22058] [client 149.88.106.131:49230] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content.php"] [unique_id "adaNu2Q3CidOGkmVXZgmZgAAAMA"]
[Thu Apr 09 01:17:47.254086 2026] [:error] [pid 40054:tid 40103] [client 149.88.106.131:49234] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content.php"] [unique_id "adaNu6ymwSVk3s67lDd-wgAAAQU"]
[Thu Apr 09 01:17:47.451561 2026] [:error] [pid 40054:tid 40116] [client 149.88.106.131:43606] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content.php"] [unique_id "adaNu6ymwSVk3s67lDd-wwAAARE"]
[Thu Apr 09 01:17:47.648931 2026] [:error] [pid 40055:tid 40131] [client 149.88.106.131:43608] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content.php"] [unique_id "adaNu3_5SjAJycOw5k-9CQAAAIE"]
[Thu Apr 09 01:17:47.845938 2026] [:error] [pid 40055:tid 40135] [client 149.88.106.131:43618] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content.php"] [unique_id "adaNu3_5SjAJycOw5k-9CgAAAIU"]
[Thu Apr 09 01:17:51.703193 2026] [autoindex:error] [pid 40055:tid 40131] [client 149.88.106.131:13830] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 01:17:54.023070 2026] [:error] [pid 40055:tid 40143] [client 149.88.106.131:13830] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adaNwn_5SjAJycOw5k-9OAAAAI0"]
[Thu Apr 09 01:17:54.230822 2026] [:error] [pid 40053:tid 40068] [client 149.88.106.131:43634] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adaNwtdyKTqfO6aiQ6UOewAAAAo"]
[Thu Apr 09 01:17:54.438778 2026] [:error] [pid 40053:tid 40065] [client 149.88.106.131:43640] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adaNwtdyKTqfO6aiQ6UOfQAAAAc"]
[Thu Apr 09 01:17:54.676603 2026] [:error] [pid 40054:tid 40103] [client 149.88.106.131:43654] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adaNwqymwSVk3s67lDd-zQAAAQU"]
[Thu Apr 09 01:17:54.874700 2026] [:error] [pid 40054:tid 40124] [client 149.88.106.131:43670] [client 149.88.106.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adaNwqymwSVk3s67lDd-zgAAARg"]
[Thu Apr 09 05:24:08.146581 2026] [:error] [pid 20537:tid 20602] [client 137.184.28.107:34324] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adbHeMSTjpSeyrxLmN4LSwAAAIQ"]
[Thu Apr 09 05:24:09.598261 2026] [:error] [pid 20641:tid 20649] [client 137.184.28.107:50016] [client 137.184.28.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "adbHeW3LksBSF-6rlkZgUQAAAMQ"]
[Thu Apr 09 07:16:19.298388 2026] [proxy_fcgi:error] [pid 20536:tid 20582] [client 20.220.57.112:27213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:16:19.508723 2026] [proxy_fcgi:error] [pid 20536:tid 20576] [client 20.220.57.112:27213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:16:19.718343 2026] [proxy_fcgi:error] [pid 20536:tid 20594] [client 20.220.57.112:27213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:16:19.928386 2026] [proxy_fcgi:error] [pid 20536:tid 20580] [client 20.220.57.112:27213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:16:20.140422 2026] [proxy_fcgi:error] [pid 20536:tid 20589] [client 20.220.57.112:27213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:16:20.350879 2026] [proxy_fcgi:error] [pid 20536:tid 20575] [client 20.220.57.112:27213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:16:20.560042 2026] [proxy_fcgi:error] [pid 20536:tid 20581] [client 20.220.57.112:27213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:50:34.059082 2026] [proxy_fcgi:error] [pid 20535:tid 20567] [client 20.63.32.44:19436] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:50:34.268850 2026] [proxy_fcgi:error] [pid 20535:tid 20545] [client 20.63.32.44:19436] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:50:34.474487 2026] [:error] [pid 20535:tid 20551] [client 20.63.32.44:19436] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxcs.php"] [unique_id "adbpygWiD9hWnEUHWdNrWQAAAAc"]
[Thu Apr 09 07:50:34.887603 2026] [:error] [pid 20537:tid 20604] [client 20.63.32.44:19442] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxcs.php"] [unique_id "adbpysSTjpSeyrxLmN47JgAAAIY"]
[Thu Apr 09 07:50:35.309804 2026] [:error] [pid 20641:tid 20649] [client 20.63.32.44:19035] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxcs.php"] [unique_id "adbpy23LksBSF-6rlkaf0gAAAMQ"]
[Thu Apr 09 07:50:35.721146 2026] [:error] [pid 22627:tid 22634] [client 20.63.32.44:19020] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxcs.php"] [unique_id "adbpy_r8glsF_jKQpr5iZwAAAQQ"]
[Thu Apr 09 07:50:36.133028 2026] [:error] [pid 20536:tid 20580] [client 20.63.32.44:19013] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "adbpzMPqyUJM1s3YpIZFPwAAAEk"]
[Thu Apr 09 07:50:36.546621 2026] [:error] [pid 20537:tid 20606] [client 20.63.32.44:19443] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "adbpzMSTjpSeyrxLmN47KwAAAIg"]
[Thu Apr 09 07:50:36.962444 2026] [:error] [pid 20536:tid 20581] [client 20.63.32.44:19031] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "adbpzMPqyUJM1s3YpIZFQAAAAEo"]
[Thu Apr 09 07:50:37.382055 2026] [:error] [pid 20641:tid 20657] [client 20.63.32.44:19451] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/btx25.php"] [unique_id "adbpzW3LksBSF-6rlkaf2wAAAMw"]
[Thu Apr 09 07:50:37.793266 2026] [:error] [pid 20535:tid 20546] [client 20.63.32.44:19431] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca-022.php"] [unique_id "adbpzQWiD9hWnEUHWdNrYwAAAAI"]
[Thu Apr 09 07:50:38.215628 2026] [:error] [pid 20535:tid 20562] [client 20.63.32.44:19399] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca-022.php"] [unique_id "adbpzgWiD9hWnEUHWdNraAAAABI"]
[Thu Apr 09 07:50:38.631950 2026] [:error] [pid 20641:tid 20647] [client 20.63.32.44:19082] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca-022.php"] [unique_id "adbpzm3LksBSF-6rlkaf3gAAAMI"]
[Thu Apr 09 07:50:39.045512 2026] [:error] [pid 22627:tid 22647] [client 20.63.32.44:19406] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca-022.php"] [unique_id "adbpz_r8glsF_jKQpr5ibgAAARE"]
[Thu Apr 09 07:50:39.457713 2026] [:error] [pid 22627:tid 22634] [client 20.63.32.44:19039] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbpz_r8glsF_jKQpr5idAAAAQQ"]
[Thu Apr 09 07:50:39.872781 2026] [:error] [pid 20535:tid 20561] [client 20.63.32.44:19425] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbpzwWiD9hWnEUHWdNrcwAAABE"]
[Thu Apr 09 07:50:40.285417 2026] [:error] [pid 20535:tid 20545] [client 20.63.32.44:19398] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbp0AWiD9hWnEUHWdNrdgAAAAE"]
[Thu Apr 09 07:50:40.698549 2026] [:error] [pid 22627:tid 22639] [client 20.63.32.44:19435] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbp0Pr8glsF_jKQpr5iegAAAQk"]
[Thu Apr 09 07:50:41.112666 2026] [:error] [pid 22627:tid 22643] [client 20.63.32.44:19433] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbp0fr8glsF_jKQpr5ifwAAAQ0"]
[Thu Apr 09 07:50:41.524025 2026] [:error] [pid 22627:tid 22645] [client 20.63.32.44:19028] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbp0fr8glsF_jKQpr5ihQAAAQ8"]
[Thu Apr 09 07:50:41.953728 2026] [:error] [pid 22627:tid 22635] [client 20.63.32.44:19447] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbp0fr8glsF_jKQpr5iigAAAQU"]
[Thu Apr 09 07:50:42.364139 2026] [:error] [pid 22627:tid 22651] [client 20.63.32.44:19445] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbp0vr8glsF_jKQpr5ijAAAARU"]
[Thu Apr 09 08:08:43.234664 2026] [proxy_fcgi:error] [pid 20641:tid 20646] [client 20.63.32.44:32601] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:08:43.447843 2026] [proxy_fcgi:error] [pid 20641:tid 20665] [client 20.63.32.44:32601] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:08:43.680310 2026] [proxy_fcgi:error] [pid 20641:tid 20645] [client 20.63.32.44:32601] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:08:43.889869 2026] [proxy_fcgi:error] [pid 20641:tid 20663] [client 20.63.32.44:32601] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:08:44.100767 2026] [proxy_fcgi:error] [pid 20641:tid 20655] [client 20.63.32.44:32601] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:08:45.796580 2026] [:error] [pid 20641:tid 20666] [client 20.63.32.44:32601] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbuDW3LksBSF-6rlkaqEQAAANU"]
[Thu Apr 09 08:08:46.209591 2026] [:error] [pid 20641:tid 20650] [client 20.63.32.44:32622] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbuDm3LksBSF-6rlkaqFAAAAMU"]
[Thu Apr 09 08:08:46.642321 2026] [:error] [pid 20535:tid 20549] [client 20.63.32.44:32526] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbuDgWiD9hWnEUHWdN4aAAAAAU"]
[Thu Apr 09 08:08:47.069416 2026] [:error] [pid 20535:tid 20560] [client 20.63.32.44:32512] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rnenu.php"] [unique_id "adbuDwWiD9hWnEUHWdN4agAAABA"]
[Thu Apr 09 08:08:47.506786 2026] [:error] [pid 20641:tid 20669] [client 20.63.32.44:32615] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbuD23LksBSF-6rlkaqHQAAANg"]
[Thu Apr 09 08:08:47.918271 2026] [:error] [pid 20535:tid 20555] [client 20.63.32.44:32608] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbuDwWiD9hWnEUHWdN4bwAAAAs"]
[Thu Apr 09 08:08:48.357865 2026] [:error] [pid 20641:tid 20662] [client 20.63.32.44:32536] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbuEG3LksBSF-6rlkaqJAAAANE"]
[Thu Apr 09 08:08:48.773090 2026] [:error] [pid 22627:tid 22646] [client 20.63.32.44:32616] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fallbackapi.php"] [unique_id "adbuEPr8glsF_jKQpr5z_wAAARA"]
[Thu Apr 09 14:08:21.418299 2026] [:error] [pid 24927:tid 24953] [client 129.153.94.60:55524] [client 129.153.94.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "addCVTXObuzEuw8mNJtphwAAARc"]
[Thu Apr 09 16:27:53.428043 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:53.746186 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:54.066147 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:54.383339 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:54.700594 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:55.018970 2026] [proxy_fcgi:error] [pid 18477:tid 18500] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:55.336914 2026] [proxy_fcgi:error] [pid 18477:tid 18480] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:55.654359 2026] [proxy_fcgi:error] [pid 18477:tid 18496] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:56.288369 2026] [proxy_fcgi:error] [pid 18477:tid 18482] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:56.605594 2026] [proxy_fcgi:error] [pid 18477:tid 18483] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:56.923140 2026] [proxy_fcgi:error] [pid 18477:tid 18490] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:57.243109 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:57.563429 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:57.882566 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:58.202629 2026] [proxy_fcgi:error] [pid 18477:tid 18485] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:58.521724 2026] [proxy_fcgi:error] [pid 18477:tid 18488] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:27:58.839330 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:00.570213 2026] [proxy_fcgi:error] [pid 18477:tid 18500] [client 216.73.163.116:30163] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:05.038896 2026] [:error] [pid 18477:tid 18498] [client 216.73.163.116:30163] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "addjFcDe826HlFeoLPJEhwAAAVM"]
[Thu Apr 09 16:28:08.387063 2026] [:error] [pid 24515:tid 24543] [client 216.73.163.116:63881] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "addjGK1OMnvM2fMnB1NSZQAAABg"]
[Thu Apr 09 16:28:12.310417 2026] [proxy_fcgi:error] [pid 20837:tid 20850] [client 216.73.163.140:37167] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:13.266566 2026] [:error] [pid 20837:tid 20840] [client 216.73.163.140:37167] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addjHfSL71FHZkjrGzOy7wAAAYE"]
[Thu Apr 09 16:28:14.226336 2026] [proxy_fcgi:error] [pid 24927:tid 24951] [client 216.73.163.119:51719] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:14.543348 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 216.73.163.119:51719] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:14.861299 2026] [:error] [pid 24927:tid 24948] [client 216.73.163.119:51719] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "addjHjXObuzEuw8mNJup4AAAARI"]
[Thu Apr 09 16:28:15.811849 2026] [proxy_fcgi:error] [pid 24517:tid 24589] [client 216.73.163.116:65457] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:17.403537 2026] [:error] [pid 24517:tid 24591] [client 216.73.163.116:65457] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "addjIXboYEn2ZFM_PS9iIwAAAJE"]
[Thu Apr 09 16:28:18.352803 2026] [:error] [pid 20837:tid 20843] [client 45.146.54.134:49055] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "addjIvSL71FHZkjrGzOy9QAAAYQ"]
[Thu Apr 09 16:28:18.981029 2026] [:error] [pid 18477:tid 18497] [client 45.146.54.138:39451] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "addjIsDe826HlFeoLPJElQAAAVI"]
[Thu Apr 09 16:28:19.608904 2026] [:error] [pid 24927:tid 24947] [client 45.146.54.139:30115] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "addjIzXObuzEuw8mNJup9QAAARE"]
[Thu Apr 09 16:28:20.238405 2026] [:error] [pid 20837:tid 20861] [client 216.73.163.144:42879] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "addjJPSL71FHZkjrGzOy9gAAAZY"]
[Thu Apr 09 16:28:20.864298 2026] [:error] [pid 20837:tid 20853] [client 216.73.163.146:44647] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "addjJPSL71FHZkjrGzOy-AAAAY4"]
[Thu Apr 09 16:28:21.813601 2026] [:error] [pid 24517:tid 24577] [client 216.73.163.159:64987] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "addjJXboYEn2ZFM_PS9iKgAAAIM"]
[Thu Apr 09 16:28:22.448331 2026] [proxy_fcgi:error] [pid 24517:tid 24597] [client 216.73.163.134:28179] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:23.084140 2026] [:error] [pid 24517:tid 24589] [client 216.73.163.134:28179] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "addjJ3boYEn2ZFM_PS9iMAAAAI8"]
[Thu Apr 09 16:28:23.714596 2026] [proxy_fcgi:error] [pid 18477:tid 18500] [client 216.73.163.123:55215] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:24.031000 2026] [proxy_fcgi:error] [pid 18477:tid 18485] [client 216.73.163.123:55215] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:24.344848 2026] [:error] [pid 18477:tid 18482] [client 216.73.163.123:55215] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "addjKMDe826HlFeoLPJEnwAAAUM"]
[Thu Apr 09 16:28:25.291449 2026] [:error] [pid 24517:tid 24591] [client 216.73.163.129:44163] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "addjKXboYEn2ZFM_PS9iMwAAAJE"]
[Thu Apr 09 16:28:25.922754 2026] [proxy_fcgi:error] [pid 24517:tid 24592] [client 216.73.163.155:32439] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:26.238193 2026] [:error] [pid 24517:tid 24590] [client 216.73.163.155:32439] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "addjKnboYEn2ZFM_PS9iNgAAAJA"]
[Thu Apr 09 16:28:27.992209 2026] [proxy_fcgi:error] [pid 20837:tid 20847] [client 216.73.163.159:50421] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:28.945598 2026] [proxy_fcgi:error] [pid 20837:tid 20851] [client 216.73.163.159:50421] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:29.890030 2026] [:error] [pid 20837:tid 20855] [client 216.73.163.159:50421] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "addjLfSL71FHZkjrGzOzBQAAAZA"]
[Thu Apr 09 16:28:30.528689 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 216.73.163.152:32497] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:30.851290 2026] [:error] [pid 24515:tid 24535] [client 216.73.163.152:32497] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "addjLq1OMnvM2fMnB1NSfgAAABA"]
[Thu Apr 09 16:28:31.486668 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 45.146.54.137:30621] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:32.118720 2026] [:error] [pid 18477:tid 18498] [client 45.146.54.137:30621] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "addjMMDe826HlFeoLPJEpwAAAVM"]
[Thu Apr 09 16:28:33.070104 2026] [:error] [pid 24517:tid 24592] [client 216.73.163.136:36495] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "addjMXboYEn2ZFM_PS9iPwAAAJI"]
[Thu Apr 09 16:28:34.019911 2026] [proxy_fcgi:error] [pid 24517:tid 24590] [client 216.73.163.155:36665] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:34.336897 2026] [proxy_fcgi:error] [pid 24517:tid 24575] [client 216.73.163.155:36665] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:34.968192 2026] [:error] [pid 24517:tid 24578] [client 216.73.163.155:36665] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "addjMnboYEn2ZFM_PS9iRAAAAIQ"]
[Thu Apr 09 16:28:35.913151 2026] [:error] [pid 24927:tid 24952] [client 216.73.163.116:54905] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "addjMzXObuzEuw8mNJuqEAAAARY"]
[Thu Apr 09 16:28:36.865379 2026] [:error] [pid 24927:tid 24946] [client 216.73.163.153:20445] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "addjNDXObuzEuw8mNJuqFgAAARA"]
[Thu Apr 09 16:28:37.499545 2026] [:error] [pid 24927:tid 24943] [client 45.146.54.131:34409] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "addjNTXObuzEuw8mNJuqGAAAAQ0"]
[Thu Apr 09 16:28:38.129959 2026] [:error] [pid 24624:tid 24628] [client 216.73.163.146:20869] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "addjNu4Jn-WvK1ZBTviaRAAAAMI"]
[Thu Apr 09 16:28:39.416178 2026] [proxy_fcgi:error] [pid 24624:tid 24630] [client 216.73.163.150:28549] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:39.732484 2026] [:error] [pid 24624:tid 24643] [client 216.73.163.150:28549] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "addjN-4Jn-WvK1ZBTviaSQAAANE"]
[Thu Apr 09 16:28:40.365400 2026] [:error] [pid 24624:tid 24639] [client 216.73.163.135:24765] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "addjOO4Jn-WvK1ZBTviaTgAAAM0"]
[Thu Apr 09 16:28:40.996838 2026] [:error] [pid 24624:tid 24631] [client 216.73.163.132:62295] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "addjOO4Jn-WvK1ZBTviaTwAAAMU"]
[Thu Apr 09 16:28:43.324820 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 216.73.163.139:33929] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:43.963557 2026] [proxy_fcgi:error] [pid 24927:tid 24935] [client 216.73.163.139:33929] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:44.280105 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 216.73.163.139:33929] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:45.227423 2026] [:error] [pid 24927:tid 24944] [client 216.73.163.139:33929] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "addjPTXObuzEuw8mNJuqQAAAAQ4"]
[Thu Apr 09 16:28:46.807421 2026] [:error] [pid 24927:tid 24943] [client 45.146.54.135:51901] [client 45.146.54.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.135, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "addjPjXObuzEuw8mNJuqSwAAAQ0"]
[Thu Apr 09 16:28:47.129000 2026] [proxy_fcgi:error] [pid 24927:tid 24948] [client 45.146.54.135:51901] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:48.717194 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 45.146.54.135:51901] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:49.035726 2026] [proxy_fcgi:error] [pid 24927:tid 24954] [client 45.146.54.135:51901] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:50.621309 2026] [:error] [pid 24927:tid 24944] [client 45.146.54.135:51901] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "addjQjXObuzEuw8mNJuqYgAAAQ4"]
[Thu Apr 09 16:28:52.690172 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 216.73.163.120:30323] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:53.004943 2026] [:error] [pid 24927:tid 24943] [client 216.73.163.120:30323] [client 216.73.163.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.120, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "addjRTXObuzEuw8mNJuqawAAAQ0"]
[Thu Apr 09 16:28:53.643493 2026] [:error] [pid 24927:tid 24940] [client 216.73.163.120:30323] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "addjRTXObuzEuw8mNJuqbgAAAQo"]
[Thu Apr 09 16:28:54.596458 2026] [proxy_fcgi:error] [pid 24516:tid 24557] [client 216.73.163.146:41499] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:55.544179 2026] [proxy_fcgi:error] [pid 24516:tid 24562] [client 216.73.163.146:41499] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:56.177626 2026] [proxy_fcgi:error] [pid 24516:tid 24558] [client 216.73.163.146:41499] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:56.810315 2026] [:error] [pid 24516:tid 24556] [client 216.73.163.146:41499] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "addjSNhW7vSS-UkeWCUKfAAAAEk"]
[Thu Apr 09 16:28:57.438854 2026] [proxy_fcgi:error] [pid 24516:tid 24563] [client 45.146.54.132:39607] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:58.386393 2026] [proxy_fcgi:error] [pid 24516:tid 24570] [client 45.146.54.132:39607] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:59.021725 2026] [proxy_fcgi:error] [pid 24516:tid 24554] [client 45.146.54.132:39607] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:59.657640 2026] [proxy_fcgi:error] [pid 24516:tid 24547] [client 45.146.54.132:39607] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:28:59.969680 2026] [:error] [pid 24516:tid 24569] [client 45.146.54.132:39607] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "addjS9hW7vSS-UkeWCUKiAAAAFY"]
[Thu Apr 09 16:29:00.602467 2026] [proxy_fcgi:error] [pid 24927:tid 24946] [client 216.73.163.147:32409] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:00.922982 2026] [proxy_fcgi:error] [pid 24927:tid 24953] [client 216.73.163.147:32409] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:01.237659 2026] [:error] [pid 24927:tid 24954] [client 216.73.163.147:32409] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "addjTTXObuzEuw8mNJuqkAAAARg"]
[Thu Apr 09 16:29:02.193538 2026] [proxy_fcgi:error] [pid 24927:tid 24933] [client 45.146.54.136:23977] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:02.822650 2026] [:error] [pid 24927:tid 24940] [client 45.146.54.136:23977] [client 45.146.54.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.136, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "addjTjXObuzEuw8mNJuqlAAAAQo"]
[Thu Apr 09 16:29:03.138970 2026] [:error] [pid 24927:tid 24941] [client 45.146.54.136:23977] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "addjTzXObuzEuw8mNJuqlgAAAQs"]
[Thu Apr 09 16:29:08.526397 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 216.73.163.149:23405] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:09.793769 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 216.73.163.149:23405] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:10.427292 2026] [proxy_fcgi:error] [pid 24927:tid 24940] [client 216.73.163.149:23405] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:10.742277 2026] [:error] [pid 24927:tid 24931] [client 216.73.163.149:23405] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "addjVjXObuzEuw8mNJuqzQAAAQE"]
[Thu Apr 09 16:29:11.375667 2026] [proxy_fcgi:error] [pid 24515:tid 24528] [client 216.73.163.122:49761] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:12.325043 2026] [:error] [pid 24515:tid 24532] [client 216.73.163.122:49761] [client 216.73.163.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.122, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "addjWK1OMnvM2fMnB1NSwAAAAA0"]
[Thu Apr 09 16:29:12.647668 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 216.73.163.122:49761] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:12.966772 2026] [proxy_fcgi:error] [pid 24515:tid 24523] [client 216.73.163.122:49761] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:13.285699 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 216.73.163.122:49761] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:13.600758 2026] [:error] [pid 24515:tid 24542] [client 216.73.163.122:49761] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "addjWa1OMnvM2fMnB1NSxAAAABc"]
[Thu Apr 09 16:29:14.233430 2026] [proxy_fcgi:error] [pid 24624:tid 24647] [client 216.73.163.157:20307] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:14.550084 2026] [:error] [pid 24624:tid 24648] [client 216.73.163.157:20307] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "addjWu4Jn-WvK1ZBTviaeQAAANY"]
[Thu Apr 09 16:29:15.504469 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 216.73.163.133:31861] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:15.817517 2026] [:error] [pid 24515:tid 24541] [client 216.73.163.133:31861] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "addjW61OMnvM2fMnB1NSxwAAABY"]
[Thu Apr 09 16:29:17.080663 2026] [proxy_fcgi:error] [pid 18477:tid 18483] [client 216.73.163.135:60441] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:17.394401 2026] [:error] [pid 18477:tid 18487] [client 216.73.163.135:60441] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "addjXcDe826HlFeoLPJEuwAAAUg"]
[Thu Apr 09 16:29:18.023799 2026] [:error] [pid 24515:tid 24531] [client 216.73.163.156:61461] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "addjXq1OMnvM2fMnB1NSygAAAAw"]
[Thu Apr 09 16:29:18.658613 2026] [proxy_fcgi:error] [pid 20837:tid 20840] [client 216.73.163.154:30033] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:19.738541 2026] [proxy_fcgi:error] [pid 20837:tid 20857] [client 216.73.163.154:30033] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:21.007135 2026] [:error] [pid 20837:tid 20843] [client 216.73.163.154:30033] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "addjYfSL71FHZkjrGzOzJgAAAYQ"]
[Thu Apr 09 16:29:21.951423 2026] [:error] [pid 24515:tid 24522] [client 216.73.163.122:20651] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "addjYa1OMnvM2fMnB1NSzQAAAAM"]
[Thu Apr 09 16:29:22.579938 2026] [proxy_fcgi:error] [pid 24927:tid 24940] [client 216.73.163.119:20933] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:23.528906 2026] [:error] [pid 24927:tid 24951] [client 216.73.163.119:20933] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "addjYzXObuzEuw8mNJuq8AAAARU"]
[Thu Apr 09 16:29:24.160293 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 216.73.163.129:44433] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:24.794773 2026] [proxy_fcgi:error] [pid 18477:tid 18500] [client 216.73.163.129:44433] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:25.107527 2026] [:error] [pid 18477:tid 18488] [client 216.73.163.129:44433] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "addjZcDe826HlFeoLPJEzQAAAUk"]
[Thu Apr 09 16:29:25.740963 2026] [proxy_fcgi:error] [pid 18477:tid 18479] [client 216.73.163.151:39445] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:26.374344 2026] [:error] [pid 18477:tid 18490] [client 216.73.163.151:39445] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "addjZsDe826HlFeoLPJE0wAAAUs"]
[Thu Apr 09 16:29:27.006827 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 45.146.54.132:36181] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:27.953981 2026] [:error] [pid 24927:tid 24950] [client 45.146.54.132:36181] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "addjZzXObuzEuw8mNJuq9gAAARQ"]
[Thu Apr 09 16:29:28.905845 2026] [proxy_fcgi:error] [pid 24624:tid 24640] [client 216.73.163.144:63813] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:29.543356 2026] [proxy_fcgi:error] [pid 24624:tid 24644] [client 216.73.163.144:63813] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:29.861257 2026] [proxy_fcgi:error] [pid 24624:tid 24647] [client 216.73.163.144:63813] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:30.501262 2026] [proxy_fcgi:error] [pid 24624:tid 24641] [client 216.73.163.144:63813] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:30.908116 2026] [:error] [pid 24624:tid 24649] [client 216.73.163.144:63813] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "addjau4Jn-WvK1ZBTviajgAAANc"]
[Thu Apr 09 16:29:31.537225 2026] [:error] [pid 24927:tid 24939] [client 216.73.163.138:31207] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "addjazXObuzEuw8mNJuq-QAAAQk"]
[Thu Apr 09 16:29:32.164617 2026] [:error] [pid 24927:tid 24953] [client 216.73.163.132:49629] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "addjbDXObuzEuw8mNJuq-wAAARc"]
[Thu Apr 09 16:29:32.791678 2026] [:error] [pid 24927:tid 24934] [client 216.73.163.133:34589] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "addjbDXObuzEuw8mNJurAAAAAQQ"]
[Thu Apr 09 16:29:33.424337 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 216.73.163.160:52547] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:33.739334 2026] [:error] [pid 24927:tid 24936] [client 216.73.163.160:52547] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "addjbTXObuzEuw8mNJurBgAAAQY"]
[Thu Apr 09 16:29:34.369607 2026] [:error] [pid 24927:tid 24949] [client 216.73.163.144:21485] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "addjbjXObuzEuw8mNJurCQAAARM"]
[Thu Apr 09 16:29:35.003506 2026] [proxy_fcgi:error] [pid 24927:tid 24940] [client 216.73.163.118:62811] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:35.636339 2026] [:error] [pid 24927:tid 24933] [client 216.73.163.118:62811] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addjbzXObuzEuw8mNJurEQAAAQM"]
[Thu Apr 09 16:29:37.815619 2026] [:error] [pid 24624:tid 24628] [client 45.146.54.130:43199] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "addjce4Jn-WvK1ZBTvialwAAAMI"]
[Thu Apr 09 16:29:38.445358 2026] [:error] [pid 24515:tid 24542] [client 45.131.194.122:38309] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "addjcq1OMnvM2fMnB1NS0wAAABc"]
[Thu Apr 09 16:29:39.073985 2026] [:error] [pid 24927:tid 24939] [client 216.73.163.137:42605] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "addjczXObuzEuw8mNJurEwAAAQk"]
[Thu Apr 09 16:29:40.017111 2026] [:error] [pid 24927:tid 24930] [client 216.73.163.157:62173] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "addjdDXObuzEuw8mNJurFgAAAQA"]
[Thu Apr 09 16:29:41.281590 2026] [:error] [pid 24927:tid 24943] [client 216.73.163.121:40397] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "addjdTXObuzEuw8mNJurHAAAAQ0"]
[Thu Apr 09 16:29:41.913190 2026] [proxy_fcgi:error] [pid 24927:tid 24951] [client 45.146.54.131:60559] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:44.129129 2026] [proxy_fcgi:error] [pid 24927:tid 24950] [client 45.146.54.131:60559] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:44.442188 2026] [:error] [pid 24927:tid 24930] [client 45.146.54.131:60559] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "addjeDXObuzEuw8mNJurJwAAAQA"]
[Thu Apr 09 16:29:45.393661 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 216.73.163.152:56213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:45.714781 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 216.73.163.152:56213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:46.990094 2026] [proxy_fcgi:error] [pid 24927:tid 24945] [client 216.73.163.152:56213] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:47.307291 2026] [:error] [pid 24927:tid 24933] [client 216.73.163.152:56213] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "addjezXObuzEuw8mNJurMQAAAQM"]
[Thu Apr 09 16:29:47.938844 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 216.73.163.129:55537] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:48.885204 2026] [:error] [pid 24927:tid 24954] [client 216.73.163.129:55537] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "addjfDXObuzEuw8mNJurNgAAARg"]
[Thu Apr 09 16:29:49.516725 2026] [:error] [pid 18477:tid 18484] [client 45.146.54.138:21347] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "addjfcDe826HlFeoLPJE3gAAAUU"]
[Thu Apr 09 16:29:51.411088 2026] [:error] [pid 24927:tid 24949] [client 216.73.163.120:54119] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "addjfzXObuzEuw8mNJurPQAAARM"]
[Thu Apr 09 16:29:52.682357 2026] [proxy_fcgi:error] [pid 20837:tid 20849] [client 216.73.163.142:62827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:53.000669 2026] [proxy_fcgi:error] [pid 20837:tid 20840] [client 216.73.163.142:62827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:53.319723 2026] [proxy_fcgi:error] [pid 20837:tid 20857] [client 216.73.163.142:62827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:53.637103 2026] [proxy_fcgi:error] [pid 20837:tid 20846] [client 216.73.163.142:62827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:29:55.228865 2026] [:error] [pid 20837:tid 20847] [client 216.73.163.142:62827] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "addjg_SL71FHZkjrGzOzPAAAAYg"]
[Thu Apr 09 16:29:55.861617 2026] [:error] [pid 18477:tid 18503] [client 216.73.163.145:53181] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "addjg8De826HlFeoLPJE4gAAAVg"]
[Thu Apr 09 16:29:56.492792 2026] [:error] [pid 18477:tid 18483] [client 216.73.163.160:30385] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "addjhMDe826HlFeoLPJE4wAAAUQ"]
[Thu Apr 09 16:29:57.132898 2026] [:error] [pid 24624:tid 24645] [client 216.73.163.142:47823] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "addjhe4Jn-WvK1ZBTviatAAAANM"]
[Thu Apr 09 16:29:57.760422 2026] [:error] [pid 24517:tid 24576] [client 216.73.163.132:30161] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "addjhXboYEn2ZFM_PS9iVQAAAII"]
[Thu Apr 09 16:29:58.391805 2026] [:error] [pid 24515:tid 24542] [client 216.73.163.152:53209] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "addjhq1OMnvM2fMnB1NS4QAAABc"]
[Thu Apr 09 16:29:59.338633 2026] [:error] [pid 18477:tid 18487] [client 216.73.163.140:53983] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "addjh8De826HlFeoLPJE5gAAAUg"]
[Thu Apr 09 16:29:59.966606 2026] [:error] [pid 24517:tid 24586] [client 216.73.163.129:53729] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "addjh3boYEn2ZFM_PS9iVgAAAIw"]
[Thu Apr 09 16:30:00.895062 2026] [:error] [pid 24624:tid 24640] [client 216.73.163.136:25955] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "addjiO4Jn-WvK1ZBTviauQAAAM4"]
[Thu Apr 09 16:30:01.525155 2026] [:error] [pid 24624:tid 24638] [client 216.73.163.145:52267] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "addjie4Jn-WvK1ZBTviavAAAAMw"]
[Thu Apr 09 16:30:02.813991 2026] [:error] [pid 24927:tid 24951] [client 216.73.163.123:20063] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "addjijXObuzEuw8mNJurTgAAARU"]
[Thu Apr 09 16:30:03.764582 2026] [:error] [pid 24624:tid 24626] [client 216.73.163.143:29201] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "addji-4Jn-WvK1ZBTviawAAAAMA"]
[Thu Apr 09 16:30:04.400762 2026] [proxy_fcgi:error] [pid 24624:tid 24650] [client 45.146.54.132:50425] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:05.034546 2026] [:error] [pid 24624:tid 24645] [client 45.146.54.132:50425] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "addjje4Jn-WvK1ZBTviawwAAANM"]
[Thu Apr 09 16:30:06.401087 2026] [:error] [pid 24927:tid 24950] [client 216.73.163.142:64095] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "addjjjXObuzEuw8mNJurUwAAARQ"]
[Thu Apr 09 16:30:07.032596 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 216.73.163.154:21935] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:07.669468 2026] [proxy_fcgi:error] [pid 24927:tid 24940] [client 216.73.163.154:21935] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:07.982382 2026] [:error] [pid 24927:tid 24952] [client 216.73.163.154:21935] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "addjjzXObuzEuw8mNJurXQAAARY"]
[Thu Apr 09 16:30:08.935455 2026] [proxy_fcgi:error] [pid 24927:tid 24945] [client 216.73.163.144:45955] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:09.253076 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 216.73.163.144:45955] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:09.578546 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 216.73.163.144:45955] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:11.049868 2026] [:error] [pid 24927:tid 24947] [client 216.73.163.144:45955] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "addjkzXObuzEuw8mNJurbQAAARE"]
[Thu Apr 09 16:30:11.689665 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 216.73.163.135:63321] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:12.003344 2026] [:error] [pid 24927:tid 24943] [client 216.73.163.135:63321] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "addjlDXObuzEuw8mNJurcgAAAQ0"]
[Thu Apr 09 16:30:13.269823 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:13.588230 2026] [proxy_fcgi:error] [pid 18477:tid 18495] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:13.909655 2026] [proxy_fcgi:error] [pid 18477:tid 18498] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:14.542720 2026] [proxy_fcgi:error] [pid 18477:tid 18482] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:15.498060 2026] [proxy_fcgi:error] [pid 18477:tid 18485] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:15.818710 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:16.136062 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:16.454222 2026] [proxy_fcgi:error] [pid 18477:tid 18503] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:17.412424 2026] [proxy_fcgi:error] [pid 18477:tid 18483] [client 216.73.163.158:39247] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:17.725196 2026] [:error] [pid 18477:tid 18502] [client 216.73.163.158:39247] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "addjmcDe826HlFeoLPJFBwAAAVc"]
[Thu Apr 09 16:30:18.354698 2026] [:error] [pid 18477:tid 18489] [client 45.146.54.135:28171] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "addjmsDe826HlFeoLPJFCAAAAUo"]
[Thu Apr 09 16:30:18.986576 2026] [proxy_fcgi:error] [pid 24515:tid 24528] [client 216.73.163.156:36889] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:19.302918 2026] [:error] [pid 24515:tid 24520] [client 216.73.163.156:36889] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "addjm61OMnvM2fMnB1NS7gAAAAE"]
[Thu Apr 09 16:30:20.253561 2026] [proxy_fcgi:error] [pid 24927:tid 24943] [client 216.73.163.136:53413] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:20.567015 2026] [:error] [pid 24927:tid 24951] [client 216.73.163.136:53413] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "addjnDXObuzEuw8mNJurggAAARU"]
[Thu Apr 09 16:30:21.196708 2026] [:error] [pid 18477:tid 18479] [client 216.73.163.141:64631] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "addjncDe826HlFeoLPJFDAAAAUA"]
[Thu Apr 09 16:30:23.099437 2026] [:error] [pid 18477:tid 18492] [client 216.73.163.158:52847] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "addjn8De826HlFeoLPJFEwAAAU0"]
[Thu Apr 09 16:30:23.731018 2026] [:error] [pid 24624:tid 24648] [client 216.73.163.141:45775] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "addjn-4Jn-WvK1ZBTviazQAAANY"]
[Thu Apr 09 16:30:25.314963 2026] [proxy_fcgi:error] [pid 18477:tid 18484] [client 216.73.163.153:36347] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:25.952085 2026] [:error] [pid 18477:tid 18485] [client 216.73.163.153:36347] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "addjocDe826HlFeoLPJFIgAAAUY"]
[Thu Apr 09 16:30:26.901617 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 216.73.163.149:60527] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:27.534062 2026] [:error] [pid 18477:tid 18503] [client 216.73.163.149:60527] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "addjo8De826HlFeoLPJFJwAAAVg"]
[Thu Apr 09 16:30:28.170759 2026] [:error] [pid 24516:tid 24569] [client 216.73.163.133:30835] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "addjpNhW7vSS-UkeWCUKlgAAAFY"]
[Thu Apr 09 16:30:29.120671 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 216.73.163.151:32423] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:29.435935 2026] [:error] [pid 24515:tid 24536] [client 216.73.163.151:32423] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "addjpa1OMnvM2fMnB1NS9AAAABE"]
[Thu Apr 09 16:30:30.065701 2026] [:error] [pid 24515:tid 24541] [client 45.146.54.138:61523] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "addjpq1OMnvM2fMnB1NS9QAAABY"]
[Thu Apr 09 16:30:31.371824 2026] [proxy_fcgi:error] [pid 24624:tid 24632] [client 45.146.54.135:42393] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:31.688691 2026] [proxy_fcgi:error] [pid 24624:tid 24643] [client 45.146.54.135:42393] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:32.320521 2026] [proxy_fcgi:error] [pid 24624:tid 24640] [client 45.146.54.135:42393] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:32.951522 2026] [:error] [pid 24624:tid 24634] [client 45.146.54.135:42393] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "addjqO4Jn-WvK1ZBTvia2AAAAMg"]
[Thu Apr 09 16:30:33.577661 2026] [:error] [pid 24927:tid 24939] [client 216.73.163.129:39541] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "addjqTXObuzEuw8mNJurlwAAAQk"]
[Thu Apr 09 16:30:34.211165 2026] [proxy_fcgi:error] [pid 24517:tid 24578] [client 216.73.163.142:24083] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:34.529852 2026] [proxy_fcgi:error] [pid 24517:tid 24588] [client 216.73.163.142:24083] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:35.164521 2026] [proxy_fcgi:error] [pid 24517:tid 24580] [client 216.73.163.142:24083] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:35.478359 2026] [:error] [pid 24517:tid 24579] [client 216.73.163.142:24083] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "addjq3boYEn2ZFM_PS9iZQAAAIU"]
[Thu Apr 09 16:30:36.107506 2026] [:error] [pid 24517:tid 24595] [client 216.73.163.138:54071] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "addjrHboYEn2ZFM_PS9iZwAAAJU"]
[Thu Apr 09 16:30:36.736054 2026] [:error] [pid 18477:tid 18479] [client 216.73.163.152:34219] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "addjrMDe826HlFeoLPJFLQAAAUA"]
[Thu Apr 09 16:30:38.672952 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 45.146.54.130:37845] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:38.987149 2026] [:error] [pid 24515:tid 24537] [client 45.146.54.130:37845] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "addjrq1OMnvM2fMnB1NTCAAAABI"]
[Thu Apr 09 16:30:39.940642 2026] [:error] [pid 24515:tid 24531] [client 216.73.163.156:55583] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "addjr61OMnvM2fMnB1NTCgAAAAw"]
[Thu Apr 09 16:30:40.573525 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:40.893430 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:41.550008 2026] [proxy_fcgi:error] [pid 18477:tid 18490] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:42.819714 2026] [:error] [pid 18477:tid 18488] [client 216.73.163.157:63827] [client 216.73.163.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.157, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "addjssDe826HlFeoLPJFRAAAAUk"]
[Thu Apr 09 16:30:43.465230 2026] [:error] [pid 18477:tid 18483] [client 216.73.163.157:63827] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Thu Apr 09 16:30:43.785411 2026] [proxy_fcgi:error] [pid 18477:tid 18481] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:44.104223 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:44.425331 2026] [proxy_fcgi:error] [pid 18477:tid 18503] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:44.740007 2026] [:error] [pid 18477:tid 18486] [client 216.73.163.157:63827] [client 216.73.163.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.157, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "addjtMDe826HlFeoLPJFSwAAAUc"]
[Thu Apr 09 16:30:45.063506 2026] [proxy_fcgi:error] [pid 18477:tid 18498] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:45.699984 2026] [proxy_fcgi:error] [pid 18477:tid 18482] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:46.018279 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:46.658876 2026] [proxy_fcgi:error] [pid 18477:tid 18495] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:48.661149 2026] [proxy_fcgi:error] [pid 18477:tid 18479] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:49.627335 2026] [proxy_fcgi:error] [pid 18477:tid 18502] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:51.857707 2026] [proxy_fcgi:error] [pid 18477:tid 18495] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:52.180754 2026] [proxy_fcgi:error] [pid 18477:tid 18496] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:53.135256 2026] [proxy_fcgi:error] [pid 18477:tid 18483] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:53.771333 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:54.094081 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 216.73.163.157:63827] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:54.408701 2026] [:error] [pid 18477:tid 18498] [client 216.73.163.157:63827] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "addjvsDe826HlFeoLPJFcQAAAVM"]
[Thu Apr 09 16:30:55.365279 2026] [proxy_fcgi:error] [pid 20837:tid 20863] [client 216.73.163.122:63099] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:55.683038 2026] [proxy_fcgi:error] [pid 20837:tid 20845] [client 216.73.163.122:63099] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:55.997774 2026] [:error] [pid 20837:tid 20848] [client 216.73.163.122:63099] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "addjv_SL71FHZkjrGzOzWwAAAYk"]
[Thu Apr 09 16:30:56.943927 2026] [proxy_fcgi:error] [pid 24516:tid 24562] [client 216.73.163.118:46787] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:57.258534 2026] [:error] [pid 24516:tid 24547] [client 216.73.163.118:46787] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "addjwdhW7vSS-UkeWCUKowAAAEA"]
[Thu Apr 09 16:30:58.526273 2026] [proxy_fcgi:error] [pid 24515:tid 24527] [client 216.73.163.133:53227] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:59.162271 2026] [proxy_fcgi:error] [pid 24515:tid 24531] [client 216.73.163.133:53227] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:59.481328 2026] [proxy_fcgi:error] [pid 24515:tid 24535] [client 216.73.163.133:53227] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:30:59.799667 2026] [proxy_fcgi:error] [pid 24515:tid 24523] [client 216.73.163.133:53227] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:00.118112 2026] [proxy_fcgi:error] [pid 24515:tid 24519] [client 216.73.163.133:53227] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:00.783424 2026] [:error] [pid 24515:tid 24525] [client 216.73.163.133:53227] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "addjxK1OMnvM2fMnB1NTHgAAAAY"]
[Thu Apr 09 16:31:01.417978 2026] [proxy_fcgi:error] [pid 20837:tid 20841] [client 45.131.194.122:61661] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:01.735767 2026] [proxy_fcgi:error] [pid 20837:tid 20852] [client 45.131.194.122:61661] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:02.052852 2026] [:error] [pid 20837:tid 20862] [client 45.131.194.122:61661] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "addjxvSL71FHZkjrGzOzYQAAAZc"]
[Thu Apr 09 16:31:03.002780 2026] [:error] [pid 18477:tid 18503] [client 216.73.163.130:50673] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "addjx8De826HlFeoLPJFewAAAVg"]
[Thu Apr 09 16:31:03.952032 2026] [proxy_fcgi:error] [pid 24516:tid 24567] [client 45.146.54.131:29023] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:04.903890 2026] [proxy_fcgi:error] [pid 24516:tid 24563] [client 45.146.54.131:29023] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:05.220830 2026] [proxy_fcgi:error] [pid 24516:tid 24564] [client 45.146.54.131:29023] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:05.534496 2026] [:error] [pid 24516:tid 24565] [client 45.146.54.131:29023] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "addjydhW7vSS-UkeWCUKrAAAAFI"]
[Thu Apr 09 16:31:06.161282 2026] [:error] [pid 24515:tid 24532] [client 216.73.163.131:28343] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "addjyq1OMnvM2fMnB1NTIgAAAA0"]
[Thu Apr 09 16:31:08.406648 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 216.73.163.134:23825] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:09.040441 2026] [:error] [pid 18477:tid 18486] [client 216.73.163.134:23825] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "addjzcDe826HlFeoLPJFiAAAAUc"]
[Thu Apr 09 16:31:09.989500 2026] [:error] [pid 24517:tid 24580] [client 216.73.163.144:42237] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "addjzXboYEn2ZFM_PS9icAAAAIY"]
[Thu Apr 09 16:31:10.941931 2026] [proxy_fcgi:error] [pid 24517:tid 24595] [client 216.73.163.150:52623] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:11.261484 2026] [proxy_fcgi:error] [pid 24517:tid 24584] [client 216.73.163.150:52623] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:11.577417 2026] [:error] [pid 24517:tid 24586] [client 216.73.163.150:52623] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "addjz3boYEn2ZFM_PS9idwAAAIw"]
[Thu Apr 09 16:31:12.535271 2026] [proxy_fcgi:error] [pid 24516:tid 24560] [client 216.73.163.130:61673] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:12.853946 2026] [proxy_fcgi:error] [pid 24516:tid 24549] [client 216.73.163.130:61673] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:13.490740 2026] [proxy_fcgi:error] [pid 24516:tid 24559] [client 216.73.163.130:61673] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:14.451963 2026] [:error] [pid 24516:tid 24570] [client 216.73.163.130:61673] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "addj0thW7vSS-UkeWCUKtQAAAFc"]
[Thu Apr 09 16:31:15.106093 2026] [proxy_fcgi:error] [pid 24516:tid 24554] [client 216.73.163.160:49303] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:16.059908 2026] [:error] [pid 24516:tid 24569] [client 216.73.163.160:49303] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "addj1NhW7vSS-UkeWCUKuQAAAFY"]
[Thu Apr 09 16:31:17.015227 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 45.146.54.139:47589] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:17.980304 2026] [proxy_fcgi:error] [pid 24515:tid 24530] [client 45.146.54.139:47589] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:18.298671 2026] [proxy_fcgi:error] [pid 24515:tid 24523] [client 45.146.54.139:47589] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:18.935566 2026] [:error] [pid 24515:tid 24526] [client 45.146.54.139:47589] [client 45.146.54.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.139, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "addj1q1OMnvM2fMnB1NTawAAAAc"]
[Thu Apr 09 16:31:19.582763 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 45.146.54.139:47589] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:20.545392 2026] [:error] [pid 24515:tid 24530] [client 45.146.54.139:47589] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "addj2K1OMnvM2fMnB1NTdwAAAAs"]
[Thu Apr 09 16:31:21.187083 2026] [proxy_fcgi:error] [pid 24515:tid 24541] [client 45.146.54.139:38405] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:21.508262 2026] [:error] [pid 24515:tid 24539] [client 45.146.54.139:38405] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "addj2a1OMnvM2fMnB1NTfAAAABQ"]
[Thu Apr 09 16:31:22.147643 2026] [proxy_fcgi:error] [pid 24927:tid 24942] [client 216.73.163.152:23399] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:22.790518 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 216.73.163.152:23399] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:23.424779 2026] [:error] [pid 24927:tid 24945] [client 216.73.163.152:23399] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "addj2zXObuzEuw8mNJusYQAAAQ8"]
[Thu Apr 09 16:31:24.380904 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 45.146.54.135:29185] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:24.700996 2026] [proxy_fcgi:error] [pid 24515:tid 24534] [client 45.146.54.135:29185] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:25.024173 2026] [:error] [pid 24515:tid 24533] [client 45.146.54.135:29185] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "addj3a1OMnvM2fMnB1NThQAAAA4"]
[Thu Apr 09 16:31:25.674060 2026] [:error] [pid 18477:tid 18501] [client 216.73.163.134:56733] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "addj3cDe826HlFeoLPJFmAAAAVY"]
[Thu Apr 09 16:31:26.310074 2026] [proxy_fcgi:error] [pid 24515:tid 24527] [client 216.73.163.120:36283] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:26.638117 2026] [proxy_fcgi:error] [pid 24515:tid 24525] [client 216.73.163.120:36283] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:27.275071 2026] [:error] [pid 24515:tid 24522] [client 216.73.163.120:36283] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "addj361OMnvM2fMnB1NTjQAAAAM"]
[Thu Apr 09 16:31:28.434853 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 216.73.163.138:22603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:29.078636 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 216.73.163.138:22603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:29.401950 2026] [:error] [pid 24515:tid 24538] [client 216.73.163.138:22603] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "addj4a1OMnvM2fMnB1NTlQAAABM"]
[Thu Apr 09 16:31:30.368102 2026] [:error] [pid 24517:tid 24583] [client 45.146.54.134:23393] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/db.php"] [unique_id "addj4nboYEn2ZFM_PS9igQAAAIk"]
[Thu Apr 09 16:31:31.029597 2026] [:error] [pid 24517:tid 24575] [client 216.73.163.157:38119] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "addj43boYEn2ZFM_PS9igwAAAIE"]
[Thu Apr 09 16:31:31.673716 2026] [:error] [pid 24927:tid 24946] [client 216.73.163.154:51453] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "addj4zXObuzEuw8mNJusbQAAARA"]
[Thu Apr 09 16:31:32.301581 2026] [:error] [pid 24927:tid 24948] [client 45.146.54.139:39647] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "addj5DXObuzEuw8mNJuscwAAARI"]
[Thu Apr 09 16:31:32.932247 2026] [:error] [pid 24927:tid 24950] [client 45.146.54.131:34751] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "addj5DXObuzEuw8mNJusdgAAARQ"]
[Thu Apr 09 16:31:33.579933 2026] [:error] [pid 24515:tid 24531] [client 216.73.163.117:39329] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "addj5a1OMnvM2fMnB1NTmAAAAAw"]
[Thu Apr 09 16:31:35.849784 2026] [:error] [pid 24515:tid 24530] [client 216.73.163.154:36595] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "addj561OMnvM2fMnB1NTngAAAAs"]
[Thu Apr 09 16:31:36.478144 2026] [:error] [pid 24515:tid 24526] [client 216.73.163.155:26677] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "addj6K1OMnvM2fMnB1NTogAAAAc"]
[Thu Apr 09 16:31:37.104563 2026] [:error] [pid 24515:tid 24538] [client 216.73.163.149:46665] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "addj6a1OMnvM2fMnB1NTpAAAABM"]
[Thu Apr 09 16:31:37.746010 2026] [:error] [pid 24515:tid 24523] [client 216.73.163.137:22539] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "addj6a1OMnvM2fMnB1NTpwAAAAQ"]
[Thu Apr 09 16:31:38.394107 2026] [:error] [pid 18477:tid 18492] [client 216.73.163.158:48775] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "addj6sDe826HlFeoLPJFqgAAAU0"]
[Thu Apr 09 16:31:39.030339 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 216.73.163.155:33815] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:39.979469 2026] [:error] [pid 18477:tid 18487] [client 216.73.163.155:33815] [client 216.73.163.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.155, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "addj68De826HlFeoLPJFswAAAUg"]
[Thu Apr 09 16:31:41.570330 2026] [:error] [pid 18477:tid 18492] [client 216.73.163.155:33815] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "addj7cDe826HlFeoLPJFvQAAAU0"]
[Thu Apr 09 16:31:42.859852 2026] [proxy_fcgi:error] [pid 18477:tid 18482] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:43.181402 2026] [proxy_fcgi:error] [pid 18477:tid 18503] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:44.480516 2026] [proxy_fcgi:error] [pid 18477:tid 18491] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:44.803348 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:46.081286 2026] [proxy_fcgi:error] [pid 18477:tid 18490] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:46.401096 2026] [proxy_fcgi:error] [pid 18477:tid 18496] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:46.719846 2026] [proxy_fcgi:error] [pid 18477:tid 18495] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:47.038393 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 45.146.54.136:56921] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:47.354530 2026] [:error] [pid 18477:tid 18494] [client 45.146.54.136:56921] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "addj88De826HlFeoLPJF3gAAAU8"]
[Thu Apr 09 16:31:47.987478 2026] [:error] [pid 18477:tid 18480] [client 45.131.194.123:57881] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "addj88De826HlFeoLPJF4gAAAUE"]
[Thu Apr 09 16:31:48.616026 2026] [:error] [pid 24927:tid 24936] [client 45.146.54.136:55835] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "addj9DXObuzEuw8mNJushwAAAQY"]
[Thu Apr 09 16:31:49.577348 2026] [proxy_fcgi:error] [pid 24927:tid 24951] [client 216.73.163.121:64547] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:49.900605 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 216.73.163.121:64547] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:50.540963 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 216.73.163.121:64547] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:51.175425 2026] [:error] [pid 24927:tid 24950] [client 216.73.163.121:64547] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "addj9zXObuzEuw8mNJusmAAAARQ"]
[Thu Apr 09 16:31:51.804364 2026] [:error] [pid 20837:tid 20856] [client 216.73.163.118:20049] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "addj9_SL71FHZkjrGzOzewAAAZE"]
[Thu Apr 09 16:31:52.431603 2026] [:error] [pid 24624:tid 24643] [client 216.73.163.155:31387] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "addj-O4Jn-WvK1ZBTvibFwAAANE"]
[Thu Apr 09 16:31:54.322729 2026] [:error] [pid 24624:tid 24638] [client 216.73.163.130:64313] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "addj-u4Jn-WvK1ZBTvibHgAAAMw"]
[Thu Apr 09 16:31:55.278996 2026] [:error] [pid 18477:tid 18497] [client 216.73.163.116:44573] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "addj-8De826HlFeoLPJF8wAAAVI"]
[Thu Apr 09 16:31:56.559413 2026] [:error] [pid 24624:tid 24636] [client 216.73.163.129:54297] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "addj_O4Jn-WvK1ZBTvibIQAAAMo"]
[Thu Apr 09 16:31:57.836705 2026] [proxy_fcgi:error] [pid 18477:tid 18481] [client 216.73.163.156:49263] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:31:58.474674 2026] [proxy_fcgi:error] [pid 18477:tid 18500] [client 216.73.163.156:49263] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:00.833368 2026] [:error] [pid 18477:tid 18501] [client 216.73.163.156:49263] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "addkAMDe826HlFeoLPJGMQAAAVY"]
[Thu Apr 09 16:32:01.470064 2026] [proxy_fcgi:error] [pid 18477:tid 18491] [client 216.73.163.140:38141] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:01.784752 2026] [:error] [pid 18477:tid 18502] [client 216.73.163.140:38141] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "addkAcDe826HlFeoLPJGNgAAAVc"]
[Thu Apr 09 16:32:03.057029 2026] [proxy_fcgi:error] [pid 24515:tid 24524] [client 45.146.54.130:35035] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:04.012748 2026] [proxy_fcgi:error] [pid 24515:tid 24543] [client 45.146.54.130:35035] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:04.329413 2026] [:error] [pid 24515:tid 24541] [client 45.146.54.130:35035] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "addkBK1OMnvM2fMnB1NTvAAAABY"]
[Thu Apr 09 16:32:05.599004 2026] [:error] [pid 24517:tid 24594] [client 216.73.163.158:60817] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "addkBXboYEn2ZFM_PS9ilQAAAJQ"]
[Thu Apr 09 16:32:06.569756 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 216.73.163.129:29123] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:07.538408 2026] [:error] [pid 24927:tid 24933] [client 216.73.163.129:29123] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "addkBzXObuzEuw8mNJusvwAAAQM"]
[Thu Apr 09 16:32:10.468657 2026] [:error] [pid 24927:tid 24949] [client 216.73.163.116:44963] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "addkCjXObuzEuw8mNJusxgAAARM"]
[Thu Apr 09 16:32:11.113200 2026] [proxy_fcgi:error] [pid 24927:tid 24944] [client 216.73.163.158:39685] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:11.431312 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 216.73.163.158:39685] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:11.756314 2026] [:error] [pid 24927:tid 24950] [client 216.73.163.158:39685] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "addkCzXObuzEuw8mNJuszwAAARQ"]
[Thu Apr 09 16:32:12.398748 2026] [:error] [pid 24515:tid 24534] [client 216.73.163.140:24049] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "addkDK1OMnvM2fMnB1NTzgAAAA8"]
[Thu Apr 09 16:32:15.125006 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 216.73.163.150:24461] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:16.219726 2026] [:error] [pid 24624:tid 24648] [client 216.73.163.150:24461] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "addkEO4Jn-WvK1ZBTvibMQAAANY"]
[Thu Apr 09 16:32:16.849643 2026] [proxy_fcgi:error] [pid 24927:tid 24950] [client 216.73.163.140:22535] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:18.117686 2026] [proxy_fcgi:error] [pid 24927:tid 24942] [client 216.73.163.140:22535] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:18.435373 2026] [:error] [pid 24927:tid 24932] [client 216.73.163.140:22535] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "addkEjXObuzEuw8mNJus6gAAAQI"]
[Thu Apr 09 16:32:19.705786 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 45.146.54.138:47977] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:20.335484 2026] [:error] [pid 24927:tid 24949] [client 45.146.54.138:47977] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "addkFDXObuzEuw8mNJus-gAAARM"]
[Thu Apr 09 16:32:20.968923 2026] [:error] [pid 18477:tid 18497] [client 216.73.163.120:60209] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "addkFMDe826HlFeoLPJGUQAAAVI"]
[Thu Apr 09 16:32:21.921314 2026] [:error] [pid 24927:tid 24935] [client 45.146.54.137:33319] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "addkFTXObuzEuw8mNJutBAAAAQU"]
[Thu Apr 09 16:32:24.236501 2026] [:error] [pid 24927:tid 24935] [client 216.73.163.137:23221] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "addkGDXObuzEuw8mNJutFgAAAQU"]
[Thu Apr 09 16:32:24.866684 2026] [:error] [pid 24927:tid 24953] [client 216.73.163.155:24277] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "addkGDXObuzEuw8mNJutHAAAARc"]
[Thu Apr 09 16:32:25.823781 2026] [proxy_fcgi:error] [pid 24516:tid 24550] [client 216.73.163.122:33841] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:27.409310 2026] [:error] [pid 24516:tid 24559] [client 216.73.163.122:33841] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "addkG9hW7vSS-UkeWCULDgAAAEw"]
[Thu Apr 09 16:32:28.676444 2026] [:error] [pid 24927:tid 24931] [client 45.146.54.139:26437] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "addkHDXObuzEuw8mNJutJgAAAQE"]
[Thu Apr 09 16:32:29.309803 2026] [:error] [pid 24927:tid 24949] [client 45.146.54.136:54609] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "addkHTXObuzEuw8mNJutKAAAARM"]
[Thu Apr 09 16:32:30.265477 2026] [proxy_fcgi:error] [pid 24927:tid 24932] [client 216.73.163.145:54881] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:30.651854 2026] [:error] [pid 24927:tid 24948] [client 216.73.163.145:54881] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "addkHjXObuzEuw8mNJutMgAAARI"]
[Thu Apr 09 16:32:31.601348 2026] [:error] [pid 20837:tid 20839] [client 216.73.163.131:34319] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "addkH_SL71FHZkjrGzOzkwAAAYA"]
[Thu Apr 09 16:32:33.832672 2026] [:error] [pid 20837:tid 20854] [client 216.73.163.154:58905] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "addkIfSL71FHZkjrGzOznAAAAY8"]
[Thu Apr 09 16:32:34.782060 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 45.146.54.131:53511] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 16:32:35.096313 2026] [:error] [pid 24927:tid 24941] [client 45.146.54.131:53511] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "addkIzXObuzEuw8mNJutOQAAAQs"]
[Thu Apr 09 16:32:36.380068 2026] [:error] [pid 24927:tid 24944] [client 216.73.163.152:21637] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "addkJDXObuzEuw8mNJutRAAAAQ4"]
[Thu Apr 09 16:32:37.343357 2026] [:error] [pid 24927:tid 24945] [client 216.73.163.131:30707] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/as.php"] [unique_id "addkJTXObuzEuw8mNJutSQAAAQ8"]
[Thu Apr 09 16:32:38.287999 2026] [:error] [pid 24927:tid 24936] [client 216.73.163.158:49289] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "addkJjXObuzEuw8mNJutTwAAAQY"]
[Thu Apr 09 16:32:38.916750 2026] [:error] [pid 24515:tid 24537] [client 45.146.54.139:41741] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/install.php"] [unique_id "addkJq1OMnvM2fMnB1NT1gAAABI"]
[Thu Apr 09 16:32:55.922042 2026] [autoindex:error] [pid 24515:tid 24529] [client 45.131.194.123:40671] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 16:33:18.521386 2026] [autoindex:error] [pid 24515:tid 24527] [client 45.131.194.123:40671] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 17:36:21.298649 2026] [:error] [pid 18477:tid 18486] [client 20.240.63.86:7116] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "addzFcDe826HlFeoLPJgSwAAAUc"]
[Thu Apr 09 17:36:21.836919 2026] [:error] [pid 24516:tid 24571] [client 20.240.63.86:7128] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "addzFdhW7vSS-UkeWCUVrwAAAFg"]
[Thu Apr 09 17:36:22.372326 2026] [:error] [pid 24515:tid 24541] [client 20.240.63.86:7162] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "addzFq1OMnvM2fMnB1Nn2QAAABY"]
[Thu Apr 09 17:36:22.948471 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:7150] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "addzFq1OMnvM2fMnB1Nn3AAAAAE"]
[Fri Apr 10 23:18:38.474906 2026] [:error] [pid 63134:tid 63145] [client 82.114.179.123:6759] [client 82.114.179.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.114.179.123, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adkUztFALqPDwWi6eJLEqgAAA8g"]
[Fri Apr 10 23:18:38.485008 2026] [proxy_fcgi:error] [pid 63134:tid 63145] [client 82.114.179.123:6759] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:41:12.827434 2026] [:error] [pid 21706:tid 21719] [client 164.68.120.90:43170] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jobs"] [unique_id "adlSWCGQ1M5d8fQSsLEYVgAAAAs"]
[Sat Apr 11 03:48:28.602018 2026] [:error] [pid 29613:tid 29707] [client 164.68.120.90:50034] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/legal"] [unique_id "adlUDCshLgJF2LXR-rRQ6wAAAEg"]
[Sat Apr 11 04:51:44.921100 2026] [proxy_fcgi:error] [pid 33288:tid 33297] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:45.364894 2026] [proxy_fcgi:error] [pid 33288:tid 33312] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:45.797442 2026] [proxy_fcgi:error] [pid 33288:tid 33294] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:46.058483 2026] [proxy_fcgi:error] [pid 33288:tid 33292] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:46.389701 2026] [proxy_fcgi:error] [pid 33288:tid 33314] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:46.789494 2026] [proxy_fcgi:error] [pid 33288:tid 33308] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:47.200982 2026] [proxy_fcgi:error] [pid 33288:tid 33304] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:47.462406 2026] [proxy_fcgi:error] [pid 33288:tid 33314] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:47.818286 2026] [proxy_fcgi:error] [pid 33288:tid 33302] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:48.093404 2026] [proxy_fcgi:error] [pid 33288:tid 33301] [client 4.219.9.127:34454] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:51:48.462582 2026] [:error] [pid 33288:tid 33308] [client 4.219.9.127:34454] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adli5GJmwJFFPEgRHfH7HAAAANI"]
[Sat Apr 11 04:51:49.143117 2026] [:error] [pid 33288:tid 33295] [client 4.219.9.127:19927] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adli5WJmwJFFPEgRHfH7IgAAAMU"]
[Sat Apr 11 04:51:51.002385 2026] [:error] [pid 33173:tid 33266] [client 4.219.9.127:7047] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adli568109xRDP2izWin_QAAAJU"]
[Sat Apr 11 04:51:51.805835 2026] [:error] [pid 33171:tid 33201] [client 4.219.9.127:6914] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adli57oqTMlo30hcVw86rgAAAA8"]
[Sat Apr 11 04:51:52.848937 2026] [:error] [pid 33171:tid 33197] [client 4.219.9.127:32789] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "adli6LoqTMlo30hcVw86uwAAAAs"]
[Sat Apr 11 04:51:54.353554 2026] [:error] [pid 33173:tid 33260] [client 4.219.9.127:33742] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "adli6q8109xRDP2izWioCQAAAI8"]
[Sat Apr 11 04:51:55.731184 2026] [:error] [pid 33171:tid 33198] [client 4.219.9.127:6421] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "adli67oqTMlo30hcVw86yQAAAAw"]
[Sat Apr 11 04:51:57.166277 2026] [:error] [pid 33172:tid 33228] [client 4.219.9.127:32770] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "adli7Tn2G0IJw5EZY9kUKAAAAEo"]
[Sat Apr 11 04:51:57.927763 2026] [:error] [pid 33171:tid 33209] [client 4.219.9.127:54875] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adli7boqTMlo30hcVw860gAAABc"]
[Sat Apr 11 04:51:59.011563 2026] [:error] [pid 33288:tid 33291] [client 4.219.9.127:29038] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adli72JmwJFFPEgRHfH7SAAAAME"]
[Sat Apr 11 04:52:00.133506 2026] [:error] [pid 33288:tid 33291] [client 4.219.9.127:40867] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adli8GJmwJFFPEgRHfH7WAAAAME"]
[Sat Apr 11 04:52:01.874747 2026] [:error] [pid 33173:tid 33267] [client 4.219.9.127:6159] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adli8a8109xRDP2izWioHAAAAJY"]
[Sat Apr 11 04:52:03.033730 2026] [:error] [pid 33173:tid 33262] [client 4.219.9.127:32806] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "adli868109xRDP2izWioJAAAAJE"]
[Sat Apr 11 04:52:04.148833 2026] [:error] [pid 33173:tid 33250] [client 4.219.9.127:32804] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "adli9K8109xRDP2izWioKAAAAIU"]
[Sat Apr 11 04:52:05.115909 2026] [:error] [pid 33171:tid 33193] [client 4.219.9.127:54907] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "adli9boqTMlo30hcVw868gAAAAc"]
[Sat Apr 11 04:52:06.006958 2026] [:error] [pid 33288:tid 33296] [client 4.219.9.127:39801] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "adli9mJmwJFFPEgRHfH7dwAAAMY"]
[Sat Apr 11 04:52:07.425441 2026] [:error] [pid 33172:tid 33223] [client 4.219.9.127:33788] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "adli9zn2G0IJw5EZY9kUSgAAAEU"]
[Sat Apr 11 04:52:09.814826 2026] [:error] [pid 33288:tid 33309] [client 4.219.9.127:7092] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "adli-WJmwJFFPEgRHfH7hwAAANM"]
[Sat Apr 11 04:52:11.332704 2026] [:error] [pid 33172:tid 33228] [client 4.219.9.127:34457] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "adli-zn2G0IJw5EZY9kUXgAAAEo"]
[Sat Apr 11 04:52:12.499006 2026] [:error] [pid 33288:tid 33301] [client 4.219.9.127:6425] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "adli_GJmwJFFPEgRHfH7lQAAAMs"]
[Sat Apr 11 04:52:14.569976 2026] [:error] [pid 33288:tid 33314] [client 4.219.9.127:39789] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "adli_mJmwJFFPEgRHfH7pgAAANg"]
[Sat Apr 11 04:52:16.486243 2026] [:error] [pid 33173:tid 33267] [client 4.219.9.127:54896] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "adljAK8109xRDP2izWioVAAAAJY"]
[Sat Apr 11 04:52:18.055723 2026] [:error] [pid 33172:tid 33232] [client 4.219.9.127:40835] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "adljAjn2G0IJw5EZY9kUdAAAAE4"]
[Sat Apr 11 04:52:18.922859 2026] [:error] [pid 33288:tid 33309] [client 4.219.9.127:54887] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "adljAmJmwJFFPEgRHfH7twAAANM"]
[Sat Apr 11 04:52:20.299879 2026] [:error] [pid 33171:tid 33195] [client 4.219.9.127:29007] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "adljBLoqTMlo30hcVw87GQAAAAk"]
[Sat Apr 11 04:52:22.096632 2026] [:error] [pid 33288:tid 33303] [client 4.219.9.127:6145] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "adljBmJmwJFFPEgRHfH7xgAAAM0"]
[Sat Apr 11 04:52:23.040113 2026] [:error] [pid 33288:tid 33294] [client 4.219.9.127:54860] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "adljB2JmwJFFPEgRHfH7xwAAAMQ"]
[Sat Apr 11 04:52:23.864650 2026] [:error] [pid 33171:tid 33195] [client 4.219.9.127:6199] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "adljB7oqTMlo30hcVw87JgAAAAk"]
[Sat Apr 11 04:52:27.201927 2026] [:error] [pid 33172:tid 33225] [client 4.219.9.127:40889] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adljCzn2G0IJw5EZY9kUoQAAAEc"]
[Sat Apr 11 04:52:31.078953 2026] [:error] [pid 33172:tid 33235] [client 4.219.9.127:29013] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adljDzn2G0IJw5EZY9kUtAAAAFE"]
[Sat Apr 11 04:52:31.807322 2026] [:error] [pid 33172:tid 33239] [client 4.219.9.127:6942] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adljDzn2G0IJw5EZY9kUvwAAAFU"]
[Sat Apr 11 04:52:33.114629 2026] [:error] [pid 33173:tid 33245] [client 4.219.9.127:6949] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adljEa8109xRDP2izWiohAAAAIA"]
[Sat Apr 11 04:52:35.063663 2026] [:error] [pid 33171:tid 33196] [client 4.219.9.127:6437] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "adljE7oqTMlo30hcVw87SQAAAAo"]
[Sat Apr 11 04:52:35.829690 2026] [:error] [pid 33288:tid 33296] [client 4.219.9.127:29020] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "adljE2JmwJFFPEgRHfH7-wAAAMY"]
[Sat Apr 11 04:52:37.222878 2026] [:error] [pid 33171:tid 33210] [client 4.219.9.127:33774] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "adljFboqTMlo30hcVw87WAAAABg"]
[Sat Apr 11 04:52:38.255956 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:32823] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "adljFmJmwJFFPEgRHfH8BAAAAMc"]
[Sat Apr 11 04:52:39.351809 2026] [:error] [pid 33171:tid 33193] [client 4.219.9.127:34392] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "adljF7oqTMlo30hcVw87agAAAAc"]
[Sat Apr 11 04:52:39.994083 2026] [:error] [pid 33173:tid 33263] [client 4.219.9.127:40887] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "adljF68109xRDP2izWiooAAAAJI"]
[Sat Apr 11 04:52:41.881417 2026] [:error] [pid 33171:tid 33207] [client 4.219.9.127:32808] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "adljGboqTMlo30hcVw87dgAAABU"]
[Sat Apr 11 04:52:42.748740 2026] [:error] [pid 33173:tid 33268] [client 4.219.9.127:6178] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "adljGq8109xRDP2izWioqAAAAJc"]
[Sat Apr 11 04:52:43.583770 2026] [:error] [pid 33288:tid 33295] [client 4.219.9.127:19936] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blqjs.php"] [unique_id "adljG2JmwJFFPEgRHfH8HAAAAMU"]
[Sat Apr 11 04:52:44.562349 2026] [:error] [pid 33288:tid 33291] [client 4.219.9.127:54893] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blqjs.php"] [unique_id "adljHGJmwJFFPEgRHfH8JAAAAME"]
[Sat Apr 11 04:52:45.695656 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:39781] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blqjs.php"] [unique_id "adljHWJmwJFFPEgRHfH8LQAAAMc"]
[Sat Apr 11 04:52:46.905156 2026] [:error] [pid 33173:tid 33246] [client 4.219.9.127:6419] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blqjs.php"] [unique_id "adljHq8109xRDP2izWiotAAAAIE"]
[Sat Apr 11 04:52:48.189838 2026] [proxy_fcgi:error] [pid 33288:tid 33292] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:48.514560 2026] [proxy_fcgi:error] [pid 33288:tid 33310] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:48.872133 2026] [proxy_fcgi:error] [pid 33288:tid 33302] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:49.131964 2026] [proxy_fcgi:error] [pid 33288:tid 33305] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:49.398324 2026] [proxy_fcgi:error] [pid 33288:tid 33310] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:49.760734 2026] [proxy_fcgi:error] [pid 33288:tid 33291] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:50.128483 2026] [proxy_fcgi:error] [pid 33288:tid 33299] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:50.414731 2026] [proxy_fcgi:error] [pid 33288:tid 33292] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:50.764515 2026] [proxy_fcgi:error] [pid 33288:tid 33310] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:51.066490 2026] [proxy_fcgi:error] [pid 33288:tid 33291] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:51.346090 2026] [proxy_fcgi:error] [pid 33288:tid 33299] [client 4.219.9.127:6933] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:52:51.627253 2026] [:error] [pid 33288:tid 33290] [client 4.219.9.127:6933] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "adljI2JmwJFFPEgRHfH8bAAAAMA"]
[Sat Apr 11 04:52:52.434838 2026] [:error] [pid 33171:tid 33199] [client 4.219.9.127:29050] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "adljJLoqTMlo30hcVw87jQAAAA0"]
[Sat Apr 11 04:52:53.547163 2026] [:error] [pid 33173:tid 33267] [client 4.219.9.127:6146] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "adljJa8109xRDP2izWioxgAAAJY"]
[Sat Apr 11 04:52:54.640788 2026] [:error] [pid 33288:tid 33291] [client 4.219.9.127:6940] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "adljJmJmwJFFPEgRHfH8dAAAAME"]
[Sat Apr 11 04:52:56.175492 2026] [:error] [pid 33173:tid 33246] [client 4.219.9.127:34467] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "adljKK8109xRDP2izWiozAAAAIE"]
[Sat Apr 11 04:52:56.866911 2026] [:error] [pid 33172:tid 33233] [client 4.219.9.127:29048] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "adljKDn2G0IJw5EZY9kVBgAAAE8"]
[Sat Apr 11 04:52:57.463923 2026] [:error] [pid 33288:tid 33291] [client 4.219.9.127:6166] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "adljKWJmwJFFPEgRHfH8dwAAAME"]
[Sat Apr 11 04:52:58.088023 2026] [:error] [pid 33173:tid 33248] [client 4.219.9.127:29037] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "adljKq8109xRDP2izWio0QAAAIM"]
[Sat Apr 11 04:53:02.345442 2026] [:error] [pid 33288:tid 33308] [client 4.219.9.127:6443] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "adljLmJmwJFFPEgRHfH8nwAAANI"]
[Sat Apr 11 04:53:03.342250 2026] [:error] [pid 33288:tid 33290] [client 4.219.9.127:32781] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "adljL2JmwJFFPEgRHfH8rQAAAMA"]
[Sat Apr 11 04:53:04.467653 2026] [:error] [pid 33173:tid 33260] [client 4.219.9.127:33757] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "adljMK8109xRDP2izWio3wAAAI8"]
[Sat Apr 11 04:53:05.272855 2026] [:error] [pid 33173:tid 33261] [client 4.219.9.127:33768] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "adljMa8109xRDP2izWio4QAAAJA"]
[Sat Apr 11 04:53:06.779019 2026] [:error] [pid 33288:tid 33292] [client 4.219.9.127:6165] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adljMmJmwJFFPEgRHfH8tAAAAMI"]
[Sat Apr 11 04:53:08.826091 2026] [:error] [pid 33171:tid 33193] [client 4.219.9.127:39770] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adljNLoqTMlo30hcVw87uQAAAAc"]
[Sat Apr 11 04:53:10.236164 2026] [:error] [pid 33171:tid 33206] [client 4.219.9.127:34380] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adljNroqTMlo30hcVw87uwAAABQ"]
[Sat Apr 11 04:53:11.390895 2026] [:error] [pid 33288:tid 33304] [client 4.219.9.127:33771] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adljN2JmwJFFPEgRHfH80gAAAM4"]
[Sat Apr 11 04:53:12.475425 2026] [:error] [pid 33171:tid 33199] [client 4.219.9.127:7054] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "adljOLoqTMlo30hcVw87vgAAAA0"]
[Sat Apr 11 04:53:13.749982 2026] [:error] [pid 33171:tid 33193] [client 4.219.9.127:6179] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "adljOboqTMlo30hcVw87wAAAAAc"]
[Sat Apr 11 04:53:15.057277 2026] [:error] [pid 33288:tid 33312] [client 4.219.9.127:7063] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "adljO2JmwJFFPEgRHfH82gAAANY"]
[Sat Apr 11 04:53:16.453559 2026] [:error] [pid 33173:tid 33249] [client 4.219.9.127:25480] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "adljPK8109xRDP2izWipEAAAAIQ"]
[Sat Apr 11 04:53:17.415211 2026] [:error] [pid 33173:tid 33257] [client 4.219.9.127:34404] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymi.php"] [unique_id "adljPa8109xRDP2izWipGAAAAIw"]
[Sat Apr 11 04:53:18.253761 2026] [:error] [pid 33173:tid 33259] [client 4.219.9.127:6401] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymi.php"] [unique_id "adljPq8109xRDP2izWipHwAAAI4"]
[Sat Apr 11 04:53:18.894611 2026] [:error] [pid 33288:tid 33308] [client 4.219.9.127:6432] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymi.php"] [unique_id "adljPmJmwJFFPEgRHfH85AAAANI"]
[Sat Apr 11 04:53:19.680738 2026] [:error] [pid 33288:tid 33309] [client 4.219.9.127:6175] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymi.php"] [unique_id "adljP2JmwJFFPEgRHfH86AAAANM"]
[Sat Apr 11 04:53:21.084800 2026] [:error] [pid 33173:tid 33253] [client 4.219.9.127:54858] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "adljQa8109xRDP2izWipLQAAAIg"]
[Sat Apr 11 04:53:23.113914 2026] [:error] [pid 33288:tid 33309] [client 4.219.9.127:32807] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "adljQ2JmwJFFPEgRHfH88gAAANM"]
[Sat Apr 11 04:53:24.209752 2026] [:error] [pid 33288:tid 33312] [client 4.219.9.127:54889] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "adljRGJmwJFFPEgRHfH8_gAAANY"]
[Sat Apr 11 04:53:25.521090 2026] [:error] [pid 33288:tid 33312] [client 4.219.9.127:6174] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "adljRWJmwJFFPEgRHfH9BgAAANY"]
[Sat Apr 11 04:53:27.881283 2026] [:error] [pid 33173:tid 33251] [client 4.219.9.127:6156] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpb.php"] [unique_id "adljR68109xRDP2izWipRgAAAIY"]
[Sat Apr 11 04:53:30.813883 2026] [:error] [pid 33171:tid 33201] [client 4.219.9.127:32785] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpb.php"] [unique_id "adljSroqTMlo30hcVw874gAAAA8"]
[Sat Apr 11 04:53:33.625510 2026] [:error] [pid 33288:tid 33308] [client 4.219.9.127:54888] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpb.php"] [unique_id "adljTWJmwJFFPEgRHfH9LAAAANI"]
[Sat Apr 11 04:53:34.229319 2026] [:error] [pid 33288:tid 33299] [client 4.219.9.127:40834] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpb.php"] [unique_id "adljTmJmwJFFPEgRHfH9MAAAAMk"]
[Sat Apr 11 04:53:35.370372 2026] [:error] [pid 33172:tid 33223] [client 4.219.9.127:40840] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "adljTzn2G0IJw5EZY9kVSQAAAEU"]
[Sat Apr 11 04:53:37.751923 2026] [:error] [pid 33171:tid 33196] [client 4.219.9.127:19906] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "adljUboqTMlo30hcVw877QAAAAo"]
[Sat Apr 11 04:53:38.891842 2026] [:error] [pid 33172:tid 33235] [client 4.219.9.127:19919] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "adljUjn2G0IJw5EZY9kVYAAAAFE"]
[Sat Apr 11 04:53:40.361838 2026] [:error] [pid 33173:tid 33261] [client 4.219.9.127:54879] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Geforce.php"] [unique_id "adljVK8109xRDP2izWipbgAAAJA"]
[Sat Apr 11 04:53:41.659609 2026] [:error] [pid 33173:tid 33256] [client 4.219.9.127:40881] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adljVa8109xRDP2izWipdQAAAIs"]
[Sat Apr 11 04:53:42.370500 2026] [:error] [pid 33288:tid 33292] [client 4.219.9.127:6923] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adljVmJmwJFFPEgRHfH9RgAAAMI"]
[Sat Apr 11 04:53:43.001331 2026] [:error] [pid 33288:tid 33314] [client 4.219.9.127:6925] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adljV2JmwJFFPEgRHfH9SwAAANg"]
[Sat Apr 11 04:53:43.770080 2026] [:error] [pid 33288:tid 33307] [client 4.219.9.127:34409] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adljV2JmwJFFPEgRHfH9UAAAANE"]
[Sat Apr 11 04:53:44.447577 2026] [:error] [pid 33288:tid 33308] [client 4.219.9.127:28995] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxl.php"] [unique_id "adljWGJmwJFFPEgRHfH9VwAAANI"]
[Sat Apr 11 04:53:45.253173 2026] [:error] [pid 33288:tid 33310] [client 4.219.9.127:54895] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxl.php"] [unique_id "adljWWJmwJFFPEgRHfH9YAAAANQ"]
[Sat Apr 11 04:53:46.515412 2026] [:error] [pid 33288:tid 33291] [client 4.219.9.127:6918] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxl.php"] [unique_id "adljWmJmwJFFPEgRHfH9agAAAME"]
[Sat Apr 11 04:53:47.255737 2026] [:error] [pid 33173:tid 33266] [client 4.219.9.127:7091] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxl.php"] [unique_id "adljW68109xRDP2izWipfQAAAJU"]
[Sat Apr 11 04:53:47.911008 2026] [:error] [pid 33171:tid 33186] [client 4.219.9.127:34479] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adljW7oqTMlo30hcVw88EwAAAAA"]
[Sat Apr 11 04:53:48.714989 2026] [:error] [pid 33171:tid 33188] [client 4.219.9.127:34443] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adljXLoqTMlo30hcVw88FQAAAAI"]
[Sat Apr 11 04:53:49.394154 2026] [:error] [pid 33173:tid 33248] [client 4.219.9.127:29003] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adljXa8109xRDP2izWipiQAAAIM"]
[Sat Apr 11 04:53:50.315758 2026] [:error] [pid 33173:tid 33253] [client 4.219.9.127:33786] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adljXq8109xRDP2izWipkAAAAIg"]
[Sat Apr 11 04:53:51.119671 2026] [proxy_fcgi:error] [pid 33173:tid 33266] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:51.450605 2026] [proxy_fcgi:error] [pid 33173:tid 33267] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:51.724104 2026] [proxy_fcgi:error] [pid 33173:tid 33246] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:51.982996 2026] [proxy_fcgi:error] [pid 33173:tid 33262] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:52.253728 2026] [proxy_fcgi:error] [pid 33173:tid 33256] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:52.568147 2026] [proxy_fcgi:error] [pid 33173:tid 33257] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:52.860282 2026] [proxy_fcgi:error] [pid 33173:tid 33269] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:53.191998 2026] [proxy_fcgi:error] [pid 33173:tid 33262] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:53.450616 2026] [proxy_fcgi:error] [pid 33173:tid 33268] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:53.753351 2026] [proxy_fcgi:error] [pid 33173:tid 33255] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:54.123376 2026] [proxy_fcgi:error] [pid 33173:tid 33245] [client 4.219.9.127:18730] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:53:54.378591 2026] [:error] [pid 33173:tid 33261] [client 4.219.9.127:18730] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "adljYq8109xRDP2izWipuQAAAJA"]
[Sat Apr 11 04:53:55.321911 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:33755] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "adljY2JmwJFFPEgRHfH9mAAAAMc"]
[Sat Apr 11 04:53:56.441456 2026] [:error] [pid 33288:tid 33305] [client 4.219.9.127:34474] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "adljZGJmwJFFPEgRHfH9pgAAAM8"]
[Sat Apr 11 04:53:58.305851 2026] [:error] [pid 33288:tid 33312] [client 4.219.9.127:6409] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "adljZmJmwJFFPEgRHfH9uQAAANY"]
[Sat Apr 11 04:54:02.290069 2026] [:error] [pid 33288:tid 33307] [client 4.219.9.127:7061] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adljamJmwJFFPEgRHfH94AAAANE"]
[Sat Apr 11 04:54:03.680387 2026] [:error] [pid 33171:tid 33201] [client 4.219.9.127:54864] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlja7oqTMlo30hcVw88NgAAAA8"]
[Sat Apr 11 04:54:04.662578 2026] [:error] [pid 33172:tid 33229] [client 4.219.9.127:33753] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adljbDn2G0IJw5EZY9kViwAAAEs"]
[Sat Apr 11 04:54:05.883981 2026] [:error] [pid 33173:tid 33249] [client 4.219.9.127:6411] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adljba8109xRDP2izWip1gAAAIQ"]
[Sat Apr 11 04:54:06.939067 2026] [:error] [pid 33173:tid 33269] [client 4.219.9.127:19929] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adljbq8109xRDP2izWip3gAAAJg"]
[Sat Apr 11 04:54:08.253610 2026] [:error] [pid 33173:tid 33251] [client 4.219.9.127:40220] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adljcK8109xRDP2izWip6gAAAIY"]
[Sat Apr 11 04:54:09.231226 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:19930] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adljcWJmwJFFPEgRHfH-AwAAAMc"]
[Sat Apr 11 04:54:10.418889 2026] [:error] [pid 33288:tid 33312] [client 4.219.9.127:32788] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adljcmJmwJFFPEgRHfH-CQAAANY"]
[Sat Apr 11 04:54:11.205403 2026] [:error] [pid 33288:tid 33298] [client 4.219.9.127:7098] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adljc2JmwJFFPEgRHfH-EAAAAMg"]
[Sat Apr 11 04:54:12.263043 2026] [:error] [pid 33173:tid 33260] [client 4.219.9.127:6162] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adljdK8109xRDP2izWip8QAAAI8"]
[Sat Apr 11 04:54:13.577422 2026] [:error] [pid 33288:tid 33293] [client 4.219.9.127:6414] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adljdWJmwJFFPEgRHfH-JQAAAMM"]
[Sat Apr 11 04:54:15.337897 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:7066] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adljd2JmwJFFPEgRHfH-KwAAAMc"]
[Sat Apr 11 04:54:16.404524 2026] [:error] [pid 33288:tid 33294] [client 4.219.9.127:40845] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "adljeGJmwJFFPEgRHfH-LwAAAMQ"]
[Sat Apr 11 04:54:19.580477 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:34426] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "adlje2JmwJFFPEgRHfH-SgAAAMc"]
[Sat Apr 11 04:54:21.111303 2026] [:error] [pid 33288:tid 33311] [client 4.219.9.127:29028] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "adljfWJmwJFFPEgRHfH-WgAAANU"]
[Sat Apr 11 04:54:21.882067 2026] [:error] [pid 33288:tid 33313] [client 4.219.9.127:6200] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "adljfWJmwJFFPEgRHfH-ZQAAANc"]
[Sat Apr 11 04:54:22.571969 2026] [:error] [pid 33288:tid 33293] [client 4.219.9.127:6919] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "adljfmJmwJFFPEgRHfH-aAAAAMM"]
[Sat Apr 11 04:54:23.439414 2026] [:error] [pid 33288:tid 33298] [client 4.219.9.127:6935] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "adljf2JmwJFFPEgRHfH-cwAAAMg"]
[Sat Apr 11 04:54:24.196816 2026] [:error] [pid 33171:tid 33191] [client 4.219.9.127:32801] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "adljgLoqTMlo30hcVw88hAAAAAU"]
[Sat Apr 11 04:54:25.023161 2026] [:error] [pid 33173:tid 33267] [client 4.219.9.127:19949] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "adljga8109xRDP2izWiqNQAAAJY"]
[Sat Apr 11 04:54:25.771878 2026] [:error] [pid 33171:tid 33200] [client 4.219.9.127:40849] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "adljgboqTMlo30hcVw88jQAAAA4"]
[Sat Apr 11 04:54:27.436393 2026] [:error] [pid 33173:tid 33256] [client 4.219.9.127:54871] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "adljg68109xRDP2izWiqQwAAAIs"]
[Sat Apr 11 04:54:28.718801 2026] [:error] [pid 33171:tid 33203] [client 4.219.9.127:6180] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "adljhLoqTMlo30hcVw88ngAAABE"]
[Sat Apr 11 04:54:29.686560 2026] [:error] [pid 33288:tid 33295] [client 4.219.9.127:32772] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "adljhWJmwJFFPEgRHfH-gQAAAMU"]
[Sat Apr 11 04:54:30.407737 2026] [:error] [pid 33172:tid 33231] [client 4.219.9.127:34435] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "adljhjn2G0IJw5EZY9kVzwAAAE0"]
[Sat Apr 11 04:54:31.762001 2026] [:error] [pid 33172:tid 33242] [client 4.219.9.127:39782] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "adljhzn2G0IJw5EZY9kV1AAAAFg"]
[Sat Apr 11 04:54:32.810686 2026] [:error] [pid 33288:tid 33310] [client 4.219.9.127:33732] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "adljiGJmwJFFPEgRHfH-nwAAANQ"]
[Sat Apr 11 04:54:33.612861 2026] [:error] [pid 33173:tid 33257] [client 4.219.9.127:40862] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "adljia8109xRDP2izWiqVAAAAIw"]
[Sat Apr 11 04:54:34.827117 2026] [:error] [pid 33288:tid 33310] [client 4.219.9.127:54851] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adljimJmwJFFPEgRHfH-sAAAANQ"]
[Sat Apr 11 04:54:37.874276 2026] [:error] [pid 33288:tid 33309] [client 4.219.9.127:6167] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adljjWJmwJFFPEgRHfH-uAAAANM"]
[Sat Apr 11 04:54:39.697119 2026] [:error] [pid 33171:tid 33204] [client 4.219.9.127:34402] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adljj7oqTMlo30hcVw88rgAAABI"]
[Sat Apr 11 04:54:41.865921 2026] [:error] [pid 33288:tid 33306] [client 4.219.9.127:28995] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adljkWJmwJFFPEgRHfH-1AAAANA"]
[Sat Apr 11 04:54:42.977004 2026] [:error] [pid 33288:tid 33308] [client 4.219.9.127:19966] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adljkmJmwJFFPEgRHfH-4AAAANI"]
[Sat Apr 11 04:54:43.810360 2026] [:error] [pid 33173:tid 33254] [client 4.219.9.127:7041] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adljk68109xRDP2izWiqfwAAAIk"]
[Sat Apr 11 04:54:44.540175 2026] [:error] [pid 33288:tid 33313] [client 4.219.9.127:6440] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adljlGJmwJFFPEgRHfH-5gAAANc"]
[Sat Apr 11 04:54:45.187870 2026] [:error] [pid 33288:tid 33295] [client 4.219.9.127:29012] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adljlWJmwJFFPEgRHfH-7gAAAMU"]
[Sat Apr 11 04:54:46.119555 2026] [:error] [pid 33172:tid 33224] [client 4.219.9.127:19944] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adljljn2G0IJw5EZY9kV9AAAAEY"]
[Sat Apr 11 04:54:47.269636 2026] [:error] [pid 33173:tid 33247] [client 4.219.9.127:40848] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adljl68109xRDP2izWiqhQAAAII"]
[Sat Apr 11 04:54:47.878935 2026] [:error] [pid 33172:tid 33231] [client 4.219.9.127:18715] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adljlzn2G0IJw5EZY9kWBQAAAE0"]
[Sat Apr 11 04:54:49.494139 2026] [:error] [pid 33288:tid 33290] [client 4.219.9.127:34462] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX1.php"] [unique_id "adljmWJmwJFFPEgRHfH-_AAAAMA"]
[Sat Apr 11 04:54:50.569642 2026] [:error] [pid 33288:tid 33304] [client 4.219.9.127:6158] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adljmmJmwJFFPEgRHfH_BwAAAM4"]
[Sat Apr 11 04:54:51.430855 2026] [:error] [pid 33288:tid 33302] [client 4.219.9.127:36031] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adljm2JmwJFFPEgRHfH_DAAAAMw"]
[Sat Apr 11 04:54:52.371917 2026] [:error] [pid 33288:tid 33293] [client 4.219.9.127:34417] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adljnGJmwJFFPEgRHfH_FQAAAMM"]
[Sat Apr 11 04:54:53.741994 2026] [:error] [pid 33172:tid 33231] [client 4.219.9.127:54870] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adljnTn2G0IJw5EZY9kWHAAAAE0"]
[Sat Apr 11 04:54:55.137104 2026] [proxy_fcgi:error] [pid 33171:tid 33208] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:55.399891 2026] [proxy_fcgi:error] [pid 33171:tid 33207] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:55.676678 2026] [proxy_fcgi:error] [pid 33171:tid 33198] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:55.937180 2026] [proxy_fcgi:error] [pid 33171:tid 33189] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:56.204696 2026] [proxy_fcgi:error] [pid 33171:tid 33190] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:56.512036 2026] [proxy_fcgi:error] [pid 33171:tid 33193] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:57.414428 2026] [proxy_fcgi:error] [pid 33171:tid 33205] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:57.858610 2026] [proxy_fcgi:error] [pid 33171:tid 33195] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:58.205698 2026] [proxy_fcgi:error] [pid 33171:tid 33192] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:58.651769 2026] [proxy_fcgi:error] [pid 33171:tid 33209] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:58.970791 2026] [proxy_fcgi:error] [pid 33171:tid 33208] [client 4.219.9.127:28992] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:54:59.227193 2026] [:error] [pid 33171:tid 33194] [client 4.219.9.127:28992] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adljo7oqTMlo30hcVw887AAAAAg"]
[Sat Apr 11 04:55:00.667942 2026] [:error] [pid 33172:tid 33238] [client 4.219.9.127:54880] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adljpDn2G0IJw5EZY9kWMAAAAFQ"]
[Sat Apr 11 04:55:01.924540 2026] [:error] [pid 33173:tid 33253] [client 4.219.9.127:6973] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adljpa8109xRDP2izWiqswAAAIg"]
[Sat Apr 11 04:55:10.442075 2026] [:error] [pid 33288:tid 33310] [client 4.219.9.127:6461] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adljrmJmwJFFPEgRHfH_cgAAANQ"]
[Sat Apr 11 04:56:05.282821 2026] [proxy_fcgi:error] [pid 33171:tid 33192] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:05.544331 2026] [proxy_fcgi:error] [pid 33171:tid 33201] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:05.812570 2026] [proxy_fcgi:error] [pid 33171:tid 33197] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:06.124529 2026] [proxy_fcgi:error] [pid 33171:tid 33210] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:06.466953 2026] [proxy_fcgi:error] [pid 33171:tid 33186] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:06.727009 2026] [proxy_fcgi:error] [pid 33171:tid 33194] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:07.356695 2026] [proxy_fcgi:error] [pid 33171:tid 33199] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:07.655753 2026] [proxy_fcgi:error] [pid 33171:tid 33202] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:07.917307 2026] [proxy_fcgi:error] [pid 33171:tid 33209] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:08.177394 2026] [proxy_fcgi:error] [pid 33171:tid 33191] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:08.493136 2026] [proxy_fcgi:error] [pid 33171:tid 33198] [client 4.219.9.127:54855] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:56:08.790882 2026] [:error] [pid 33171:tid 33193] [client 4.219.9.127:54855] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adlj6LoqTMlo30hcVw89tQAAAAc"]
[Sat Apr 11 04:56:09.607690 2026] [:error] [pid 33172:tid 33233] [client 4.219.9.127:29053] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adlj6Tn2G0IJw5EZY9kXEwAAAE8"]
[Sat Apr 11 04:56:10.496899 2026] [:error] [pid 33172:tid 33236] [client 4.219.9.127:6444] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adlj6jn2G0IJw5EZY9kXGwAAAFI"]
[Sat Apr 11 04:56:12.603053 2026] [:error] [pid 33288:tid 33295] [client 4.219.9.127:6431] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "adlj7GJmwJFFPEgRHfEAtAAAAMU"]
[Sat Apr 11 04:56:13.769931 2026] [:error] [pid 33171:tid 33203] [client 4.219.9.127:32792] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adlj7boqTMlo30hcVw89wAAAABE"]
[Sat Apr 11 04:56:15.330159 2026] [:error] [pid 33172:tid 33240] [client 4.219.9.127:25512] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adlj7zn2G0IJw5EZY9kXKQAAAFY"]
[Sat Apr 11 04:56:16.062310 2026] [:error] [pid 33173:tid 33251] [client 4.219.9.127:29049] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adlj8K8109xRDP2izWisYAAAAIY"]
[Sat Apr 11 04:56:17.217631 2026] [:error] [pid 33173:tid 33262] [client 4.219.9.127:54848] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "adlj8a8109xRDP2izWiscAAAAJE"]
[Sat Apr 11 04:56:18.221071 2026] [:error] [pid 33172:tid 33219] [client 4.219.9.127:54882] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "adlj8jn2G0IJw5EZY9kXLgAAAEE"]
[Sat Apr 11 04:56:19.337500 2026] [:error] [pid 33288:tid 33295] [client 4.219.9.127:33785] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "adlj82JmwJFFPEgRHfEA6AAAAMU"]
[Sat Apr 11 04:56:20.136635 2026] [:error] [pid 33173:tid 33262] [client 4.219.9.127:6969] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "adlj9K8109xRDP2izWisjwAAAJE"]
[Sat Apr 11 04:56:21.206787 2026] [:error] [pid 33288:tid 33302] [client 4.219.9.127:25482] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "adlj9WJmwJFFPEgRHfEA-wAAAMw"]
[Sat Apr 11 04:56:22.126580 2026] [:error] [pid 33288:tid 33298] [client 4.219.9.127:33770] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adlj9mJmwJFFPEgRHfEBBgAAAMg"]
[Sat Apr 11 04:56:23.559579 2026] [:error] [pid 33288:tid 33302] [client 4.219.9.127:6446] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adlj92JmwJFFPEgRHfEBFQAAAMw"]
[Sat Apr 11 04:56:24.472453 2026] [:error] [pid 33288:tid 33293] [client 4.219.9.127:40883] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adlj-GJmwJFFPEgRHfEBHQAAAMM"]
[Sat Apr 11 04:56:25.307008 2026] [:error] [pid 33172:tid 33224] [client 4.219.9.127:32824] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adlj-Tn2G0IJw5EZY9kXRAAAAEY"]
[Sat Apr 11 04:56:26.408920 2026] [:error] [pid 33172:tid 33219] [client 4.219.9.127:29025] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "adlj-jn2G0IJw5EZY9kXTAAAAEE"]
[Sat Apr 11 04:56:27.414974 2026] [:error] [pid 33173:tid 33265] [client 4.219.9.127:39786] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "adlj-68109xRDP2izWistwAAAJQ"]
[Sat Apr 11 04:56:28.348487 2026] [:error] [pid 33288:tid 33294] [client 4.219.9.127:28998] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "adlj_GJmwJFFPEgRHfEBTgAAAMQ"]
[Sat Apr 11 04:56:29.090141 2026] [:error] [pid 33173:tid 33254] [client 4.219.9.127:6152] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "adlj_a8109xRDP2izWisvAAAAIk"]
[Sat Apr 11 04:56:30.095404 2026] [:error] [pid 33172:tid 33220] [client 4.219.9.127:6916] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adlj_jn2G0IJw5EZY9kXZAAAAEI"]
[Sat Apr 11 04:56:31.489362 2026] [:error] [pid 33171:tid 33210] [client 4.219.9.127:54868] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adlj_7oqTMlo30hcVw898wAAABg"]
[Sat Apr 11 04:56:33.826605 2026] [:error] [pid 33172:tid 33221] [client 4.219.9.127:54876] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adlkATn2G0IJw5EZY9kXfAAAAEM"]
[Sat Apr 11 04:56:35.354751 2026] [:error] [pid 33288:tid 33295] [client 4.219.9.127:34455] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adlkA2JmwJFFPEgRHfEBpwAAAMU"]
[Sat Apr 11 04:56:36.236062 2026] [:error] [pid 33172:tid 33234] [client 4.219.9.127:40863] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "adlkBDn2G0IJw5EZY9kXiQAAAFA"]
[Sat Apr 11 04:56:36.971565 2026] [:error] [pid 33172:tid 33223] [client 4.219.9.127:29015] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "adlkBDn2G0IJw5EZY9kXkgAAAEU"]
[Sat Apr 11 04:56:38.022698 2026] [:error] [pid 33288:tid 33310] [client 4.219.9.127:29017] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "adlkBmJmwJFFPEgRHfEBuwAAANQ"]
[Sat Apr 11 04:56:39.218970 2026] [:error] [pid 33288:tid 33302] [client 4.219.9.127:6586] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "adlkB2JmwJFFPEgRHfEBxAAAAMw"]
[Sat Apr 11 04:56:40.642405 2026] [:error] [pid 33288:tid 33307] [client 4.219.9.127:6192] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlkCGJmwJFFPEgRHfEB0QAAANE"]
[Sat Apr 11 04:56:41.571609 2026] [:error] [pid 33288:tid 33294] [client 4.219.9.127:6961] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlkCWJmwJFFPEgRHfEB3wAAAMQ"]
[Sat Apr 11 04:56:42.472685 2026] [:error] [pid 33173:tid 33264] [client 4.219.9.127:34396] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlkCq8109xRDP2izWis3gAAAJM"]
[Sat Apr 11 04:56:43.630183 2026] [:error] [pid 33173:tid 33257] [client 4.219.9.127:38312] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlkC68109xRDP2izWis7gAAAIw"]
[Sat Apr 11 04:56:45.199717 2026] [:error] [pid 33172:tid 33229] [client 4.219.9.127:34424] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adlkDTn2G0IJw5EZY9kXqgAAAEs"]
[Sat Apr 11 04:56:45.916392 2026] [:error] [pid 33173:tid 33266] [client 4.219.9.127:34394] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adlkDa8109xRDP2izWis-gAAAJU"]
[Sat Apr 11 04:56:47.215176 2026] [:error] [pid 33172:tid 33240] [client 4.219.9.127:40838] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adlkDzn2G0IJw5EZY9kXuQAAAFY"]
[Sat Apr 11 04:56:47.883669 2026] [:error] [pid 33171:tid 33206] [client 4.219.9.127:19947] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "adlkD7oqTMlo30hcVw8-FAAAABQ"]
[Sat Apr 11 04:56:49.267815 2026] [:error] [pid 33172:tid 33225] [client 4.219.9.127:19909] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlkETn2G0IJw5EZY9kXxQAAAEc"]
[Sat Apr 11 04:56:50.106256 2026] [:error] [pid 33288:tid 33313] [client 4.219.9.127:32790] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlkEmJmwJFFPEgRHfEB8gAAANc"]
[Sat Apr 11 04:56:51.402553 2026] [:error] [pid 33172:tid 33237] [client 4.219.9.127:7097] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlkEzn2G0IJw5EZY9kX1QAAAFM"]
[Sat Apr 11 04:56:52.310090 2026] [:error] [pid 33173:tid 33265] [client 4.219.9.127:6193] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlkFK8109xRDP2izWitEwAAAJQ"]
[Sat Apr 11 04:56:53.185038 2026] [:error] [pid 33173:tid 33253] [client 4.219.9.127:34384] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "adlkFa8109xRDP2izWitGAAAAIg"]
[Sat Apr 11 04:56:54.072247 2026] [:error] [pid 33288:tid 33290] [client 4.219.9.127:40869] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "adlkFmJmwJFFPEgRHfECAwAAAMA"]
[Sat Apr 11 04:56:55.376066 2026] [:error] [pid 33173:tid 33260] [client 4.219.9.127:34405] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "adlkF68109xRDP2izWitHgAAAI8"]
[Sat Apr 11 04:56:56.361248 2026] [:error] [pid 33173:tid 33265] [client 4.219.9.127:6964] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "adlkGK8109xRDP2izWitIAAAAJQ"]
[Sat Apr 11 04:56:57.463102 2026] [:error] [pid 33172:tid 33232] [client 4.219.9.127:32802] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlkGTn2G0IJw5EZY9kYBQAAAE4"]
[Sat Apr 11 04:56:58.263510 2026] [:error] [pid 33172:tid 33222] [client 4.219.9.127:34447] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlkGjn2G0IJw5EZY9kYCQAAAEQ"]
[Sat Apr 11 04:56:59.035871 2026] [:error] [pid 33172:tid 33224] [client 4.219.9.127:33746] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlkGzn2G0IJw5EZY9kYDQAAAEY"]
[Sat Apr 11 04:56:59.788585 2026] [:error] [pid 33171:tid 33191] [client 4.219.9.127:34470] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlkG7oqTMlo30hcVw8-MQAAAAU"]
[Sat Apr 11 04:57:00.484708 2026] [:error] [pid 33288:tid 33300] [client 4.219.9.127:6944] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adlkHGJmwJFFPEgRHfECFQAAAMo"]
[Sat Apr 11 04:57:01.212365 2026] [:error] [pid 33288:tid 33313] [client 4.219.9.127:6163] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adlkHWJmwJFFPEgRHfECIAAAANc"]
[Sat Apr 11 04:57:03.374174 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:7059] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adlkH2JmwJFFPEgRHfECKQAAAMc"]
[Sat Apr 11 04:57:04.577989 2026] [:error] [pid 33172:tid 33236] [client 4.219.9.127:54902] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/torsa1.php"] [unique_id "adlkIDn2G0IJw5EZY9kYIwAAAFI"]
[Sat Apr 11 04:57:05.282250 2026] [:error] [pid 33171:tid 33190] [client 4.219.9.127:6443] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "adlkIboqTMlo30hcVw8-SAAAAAQ"]
[Sat Apr 11 04:57:06.365371 2026] [:error] [pid 33171:tid 33207] [client 4.219.9.127:19960] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "adlkIroqTMlo30hcVw8-UQAAABU"]
[Sat Apr 11 04:57:07.466681 2026] [:error] [pid 33171:tid 33193] [client 4.219.9.127:54909] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "adlkI7oqTMlo30hcVw8-WQAAAAc"]
[Sat Apr 11 04:57:08.282340 2026] [proxy_fcgi:error] [pid 33173:tid 33251] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:08.546933 2026] [proxy_fcgi:error] [pid 33173:tid 33266] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:08.991354 2026] [proxy_fcgi:error] [pid 33173:tid 33256] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:09.377248 2026] [proxy_fcgi:error] [pid 33173:tid 33261] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:09.728883 2026] [proxy_fcgi:error] [pid 33173:tid 33259] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:10.038067 2026] [proxy_fcgi:error] [pid 33173:tid 33253] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:10.309355 2026] [proxy_fcgi:error] [pid 33173:tid 33255] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:10.678679 2026] [proxy_fcgi:error] [pid 33173:tid 33268] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:11.037364 2026] [proxy_fcgi:error] [pid 33173:tid 33266] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:11.487278 2026] [proxy_fcgi:error] [pid 33173:tid 33246] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:11.804122 2026] [proxy_fcgi:error] [pid 33173:tid 33262] [client 4.219.9.127:36001] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:57:12.163002 2026] [:error] [pid 33173:tid 33250] [client 4.219.9.127:36001] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "adlkKK8109xRDP2izWitcQAAAIU"]
[Sat Apr 11 04:57:13.649507 2026] [:error] [pid 33288:tid 33304] [client 4.219.9.127:34475] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "adlkKWJmwJFFPEgRHfECTgAAAM4"]
[Sat Apr 11 04:57:15.422066 2026] [:error] [pid 33173:tid 33258] [client 4.219.9.127:6946] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "adlkK68109xRDP2izWitegAAAI0"]
[Sat Apr 11 04:57:16.338363 2026] [:error] [pid 33173:tid 33252] [client 4.219.9.127:28146] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "adlkLK8109xRDP2izWithAAAAIc"]
[Sat Apr 11 04:57:17.179717 2026] [:error] [pid 33171:tid 33194] [client 4.219.9.127:25495] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adlkLboqTMlo30hcVw8-iwAAAAg"]
[Sat Apr 11 04:57:17.972422 2026] [:error] [pid 33171:tid 33190] [client 4.219.9.127:7076] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adlkLboqTMlo30hcVw8-kAAAAAQ"]
[Sat Apr 11 04:57:18.624795 2026] [:error] [pid 33173:tid 33261] [client 4.219.9.127:25488] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adlkLq8109xRDP2izWitoAAAAJA"]
[Sat Apr 11 04:57:19.365858 2026] [:error] [pid 33172:tid 33220] [client 4.219.9.127:6166] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "adlkLzn2G0IJw5EZY9kYPgAAAEI"]
[Sat Apr 11 04:57:20.273335 2026] [:error] [pid 33171:tid 33206] [client 4.219.9.127:34433] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "adlkMLoqTMlo30hcVw8-lQAAABQ"]
[Sat Apr 11 04:57:21.720310 2026] [:error] [pid 33288:tid 33311] [client 4.219.9.127:38313] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "adlkMWJmwJFFPEgRHfECiAAAANU"]
[Sat Apr 11 04:57:23.792079 2026] [:error] [pid 33288:tid 33304] [client 4.219.9.127:6429] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "adlkM2JmwJFFPEgRHfECpgAAAM4"]
[Sat Apr 11 04:57:25.182288 2026] [:error] [pid 33288:tid 33298] [client 4.219.9.127:6971] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "adlkNWJmwJFFPEgRHfECtgAAAMg"]
[Sat Apr 11 04:57:26.771944 2026] [:error] [pid 33288:tid 33310] [client 4.219.9.127:6453] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adlkNmJmwJFFPEgRHfECyQAAANQ"]
[Sat Apr 11 04:57:29.707961 2026] [:error] [pid 33172:tid 33241] [client 4.219.9.127:34375] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adlkOTn2G0IJw5EZY9kYawAAAFc"]
[Sat Apr 11 04:57:32.073468 2026] [:error] [pid 33288:tid 33294] [client 4.219.9.127:6148] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adlkPGJmwJFFPEgRHfEC8AAAAMQ"]
[Sat Apr 11 04:57:36.261605 2026] [:error] [pid 33288:tid 33296] [client 4.219.9.127:6150] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "adlkQGJmwJFFPEgRHfEDEwAAAMY"]
[Sat Apr 11 04:57:43.973154 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:39768] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "adlkR2JmwJFFPEgRHfEDVAAAAMc"]
[Sat Apr 11 04:57:44.931544 2026] [:error] [pid 33288:tid 33298] [client 4.219.9.127:19913] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "adlkSGJmwJFFPEgRHfEDYwAAAMg"]
[Sat Apr 11 04:57:46.776217 2026] [:error] [pid 33171:tid 33209] [client 4.219.9.127:7047] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "adlkSroqTMlo30hcVw8-9AAAABc"]
[Sat Apr 11 04:57:47.603172 2026] [:error] [pid 33171:tid 33186] [client 4.219.9.127:6147] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "adlkS7oqTMlo30hcVw8--AAAAAA"]
[Sat Apr 11 04:57:48.951863 2026] [:error] [pid 33173:tid 33259] [client 4.219.9.127:32808] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adlkTK8109xRDP2izWit6gAAAI4"]
[Sat Apr 11 04:57:51.400648 2026] [:error] [pid 33288:tid 33307] [client 4.219.9.127:34456] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adlkT2JmwJFFPEgRHfEDlwAAANE"]
[Sat Apr 11 04:57:53.548791 2026] [:error] [pid 33288:tid 33297] [client 4.219.9.127:29009] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adlkUWJmwJFFPEgRHfEDowAAAMc"]
[Sat Apr 11 04:57:54.789613 2026] [:error] [pid 33171:tid 33193] [client 4.219.9.127:6401] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "adlkUroqTMlo30hcVw8_OgAAAAc"]
[Sat Apr 11 04:57:56.735526 2026] [:error] [pid 33173:tid 33252] [client 4.219.9.127:19911] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "adlkVK8109xRDP2izWiuCQAAAIc"]
[Sat Apr 11 04:57:59.948934 2026] [:error] [pid 33172:tid 33218] [client 4.219.9.127:29023] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "adlkVzn2G0IJw5EZY9kYswAAAEA"]
[Sat Apr 11 04:58:36.750587 2026] [proxy_fcgi:error] [pid 33171:tid 33208] [client 4.219.9.127:19943] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 04:58:37.010074 2026] [proxy_fcgi:error] [pid 33171:tid 33203] [client 4.219.9.127:19943] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:28:03.972392 2026] [proxy_fcgi:error] [pid 33171:tid 33186] [client 4.223.73.181:62167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:28:07.433991 2026] [proxy_fcgi:error] [pid 33171:tid 33187] [client 4.223.73.181:62167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:28:07.694621 2026] [:error] [pid 33171:tid 33205] [client 4.223.73.181:62167] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/itil.php"] [unique_id "admHh7oqTMlo30hcVw-HVAAAABM"]
[Sat Apr 11 07:28:08.212702 2026] [:error] [pid 33172:tid 33237] [client 4.223.73.181:62180] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/itil.php"] [unique_id "admHiDn2G0IJw5EZY9lpdAAAAFM"]
[Sat Apr 11 07:28:08.732548 2026] [:error] [pid 15244:tid 15268] [client 4.223.73.181:65165] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/itil.php"] [unique_id "admHiIkdEsz5NeAq8w19CAAAARY"]
[Sat Apr 11 07:28:09.253148 2026] [:error] [pid 15244:tid 15258] [client 4.223.73.181:46377] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/itil.php"] [unique_id "admHiYkdEsz5NeAq8w19DwAAAQw"]
[Sat Apr 11 07:28:09.782350 2026] [:error] [pid 33171:tid 33202] [client 4.223.73.181:18395] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "admHiboqTMlo30hcVw-HWwAAABA"]
[Sat Apr 11 07:28:10.318198 2026] [:error] [pid 33173:tid 33248] [client 4.223.73.181:62156] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "admHiq8109xRDP2izWgRFgAAAIM"]
[Sat Apr 11 07:28:10.838678 2026] [:error] [pid 33288:tid 33313] [client 4.223.73.181:62166] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "admHimJmwJFFPEgRHfGJXgAAANc"]
[Sat Apr 11 07:28:11.357403 2026] [:error] [pid 15244:tid 15262] [client 4.223.73.181:32283] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "admHi4kdEsz5NeAq8w19KwAAARA"]
[Sat Apr 11 07:28:11.874812 2026] [:error] [pid 15244:tid 15267] [client 4.223.73.181:27114] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-filters.php"] [unique_id "admHi4kdEsz5NeAq8w19VQAAARU"]
[Sat Apr 11 07:28:12.393101 2026] [:error] [pid 15244:tid 15264] [client 4.223.73.181:14130] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-filters.php"] [unique_id "admHjIkdEsz5NeAq8w19gQAAARI"]
[Sat Apr 11 07:28:12.909125 2026] [:error] [pid 33288:tid 33314] [client 4.223.73.181:32283] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-filters.php"] [unique_id "admHjGJmwJFFPEgRHfGJnAAAANg"]
[Sat Apr 11 07:28:13.434737 2026] [:error] [pid 33288:tid 33298] [client 4.223.73.181:58810] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-filters.php"] [unique_id "admHjWJmwJFFPEgRHfGJoAAAAMg"]
[Sat Apr 11 07:28:13.953990 2026] [:error] [pid 33172:tid 33235] [client 4.223.73.181:34004] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new2.php"] [unique_id "admHjTn2G0IJw5EZY9lphwAAAFE"]
[Sat Apr 11 07:28:14.473629 2026] [:error] [pid 33288:tid 33314] [client 4.223.73.181:46379] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new2.php"] [unique_id "admHjmJmwJFFPEgRHfGJqwAAANg"]
[Sat Apr 11 07:28:14.994836 2026] [:error] [pid 33172:tid 33238] [client 4.223.73.181:28954] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new2.php"] [unique_id "admHjjn2G0IJw5EZY9lpigAAAFQ"]
[Sat Apr 11 07:28:15.520444 2026] [:error] [pid 33173:tid 33260] [client 4.223.73.181:34022] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new2.php"] [unique_id "admHj68109xRDP2izWgRUAAAAI8"]
[Sat Apr 11 07:28:16.040625 2026] [:error] [pid 33173:tid 33269] [client 4.223.73.181:23013] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjq.php"] [unique_id "admHkK8109xRDP2izWgRVQAAAJg"]
[Sat Apr 11 07:28:16.563625 2026] [:error] [pid 33173:tid 33248] [client 4.223.73.181:65187] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjq.php"] [unique_id "admHkK8109xRDP2izWgRVwAAAIM"]
[Sat Apr 11 07:28:17.084299 2026] [:error] [pid 15244:tid 15263] [client 4.223.73.181:33985] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjq.php"] [unique_id "admHkYkdEsz5NeAq8w19oQAAARE"]
[Sat Apr 11 07:28:17.605911 2026] [:error] [pid 33288:tid 33310] [client 4.223.73.181:62154] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mjq.php"] [unique_id "admHkWJmwJFFPEgRHfGJsgAAANQ"]
[Sat Apr 11 09:42:44.786832 2026] [:error] [pid 34911:tid 34919] [client 157.15.40.61:60048] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnFA4Dca235WG8VGLH6AAAAAY"]
[Sat Apr 11 09:48:03.057868 2026] [proxy_fcgi:error] [pid 35633:tid 35639] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:03.355043 2026] [proxy_fcgi:error] [pid 35633:tid 35653] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:03.644590 2026] [proxy_fcgi:error] [pid 35633:tid 35635] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:03.912429 2026] [proxy_fcgi:error] [pid 35633:tid 35645] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:04.763359 2026] [proxy_fcgi:error] [pid 35633:tid 35654] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:05.064344 2026] [proxy_fcgi:error] [pid 35633:tid 35657] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:05.361000 2026] [proxy_fcgi:error] [pid 35633:tid 35644] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:05.618072 2026] [proxy_fcgi:error] [pid 35633:tid 35641] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:05.948084 2026] [proxy_fcgi:error] [pid 35633:tid 35658] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:06.210825 2026] [proxy_fcgi:error] [pid 35633:tid 35637] [client 20.215.250.26:56565] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:48:06.535751 2026] [:error] [pid 35633:tid 35658] [client 20.215.250.26:56565] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-104.php"] [unique_id "admoVmUQo_ah7EEEnqfG_wAAANc"]
[Sat Apr 11 09:48:07.162763 2026] [:error] [pid 35536:tid 35557] [client 20.215.250.26:9413] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-104.php"] [unique_id "admoVwW1nMztWbgW3ZHINAAAAVE"]
[Sat Apr 11 09:48:07.693274 2026] [:error] [pid 35633:tid 35646] [client 20.215.250.26:39855] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-104.php"] [unique_id "admoV2UQo_ah7EEEnqfHEAAAAMs"]
[Sat Apr 11 09:48:08.314575 2026] [:error] [pid 35633:tid 35655] [client 20.215.250.26:51892] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-104.php"] [unique_id "admoWGUQo_ah7EEEnqfHEwAAANQ"]
[Sat Apr 11 09:48:08.867817 2026] [:error] [pid 35536:tid 35560] [client 20.215.250.26:3552] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rzki.php"] [unique_id "admoWAW1nMztWbgW3ZHIPgAAAVQ"]
[Sat Apr 11 09:48:09.509292 2026] [:error] [pid 35633:tid 35649] [client 20.215.250.26:39839] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rzki.php"] [unique_id "admoWWUQo_ah7EEEnqfHIAAAAM4"]
[Sat Apr 11 09:48:10.148520 2026] [:error] [pid 35537:tid 35583] [client 20.215.250.26:65287] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rzki.php"] [unique_id "admoWh3G2uLZwbQNu204IgAAAZA"]
[Sat Apr 11 09:48:10.823590 2026] [:error] [pid 35633:tid 35659] [client 20.215.250.26:3511] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rzki.php"] [unique_id "admoWmUQo_ah7EEEnqfHNQAAANg"]
[Sat Apr 11 09:48:11.373816 2026] [:error] [pid 35537:tid 35587] [client 20.215.250.26:55066] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "admoWx3G2uLZwbQNu204JAAAAZQ"]
[Sat Apr 11 09:48:12.041341 2026] [:error] [pid 35633:tid 35655] [client 20.215.250.26:55065] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "admoXGUQo_ah7EEEnqfHRAAAANQ"]
[Sat Apr 11 09:48:12.611227 2026] [:error] [pid 35537:tid 35589] [client 20.215.250.26:3489] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "admoXB3G2uLZwbQNu204LAAAAZY"]
[Sat Apr 11 09:48:13.200965 2026] [:error] [pid 35537:tid 35574] [client 20.215.250.26:46553] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "admoXR3G2uLZwbQNu204MwAAAYc"]
[Sat Apr 11 09:48:13.905731 2026] [:error] [pid 35599:tid 35603] [client 20.215.250.26:55054] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "admoXed0ai377FLwoeDrdwAAAIE"]
[Sat Apr 11 09:48:14.448973 2026] [:error] [pid 35633:tid 35648] [client 20.215.250.26:15350] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "admoXmUQo_ah7EEEnqfHYAAAAM0"]
[Sat Apr 11 09:48:15.047100 2026] [:error] [pid 35633:tid 35648] [client 20.215.250.26:3479] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "admoX2UQo_ah7EEEnqfHawAAAM0"]
[Sat Apr 11 09:48:15.595421 2026] [:error] [pid 35599:tid 35617] [client 20.215.250.26:39814] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d12.php"] [unique_id "admoX-d0ai377FLwoeDrgQAAAI8"]
[Sat Apr 11 09:48:16.205117 2026] [:error] [pid 35537:tid 35578] [client 20.215.250.26:3531] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/okxh.php"] [unique_id "admoYB3G2uLZwbQNu204PAAAAYs"]
[Sat Apr 11 09:48:16.882650 2026] [:error] [pid 35599:tid 35623] [client 20.215.250.26:15325] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/okxh.php"] [unique_id "admoYOd0ai377FLwoeDrhwAAAJU"]
[Sat Apr 11 09:48:17.661796 2026] [:error] [pid 35599:tid 35606] [client 20.215.250.26:15304] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/okxh.php"] [unique_id "admoYed0ai377FLwoeDrlwAAAIQ"]
[Sat Apr 11 09:48:18.215251 2026] [:error] [pid 35633:tid 35654] [client 20.215.250.26:65316] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/okxh.php"] [unique_id "admoYmUQo_ah7EEEnqfHgAAAANM"]
[Sat Apr 11 09:48:18.788844 2026] [:error] [pid 35633:tid 35646] [client 20.215.250.26:33566] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55b76.php"] [unique_id "admoYmUQo_ah7EEEnqfHigAAAMs"]
[Sat Apr 11 09:48:19.332870 2026] [:error] [pid 35633:tid 35651] [client 20.215.250.26:65291] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55b76.php"] [unique_id "admoY2UQo_ah7EEEnqfHlQAAANA"]
[Sat Apr 11 09:48:19.851748 2026] [:error] [pid 35599:tid 35605] [client 20.215.250.26:15301] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55b76.php"] [unique_id "admoY-d0ai377FLwoeDrqgAAAIM"]
[Sat Apr 11 09:48:20.402883 2026] [:error] [pid 35633:tid 35640] [client 20.215.250.26:3564] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/55b76.php"] [unique_id "admoZGUQo_ah7EEEnqfHowAAAMU"]
[Sat Apr 11 09:48:20.946835 2026] [:error] [pid 35633:tid 35645] [client 20.215.250.26:65288] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "admoZGUQo_ah7EEEnqfHpAAAAMo"]
[Sat Apr 11 09:48:21.468762 2026] [:error] [pid 35633:tid 35658] [client 20.215.250.26:21952] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "admoZWUQo_ah7EEEnqfHpwAAANc"]
[Sat Apr 11 09:48:22.147822 2026] [:error] [pid 35633:tid 35656] [client 20.215.250.26:26993] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "admoZmUQo_ah7EEEnqfHrQAAANU"]
[Sat Apr 11 09:48:22.729642 2026] [:error] [pid 35537:tid 35570] [client 20.215.250.26:33597] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "admoZh3G2uLZwbQNu204SAAAAYM"]
[Sat Apr 11 09:48:23.450744 2026] [:error] [pid 35599:tid 35623] [client 20.215.250.26:65328] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maul.php"] [unique_id "admoZ-d0ai377FLwoeDr2AAAAJU"]
[Sat Apr 11 09:48:24.602921 2026] [:error] [pid 35537:tid 35588] [client 20.215.250.26:29439] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maul.php"] [unique_id "admoaB3G2uLZwbQNu204UwAAAZU"]
[Sat Apr 11 09:48:25.153790 2026] [:error] [pid 35537:tid 35570] [client 20.215.250.26:55087] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maul.php"] [unique_id "admoaR3G2uLZwbQNu204WwAAAYM"]
[Sat Apr 11 09:48:25.721248 2026] [:error] [pid 35599:tid 35608] [client 20.215.250.26:32327] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maul.php"] [unique_id "admoaed0ai377FLwoeDr8AAAAIY"]
[Sat Apr 11 09:48:26.481248 2026] [:error] [pid 35536:tid 35544] [client 20.215.250.26:60435] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5b9ac.php"] [unique_id "admoagW1nMztWbgW3ZHIeAAAAUQ"]
[Sat Apr 11 09:48:27.045215 2026] [:error] [pid 35537:tid 35583] [client 20.215.250.26:55060] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5b9ac.php"] [unique_id "admoax3G2uLZwbQNu204bQAAAZA"]
[Sat Apr 11 09:48:28.370190 2026] [:error] [pid 35633:tid 35646] [client 20.215.250.26:9522] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5b9ac.php"] [unique_id "admobGUQo_ah7EEEnqfHxwAAAMs"]
[Sat Apr 11 09:48:28.981822 2026] [:error] [pid 35537:tid 35591] [client 20.215.250.26:49793] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5b9ac.php"] [unique_id "admobB3G2uLZwbQNu204hQAAAZg"]
[Sat Apr 11 09:48:29.532691 2026] [:error] [pid 35633:tid 35657] [client 20.215.250.26:49443] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hehe.php"] [unique_id "admobWUQo_ah7EEEnqfH2AAAANY"]
[Sat Apr 11 09:48:30.080446 2026] [:error] [pid 35536:tid 35561] [client 20.215.250.26:29379] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hehe.php"] [unique_id "admobgW1nMztWbgW3ZHIiAAAAVU"]
[Sat Apr 11 09:48:30.613264 2026] [:error] [pid 35633:tid 35641] [client 20.215.250.26:55603] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hehe.php"] [unique_id "admobmUQo_ah7EEEnqfH3gAAAMY"]
[Sat Apr 11 09:48:31.183309 2026] [:error] [pid 35599:tid 35622] [client 20.215.250.26:55600] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hehe.php"] [unique_id "admob-d0ai377FLwoeDsBQAAAJQ"]
[Sat Apr 11 09:48:31.945685 2026] [:error] [pid 35599:tid 35609] [client 20.215.250.26:21988] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admob-d0ai377FLwoeDsEAAAAIc"]
[Sat Apr 11 09:48:32.691817 2026] [:error] [pid 35633:tid 35635] [client 20.215.250.26:3532] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admocGUQo_ah7EEEnqfH6AAAAMA"]
[Sat Apr 11 09:48:33.292477 2026] [:error] [pid 35633:tid 35642] [client 20.215.250.26:39616] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admocWUQo_ah7EEEnqfH8AAAAMc"]
[Sat Apr 11 09:48:33.889900 2026] [:error] [pid 35633:tid 35637] [client 20.215.250.26:57695] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admocWUQo_ah7EEEnqfH9wAAAMI"]
[Sat Apr 11 09:48:34.430534 2026] [:error] [pid 35633:tid 35647] [client 20.215.250.26:9493] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/varb.php"] [unique_id "admocmUQo_ah7EEEnqfH-wAAAMw"]
[Sat Apr 11 09:48:35.009146 2026] [:error] [pid 35599:tid 35608] [client 20.215.250.26:27735] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/varb.php"] [unique_id "admoc-d0ai377FLwoeDsJgAAAIY"]
[Sat Apr 11 09:48:35.619626 2026] [:error] [pid 35633:tid 35640] [client 20.215.250.26:20050] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/varb.php"] [unique_id "admoc2UQo_ah7EEEnqfIDQAAAMU"]
[Sat Apr 11 09:48:36.569771 2026] [:error] [pid 35536:tid 35544] [client 20.215.250.26:55090] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/varb.php"] [unique_id "admodAW1nMztWbgW3ZHI7gAAAUQ"]
[Sat Apr 11 09:48:37.150715 2026] [:error] [pid 35599:tid 35609] [client 20.215.250.26:21987] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lm15.php"] [unique_id "admoded0ai377FLwoeDsMAAAAIc"]
[Sat Apr 11 09:48:37.880787 2026] [:error] [pid 35599:tid 35603] [client 20.215.250.26:28953] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lm15.php"] [unique_id "admoded0ai377FLwoeDsOgAAAIE"]
[Sat Apr 11 09:48:38.497628 2026] [:error] [pid 35599:tid 35624] [client 20.215.250.26:55098] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lm15.php"] [unique_id "admodud0ai377FLwoeDsQgAAAJY"]
[Sat Apr 11 09:48:39.088563 2026] [:error] [pid 35599:tid 35613] [client 20.215.250.26:3536] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lm15.php"] [unique_id "admod-d0ai377FLwoeDsRgAAAIs"]
[Sat Apr 11 09:48:39.743045 2026] [:error] [pid 35633:tid 35650] [client 20.215.250.26:36690] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clss.php"] [unique_id "admod2UQo_ah7EEEnqfIMgAAAM8"]
[Sat Apr 11 09:48:40.269264 2026] [:error] [pid 35536:tid 35562] [client 20.215.250.26:55062] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clss.php"] [unique_id "admoeAW1nMztWbgW3ZHJBwAAAVY"]
[Sat Apr 11 09:48:40.817398 2026] [:error] [pid 35537:tid 35573] [client 20.215.250.26:21966] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clss.php"] [unique_id "admoeB3G2uLZwbQNu204ugAAAYY"]
[Sat Apr 11 09:48:41.358736 2026] [:error] [pid 35537:tid 35583] [client 20.215.250.26:26960] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clss.php"] [unique_id "admoeR3G2uLZwbQNu204wQAAAZA"]
[Sat Apr 11 09:48:41.957185 2026] [:error] [pid 35633:tid 35640] [client 20.215.250.26:42215] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/44.php"] [unique_id "admoeWUQo_ah7EEEnqfISQAAAMU"]
[Sat Apr 11 09:48:42.577910 2026] [:error] [pid 35633:tid 35648] [client 20.215.250.26:9432] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/44.php"] [unique_id "admoemUQo_ah7EEEnqfIVwAAAM0"]
[Sat Apr 11 09:48:43.178672 2026] [:error] [pid 35536:tid 35558] [client 20.215.250.26:3503] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/44.php"] [unique_id "admoewW1nMztWbgW3ZHJFAAAAVI"]
[Sat Apr 11 09:48:43.768183 2026] [:error] [pid 35537:tid 35576] [client 20.215.250.26:9445] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/44.php"] [unique_id "admoex3G2uLZwbQNu204xwAAAYk"]
[Sat Apr 11 09:48:44.285310 2026] [:error] [pid 35536:tid 35550] [client 20.215.250.26:9520] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5e0a.php"] [unique_id "admofAW1nMztWbgW3ZHJFgAAAUo"]
[Sat Apr 11 09:48:44.826488 2026] [:error] [pid 35536:tid 35553] [client 20.215.250.26:21329] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5e0a.php"] [unique_id "admofAW1nMztWbgW3ZHJGQAAAU0"]
[Sat Apr 11 09:48:45.658521 2026] [:error] [pid 35633:tid 35636] [client 20.215.250.26:20619] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5e0a.php"] [unique_id "admofWUQo_ah7EEEnqfIagAAAME"]
[Sat Apr 11 09:48:46.184870 2026] [:error] [pid 35633:tid 35658] [client 20.215.250.26:3563] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5e0a.php"] [unique_id "admofmUQo_ah7EEEnqfIbwAAANc"]
[Sat Apr 11 09:48:46.693033 2026] [:error] [pid 35633:tid 35643] [client 20.215.250.26:27006] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bo.php"] [unique_id "admofmUQo_ah7EEEnqfIdAAAAMg"]
[Sat Apr 11 09:48:47.248587 2026] [:error] [pid 35633:tid 35639] [client 20.215.250.26:9463] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bo.php"] [unique_id "admof2UQo_ah7EEEnqfIfAAAAMQ"]
[Sat Apr 11 09:48:48.092962 2026] [:error] [pid 35536:tid 35541] [client 20.215.250.26:41659] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bo.php"] [unique_id "admogAW1nMztWbgW3ZHJIgAAAUE"]
[Sat Apr 11 09:48:48.675144 2026] [:error] [pid 35633:tid 35642] [client 20.215.250.26:57711] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bo.php"] [unique_id "admogGUQo_ah7EEEnqfIhAAAAMc"]
[Sat Apr 11 09:48:49.464027 2026] [:error] [pid 35633:tid 35658] [client 20.215.250.26:15309] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/56c53.php"] [unique_id "admogWUQo_ah7EEEnqfIjAAAANc"]
[Sat Apr 11 09:48:50.285111 2026] [:error] [pid 35537:tid 35575] [client 20.215.250.26:46518] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/56c53.php"] [unique_id "admogh3G2uLZwbQNu2041gAAAYg"]
[Sat Apr 11 09:48:50.865109 2026] [:error] [pid 35536:tid 35557] [client 20.215.250.26:36710] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/56c53.php"] [unique_id "admoggW1nMztWbgW3ZHJLAAAAVE"]
[Sat Apr 11 09:48:51.378705 2026] [:error] [pid 35633:tid 35654] [client 20.215.250.26:33582] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/56c53.php"] [unique_id "admog2UQo_ah7EEEnqfIngAAANM"]
[Sat Apr 11 09:48:52.263204 2026] [:error] [pid 35537:tid 35569] [client 20.215.250.26:3582] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "admohB3G2uLZwbQNu2043QAAAYI"]
[Sat Apr 11 09:48:52.864604 2026] [:error] [pid 35633:tid 35653] [client 20.215.250.26:15358] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "admohGUQo_ah7EEEnqfIvQAAANI"]
[Sat Apr 11 09:48:53.440787 2026] [:error] [pid 35633:tid 35644] [client 20.215.250.26:45447] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "admohWUQo_ah7EEEnqfIygAAAMk"]
[Sat Apr 11 09:48:54.130481 2026] [:error] [pid 35633:tid 35641] [client 20.215.250.26:46498] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx78.php"] [unique_id "admohmUQo_ah7EEEnqfI2QAAAMY"]
[Sat Apr 11 09:48:54.842420 2026] [:error] [pid 35599:tid 35616] [client 20.215.250.26:26958] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "admohud0ai377FLwoeDskgAAAI4"]
[Sat Apr 11 09:48:55.456024 2026] [:error] [pid 35537:tid 35571] [client 20.215.250.26:55070] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "admohx3G2uLZwbQNu2045AAAAYQ"]
[Sat Apr 11 09:48:56.140567 2026] [:error] [pid 35536:tid 35552] [client 20.215.250.26:50750] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "admoiAW1nMztWbgW3ZHJQgAAAUw"]
[Sat Apr 11 09:48:56.773082 2026] [:error] [pid 35633:tid 35652] [client 20.215.250.26:54337] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "admoiGUQo_ah7EEEnqfI8gAAANE"]
[Sat Apr 11 09:48:57.343154 2026] [:error] [pid 35537:tid 35577] [client 20.215.250.26:50700] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "admoiR3G2uLZwbQNu2047wAAAYo"]
[Sat Apr 11 09:48:57.882688 2026] [:error] [pid 35537:tid 35581] [client 20.215.250.26:20616] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "admoiR3G2uLZwbQNu2048wAAAY4"]
[Sat Apr 11 09:48:58.576779 2026] [:error] [pid 35633:tid 35643] [client 20.215.250.26:9520] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "admoimUQo_ah7EEEnqfJDAAAAMg"]
[Sat Apr 11 09:48:59.476736 2026] [:error] [pid 35633:tid 35658] [client 20.215.250.26:21371] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "admoi2UQo_ah7EEEnqfJHAAAANc"]
[Sat Apr 11 09:49:00.168497 2026] [:error] [pid 35599:tid 35603] [client 20.215.250.26:45491] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "admojOd0ai377FLwoeDsrwAAAIE"]
[Sat Apr 11 09:49:00.835388 2026] [:error] [pid 35599:tid 35608] [client 20.215.250.26:20608] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "admojOd0ai377FLwoeDstAAAAIY"]
[Sat Apr 11 09:49:01.535191 2026] [:error] [pid 35633:tid 35638] [client 20.215.250.26:46506] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "admojWUQo_ah7EEEnqfJLgAAAMM"]
[Sat Apr 11 09:49:02.396367 2026] [:error] [pid 35537:tid 35580] [client 20.215.250.26:45459] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "admojh3G2uLZwbQNu205AQAAAY0"]
[Sat Apr 11 09:49:03.085984 2026] [:error] [pid 35536:tid 35558] [client 20.215.250.26:41636] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "admojwW1nMztWbgW3ZHJcgAAAVI"]
[Sat Apr 11 09:49:03.651090 2026] [:error] [pid 35633:tid 35656] [client 20.215.250.26:15335] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "admoj2UQo_ah7EEEnqfJOwAAANU"]
[Sat Apr 11 09:49:04.229287 2026] [:error] [pid 35633:tid 35650] [client 20.215.250.26:60454] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "admokGUQo_ah7EEEnqfJSgAAAM8"]
[Sat Apr 11 09:49:04.758042 2026] [:error] [pid 35633:tid 35639] [client 20.215.250.26:3198] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "admokGUQo_ah7EEEnqfJUgAAAMQ"]
[Sat Apr 11 09:49:05.275516 2026] [:error] [pid 35633:tid 35635] [client 20.215.250.26:46508] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "admokWUQo_ah7EEEnqfJWQAAAMA"]
[Sat Apr 11 09:49:06.366296 2026] [proxy_fcgi:error] [pid 35536:tid 35557] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:06.622359 2026] [proxy_fcgi:error] [pid 35536:tid 35540] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:06.899804 2026] [proxy_fcgi:error] [pid 35536:tid 35553] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:07.156361 2026] [proxy_fcgi:error] [pid 35536:tid 35558] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:07.410701 2026] [proxy_fcgi:error] [pid 35536:tid 35556] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:07.667433 2026] [proxy_fcgi:error] [pid 35536:tid 35561] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:07.925038 2026] [proxy_fcgi:error] [pid 35536:tid 35548] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:08.192385 2026] [proxy_fcgi:error] [pid 35536:tid 35551] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:08.462295 2026] [proxy_fcgi:error] [pid 35536:tid 35560] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:08.718732 2026] [proxy_fcgi:error] [pid 35536:tid 35540] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:08.995534 2026] [proxy_fcgi:error] [pid 35536:tid 35547] [client 20.215.250.26:34447] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:49:09.364138 2026] [:error] [pid 35536:tid 35550] [client 20.215.250.26:34447] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwzs.php"] [unique_id "admolQW1nMztWbgW3ZHJpwAAAUo"]
[Sat Apr 11 09:49:10.131681 2026] [:error] [pid 35537:tid 35568] [client 20.215.250.26:50712] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwzs.php"] [unique_id "admolh3G2uLZwbQNu205JQAAAYE"]
[Sat Apr 11 09:49:10.763708 2026] [:error] [pid 35633:tid 35637] [client 20.215.250.26:19709] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwzs.php"] [unique_id "admolmUQo_ah7EEEnqfJlgAAAMI"]
[Sat Apr 11 09:49:11.289527 2026] [:error] [pid 35536:tid 35547] [client 20.215.250.26:48441] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwzs.php"] [unique_id "admolwW1nMztWbgW3ZHJsgAAAUc"]
[Sat Apr 11 09:49:11.865115 2026] [:error] [pid 35633:tid 35647] [client 20.215.250.26:3992] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "admol2UQo_ah7EEEnqfJpgAAAMw"]
[Sat Apr 11 09:49:12.472209 2026] [:error] [pid 35633:tid 35644] [client 20.215.250.26:3995] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "admomGUQo_ah7EEEnqfJrgAAAMk"]
[Sat Apr 11 09:49:13.038433 2026] [:error] [pid 35633:tid 35636] [client 20.215.250.26:20642] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "admomWUQo_ah7EEEnqfJuQAAAME"]
[Sat Apr 11 09:49:13.658913 2026] [:error] [pid 35599:tid 35603] [client 20.215.250.26:48388] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "admomed0ai377FLwoeDs5wAAAIE"]
[Sat Apr 11 09:49:14.348003 2026] [:error] [pid 35536:tid 35548] [client 20.215.250.26:15473] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "admomgW1nMztWbgW3ZHJugAAAUg"]
[Sat Apr 11 09:49:14.957700 2026] [:error] [pid 35599:tid 35617] [client 20.215.250.26:61473] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "admomud0ai377FLwoeDs8wAAAI8"]
[Sat Apr 11 09:49:15.617559 2026] [:error] [pid 35536:tid 35559] [client 20.215.250.26:19680] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "admomwW1nMztWbgW3ZHJwgAAAVM"]
[Sat Apr 11 09:49:16.141962 2026] [:error] [pid 35633:tid 35648] [client 20.215.250.26:20612] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "admonGUQo_ah7EEEnqfJ2QAAAM0"]
[Sat Apr 11 09:49:16.824136 2026] [:error] [pid 35633:tid 35640] [client 20.215.250.26:15438] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewe.php"] [unique_id "admonGUQo_ah7EEEnqfJ5QAAAMU"]
[Sat Apr 11 09:49:17.866494 2026] [:error] [pid 35599:tid 35621] [client 20.215.250.26:50705] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewe.php"] [unique_id "admoned0ai377FLwoeDtAgAAAJM"]
[Sat Apr 11 09:49:18.587492 2026] [:error] [pid 35536:tid 35558] [client 20.215.250.26:3882] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewe.php"] [unique_id "admongW1nMztWbgW3ZHJzQAAAVI"]
[Sat Apr 11 09:49:19.411181 2026] [:error] [pid 35633:tid 35653] [client 20.215.250.26:35577] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewe.php"] [unique_id "admon2UQo_ah7EEEnqfJ_QAAANI"]
[Sat Apr 11 09:49:20.135477 2026] [:error] [pid 35633:tid 35652] [client 20.215.250.26:48392] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "admooGUQo_ah7EEEnqfKDQAAANE"]
[Sat Apr 11 09:49:20.694335 2026] [:error] [pid 35633:tid 35639] [client 20.215.250.26:46469] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "admooGUQo_ah7EEEnqfKHAAAAMQ"]
[Sat Apr 11 09:49:21.300667 2026] [:error] [pid 35599:tid 35626] [client 20.215.250.26:61452] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "admooed0ai377FLwoeDtDAAAAJg"]
[Sat Apr 11 09:49:21.877119 2026] [:error] [pid 35536:tid 35549] [client 20.215.250.26:12589] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "admooQW1nMztWbgW3ZHJ2AAAAUk"]
[Sat Apr 11 09:49:22.779175 2026] [:error] [pid 35536:tid 35548] [client 20.215.250.26:4025] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x9.php"] [unique_id "admoogW1nMztWbgW3ZHJ4QAAAUg"]
[Sat Apr 11 09:49:23.453714 2026] [:error] [pid 35599:tid 35607] [client 20.215.250.26:33022] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x9.php"] [unique_id "admoo-d0ai377FLwoeDtGAAAAIU"]
[Sat Apr 11 09:49:24.263091 2026] [:error] [pid 35633:tid 35652] [client 20.215.250.26:12546] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x9.php"] [unique_id "admopGUQo_ah7EEEnqfKPwAAANE"]
[Sat Apr 11 09:49:25.190451 2026] [:error] [pid 35633:tid 35657] [client 20.215.250.26:50699] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x9.php"] [unique_id "admopWUQo_ah7EEEnqfKSwAAANY"]
[Sat Apr 11 09:49:25.809201 2026] [:error] [pid 35633:tid 35644] [client 20.215.250.26:41160] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "admopWUQo_ah7EEEnqfKVQAAAMk"]
[Sat Apr 11 09:49:26.496337 2026] [:error] [pid 35537:tid 35579] [client 20.215.250.26:12318] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "admoph3G2uLZwbQNu205fgAAAYw"]
[Sat Apr 11 09:49:27.573558 2026] [:error] [pid 35537:tid 35567] [client 20.215.250.26:61496] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "admopx3G2uLZwbQNu205igAAAYA"]
[Sat Apr 11 09:49:28.483345 2026] [:error] [pid 35599:tid 35619] [client 20.215.250.26:41162] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an.php"] [unique_id "admoqOd0ai377FLwoeDtNwAAAJE"]
[Sat Apr 11 09:49:29.594232 2026] [:error] [pid 35599:tid 35602] [client 20.215.250.26:41156] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "admoqed0ai377FLwoeDtPgAAAIA"]
[Sat Apr 11 09:49:30.291671 2026] [:error] [pid 35633:tid 35638] [client 20.215.250.26:62561] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "admoqmUQo_ah7EEEnqfKdAAAAMM"]
[Sat Apr 11 09:49:31.158455 2026] [:error] [pid 35599:tid 35606] [client 20.215.250.26:44959] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "admoq-d0ai377FLwoeDtSgAAAIQ"]
[Sat Apr 11 09:49:31.872395 2026] [:error] [pid 35599:tid 35612] [client 20.215.250.26:44978] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "admoq-d0ai377FLwoeDtVAAAAIo"]
[Sat Apr 11 09:49:32.905434 2026] [:error] [pid 35633:tid 35635] [client 20.215.250.26:19711] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "admorGUQo_ah7EEEnqfKjgAAAMA"]
[Sat Apr 11 09:49:33.845323 2026] [:error] [pid 35633:tid 35653] [client 20.215.250.26:41089] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "admorWUQo_ah7EEEnqfKnAAAANI"]
[Sat Apr 11 09:49:34.926510 2026] [:error] [pid 35633:tid 35643] [client 20.215.250.26:62530] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "admormUQo_ah7EEEnqfKtgAAAMg"]
[Sat Apr 11 09:49:35.699828 2026] [:error] [pid 35536:tid 35545] [client 20.215.250.26:41185] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gdn.php"] [unique_id "admorwW1nMztWbgW3ZHKIAAAAUU"]
[Sat Apr 11 09:49:36.464539 2026] [:error] [pid 35537:tid 35579] [client 20.215.250.26:19671] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "admosB3G2uLZwbQNu205vwAAAYw"]
[Sat Apr 11 09:49:37.642765 2026] [:error] [pid 35599:tid 35618] [client 20.215.250.26:62572] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "admosed0ai377FLwoeDtowAAAJA"]
[Sat Apr 11 09:49:38.978132 2026] [:error] [pid 35537:tid 35575] [client 20.215.250.26:62555] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "admosh3G2uLZwbQNu205yQAAAYg"]
[Sat Apr 11 09:49:39.690389 2026] [:error] [pid 35633:tid 35656] [client 20.215.250.26:44981] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "admos2UQo_ah7EEEnqfK-AAAANU"]
[Sat Apr 11 09:49:41.457928 2026] [:error] [pid 35536:tid 35560] [client 20.215.250.26:41830] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/redixsx.php"] [unique_id "admotQW1nMztWbgW3ZHKRAAAAVQ"]
[Sat Apr 11 09:49:49.652871 2026] [:error] [pid 35599:tid 35608] [client 20.215.250.26:11769] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/redixsx.php"] [unique_id "admoved0ai377FLwoeDt4QAAAIY"]
[Sat Apr 11 09:50:02.522291 2026] [:error] [pid 35633:tid 35643] [client 20.215.250.26:28374] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/redixsx.php"] [unique_id "admoymUQo_ah7EEEnqfLvgAAAMg"]
[Sat Apr 11 09:51:20.987669 2026] [:error] [pid 35633:tid 35643] [client 20.215.250.26:57916] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8xyz.php"] [unique_id "admpGGUQo_ah7EEEnqfOTQAAAMg"]
[Sat Apr 11 09:51:21.875002 2026] [:error] [pid 35537:tid 35580] [client 20.215.250.26:51232] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8xyz.php"] [unique_id "admpGR3G2uLZwbQNu2073gAAAY0"]
[Sat Apr 11 09:51:25.621095 2026] [:error] [pid 39417:tid 39423] [client 20.215.250.26:28912] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8xyz.php"] [unique_id "admpHYhcg8wCjq_u5ZqpHAAAAUI"]
[Sat Apr 11 09:51:26.315511 2026] [:error] [pid 39417:tid 39442] [client 20.215.250.26:51225] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8xyz.php"] [unique_id "admpHohcg8wCjq_u5ZqpNQAAAVU"]
[Sat Apr 11 09:51:27.035908 2026] [:error] [pid 39418:tid 39449] [client 20.215.250.26:64505] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "admpH83gpP0PVIMHC4y86AAAAYE"]
[Sat Apr 11 09:51:27.738627 2026] [:error] [pid 39508:tid 39510] [client 20.215.250.26:59037] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "admpHywM0R3nUGSd167nIAAAAAA"]
[Sat Apr 11 09:51:28.400329 2026] [:error] [pid 39419:tid 39483] [client 20.215.250.26:24972] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "admpIO7HlVEazEwxATyWHwAAAIg"]
[Sat Apr 11 09:51:29.817990 2026] [:error] [pid 39508:tid 39523] [client 20.215.250.26:26210] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "admpISwM0R3nUGSd167nKgAAAA0"]
[Sat Apr 11 09:51:30.481640 2026] [:error] [pid 39508:tid 39531] [client 20.215.250.26:51260] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws68.php"] [unique_id "admpIiwM0R3nUGSd167nMgAAABU"]
[Sat Apr 11 09:51:31.439211 2026] [:error] [pid 39419:tid 39476] [client 20.215.250.26:22489] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws68.php"] [unique_id "admpI-7HlVEazEwxATyWMQAAAIE"]
[Sat Apr 11 09:51:32.159968 2026] [:error] [pid 39417:tid 39439] [client 20.215.250.26:25008] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws68.php"] [unique_id "admpJIhcg8wCjq_u5ZqpZQAAAVI"]
[Sat Apr 11 09:51:32.798003 2026] [:error] [pid 39417:tid 39435] [client 20.215.250.26:26905] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws68.php"] [unique_id "admpJIhcg8wCjq_u5ZqpZgAAAU4"]
[Sat Apr 11 09:51:33.451469 2026] [:error] [pid 39508:tid 39520] [client 20.215.250.26:22997] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "admpJSwM0R3nUGSd167nSQAAAAo"]
[Sat Apr 11 09:51:34.716089 2026] [:error] [pid 39417:tid 39439] [client 20.215.250.26:64468] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "admpJohcg8wCjq_u5ZqpbwAAAVI"]
[Sat Apr 11 09:51:37.018701 2026] [:error] [pid 39419:tid 39496] [client 20.215.250.26:26236] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "admpKe7HlVEazEwxATyWNwAAAJU"]
[Sat Apr 11 09:51:37.835607 2026] [:error] [pid 39508:tid 39520] [client 20.215.250.26:39922] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "admpKSwM0R3nUGSd167nZQAAAAo"]
[Sat Apr 11 09:51:38.493409 2026] [:error] [pid 39508:tid 39525] [client 20.215.250.26:29908] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/njxjtooj.php"] [unique_id "admpKiwM0R3nUGSd167nbQAAAA8"]
[Sat Apr 11 09:51:39.127920 2026] [:error] [pid 39417:tid 39424] [client 20.215.250.26:21264] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/njxjtooj.php"] [unique_id "admpK4hcg8wCjq_u5ZqphgAAAUM"]
[Sat Apr 11 09:51:39.768298 2026] [:error] [pid 39417:tid 39444] [client 20.215.250.26:39876] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/njxjtooj.php"] [unique_id "admpK4hcg8wCjq_u5ZqpigAAAVc"]
[Sat Apr 11 09:51:40.499513 2026] [:error] [pid 39417:tid 39426] [client 20.215.250.26:25001] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/njxjtooj.php"] [unique_id "admpLIhcg8wCjq_u5ZqpkAAAAUU"]
[Sat Apr 11 09:51:41.483286 2026] [:error] [pid 39417:tid 39427] [client 20.215.250.26:34577] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "admpLYhcg8wCjq_u5ZqplQAAAUY"]
[Sat Apr 11 09:51:42.218003 2026] [:error] [pid 39417:tid 39424] [client 20.215.250.26:29919] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "admpLohcg8wCjq_u5ZqpmwAAAUM"]
[Sat Apr 11 09:51:42.787377 2026] [:error] [pid 39417:tid 39433] [client 20.215.250.26:28203] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "admpLohcg8wCjq_u5ZqpnQAAAUw"]
[Sat Apr 11 09:51:43.601416 2026] [:error] [pid 39419:tid 39479] [client 20.215.250.26:28869] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "admpL-7HlVEazEwxATyWRgAAAIQ"]
[Sat Apr 11 09:51:44.299407 2026] [:error] [pid 39418:tid 39470] [client 20.215.250.26:23009] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "admpMM3gpP0PVIMHC4y9CwAAAZY"]
[Sat Apr 11 09:51:44.953001 2026] [:error] [pid 39419:tid 39478] [client 20.215.250.26:29932] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "admpMO7HlVEazEwxATyWSgAAAIM"]
[Sat Apr 11 09:51:45.543716 2026] [:error] [pid 39419:tid 39496] [client 20.215.250.26:28210] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "admpMe7HlVEazEwxATyWUAAAAJU"]
[Sat Apr 11 09:51:46.154753 2026] [:error] [pid 39508:tid 39523] [client 20.215.250.26:59023] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "admpMiwM0R3nUGSd167nlQAAAA0"]
[Sat Apr 11 09:51:46.736290 2026] [:error] [pid 39508:tid 39526] [client 20.215.250.26:45040] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iyy.php"] [unique_id "admpMiwM0R3nUGSd167nmAAAABA"]
[Sat Apr 11 09:51:47.454594 2026] [:error] [pid 39418:tid 39460] [client 20.215.250.26:37079] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iyy.php"] [unique_id "admpM83gpP0PVIMHC4y9IQAAAYw"]
[Sat Apr 11 09:51:48.341673 2026] [:error] [pid 39417:tid 39439] [client 20.215.250.26:51253] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iyy.php"] [unique_id "admpNIhcg8wCjq_u5ZqppQAAAVI"]
[Sat Apr 11 09:51:49.126188 2026] [:error] [pid 39508:tid 39529] [client 20.215.250.26:28186] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iyy.php"] [unique_id "admpNSwM0R3nUGSd167nrgAAABM"]
[Sat Apr 11 09:51:49.725673 2026] [:error] [pid 39418:tid 39448] [client 20.215.250.26:28889] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "admpNc3gpP0PVIMHC4y9KgAAAYA"]
[Sat Apr 11 09:51:50.469241 2026] [:error] [pid 39419:tid 39496] [client 20.215.250.26:37082] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "admpNu7HlVEazEwxATyWdwAAAJU"]
[Sat Apr 11 09:51:51.098405 2026] [:error] [pid 39418:tid 39458] [client 20.215.250.26:29949] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "admpN83gpP0PVIMHC4y9LgAAAYo"]
[Sat Apr 11 09:51:51.779717 2026] [:error] [pid 39417:tid 39435] [client 20.215.250.26:25010] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "admpN4hcg8wCjq_u5ZqprAAAAU4"]
[Sat Apr 11 09:51:52.849839 2026] [:error] [pid 39417:tid 39422] [client 20.215.250.26:39874] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admpOIhcg8wCjq_u5ZqprgAAAUE"]
[Sat Apr 11 09:51:53.684418 2026] [:error] [pid 39418:tid 39470] [client 20.215.250.26:46253] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admpOc3gpP0PVIMHC4y9OQAAAZY"]
[Sat Apr 11 09:51:54.494067 2026] [:error] [pid 39508:tid 39524] [client 20.215.250.26:46230] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admpOiwM0R3nUGSd167n2QAAAA4"]
[Sat Apr 11 09:51:55.250953 2026] [:error] [pid 39508:tid 39518] [client 20.215.250.26:61136] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admpOywM0R3nUGSd167n3QAAAAg"]
[Sat Apr 11 09:51:56.294982 2026] [:error] [pid 39508:tid 39519] [client 20.215.250.26:39920] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gqhyti.php"] [unique_id "admpPCwM0R3nUGSd167n5QAAAAk"]
[Sat Apr 11 09:51:57.408250 2026] [:error] [pid 39419:tid 39496] [client 20.215.250.26:37091] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gqhyti.php"] [unique_id "admpPe7HlVEazEwxATyWiAAAAJU"]
[Sat Apr 11 09:51:58.138594 2026] [:error] [pid 39417:tid 39445] [client 20.215.250.26:32899] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gqhyti.php"] [unique_id "admpPohcg8wCjq_u5ZqpxAAAAVg"]
[Sat Apr 11 09:51:58.987066 2026] [:error] [pid 39418:tid 39467] [client 20.215.250.26:26898] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gqhyti.php"] [unique_id "admpPs3gpP0PVIMHC4y9RAAAAZM"]
[Sat Apr 11 09:51:59.968133 2026] [:error] [pid 39419:tid 39494] [client 20.215.250.26:37084] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoxxi.php"] [unique_id "admpP-7HlVEazEwxATyWjQAAAJM"]
[Sat Apr 11 09:52:00.856633 2026] [:error] [pid 39417:tid 39438] [client 20.215.250.26:63102] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoxxi.php"] [unique_id "admpQIhcg8wCjq_u5Zqp1AAAAVE"]
[Sat Apr 11 09:52:01.550446 2026] [:error] [pid 39417:tid 39430] [client 20.215.250.26:28160] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoxxi.php"] [unique_id "admpQYhcg8wCjq_u5Zqp4gAAAUk"]
[Sat Apr 11 09:52:02.212467 2026] [:error] [pid 39418:tid 39453] [client 20.215.250.26:34612] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoxxi.php"] [unique_id "admpQs3gpP0PVIMHC4y9TwAAAYU"]
[Sat Apr 11 09:52:02.968305 2026] [:error] [pid 39418:tid 39457] [client 20.215.250.26:46216] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admpQs3gpP0PVIMHC4y9VQAAAYk"]
[Sat Apr 11 09:52:03.763540 2026] [proxy_fcgi:error] [pid 39419:tid 39497] [client 20.215.250.26:59032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:52:04.050198 2026] [proxy_fcgi:error] [pid 39419:tid 39484] [client 20.215.250.26:59032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:52:04.342991 2026] [proxy_fcgi:error] [pid 39419:tid 39498] [client 20.215.250.26:59032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:52:04.671997 2026] [proxy_fcgi:error] [pid 39419:tid 39483] [client 20.215.250.26:59032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:52:04.933355 2026] [proxy_fcgi:error] [pid 39419:tid 39491] [client 20.215.250.26:59032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:52:05.192445 2026] [proxy_fcgi:error] [pid 39419:tid 39488] [client 20.215.250.26:59032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:52:05.447945 2026] [:error] [pid 39419:tid 39493] [client 20.215.250.26:59032] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfilexxx.php"] [unique_id "admpRe7HlVEazEwxATyWqAAAAJI"]
[Sat Apr 11 09:52:06.135152 2026] [:error] [pid 39417:tid 39436] [client 20.215.250.26:28173] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfilexxx.php"] [unique_id "admpRohcg8wCjq_u5ZqqCgAAAU8"]
[Sat Apr 11 09:52:06.719617 2026] [:error] [pid 39508:tid 39533] [client 20.215.250.26:26193] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfilexxx.php"] [unique_id "admpRiwM0R3nUGSd167oDAAAABc"]
[Sat Apr 11 09:52:07.471099 2026] [:error] [pid 39508:tid 39519] [client 20.215.250.26:40101] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfilexxx.php"] [unique_id "admpRywM0R3nUGSd167oDgAAAAk"]
[Sat Apr 11 09:52:08.086511 2026] [:error] [pid 39417:tid 39434] [client 20.215.250.26:22977] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/karma_144a.php"] [unique_id "admpSIhcg8wCjq_u5ZqqDgAAAU0"]
[Sat Apr 11 09:52:09.733449 2026] [:error] [pid 39508:tid 39524] [client 20.215.250.26:44253] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/karma_144a.php"] [unique_id "admpSSwM0R3nUGSd167oIAAAAA4"]
[Sat Apr 11 09:52:10.414310 2026] [:error] [pid 39508:tid 39517] [client 20.215.250.26:59676] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/karma_144a.php"] [unique_id "admpSiwM0R3nUGSd167oJwAAAAc"]
[Sat Apr 11 09:52:11.080391 2026] [:error] [pid 39419:tid 39489] [client 20.215.250.26:23273] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/karma_144a.php"] [unique_id "admpS-7HlVEazEwxATyWrgAAAI4"]
[Sat Apr 11 09:52:11.738939 2026] [:error] [pid 39508:tid 39525] [client 20.215.250.26:23039] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3586%20b64.php"] [unique_id "admpSywM0R3nUGSd167oNgAAAA8"]
[Sat Apr 11 09:52:12.612369 2026] [:error] [pid 39417:tid 39429] [client 20.215.250.26:40069] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3586%20b64.php"] [unique_id "admpTIhcg8wCjq_u5ZqqGAAAAUg"]
[Sat Apr 11 09:52:13.477243 2026] [:error] [pid 39419:tid 39484] [client 20.215.250.26:40094] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3586%20b64.php"] [unique_id "admpTe7HlVEazEwxATyWuAAAAIk"]
[Sat Apr 11 09:52:14.318792 2026] [:error] [pid 39417:tid 39429] [client 20.215.250.26:23295] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3586%20b64.php"] [unique_id "admpTohcg8wCjq_u5ZqqKAAAAUg"]
[Sat Apr 11 09:52:14.973141 2026] [:error] [pid 39417:tid 39422] [client 20.215.250.26:29917] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "admpTohcg8wCjq_u5ZqqLgAAAUE"]
[Sat Apr 11 09:52:15.858714 2026] [:error] [pid 39419:tid 39480] [client 20.215.250.26:46062] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "admpT-7HlVEazEwxATyWvwAAAIU"]
[Sat Apr 11 09:52:16.619923 2026] [:error] [pid 39419:tid 39490] [client 20.215.250.26:59710] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "admpUO7HlVEazEwxATyWxAAAAI8"]
[Sat Apr 11 09:52:17.261454 2026] [:error] [pid 39418:tid 39472] [client 20.215.250.26:26180] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "admpUc3gpP0PVIMHC4y9ewAAAZg"]
[Sat Apr 11 09:52:17.992028 2026] [:error] [pid 39419:tid 39494] [client 20.215.250.26:59046] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "admpUe7HlVEazEwxATyWzQAAAJM"]
[Sat Apr 11 09:52:18.860727 2026] [:error] [pid 39418:tid 39452] [client 20.215.250.26:39872] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "admpUs3gpP0PVIMHC4y9hAAAAYQ"]
[Sat Apr 11 09:52:19.617019 2026] [:error] [pid 39508:tid 39529] [client 20.215.250.26:46229] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "admpUywM0R3nUGSd167oWgAAABM"]
[Sat Apr 11 09:52:20.413765 2026] [:error] [pid 39419:tid 39489] [client 20.215.250.26:23022] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "admpVO7HlVEazEwxATyW1wAAAI4"]
[Sat Apr 11 09:52:21.373319 2026] [:error] [pid 39419:tid 39486] [client 20.215.250.26:7764] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypltspd.php"] [unique_id "admpVe7HlVEazEwxATyW2wAAAIs"]
[Sat Apr 11 09:52:22.172570 2026] [:error] [pid 39417:tid 39444] [client 20.215.250.26:33582] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypltspd.php"] [unique_id "admpVohcg8wCjq_u5ZqqOQAAAVc"]
[Sat Apr 11 09:52:22.948681 2026] [:error] [pid 39417:tid 39427] [client 20.215.250.26:23261] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypltspd.php"] [unique_id "admpVohcg8wCjq_u5ZqqPAAAAUY"]
[Sat Apr 11 09:52:23.733454 2026] [:error] [pid 39417:tid 39438] [client 20.215.250.26:47005] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bypltspd.php"] [unique_id "admpV4hcg8wCjq_u5ZqqQgAAAVE"]
[Sat Apr 11 09:52:24.843310 2026] [:error] [pid 39508:tid 39529] [client 20.215.250.26:57853] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "admpWCwM0R3nUGSd167obwAAABM"]
[Sat Apr 11 09:52:25.740497 2026] [:error] [pid 39418:tid 39452] [client 20.215.250.26:46997] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "admpWc3gpP0PVIMHC4y9jwAAAYQ"]
[Sat Apr 11 09:52:26.468214 2026] [:error] [pid 39417:tid 39423] [client 20.215.250.26:40100] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "admpWohcg8wCjq_u5ZqqUgAAAUI"]
[Sat Apr 11 09:52:27.296577 2026] [:error] [pid 39417:tid 39437] [client 20.215.250.26:28277] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "admpW4hcg8wCjq_u5ZqqWQAAAVA"]
[Sat Apr 11 09:52:28.015707 2026] [:error] [pid 39418:tid 39461] [client 20.215.250.26:34602] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "admpXM3gpP0PVIMHC4y9kwAAAY0"]
[Sat Apr 11 09:52:28.868136 2026] [:error] [pid 39419:tid 39481] [client 20.215.250.26:57824] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "admpXO7HlVEazEwxATyW7QAAAIY"]
[Sat Apr 11 09:52:29.710409 2026] [:error] [pid 39419:tid 39497] [client 20.215.250.26:4095] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "admpXe7HlVEazEwxATyW9QAAAJY"]
[Sat Apr 11 09:52:30.988212 2026] [:error] [pid 39419:tid 39482] [client 20.215.250.26:31408] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "admpXu7HlVEazEwxATyW_wAAAIc"]
[Sat Apr 11 09:52:32.805620 2026] [:error] [pid 39419:tid 39498] [client 20.215.250.26:52460] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admpYO7HlVEazEwxATyXAwAAAJc"]
[Sat Apr 11 09:52:34.027620 2026] [:error] [pid 39508:tid 39516] [client 20.215.250.26:37156] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admpYiwM0R3nUGSd167ogwAAAAY"]
[Sat Apr 11 09:52:34.810429 2026] [:error] [pid 39508:tid 39519] [client 20.215.250.26:30298] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admpYiwM0R3nUGSd167oigAAAAk"]
[Sat Apr 11 09:52:35.557087 2026] [:error] [pid 39418:tid 39466] [client 20.215.250.26:47024] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admpY83gpP0PVIMHC4y9pwAAAZI"]
[Sat Apr 11 09:52:36.217354 2026] [:error] [pid 39508:tid 39522] [client 20.215.250.26:46977] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "admpZCwM0R3nUGSd167okwAAAAw"]
[Sat Apr 11 09:52:37.148395 2026] [:error] [pid 39418:tid 39454] [client 20.215.250.26:31417] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "admpZc3gpP0PVIMHC4y9qgAAAYY"]
[Sat Apr 11 09:52:37.799115 2026] [:error] [pid 39417:tid 39429] [client 20.215.250.26:44370] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "admpZYhcg8wCjq_u5ZqqmAAAAUg"]
[Sat Apr 11 09:52:38.658914 2026] [:error] [pid 39508:tid 39522] [client 20.215.250.26:63126] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "admpZiwM0R3nUGSd167opAAAAAw"]
[Sat Apr 11 09:52:39.203854 2026] [:error] [pid 39508:tid 39524] [client 20.215.250.26:37149] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "admpZywM0R3nUGSd167oqQAAAA4"]
[Sat Apr 11 09:52:40.525457 2026] [:error] [pid 39418:tid 39461] [client 20.215.250.26:28274] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "admpaM3gpP0PVIMHC4y9wQAAAY0"]
[Sat Apr 11 09:52:41.318499 2026] [:error] [pid 39419:tid 39477] [client 20.215.250.26:18047] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "admpae7HlVEazEwxATyXIwAAAII"]
[Sat Apr 11 09:52:42.111683 2026] [:error] [pid 39419:tid 39496] [client 20.215.250.26:26723] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "admpau7HlVEazEwxATyXKgAAAJU"]
[Sat Apr 11 09:52:43.124370 2026] [:error] [pid 39419:tid 39479] [client 20.215.250.26:55495] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "admpa-7HlVEazEwxATyXMAAAAIQ"]
[Sat Apr 11 09:52:44.080726 2026] [:error] [pid 39508:tid 39531] [client 20.215.250.26:48097] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "admpbCwM0R3nUGSd167o5wAAABU"]
[Sat Apr 11 09:52:44.799281 2026] [:error] [pid 39508:tid 39510] [client 20.215.250.26:65354] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "admpbCwM0R3nUGSd167o9QAAAAA"]
[Sat Apr 11 09:52:45.472503 2026] [:error] [pid 39419:tid 39483] [client 20.215.250.26:48143] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "admpbe7HlVEazEwxATyXSwAAAIg"]
[Sat Apr 11 09:52:46.128339 2026] [:error] [pid 39508:tid 39517] [client 20.215.250.26:47469] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admpbiwM0R3nUGSd167o_QAAAAc"]
[Sat Apr 11 09:52:47.144184 2026] [:error] [pid 39419:tid 39479] [client 20.215.250.26:63106] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admpb-7HlVEazEwxATyXUgAAAIQ"]
[Sat Apr 11 09:52:47.781426 2026] [:error] [pid 39508:tid 39532] [client 20.215.250.26:60916] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admpbywM0R3nUGSd167pEAAAABY"]
[Sat Apr 11 09:52:48.491084 2026] [:error] [pid 39508:tid 39522] [client 20.215.250.26:33515] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admpcCwM0R3nUGSd167pGAAAAAw"]
[Sat Apr 11 09:52:49.618333 2026] [:error] [pid 39417:tid 39425] [client 20.215.250.26:48145] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admpcYhcg8wCjq_u5ZqqvwAAAUQ"]
[Sat Apr 11 09:52:50.212447 2026] [:error] [pid 39508:tid 39526] [client 20.215.250.26:33528] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admpciwM0R3nUGSd167pKQAAABA"]
[Sat Apr 11 09:52:50.806196 2026] [:error] [pid 39508:tid 39522] [client 20.215.250.26:60871] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admpciwM0R3nUGSd167pLgAAAAw"]
[Sat Apr 11 09:52:51.461788 2026] [:error] [pid 39418:tid 39466] [client 20.215.250.26:29993] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admpc83gpP0PVIMHC4y92QAAAZI"]
[Sat Apr 11 09:52:52.329941 2026] [:error] [pid 39508:tid 39514] [client 20.215.250.26:49392] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "admpdCwM0R3nUGSd167pOQAAAAQ"]
[Sat Apr 11 09:52:53.174787 2026] [:error] [pid 39417:tid 39425] [client 20.215.250.26:29980] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "admpdYhcg8wCjq_u5ZqqzAAAAUQ"]
[Sat Apr 11 09:52:53.727425 2026] [:error] [pid 39417:tid 39439] [client 20.215.250.26:62130] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "admpdYhcg8wCjq_u5Zqq0AAAAVI"]
[Sat Apr 11 09:52:54.398837 2026] [:error] [pid 39508:tid 39513] [client 20.215.250.26:48115] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "admpdiwM0R3nUGSd167pTQAAAAM"]
[Sat Apr 11 09:52:55.197922 2026] [:error] [pid 39508:tid 39525] [client 20.215.250.26:63149] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.qiodetme.php"] [unique_id "admpdywM0R3nUGSd167pVgAAAA8"]
[Sat Apr 11 09:52:55.738562 2026] [:error] [pid 39417:tid 39421] [client 20.215.250.26:49447] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.qiodetme.php"] [unique_id "admpd4hcg8wCjq_u5Zqq4QAAAUA"]
[Sat Apr 11 09:52:56.717773 2026] [:error] [pid 39419:tid 39487] [client 20.215.250.26:3660] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.qiodetme.php"] [unique_id "admpeO7HlVEazEwxATyXXgAAAIw"]
[Sat Apr 11 09:52:57.461784 2026] [:error] [pid 39419:tid 39477] [client 20.215.250.26:49461] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.qiodetme.php"] [unique_id "admpee7HlVEazEwxATyXYwAAAII"]
[Sat Apr 11 09:52:58.441937 2026] [:error] [pid 39508:tid 39534] [client 20.215.250.26:33513] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sodas.php"] [unique_id "admpeiwM0R3nUGSd167pbwAAABg"]
[Sat Apr 11 09:52:59.096816 2026] [:error] [pid 39419:tid 39489] [client 20.215.250.26:49359] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sodas.php"] [unique_id "admpe-7HlVEazEwxATyXaQAAAI4"]
[Sat Apr 11 09:52:59.675261 2026] [:error] [pid 39508:tid 39531] [client 20.215.250.26:33478] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sodas.php"] [unique_id "admpeywM0R3nUGSd167pdgAAABU"]
[Sat Apr 11 09:53:00.525281 2026] [:error] [pid 39417:tid 39421] [client 20.215.250.26:63334] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sodas.php"] [unique_id "admpfIhcg8wCjq_u5Zqq9AAAAUA"]
[Sat Apr 11 09:53:01.123545 2026] [:error] [pid 39418:tid 39449] [client 20.215.250.26:35050] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "admpfc3gpP0PVIMHC4y-AwAAAYE"]
[Sat Apr 11 09:53:01.738712 2026] [:error] [pid 39508:tid 39517] [client 20.215.250.26:55498] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "admpfSwM0R3nUGSd167phAAAAAc"]
[Sat Apr 11 09:53:02.444772 2026] [:error] [pid 39418:tid 39468] [client 20.215.250.26:33499] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "admpfs3gpP0PVIMHC4y-BwAAAZQ"]
[Sat Apr 11 09:53:03.015623 2026] [:error] [pid 39418:tid 39466] [client 20.215.250.26:35025] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "admpf83gpP0PVIMHC4y-DgAAAZI"]
[Sat Apr 11 09:53:04.064820 2026] [:error] [pid 39508:tid 39528] [client 20.215.250.26:63305] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "admpgCwM0R3nUGSd167pigAAABI"]
[Sat Apr 11 09:53:04.679314 2026] [:error] [pid 39419:tid 39498] [client 20.215.250.26:57749] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "admpgO7HlVEazEwxATyXgQAAAJc"]
[Sat Apr 11 09:53:05.818318 2026] [proxy_fcgi:error] [pid 39419:tid 39492] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:06.076020 2026] [proxy_fcgi:error] [pid 39419:tid 39497] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:06.332335 2026] [proxy_fcgi:error] [pid 39419:tid 39481] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:06.588193 2026] [proxy_fcgi:error] [pid 39419:tid 39483] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:06.847561 2026] [proxy_fcgi:error] [pid 39419:tid 39482] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:07.148137 2026] [proxy_fcgi:error] [pid 39419:tid 39476] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:07.481156 2026] [proxy_fcgi:error] [pid 39419:tid 39479] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:07.743190 2026] [proxy_fcgi:error] [pid 39419:tid 39477] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:08.000310 2026] [proxy_fcgi:error] [pid 39419:tid 39492] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:08.256737 2026] [proxy_fcgi:error] [pid 39419:tid 39478] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:08.515884 2026] [proxy_fcgi:error] [pid 39419:tid 39476] [client 20.215.250.26:35048] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:53:08.837590 2026] [:error] [pid 39419:tid 39490] [client 20.215.250.26:35048] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "admphO7HlVEazEwxATyXowAAAI8"]
[Sat Apr 11 09:53:10.277414 2026] [:error] [pid 39419:tid 39478] [client 20.215.250.26:63359] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "admphu7HlVEazEwxATyXvQAAAIM"]
[Sat Apr 11 09:53:11.268325 2026] [:error] [pid 39508:tid 39522] [client 20.215.250.26:49410] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "admphywM0R3nUGSd167pwAAAAAw"]
[Sat Apr 11 09:53:12.087503 2026] [:error] [pid 39418:tid 39471] [client 20.215.250.26:21176] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "admpiM3gpP0PVIMHC4y-GQAAAZc"]
[Sat Apr 11 09:53:12.741228 2026] [:error] [pid 39508:tid 39527] [client 20.215.250.26:46590] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "admpiCwM0R3nUGSd167pwQAAABE"]
[Sat Apr 11 09:53:13.775031 2026] [:error] [pid 39508:tid 39511] [client 20.215.250.26:62138] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "admpiSwM0R3nUGSd167pxQAAAAE"]
[Sat Apr 11 09:53:14.763100 2026] [:error] [pid 39508:tid 39528] [client 20.215.250.26:27761] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "admpiiwM0R3nUGSd167p0wAAABI"]
[Sat Apr 11 09:53:15.889971 2026] [:error] [pid 39508:tid 39532] [client 20.215.250.26:49433] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "admpiywM0R3nUGSd167p3gAAABY"]
[Sat Apr 11 09:53:16.670984 2026] [:error] [pid 39417:tid 39436] [client 20.215.250.26:35023] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "admpjIhcg8wCjq_u5ZqrSwAAAU8"]
[Sat Apr 11 09:53:17.532911 2026] [:error] [pid 39418:tid 39470] [client 20.215.250.26:38398] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "admpjc3gpP0PVIMHC4y-LAAAAZY"]
[Sat Apr 11 09:53:18.567083 2026] [:error] [pid 39417:tid 39425] [client 20.215.250.26:27723] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "admpjohcg8wCjq_u5ZqrVQAAAUQ"]
[Sat Apr 11 09:53:20.312665 2026] [:error] [pid 39418:tid 39462] [client 20.215.250.26:26712] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "admpkM3gpP0PVIMHC4y-NAAAAY4"]
[Sat Apr 11 09:53:46.208286 2026] [:error] [pid 39418:tid 39448] [client 20.215.250.26:59584] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "admpqs3gpP0PVIMHC4y-awAAAYA"]
[Sat Apr 11 09:53:47.431164 2026] [:error] [pid 39508:tid 39528] [client 20.215.250.26:54354] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "admpqywM0R3nUGSd167qfQAAABI"]
[Sat Apr 11 09:53:48.273564 2026] [:error] [pid 39508:tid 39512] [client 20.215.250.26:42689] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "admprCwM0R3nUGSd167qiAAAAAI"]
[Sat Apr 11 09:53:49.886540 2026] [:error] [pid 39508:tid 39530] [client 20.215.250.26:26056] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "admprSwM0R3nUGSd167qjQAAABQ"]
[Sat Apr 11 09:53:50.872531 2026] [:error] [pid 39419:tid 39491] [client 20.215.250.26:25053] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "admpru7HlVEazEwxATyYagAAAJA"]
[Sat Apr 11 09:53:51.853228 2026] [:error] [pid 39417:tid 39433] [client 20.215.250.26:38791] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "admpr4hcg8wCjq_u5Zqr3wAAAUw"]
[Sat Apr 11 09:53:52.591047 2026] [:error] [pid 39419:tid 39487] [client 20.215.250.26:54340] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "admpsO7HlVEazEwxATyYdAAAAIw"]
[Sat Apr 11 09:53:53.162780 2026] [:error] [pid 39418:tid 39464] [client 20.215.250.26:3427] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "admpsc3gpP0PVIMHC4y-hQAAAZA"]
[Sat Apr 11 09:53:53.893890 2026] [:error] [pid 39418:tid 39465] [client 20.215.250.26:63379] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "admpsc3gpP0PVIMHC4y-jQAAAZE"]
[Sat Apr 11 09:53:54.719618 2026] [:error] [pid 39419:tid 39496] [client 20.215.250.26:59616] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "admpsu7HlVEazEwxATyYfQAAAJU"]
[Sat Apr 11 09:53:55.368040 2026] [:error] [pid 39419:tid 39487] [client 20.215.250.26:65366] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "admps-7HlVEazEwxATyYggAAAIw"]
[Sat Apr 11 09:53:55.896977 2026] [:error] [pid 39418:tid 39451] [client 20.215.250.26:64400] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nw.php"] [unique_id "admps83gpP0PVIMHC4y-lgAAAYM"]
[Sat Apr 11 09:53:56.506343 2026] [:error] [pid 39417:tid 39434] [client 20.215.250.26:36063] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "admptIhcg8wCjq_u5Zqr6QAAAU0"]
[Sat Apr 11 09:53:57.206540 2026] [:error] [pid 39418:tid 39454] [client 20.215.250.26:64397] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "admptc3gpP0PVIMHC4y-nQAAAYY"]
[Sat Apr 11 09:53:57.890578 2026] [:error] [pid 39419:tid 39478] [client 20.215.250.26:26060] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "admpte7HlVEazEwxATyYiAAAAIM"]
[Sat Apr 11 09:53:58.528919 2026] [:error] [pid 39419:tid 39485] [client 20.215.250.26:64391] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "admptu7HlVEazEwxATyYiwAAAIo"]
[Sat Apr 11 09:53:59.401136 2026] [:error] [pid 39508:tid 39531] [client 20.215.250.26:54369] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admptywM0R3nUGSd167qlwAAABU"]
[Sat Apr 11 09:54:00.167353 2026] [:error] [pid 39417:tid 39427] [client 20.215.250.26:28685] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admpuIhcg8wCjq_u5Zqr-AAAAUY"]
[Sat Apr 11 09:54:01.085625 2026] [:error] [pid 39418:tid 39472] [client 20.215.250.26:34554] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admpuc3gpP0PVIMHC4y-qwAAAZg"]
[Sat Apr 11 09:54:01.732771 2026] [:error] [pid 39417:tid 39427] [client 20.215.250.26:64403] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admpuYhcg8wCjq_u5ZqsBwAAAUY"]
[Sat Apr 11 09:54:02.537442 2026] [:error] [pid 39418:tid 39448] [client 20.215.250.26:65283] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "admpus3gpP0PVIMHC4y-sQAAAYA"]
[Sat Apr 11 09:54:03.359805 2026] [:error] [pid 39417:tid 39428] [client 20.215.250.26:25059] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "admpu4hcg8wCjq_u5ZqsDwAAAUc"]
[Sat Apr 11 09:54:03.974843 2026] [:error] [pid 39419:tid 39499] [client 20.215.250.26:54342] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "admpu-7HlVEazEwxATyYpAAAAJg"]
[Sat Apr 11 09:54:04.818272 2026] [:error] [pid 39419:tid 39489] [client 20.215.250.26:51798] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/ws49.php"] [unique_id "admpvO7HlVEazEwxATyYrQAAAI4"]
[Sat Apr 11 09:54:05.500636 2026] [:error] [pid 39508:tid 39525] [client 20.215.250.26:51812] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "admpvSwM0R3nUGSd167qogAAAA8"]
[Sat Apr 11 09:54:06.077539 2026] [:error] [pid 39419:tid 39498] [client 20.215.250.26:36037] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "admpvu7HlVEazEwxATyYtwAAAJc"]
[Sat Apr 11 09:54:06.944066 2026] [:error] [pid 39508:tid 39524] [client 20.215.250.26:22581] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "admpviwM0R3nUGSd167qpQAAAA4"]
[Sat Apr 11 09:54:07.864870 2026] [:error] [pid 39508:tid 39515] [client 20.215.250.26:42735] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "admpvywM0R3nUGSd167qrQAAAAU"]
[Sat Apr 11 09:54:08.769460 2026] [proxy_fcgi:error] [pid 39417:tid 39428] [client 20.215.250.26:22534] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:54:09.087730 2026] [proxy_fcgi:error] [pid 39417:tid 39431] [client 20.215.250.26:22534] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:54:09.345899 2026] [proxy_fcgi:error] [pid 39417:tid 39421] [client 20.215.250.26:22534] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:54:09.826353 2026] [proxy_fcgi:error] [pid 39417:tid 39439] [client 20.215.250.26:22534] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:54:10.143898 2026] [:error] [pid 39417:tid 39437] [client 20.215.250.26:22534] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "admpwohcg8wCjq_u5ZqsPwAAAVA"]
[Sat Apr 11 09:54:11.131442 2026] [:error] [pid 39417:tid 39441] [client 20.215.250.26:34115] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "admpw4hcg8wCjq_u5ZqsXAAAAVQ"]
[Sat Apr 11 09:54:12.180345 2026] [:error] [pid 39418:tid 39472] [client 20.215.250.26:60871] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "admpxM3gpP0PVIMHC4y-xwAAAZg"]
[Sat Apr 11 09:54:12.950471 2026] [:error] [pid 39418:tid 39450] [client 20.215.250.26:47059] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "admpxM3gpP0PVIMHC4y-ywAAAYI"]
[Sat Apr 11 09:54:13.912167 2026] [:error] [pid 39417:tid 39424] [client 20.215.250.26:36050] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "admpxYhcg8wCjq_u5ZqsfwAAAUM"]
[Sat Apr 11 09:54:14.721426 2026] [:error] [pid 39419:tid 39498] [client 20.215.250.26:22585] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "admpxu7HlVEazEwxATyY4AAAAJc"]
[Sat Apr 11 09:54:15.429061 2026] [:error] [pid 39508:tid 39519] [client 20.215.250.26:52505] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "admpxywM0R3nUGSd167q0wAAAAk"]
[Sat Apr 11 09:54:16.635108 2026] [:error] [pid 39418:tid 39451] [client 20.215.250.26:22561] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "admpyM3gpP0PVIMHC4y-2wAAAYM"]
[Sat Apr 11 09:54:17.415432 2026] [:error] [pid 39419:tid 39483] [client 20.215.250.26:60274] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "admpye7HlVEazEwxATyZAwAAAIg"]
[Sat Apr 11 09:54:18.207811 2026] [:error] [pid 39508:tid 39518] [client 20.215.250.26:34145] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "admpyiwM0R3nUGSd167q7AAAAAg"]
[Sat Apr 11 09:54:19.382062 2026] [:error] [pid 39417:tid 39440] [client 20.215.250.26:47046] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "admpy4hcg8wCjq_u5ZqsigAAAVM"]
[Sat Apr 11 09:54:20.322434 2026] [:error] [pid 39417:tid 39430] [client 20.215.250.26:60238] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "admpzIhcg8wCjq_u5ZqsjgAAAUk"]
[Sat Apr 11 09:54:21.246712 2026] [:error] [pid 39417:tid 39442] [client 20.215.250.26:3424] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "admpzYhcg8wCjq_u5ZqsmwAAAVU"]
[Sat Apr 11 09:54:22.050494 2026] [:error] [pid 39417:tid 39423] [client 20.215.250.26:52481] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "admpzohcg8wCjq_u5ZqstAAAAUI"]
[Sat Apr 11 09:54:22.808518 2026] [:error] [pid 39508:tid 39525] [client 20.215.250.26:27146] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "admpziwM0R3nUGSd167rCgAAAA8"]
[Sat Apr 11 09:54:23.783529 2026] [:error] [pid 39508:tid 39521] [client 20.215.250.26:54338] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "admpzywM0R3nUGSd167rFQAAAAs"]
[Sat Apr 11 09:54:24.571891 2026] [:error] [pid 39508:tid 39515] [client 20.215.250.26:22570] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "admp0CwM0R3nUGSd167rGQAAAAU"]
[Sat Apr 11 09:54:25.375976 2026] [:error] [pid 39508:tid 39533] [client 20.215.250.26:28708] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "admp0SwM0R3nUGSd167rHgAAABc"]
[Sat Apr 11 09:54:26.129667 2026] [:error] [pid 39419:tid 39496] [client 20.215.250.26:36092] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "admp0u7HlVEazEwxATyZKQAAAJU"]
[Sat Apr 11 09:54:30.006382 2026] [:error] [pid 41112:tid 41117] [client 20.215.250.26:48734] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "admp1YIwJirsfymncfFWCQAAAUE"]
[Sat Apr 11 09:54:31.208885 2026] [:error] [pid 41113:tid 41152] [client 20.215.250.26:27166] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "admp12O4NkGf1SzRalCrrgAAAYc"]
[Sat Apr 11 09:54:32.171572 2026] [:error] [pid 41202:tid 41209] [client 20.215.250.26:43228] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "admp2K3ygAYyEQA6XB_CGwAAAAQ"]
[Sat Apr 11 09:54:33.091689 2026] [:error] [pid 41114:tid 41176] [client 20.215.250.26:60234] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "admp2fjnGehQOkpvsQLEYAAAAIQ"]
[Sat Apr 11 09:54:34.797296 2026] [:error] [pid 41202:tid 41219] [client 20.215.250.26:22567] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "admp2q3ygAYyEQA6XB_CIgAAAA4"]
[Sat Apr 11 09:54:35.649140 2026] [:error] [pid 41112:tid 41138] [client 20.215.250.26:27151] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxw.php"] [unique_id "admp24IwJirsfymncfFWKwAAAVY"]
[Sat Apr 11 09:54:36.580320 2026] [:error] [pid 41202:tid 41229] [client 20.215.250.26:54394] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxw.php"] [unique_id "admp3K3ygAYyEQA6XB_CKQAAABg"]
[Sat Apr 11 09:54:37.865100 2026] [:error] [pid 41113:tid 41153] [client 20.215.250.26:33348] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxw.php"] [unique_id "admp3WO4NkGf1SzRalCrzAAAAYg"]
[Sat Apr 11 09:54:38.764247 2026] [:error] [pid 41112:tid 41116] [client 20.215.250.26:64143] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxw.php"] [unique_id "admp3oIwJirsfymncfFWPgAAAUA"]
[Sat Apr 11 09:54:40.059178 2026] [:error] [pid 41113:tid 41168] [client 20.215.250.26:17832] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "admp4GO4NkGf1SzRalCr1AAAAZc"]
[Sat Apr 11 09:54:40.677537 2026] [:error] [pid 41113:tid 41152] [client 20.215.250.26:34120] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "admp4GO4NkGf1SzRalCr2AAAAYc"]
[Sat Apr 11 09:54:41.366734 2026] [:error] [pid 41202:tid 41223] [client 20.215.250.26:34174] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "admp4a3ygAYyEQA6XB_CLgAAABI"]
[Sat Apr 11 09:54:42.093831 2026] [:error] [pid 41113:tid 41164] [client 20.215.250.26:52495] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "admp4mO4NkGf1SzRalCr3gAAAZM"]
[Sat Apr 11 09:54:43.153339 2026] [:error] [pid 41113:tid 41159] [client 20.215.250.26:57078] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "admp42O4NkGf1SzRalCr5wAAAY4"]
[Sat Apr 11 09:54:44.211435 2026] [:error] [pid 41114:tid 41189] [client 20.215.250.26:32401] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "admp5PjnGehQOkpvsQLEdQAAAJE"]
[Sat Apr 11 09:54:44.958420 2026] [:error] [pid 41202:tid 41229] [client 20.215.250.26:32440] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "admp5K3ygAYyEQA6XB_CRAAAABg"]
[Sat Apr 11 09:54:45.634927 2026] [:error] [pid 41202:tid 41210] [client 20.215.250.26:17819] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "admp5a3ygAYyEQA6XB_CSAAAAAU"]
[Sat Apr 11 09:54:46.925664 2026] [:error] [pid 41114:tid 41192] [client 20.215.250.26:32376] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "admp5vjnGehQOkpvsQLEeAAAAJQ"]
[Sat Apr 11 09:54:47.750861 2026] [:error] [pid 41202:tid 41224] [client 20.215.250.26:32339] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "admp563ygAYyEQA6XB_CYAAAABM"]
[Sat Apr 11 09:54:48.908942 2026] [:error] [pid 41114:tid 41184] [client 20.215.250.26:52537] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "admp6PjnGehQOkpvsQLEggAAAIw"]
[Sat Apr 11 09:54:49.965894 2026] [:error] [pid 41113:tid 41165] [client 20.215.250.26:57028] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "admp6WO4NkGf1SzRalCsCwAAAZQ"]
[Sat Apr 11 09:54:50.843064 2026] [:error] [pid 41113:tid 41168] [client 20.215.250.26:56606] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admp6mO4NkGf1SzRalCsDQAAAZc"]
[Sat Apr 11 09:54:51.827797 2026] [:error] [pid 41202:tid 41218] [client 20.215.250.26:60254] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admp663ygAYyEQA6XB_CiAAAAA0"]
[Sat Apr 11 09:54:52.479643 2026] [:error] [pid 41202:tid 41206] [client 20.215.250.26:60235] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admp7K3ygAYyEQA6XB_CjAAAAAE"]
[Sat Apr 11 09:54:53.520956 2026] [:error] [pid 41113:tid 41156] [client 20.215.250.26:57082] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admp7WO4NkGf1SzRalCsFAAAAYs"]
[Sat Apr 11 09:54:54.394788 2026] [:error] [pid 41112:tid 41129] [client 20.215.250.26:32343] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "admp7oIwJirsfymncfFWfAAAAU0"]
[Sat Apr 11 09:54:55.047370 2026] [:error] [pid 41202:tid 41208] [client 20.215.250.26:47053] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "admp763ygAYyEQA6XB_ClgAAAAM"]
[Sat Apr 11 09:54:55.790047 2026] [:error] [pid 41202:tid 41222] [client 20.215.250.26:47495] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "admp763ygAYyEQA6XB_CnQAAABE"]
[Sat Apr 11 09:54:56.434557 2026] [:error] [pid 41202:tid 41213] [client 20.215.250.26:33358] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "admp8K3ygAYyEQA6XB_CpAAAAAg"]
[Sat Apr 11 09:54:57.208581 2026] [:error] [pid 41112:tid 41124] [client 20.215.250.26:48723] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "admp8YIwJirsfymncfFWfwAAAUg"]
[Sat Apr 11 09:54:57.864041 2026] [:error] [pid 41113:tid 41161] [client 20.215.250.26:54342] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "admp8WO4NkGf1SzRalCsHQAAAZA"]
[Sat Apr 11 09:54:58.591066 2026] [:error] [pid 41114:tid 41172] [client 20.215.250.26:33361] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "admp8vjnGehQOkpvsQLEpAAAAIA"]
[Sat Apr 11 09:54:59.328891 2026] [:error] [pid 41113:tid 41167] [client 20.215.250.26:64386] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "admp82O4NkGf1SzRalCsIgAAAZY"]
[Sat Apr 11 09:54:59.899186 2026] [:error] [pid 41202:tid 41222] [client 20.215.250.26:37818] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "admp863ygAYyEQA6XB_CtwAAABE"]
[Sat Apr 11 09:55:00.631985 2026] [:error] [pid 41202:tid 41219] [client 20.215.250.26:30889] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "admp9K3ygAYyEQA6XB_CugAAAA4"]
[Sat Apr 11 09:55:01.501939 2026] [:error] [pid 41202:tid 41220] [client 20.215.250.26:60271] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "admp9a3ygAYyEQA6XB_CvAAAAA8"]
[Sat Apr 11 09:55:02.402460 2026] [:error] [pid 41113:tid 41165] [client 20.215.250.26:58309] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "admp9mO4NkGf1SzRalCsNgAAAZQ"]
[Sat Apr 11 09:55:03.101578 2026] [:error] [pid 41202:tid 41205] [client 20.215.250.26:29383] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "admp963ygAYyEQA6XB_CwwAAAAA"]
[Sat Apr 11 09:55:03.715438 2026] [:error] [pid 41113:tid 41168] [client 20.215.250.26:52528] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "admp92O4NkGf1SzRalCsPAAAAZc"]
[Sat Apr 11 09:55:04.678092 2026] [:error] [pid 41202:tid 41224] [client 20.215.250.26:33378] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "admp-K3ygAYyEQA6XB_CzAAAABM"]
[Sat Apr 11 09:55:05.382366 2026] [:error] [pid 41202:tid 41222] [client 20.215.250.26:45515] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ajax.php"] [unique_id "admp-a3ygAYyEQA6XB_C1QAAABE"]
[Sat Apr 11 09:55:06.062921 2026] [:error] [pid 41202:tid 41220] [client 20.215.250.26:57051] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "admp-q3ygAYyEQA6XB_C2QAAAA8"]
[Sat Apr 11 09:55:06.711832 2026] [:error] [pid 41113:tid 41152] [client 20.215.250.26:36063] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "admp-mO4NkGf1SzRalCsSwAAAYc"]
[Sat Apr 11 09:55:07.353982 2026] [:error] [pid 41113:tid 41166] [client 20.215.250.26:58346] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "admp-2O4NkGf1SzRalCsVAAAAZU"]
[Sat Apr 11 09:55:07.972747 2026] [:error] [pid 41114:tid 41172] [client 20.215.250.26:27153] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/install.php"] [unique_id "admp-_jnGehQOkpvsQLEvgAAAIA"]
[Sat Apr 11 09:55:08.968408 2026] [:error] [pid 41113:tid 41145] [client 20.215.250.26:47551] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/wp-blog.php"] [unique_id "admp_GO4NkGf1SzRalCsWwAAAYA"]
[Sat Apr 11 09:55:09.908127 2026] [proxy_fcgi:error] [pid 41112:tid 41116] [client 20.215.250.26:48762] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:55:10.178854 2026] [proxy_fcgi:error] [pid 41112:tid 41130] [client 20.215.250.26:48762] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:55:10.453766 2026] [proxy_fcgi:error] [pid 41112:tid 41123] [client 20.215.250.26:48762] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 09:55:10.773344 2026] [:error] [pid 41112:tid 41131] [client 20.215.250.26:48762] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/index.php"] [unique_id "admp_oIwJirsfymncfFWkwAAAU8"]
[Sat Apr 11 09:55:13.114509 2026] [:error] [pid 41202:tid 41227] [client 20.215.250.26:47061] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/index.php"] [unique_id "admqAa3ygAYyEQA6XB_DAAAAABY"]
[Sat Apr 11 09:55:13.858399 2026] [:error] [pid 41112:tid 41127] [client 20.215.250.26:36084] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/index.php"] [unique_id "admqAYIwJirsfymncfFWmwAAAUs"]
[Sat Apr 11 09:55:14.769932 2026] [:error] [pid 41202:tid 41212] [client 20.215.250.26:52485] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/index.php"] [unique_id "admqAq3ygAYyEQA6XB_DBwAAAAc"]
[Sat Apr 11 09:55:15.333395 2026] [:error] [pid 41202:tid 41207] [client 20.215.250.26:57077] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqA63ygAYyEQA6XB_DDAAAAAI"]
[Sat Apr 11 09:55:16.002308 2026] [:error] [pid 41202:tid 41215] [client 20.215.250.26:27195] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqBK3ygAYyEQA6XB_DEgAAAAo"]
[Sat Apr 11 09:55:16.695347 2026] [:error] [pid 41114:tid 41183] [client 20.215.250.26:63360] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqBPjnGehQOkpvsQLE4AAAAIs"]
[Sat Apr 11 09:55:17.305445 2026] [:error] [pid 41114:tid 41192] [client 20.215.250.26:57025] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqBfjnGehQOkpvsQLE5gAAAJQ"]
[Sat Apr 11 09:55:18.735968 2026] [:error] [pid 41113:tid 41166] [client 20.215.250.26:27170] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "admqBmO4NkGf1SzRalCscgAAAZU"]
[Sat Apr 11 09:55:19.742333 2026] [:error] [pid 41112:tid 41117] [client 20.215.250.26:57073] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "admqB4IwJirsfymncfFWpQAAAUE"]
[Sat Apr 11 09:55:20.549211 2026] [:error] [pid 41112:tid 41128] [client 20.215.250.26:36096] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "admqCIIwJirsfymncfFWqAAAAUw"]
[Sat Apr 11 09:55:21.074418 2026] [:error] [pid 41202:tid 41211] [client 20.215.250.26:27150] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "admqCa3ygAYyEQA6XB_DHAAAAAY"]
[Sat Apr 11 09:55:22.027892 2026] [:error] [pid 41112:tid 41124] [client 20.215.250.26:57029] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "admqCoIwJirsfymncfFWqgAAAUg"]
[Sat Apr 11 09:55:22.773473 2026] [:error] [pid 41112:tid 41130] [client 20.215.250.26:47514] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "admqCoIwJirsfymncfFWsQAAAU4"]
[Sat Apr 11 09:55:23.417562 2026] [:error] [pid 41113:tid 41146] [client 20.215.250.26:57075] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "admqC2O4NkGf1SzRalCshQAAAYE"]
[Sat Apr 11 09:55:24.132619 2026] [:error] [pid 41113:tid 41149] [client 20.215.250.26:42635] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "admqDGO4NkGf1SzRalCsiQAAAYQ"]
[Sat Apr 11 09:55:24.752137 2026] [:error] [pid 41202:tid 41205] [client 20.215.250.26:55588] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "admqDK3ygAYyEQA6XB_DIwAAAAA"]
[Sat Apr 11 09:55:25.661287 2026] [:error] [pid 41202:tid 41218] [client 20.215.250.26:36105] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "admqDa3ygAYyEQA6XB_DKgAAAA0"]
[Sat Apr 11 09:55:26.337611 2026] [:error] [pid 41202:tid 41206] [client 20.215.250.26:27137] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "admqDq3ygAYyEQA6XB_DMwAAAAE"]
[Sat Apr 11 09:55:26.862996 2026] [:error] [pid 41202:tid 41223] [client 20.215.250.26:28691] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "admqDq3ygAYyEQA6XB_DOAAAABI"]
[Sat Apr 11 09:55:27.638093 2026] [:error] [pid 41112:tid 41121] [client 20.215.250.26:43223] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "admqD4IwJirsfymncfFW5AAAAUU"]
[Sat Apr 11 09:55:28.263093 2026] [:error] [pid 41114:tid 41175] [client 20.215.250.26:36033] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "admqEPjnGehQOkpvsQLFFgAAAIM"]
[Sat Apr 11 09:55:28.999713 2026] [:error] [pid 41114:tid 41193] [client 20.215.250.26:44306] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "admqEPjnGehQOkpvsQLFHwAAAJU"]
[Sat Apr 11 09:55:29.613353 2026] [:error] [pid 41202:tid 41214] [client 20.215.250.26:28689] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "admqEa3ygAYyEQA6XB_DSAAAAAk"]
[Sat Apr 11 09:55:30.150413 2026] [:error] [pid 41112:tid 41132] [client 20.215.250.26:45543] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqEoIwJirsfymncfFW6gAAAVA"]
[Sat Apr 11 09:55:31.122119 2026] [:error] [pid 41113:tid 41153] [client 20.215.250.26:47081] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqE2O4NkGf1SzRalCsnAAAAYg"]
[Sat Apr 11 09:55:31.898713 2026] [:error] [pid 41112:tid 41132] [client 20.215.250.26:57045] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqE4IwJirsfymncfFW9AAAAVA"]
[Sat Apr 11 09:55:32.478376 2026] [:error] [pid 41202:tid 41225] [client 20.215.250.26:22574] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "admqFK3ygAYyEQA6XB_DSwAAABQ"]
[Sat Apr 11 09:55:33.319206 2026] [:error] [pid 41202:tid 41213] [client 20.215.250.26:36032] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "admqFa3ygAYyEQA6XB_DTgAAAAg"]
[Sat Apr 11 09:55:34.022755 2026] [:error] [pid 41202:tid 41222] [client 20.215.250.26:57046] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "admqFq3ygAYyEQA6XB_DVQAAABE"]
[Sat Apr 11 09:55:34.611788 2026] [:error] [pid 41113:tid 41160] [client 20.215.250.26:27181] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "admqFmO4NkGf1SzRalCstAAAAY8"]
[Sat Apr 11 09:55:35.151529 2026] [:error] [pid 41114:tid 41173] [client 20.215.250.26:48709] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "admqF_jnGehQOkpvsQLFKwAAAIE"]
[Sat Apr 11 09:55:35.693694 2026] [:error] [pid 41202:tid 41229] [client 20.215.250.26:47515] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "admqF63ygAYyEQA6XB_DXgAAABg"]
[Sat Apr 11 09:55:36.256567 2026] [:error] [pid 41113:tid 41148] [client 20.215.250.26:47057] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "admqGGO4NkGf1SzRalCsuwAAAYM"]
[Sat Apr 11 09:55:38.123037 2026] [:error] [pid 41202:tid 41214] [client 20.215.250.26:52528] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "admqGq3ygAYyEQA6XB_DZgAAAAk"]
[Sat Apr 11 09:55:41.421192 2026] [:error] [pid 42027:tid 42034] [client 20.215.250.26:48750] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "admqHV61UFp_blzdgFriUgAAAUM"]
[Sat Apr 11 09:55:41.939753 2026] [:error] [pid 42027:tid 42034] [client 20.215.250.26:64972] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "admqHV61UFp_blzdgFriZgAAAUM"]
[Sat Apr 11 09:55:42.480811 2026] [:error] [pid 42027:tid 42055] [client 20.215.250.26:63375] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "admqHl61UFp_blzdgFricAAAAVg"]
[Sat Apr 11 09:55:43.993366 2026] [:error] [pid 42029:tid 42097] [client 20.215.250.26:43214] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "admqHxozfdqNgUK2EDFGXAAAAIs"]
[Sat Apr 11 09:55:44.641200 2026] [:error] [pid 42134:tid 42152] [client 20.215.250.26:43243] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "admqIJ1qgY-EOcVwzSnXWAAAABA"]
[Sat Apr 11 09:55:45.181369 2026] [:error] [pid 42134:tid 42158] [client 20.215.250.26:60249] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/radio.php"] [unique_id "admqIZ1qgY-EOcVwzSnXXAAAABY"]
[Sat Apr 11 09:55:45.696373 2026] [:error] [pid 42134:tid 42136] [client 20.215.250.26:60236] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/radio.php"] [unique_id "admqIZ1qgY-EOcVwzSnXXwAAAAA"]
[Sat Apr 11 09:55:46.203836 2026] [:error] [pid 42134:tid 42142] [client 20.215.250.26:36041] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/radio.php"] [unique_id "admqIp1qgY-EOcVwzSnXZQAAAAY"]
[Sat Apr 11 09:55:50.480509 2026] [:error] [pid 42029:tid 42088] [client 20.215.250.26:34141] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/radio.php"] [unique_id "admqJhozfdqNgUK2EDFGbQAAAII"]
[Sat Apr 11 09:56:29.531495 2026] [:error] [pid 42976:tid 43013] [client 20.215.250.26:39670] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "admqTYJxRBCq2mnMgz7gvgAAAYg"]
[Sat Apr 11 09:56:30.802934 2026] [:error] [pid 43041:tid 43051] [client 20.215.250.26:42219] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "admqTmrnhd3nXOhMlFGNGgAAAEg"]
[Sat Apr 11 09:56:31.391156 2026] [:error] [pid 42976:tid 43029] [client 20.215.250.26:62066] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "admqT4JxRBCq2mnMgz7gyAAAAZg"]
[Sat Apr 11 09:56:32.083473 2026] [:error] [pid 43041:tid 43059] [client 20.215.250.26:27760] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "admqUGrnhd3nXOhMlFGNIQAAAFA"]
[Sat Apr 11 09:56:32.672906 2026] [:error] [pid 43071:tid 43080] [client 20.215.250.26:49843] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "admqUCwIFp8fRObJn9e8iAAAAIc"]
[Sat Apr 11 09:56:33.285365 2026] [:error] [pid 43071:tid 43082] [client 20.215.250.26:42191] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "admqUSwIFp8fRObJn9e8iQAAAIk"]
[Sat Apr 11 09:56:33.903778 2026] [:error] [pid 42975:tid 42989] [client 20.215.250.26:39666] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "admqUUjSnn_GT53EHaC3qAAAAMs"]
[Sat Apr 11 09:56:34.454290 2026] [:error] [pid 42975:tid 42991] [client 20.215.250.26:57774] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "admqUkjSnn_GT53EHaC3rAAAAM0"]
[Sat Apr 11 09:56:35.123645 2026] [:error] [pid 42976:tid 43008] [client 20.215.250.26:15375] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "admqU4JxRBCq2mnMgz7g-AAAAYM"]
[Sat Apr 11 09:56:38.571428 2026] [:error] [pid 43273:tid 43283] [client 20.215.250.26:15407] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "admqVmZYPtsRdEOLUbV32QAAAYU"]
[Sat Apr 11 09:56:39.129331 2026] [:error] [pid 43273:tid 43288] [client 20.215.250.26:62052] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "admqV2ZYPtsRdEOLUbV38wAAAYo"]
[Sat Apr 11 09:56:39.866498 2026] [:error] [pid 43366:tid 43373] [client 20.215.250.26:23661] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "admqVz8l6J1HMW4PYAFyAgAAAAI"]
[Sat Apr 11 09:56:40.574781 2026] [:error] [pid 43273:tid 43300] [client 20.215.250.26:27767] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "admqWGZYPtsRdEOLUbV4AAAAAZY"]
[Sat Apr 11 09:56:41.355153 2026] [:error] [pid 43275:tid 43338] [client 20.215.250.26:62095] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "admqWbKQ_wqXxG8RmeFD6gAAAIU"]
[Sat Apr 11 09:56:42.000885 2026] [:error] [pid 43366:tid 43386] [client 20.215.250.26:25691] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "admqWT8l6J1HMW4PYAFyCwAAAA8"]
[Sat Apr 11 09:56:42.684056 2026] [:error] [pid 43366:tid 43392] [client 20.215.250.26:57746] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hots.php"] [unique_id "admqWj8l6J1HMW4PYAFyEQAAABU"]
[Sat Apr 11 09:56:43.575045 2026] [:error] [pid 43366:tid 43371] [client 20.215.250.26:57741] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "admqWz8l6J1HMW4PYAFyFQAAAAA"]
[Sat Apr 11 09:56:45.263767 2026] [:error] [pid 43275:tid 43354] [client 20.215.250.26:15365] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "admqXbKQ_wqXxG8RmeFD9QAAAJU"]
[Sat Apr 11 09:56:46.005411 2026] [:error] [pid 43366:tid 43395] [client 20.215.250.26:3658] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "admqXj8l6J1HMW4PYAFyJQAAABg"]
[Sat Apr 11 09:56:46.694284 2026] [:error] [pid 43366:tid 43381] [client 20.215.250.26:42405] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin-footer.php"] [unique_id "admqXj8l6J1HMW4PYAFyKAAAAAo"]
[Sat Apr 11 09:56:47.726370 2026] [:error] [pid 43366:tid 43390] [client 20.215.250.26:35035] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "admqXz8l6J1HMW4PYAFyLgAAABM"]
[Sat Apr 11 09:56:48.871420 2026] [:error] [pid 43366:tid 43373] [client 20.215.250.26:3689] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "admqYD8l6J1HMW4PYAFyNwAAAAI"]
[Sat Apr 11 09:56:49.681311 2026] [:error] [pid 43273:tid 43295] [client 20.215.250.26:35061] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "admqYWZYPtsRdEOLUbV4IAAAAZE"]
[Sat Apr 11 09:56:50.504998 2026] [:error] [pid 43273:tid 43299] [client 20.215.250.26:46540] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "admqYmZYPtsRdEOLUbV4KAAAAZU"]
[Sat Apr 11 09:56:51.665300 2026] [:error] [pid 43275:tid 43348] [client 20.215.250.26:43769] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "admqY7KQ_wqXxG8RmeFD_gAAAI8"]
[Sat Apr 11 09:56:52.804475 2026] [:error] [pid 43273:tid 43302] [client 20.215.250.26:60905] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "admqZGZYPtsRdEOLUbV4MgAAAZg"]
[Sat Apr 11 09:56:53.866039 2026] [:error] [pid 43366:tid 43394] [client 20.215.250.26:15408] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "admqZT8l6J1HMW4PYAFyQQAAABc"]
[Sat Apr 11 09:56:54.634831 2026] [:error] [pid 43275:tid 43343] [client 20.215.250.26:63346] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "admqZrKQ_wqXxG8RmeFEDgAAAIo"]
[Sat Apr 11 09:56:55.823568 2026] [:error] [pid 43366:tid 43371] [client 20.215.250.26:62085] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "admqZz8l6J1HMW4PYAFyRwAAAAA"]
[Sat Apr 11 09:56:56.741359 2026] [:error] [pid 43274:tid 43307] [client 20.215.250.26:26748] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "admqaIeYprRHjgX76_f57AAAAEE"]
[Sat Apr 11 09:56:57.413269 2026] [:error] [pid 43274:tid 43319] [client 20.215.250.26:63128] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "admqaYeYprRHjgX76_f57gAAAE0"]
[Sat Apr 11 09:56:58.232772 2026] [:error] [pid 43274:tid 43326] [client 20.215.250.26:60889] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "admqaoeYprRHjgX76_f59QAAAFQ"]
[Sat Apr 11 09:56:59.036571 2026] [:error] [pid 43366:tid 43395] [client 20.215.250.26:23618] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "admqaz8l6J1HMW4PYAFyWgAAABg"]
[Sat Apr 11 09:56:59.864546 2026] [:error] [pid 43366:tid 43379] [client 20.215.250.26:62593] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "admqaz8l6J1HMW4PYAFyXgAAAAg"]
[Sat Apr 11 09:57:00.865855 2026] [:error] [pid 43366:tid 43384] [client 20.215.250.26:48167] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "admqbD8l6J1HMW4PYAFyYgAAAA0"]
[Sat Apr 11 09:57:01.656454 2026] [:error] [pid 43274:tid 43310] [client 20.215.250.26:33494] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "admqbYeYprRHjgX76_f6AAAAAEQ"]
[Sat Apr 11 09:57:02.380798 2026] [:error] [pid 43273:tid 43296] [client 20.215.250.26:48117] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "admqbmZYPtsRdEOLUbV4RAAAAZI"]
[Sat Apr 11 09:57:03.145724 2026] [:error] [pid 43366:tid 43381] [client 20.215.250.26:62595] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "admqbz8l6J1HMW4PYAFyaAAAAAo"]
[Sat Apr 11 09:57:03.807708 2026] [:error] [pid 43366:tid 43378] [client 20.215.250.26:37173] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "admqbz8l6J1HMW4PYAFyawAAAAc"]
[Sat Apr 11 09:57:04.449193 2026] [:error] [pid 43274:tid 43316] [client 20.215.250.26:44390] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/file.php"] [unique_id "admqcIeYprRHjgX76_f6BwAAAEo"]
[Sat Apr 11 09:57:05.117445 2026] [:error] [pid 43274:tid 43320] [client 20.215.250.26:31391] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "admqcYeYprRHjgX76_f6CwAAAE4"]
[Sat Apr 11 09:57:05.741077 2026] [:error] [pid 43273:tid 43288] [client 20.215.250.26:18035] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "admqcWZYPtsRdEOLUbV4UQAAAYo"]
[Sat Apr 11 09:57:06.477306 2026] [:error] [pid 43273:tid 43297] [client 20.215.250.26:26724] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "admqcmZYPtsRdEOLUbV4VgAAAZM"]
[Sat Apr 11 09:57:07.087783 2026] [:error] [pid 43273:tid 43289] [client 20.215.250.26:63162] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "admqc2ZYPtsRdEOLUbV4WwAAAYs"]
[Sat Apr 11 09:57:07.753638 2026] [:error] [pid 43366:tid 43384] [client 20.215.250.26:47028] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "admqcz8l6J1HMW4PYAFyewAAAA0"]
[Sat Apr 11 09:57:08.416978 2026] [:error] [pid 43366:tid 43379] [client 20.215.250.26:52465] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "admqdD8l6J1HMW4PYAFyfwAAAAg"]
[Sat Apr 11 09:57:09.118985 2026] [:error] [pid 43275:tid 43349] [client 20.215.250.26:21125] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "admqdbKQ_wqXxG8RmeFEMwAAAJA"]
[Sat Apr 11 09:57:09.891858 2026] [:error] [pid 43274:tid 43316] [client 20.215.250.26:33509] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws77.php"] [unique_id "admqdYeYprRHjgX76_f6EwAAAEo"]
[Sat Apr 11 10:40:11.799305 2026] [:error] [pid 58288:tid 58314] [client 51.103.82.36:47596] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adm0i3f_USd3ofWlU3sqvAAAAFg"]
[Sat Apr 11 10:40:12.586843 2026] [:error] [pid 58195:tid 58238] [client 51.103.82.36:33437] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adm0jAPvj06vzrczQjv_GgAAAIs"]
[Sat Apr 11 10:40:13.294564 2026] [:error] [pid 58194:tid 58219] [client 51.103.82.36:39003] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adm0jaT4IiVFj-rhcaUDJwAAARQ"]
[Sat Apr 11 10:40:14.406428 2026] [:error] [pid 58288:tid 58296] [client 51.103.82.36:46972] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adm0jnf_USd3ofWlU3sqxAAAAEY"]
[Sat Apr 11 14:11:37.027901 2026] [:error] [pid 2188:tid 2280] [client 157.15.40.61:56099] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "adnmGYDhDA-Xtn2nRScJlgAAANg"]
[Sat Apr 11 14:11:37.287392 2026] [:error] [pid 2297:tid 2317] [client 157.15.40.61:56162] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGbXJS-Jji11jZk3Y5AAAARA"]
[Sat Apr 11 14:11:37.561958 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:56253] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGcW3w7N67R04YCKQjwAAAEE"]
[Sat Apr 11 14:11:37.816420 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:56360] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmGbXJS-Jji11jZk3ZFAAAARU"]
[Sat Apr 11 14:11:38.080314 2026] [:error] [pid 2297:tid 2324] [client 157.15.40.61:56471] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmGrXJS-Jji11jZk3ZMAAAARc"]
[Sat Apr 11 14:11:39.461912 2026] [:error] [pid 2297:tid 2315] [client 157.15.40.61:56689] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "adnmG7XJS-Jji11jZk3ZZQAAAQ4"]
[Sat Apr 11 14:11:39.768680 2026] [:error] [pid 2186:tid 2201] [client 157.15.40.61:56769] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "adnmG8ibnOEEvcO8wPL9igAAAIs"]
[Sat Apr 11 14:11:40.031706 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:56828] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/flower.php"] [unique_id "adnmHMW3w7N67R04YCKQ0gAAAFY"]
[Sat Apr 11 14:11:41.445480 2026] [:error] [pid 2297:tid 2317] [client 157.15.40.61:57090] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "adnmHbXJS-Jji11jZk3ZzQAAARA"]
[Sat Apr 11 14:11:42.705416 2026] [:error] [pid 2297:tid 2325] [client 157.15.40.61:57132] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/bless.php"] [unique_id "adnmHrXJS-Jji11jZk3Z2wAAARg"]
[Sat Apr 11 14:11:44.416775 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:57443] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "adnmIMW3w7N67R04YCKR1wAAAEQ"]
[Sat Apr 11 14:11:47.677774 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:58175] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/blurbs.php"] [unique_id "adnmI8W3w7N67R04YCKSYgAAAFM"]
[Sat Apr 11 14:11:49.559061 2026] [:error] [pid 11067:tid 11072] [client 157.15.40.61:58303] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/akcc.php"] [unique_id "adnmJcW3w7N67R04YCKSvwAAAEM"]
[Sat Apr 11 14:11:51.221454 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:58655] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "adnmJ8W3w7N67R04YCKTBwAAAE4"]
[Sat Apr 11 14:11:51.471438 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:58944] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/shelp.php"] [unique_id "adnmJ8W3w7N67R04YCKTGAAAAEY"]
[Sat Apr 11 14:11:51.730185 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:59014] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/cord.php"] [unique_id "adnmJ7XJS-Jji11jZk3baQAAAQE"]
[Sat Apr 11 14:11:52.979128 2026] [:error] [pid 2188:tid 2260] [client 157.15.40.61:59060] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/dex.php"] [unique_id "adnmKIDhDA-Xtn2nRScLPgAAAMQ"]
[Sat Apr 11 14:11:53.285016 2026] [:error] [pid 11067:tid 11081] [client 157.15.40.61:59304] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmKcW3w7N67R04YCKTkgAAAEw"]
[Sat Apr 11 14:11:55.752662 2026] [:error] [pid 11067:tid 11085] [client 157.15.40.61:59545] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "adnmK8W3w7N67R04YCKUawAAAFA"]
[Sat Apr 11 14:11:56.000890 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:59865] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "adnmLMW3w7N67R04YCKUoQAAAEQ"]
[Sat Apr 11 14:11:56.254207 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:59941] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmLMW3w7N67R04YCKU1QAAAFY"]
[Sat Apr 11 14:11:57.506524 2026] [:error] [pid 11067:tid 11080] [client 157.15.40.61:59998] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmLcW3w7N67R04YCKVRAAAAEs"]
[Sat Apr 11 14:12:00.781940 2026] [:error] [pid 2186:tid 2206] [client 157.15.40.61:60980] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "adnmMMibnOEEvcO8wPL_LAAAAJA"]
[Sat Apr 11 14:12:02.934312 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:61192] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/shlo.php"] [unique_id "adnmMsW3w7N67R04YCKWtAAAAEE"]
[Sat Apr 11 14:12:03.197132 2026] [:error] [pid 2188:tid 2269] [client 157.15.40.61:61491] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/133.php"] [unique_id "adnmM4DhDA-Xtn2nRScMFwAAAM0"]
[Sat Apr 11 14:12:03.976357 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:61833] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/ahax.php"] [unique_id "adnmM8W3w7N67R04YCKW5gAAAE8"]
[Sat Apr 11 14:12:05.253896 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:63762] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/php8.php"] [unique_id "adnmNcW3w7N67R04YCKW8gAAAEY"]
[Sat Apr 11 14:12:09.617503 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:49640] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/lufix1.php"] [unique_id "adnmOcW3w7N67R04YCKXRwAAAFg"]
[Sat Apr 11 14:12:09.874556 2026] [:error] [pid 2186:tid 2198] [client 157.15.40.61:50214] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/witmm.php"] [unique_id "adnmOcibnOEEvcO8wPL_ggAAAIg"]
[Sat Apr 11 14:12:10.616915 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:50335] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmOsW3w7N67R04YCKXXgAAAEg"]
[Sat Apr 11 14:12:14.097941 2026] [:error] [pid 2187:tid 2243] [client 157.15.40.61:50782] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmPg4J29_qQi0FkjiKSAAAAA8"]
[Sat Apr 11 14:12:21.193533 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:51766] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmRcW3w7N67R04YCKX7AAAAEg"]
[Sat Apr 11 14:12:24.484318 2026] [:error] [pid 2297:tid 2317] [client 157.15.40.61:52226] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmSLXJS-Jji11jZk3dmgAAARA"]
[Sat Apr 11 14:12:26.225631 2026] [:error] [pid 2297:tid 2308] [client 157.15.40.61:52422] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "adnmSrXJS-Jji11jZk3drAAAAQc"]
[Sat Apr 11 14:12:28.553549 2026] [:error] [pid 2187:tid 2243] [client 157.15.40.61:52578] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/files.php"] [unique_id "adnmTA4J29_qQi0FkjiKowAAAA8"]
[Sat Apr 11 14:12:31.858750 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:53097] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-editor.php"] [unique_id "adnmT8W3w7N67R04YCKYdwAAAFg"]
[Sat Apr 11 14:59:26.549469 2026] [:error] [pid 2297:tid 2312] [client 216.73.216.4:6263] [client 216.73.216.4] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||stratapluswa.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/robots.txt"] [unique_id "adnxTrXJS-Jji11jZk31MwAAAQs"]
[Sat Apr 11 16:24:21.390766 2026] [:error] [pid 2188:tid 2256] [client 14.1.64.178:33699] [client 14.1.64.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.1.64.178, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adoFNYDhDA-Xtn2nRSc32AAAAMA"]
[Sat Apr 11 16:24:21.402989 2026] [proxy_fcgi:error] [pid 2188:tid 2256] [client 14.1.64.178:33699] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 02:01:18.589259 2026] [:error] [pid 44700:tid 44745] [client 209.38.77.153:62194] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqMbmryPgh_uW4QPCluHwAAAME"]
[Sun Apr 12 03:33:38.209510 2026] [proxy_fcgi:error] [pid 44701:tid 44775] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:38.452394 2026] [proxy_fcgi:error] [pid 44701:tid 44785] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:38.687102 2026] [proxy_fcgi:error] [pid 44701:tid 44787] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:38.924803 2026] [proxy_fcgi:error] [pid 44701:tid 44798] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:39.162627 2026] [proxy_fcgi:error] [pid 44701:tid 44778] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:39.405607 2026] [proxy_fcgi:error] [pid 44701:tid 44771] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:39.640788 2026] [proxy_fcgi:error] [pid 44701:tid 44789] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:39.883523 2026] [proxy_fcgi:error] [pid 44701:tid 44776] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:40.119499 2026] [proxy_fcgi:error] [pid 44701:tid 44793] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:40.355840 2026] [proxy_fcgi:error] [pid 44701:tid 44775] [client 20.203.242.229:10487] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:33:40.616792 2026] [:error] [pid 44701:tid 44782] [client 20.203.242.229:10487] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "adqiFBGZAP4MrlxEPFdnlQAAAEk"]
[Sun Apr 12 03:33:41.133124 2026] [:error] [pid 34152:tid 34171] [client 20.203.242.229:10434] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "adqiFYFtE4RhFslT1Drn3QAAABE"]
[Sun Apr 12 03:33:41.619517 2026] [:error] [pid 36909:tid 36934] [client 20.203.242.229:10437] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "adqiFUGk5GhxTCzHUOpUcwAAARc"]
[Sun Apr 12 03:33:42.159246 2026] [:error] [pid 36938:tid 36953] [client 20.203.242.229:10454] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "adqiFoSWpa_VL1JPU6wNXQAAAY0"]
[Sun Apr 12 03:33:42.671071 2026] [:error] [pid 34152:tid 34173] [client 20.203.242.229:11210] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "adqiFoFtE4RhFslT1Drn3wAAABM"]
[Sun Apr 12 03:33:43.252233 2026] [:error] [pid 36909:tid 36911] [client 20.203.242.229:10466] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "adqiF0Gk5GhxTCzHUOpUdQAAAQA"]
[Sun Apr 12 03:33:43.743692 2026] [:error] [pid 36909:tid 36935] [client 20.203.242.229:10462] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "adqiF0Gk5GhxTCzHUOpUdwAAARg"]
[Sun Apr 12 03:33:44.230248 2026] [:error] [pid 36909:tid 36925] [client 20.203.242.229:10483] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "adqiGEGk5GhxTCzHUOpUewAAAQ4"]
[Sun Apr 12 03:33:44.713932 2026] [:error] [pid 44701:tid 44798] [client 20.203.242.229:10961] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "adqiGBGZAP4MrlxEPFdnmgAAAFY"]
[Sun Apr 12 03:33:45.211874 2026] [:error] [pid 44701:tid 44783] [client 20.203.242.229:10468] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "adqiGRGZAP4MrlxEPFdnmwAAAEo"]
[Sun Apr 12 03:33:45.682218 2026] [:error] [pid 36909:tid 36930] [client 20.203.242.229:10493] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "adqiGUGk5GhxTCzHUOpUgAAAARM"]
[Sun Apr 12 03:33:46.179567 2026] [:error] [pid 44701:tid 44790] [client 20.203.242.229:10947] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "adqiGhGZAP4MrlxEPFdnoQAAAE8"]
[Sun Apr 12 03:33:46.656656 2026] [:error] [pid 44701:tid 44793] [client 20.203.242.229:10445] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "adqiGhGZAP4MrlxEPFdnpAAAAFI"]
[Sun Apr 12 03:33:47.206706 2026] [:error] [pid 44698:tid 44720] [client 20.203.242.229:10946] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "adqiGxgoH9UWd-U3D56ixgAAAJE"]
[Sun Apr 12 03:33:47.710313 2026] [:error] [pid 44701:tid 44798] [client 20.203.242.229:10944] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "adqiGxGZAP4MrlxEPFdnqgAAAFY"]
[Sun Apr 12 03:33:48.193385 2026] [:error] [pid 45064:tid 45109] [client 20.203.242.229:10481] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "adqiHJcHBvLyJ6EUhUom-wAAAVA"]
[Sun Apr 12 03:33:48.672872 2026] [:error] [pid 36909:tid 36935] [client 20.203.242.229:10444] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "adqiHEGk5GhxTCzHUOpUhwAAARg"]
[Sun Apr 12 03:33:49.142590 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:10956] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "adqiHUGk5GhxTCzHUOpUiAAAARU"]
[Sun Apr 12 03:33:49.619882 2026] [:error] [pid 34152:tid 34158] [client 20.203.242.229:10958] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "adqiHYFtE4RhFslT1Drn6AAAAAQ"]
[Sun Apr 12 03:33:50.163854 2026] [:error] [pid 34152:tid 34166] [client 20.203.242.229:10489] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "adqiHoFtE4RhFslT1Drn6gAAAAw"]
[Sun Apr 12 03:33:50.793125 2026] [:error] [pid 36938:tid 36964] [client 20.203.242.229:10485] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "adqiHoSWpa_VL1JPU6wNXgAAAZg"]
[Sun Apr 12 03:33:51.260132 2026] [:error] [pid 45064:tid 45112] [client 20.203.242.229:10456] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "adqiH5cHBvLyJ6EUhUonBAAAAVM"]
[Sun Apr 12 03:33:51.835801 2026] [:error] [pid 44701:tid 44782] [client 20.203.242.229:10979] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "adqiHxGZAP4MrlxEPFdnswAAAEk"]
[Sun Apr 12 03:33:52.372910 2026] [:error] [pid 36909:tid 36935] [client 20.203.242.229:10440] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "adqiIEGk5GhxTCzHUOpUlQAAARg"]
[Sun Apr 12 03:33:52.852349 2026] [:error] [pid 34152:tid 34157] [client 20.203.242.229:10455] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "adqiIIFtE4RhFslT1Drn7QAAAAM"]
[Sun Apr 12 03:33:53.366892 2026] [:error] [pid 36909:tid 36917] [client 20.203.242.229:10450] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "adqiIUGk5GhxTCzHUOpUnQAAAQY"]
[Sun Apr 12 03:33:53.855471 2026] [:error] [pid 36909:tid 36921] [client 20.203.242.229:10964] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "adqiIUGk5GhxTCzHUOpUnwAAAQo"]
[Sun Apr 12 03:33:54.341042 2026] [:error] [pid 36909:tid 36934] [client 20.203.242.229:10463] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "adqiIkGk5GhxTCzHUOpUowAAARc"]
[Sun Apr 12 03:33:54.810597 2026] [:error] [pid 36909:tid 36924] [client 20.203.242.229:10442] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "adqiIkGk5GhxTCzHUOpUpwAAAQ0"]
[Sun Apr 12 03:33:55.282542 2026] [:error] [pid 36909:tid 36915] [client 20.203.242.229:11247] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "adqiI0Gk5GhxTCzHUOpUqgAAAQQ"]
[Sun Apr 12 03:33:55.750072 2026] [:error] [pid 34152:tid 34175] [client 20.203.242.229:10461] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "adqiI4FtE4RhFslT1Drn8wAAABU"]
[Sun Apr 12 03:33:56.233135 2026] [:error] [pid 44701:tid 44771] [client 20.203.242.229:10475] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "adqiJBGZAP4MrlxEPFdnvAAAAEA"]
[Sun Apr 12 03:33:56.718861 2026] [:error] [pid 44700:tid 44768] [client 20.203.242.229:10486] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "adqiJGryPgh_uW4QPCmQ2wAAANg"]
[Sun Apr 12 03:33:57.191727 2026] [:error] [pid 36909:tid 36918] [client 20.203.242.229:10950] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "adqiJUGk5GhxTCzHUOpUsgAAAQc"]
[Sun Apr 12 03:33:57.697168 2026] [:error] [pid 36909:tid 36924] [client 20.203.242.229:10945] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "adqiJUGk5GhxTCzHUOpUtgAAAQ0"]
[Sun Apr 12 03:33:58.167766 2026] [:error] [pid 36909:tid 36912] [client 20.203.242.229:10473] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "adqiJkGk5GhxTCzHUOpUuQAAAQE"]
[Sun Apr 12 03:33:58.649617 2026] [:error] [pid 44700:tid 44759] [client 20.203.242.229:10435] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wert.php"] [unique_id "adqiJmryPgh_uW4QPCmQ3QAAAM8"]
[Sun Apr 12 03:33:59.184602 2026] [:error] [pid 36909:tid 36918] [client 20.203.242.229:10955] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wert.php"] [unique_id "adqiJ0Gk5GhxTCzHUOpUwAAAAQc"]
[Sun Apr 12 03:33:59.652462 2026] [:error] [pid 36909:tid 36931] [client 20.203.242.229:10453] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wert.php"] [unique_id "adqiJ0Gk5GhxTCzHUOpUxAAAARQ"]
[Sun Apr 12 03:34:00.209191 2026] [:error] [pid 36909:tid 36923] [client 20.203.242.229:10495] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wert.php"] [unique_id "adqiKEGk5GhxTCzHUOpUxgAAAQw"]
[Sun Apr 12 03:34:00.716489 2026] [:error] [pid 45064:tid 45094] [client 20.203.242.229:10470] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/11.php"] [unique_id "adqiKJcHBvLyJ6EUhUonBQAAAUI"]
[Sun Apr 12 03:34:01.185780 2026] [:error] [pid 36938:tid 36958] [client 20.203.242.229:10439] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/11.php"] [unique_id "adqiKYSWpa_VL1JPU6wNZgAAAZI"]
[Sun Apr 12 03:34:01.678595 2026] [:error] [pid 36938:tid 36955] [client 20.203.242.229:10966] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/11.php"] [unique_id "adqiKYSWpa_VL1JPU6wNagAAAY8"]
[Sun Apr 12 03:34:02.297148 2026] [:error] [pid 44698:tid 44718] [client 20.203.242.229:10471] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/11.php"] [unique_id "adqiKhgoH9UWd-U3D56izQAAAI8"]
[Sun Apr 12 03:34:02.819302 2026] [:error] [pid 36938:tid 36964] [client 20.203.242.229:10494] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p.php"] [unique_id "adqiKoSWpa_VL1JPU6wNbwAAAZg"]
[Sun Apr 12 03:34:03.288351 2026] [:error] [pid 44701:tid 44773] [client 20.203.242.229:10983] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p.php"] [unique_id "adqiKxGZAP4MrlxEPFdnxwAAAEE"]
[Sun Apr 12 03:34:03.811114 2026] [:error] [pid 44701:tid 44794] [client 20.203.242.229:10490] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p.php"] [unique_id "adqiKxGZAP4MrlxEPFdnyAAAAFM"]
[Sun Apr 12 03:34:04.284720 2026] [:error] [pid 44698:tid 44722] [client 20.203.242.229:10452] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p.php"] [unique_id "adqiLBgoH9UWd-U3D56i1AAAAJM"]
[Sun Apr 12 03:34:04.769116 2026] [:error] [pid 44698:tid 44710] [client 20.203.242.229:10970] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/oij98gy.php"] [unique_id "adqiLBgoH9UWd-U3D56i1QAAAIc"]
[Sun Apr 12 03:34:05.302899 2026] [:error] [pid 36909:tid 36922] [client 20.203.242.229:10984] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/oij98gy.php"] [unique_id "adqiLUGk5GhxTCzHUOpU0AAAAQs"]
[Sun Apr 12 03:34:05.781989 2026] [:error] [pid 36909:tid 36935] [client 20.203.242.229:10974] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/oij98gy.php"] [unique_id "adqiLUGk5GhxTCzHUOpU0wAAARg"]
[Sun Apr 12 03:34:06.276519 2026] [:error] [pid 36909:tid 36915] [client 20.203.242.229:10991] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/oij98gy.php"] [unique_id "adqiLkGk5GhxTCzHUOpU1wAAAQQ"]
[Sun Apr 12 03:34:06.746636 2026] [:error] [pid 44698:tid 44720] [client 20.203.242.229:10484] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adqiLhgoH9UWd-U3D56i2AAAAJE"]
[Sun Apr 12 03:34:07.212577 2026] [:error] [pid 36938:tid 36949] [client 20.203.242.229:11222] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adqiL4SWpa_VL1JPU6wNcQAAAYk"]
[Sun Apr 12 03:34:07.684613 2026] [:error] [pid 44698:tid 44711] [client 20.203.242.229:10959] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adqiLxgoH9UWd-U3D56i2QAAAIg"]
[Sun Apr 12 03:34:08.163578 2026] [:error] [pid 44698:tid 44709] [client 20.203.242.229:10436] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "adqiMBgoH9UWd-U3D56i3QAAAIY"]
[Sun Apr 12 03:34:08.643590 2026] [:error] [pid 36938:tid 36951] [client 20.203.242.229:10441] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/turkshell.php"] [unique_id "adqiMISWpa_VL1JPU6wNdAAAAYs"]
[Sun Apr 12 03:34:09.162805 2026] [:error] [pid 36909:tid 36922] [client 20.203.242.229:10464] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/turkshell.php"] [unique_id "adqiMUGk5GhxTCzHUOpU3wAAAQs"]
[Sun Apr 12 03:34:09.708180 2026] [:error] [pid 34152:tid 34160] [client 20.203.242.229:10443] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/turkshell.php"] [unique_id "adqiMYFtE4RhFslT1DroBgAAAAY"]
[Sun Apr 12 03:34:10.176355 2026] [:error] [pid 45064:tid 45111] [client 20.203.242.229:11002] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/turkshell.php"] [unique_id "adqiMpcHBvLyJ6EUhUonCAAAAVI"]
[Sun Apr 12 03:34:10.647586 2026] [:error] [pid 45064:tid 45117] [client 20.203.242.229:11233] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tea.php"] [unique_id "adqiMpcHBvLyJ6EUhUonCQAAAVg"]
[Sun Apr 12 03:34:11.159678 2026] [:error] [pid 45064:tid 45108] [client 20.203.242.229:10488] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tea.php"] [unique_id "adqiM5cHBvLyJ6EUhUonDQAAAU8"]
[Sun Apr 12 03:34:11.624351 2026] [:error] [pid 36909:tid 36931] [client 20.203.242.229:10971] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tea.php"] [unique_id "adqiM0Gk5GhxTCzHUOpU4AAAARQ"]
[Sun Apr 12 03:34:12.119597 2026] [:error] [pid 44701:tid 44791] [client 20.203.242.229:10449] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tea.php"] [unique_id "adqiNBGZAP4MrlxEPFdn3AAAAFA"]
[Sun Apr 12 03:34:12.605016 2026] [:error] [pid 44700:tid 44756] [client 20.203.242.229:10978] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/seo.php"] [unique_id "adqiNGryPgh_uW4QPCmQ7AAAAMw"]
[Sun Apr 12 03:34:13.089464 2026] [:error] [pid 44701:tid 44779] [client 20.203.242.229:10432] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/seo.php"] [unique_id "adqiNRGZAP4MrlxEPFdn4gAAAEc"]
[Sun Apr 12 03:34:13.732440 2026] [:error] [pid 45064:tid 45116] [client 20.203.242.229:10476] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/seo.php"] [unique_id "adqiNZcHBvLyJ6EUhUonEAAAAVc"]
[Sun Apr 12 03:34:14.308453 2026] [:error] [pid 44701:tid 44799] [client 20.203.242.229:10963] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/seo.php"] [unique_id "adqiNhGZAP4MrlxEPFdn6gAAAFc"]
[Sun Apr 12 03:34:14.873817 2026] [:error] [pid 36909:tid 36923] [client 20.203.242.229:10952] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7.php"] [unique_id "adqiNkGk5GhxTCzHUOpU4gAAAQw"]
[Sun Apr 12 03:34:15.357577 2026] [:error] [pid 34152:tid 34174] [client 20.203.242.229:10480] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7.php"] [unique_id "adqiN4FtE4RhFslT1DroEQAAABQ"]
[Sun Apr 12 03:34:15.844455 2026] [:error] [pid 44701:tid 44782] [client 20.203.242.229:10460] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7.php"] [unique_id "adqiNxGZAP4MrlxEPFdn7AAAAEk"]
[Sun Apr 12 03:34:16.310863 2026] [:error] [pid 44701:tid 44777] [client 20.203.242.229:10953] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7.php"] [unique_id "adqiOBGZAP4MrlxEPFdn7wAAAEU"]
[Sun Apr 12 03:34:16.827325 2026] [:error] [pid 44701:tid 44774] [client 20.203.242.229:10954] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "adqiOBGZAP4MrlxEPFdn8gAAAEI"]
[Sun Apr 12 03:34:17.315952 2026] [:error] [pid 44701:tid 44786] [client 20.203.242.229:10968] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "adqiORGZAP4MrlxEPFdn8wAAAEw"]
[Sun Apr 12 03:34:17.869607 2026] [:error] [pid 36909:tid 36925] [client 20.203.242.229:10987] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "adqiOUGk5GhxTCzHUOpU5QAAAQ4"]
[Sun Apr 12 03:34:18.351873 2026] [:error] [pid 44701:tid 44775] [client 20.203.242.229:10993] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "adqiOhGZAP4MrlxEPFdn-QAAAEM"]
[Sun Apr 12 03:34:19.058504 2026] [:error] [pid 44701:tid 44777] [client 20.203.242.229:11220] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/1.php"] [unique_id "adqiOxGZAP4MrlxEPFdn_AAAAEU"]
[Sun Apr 12 03:34:19.573188 2026] [:error] [pid 36938:tid 36951] [client 20.203.242.229:10451] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/1.php"] [unique_id "adqiO4SWpa_VL1JPU6wNggAAAYs"]
[Sun Apr 12 03:34:20.116203 2026] [:error] [pid 44700:tid 44764] [client 20.203.242.229:10997] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/1.php"] [unique_id "adqiPGryPgh_uW4QPCmQ-AAAANQ"]
[Sun Apr 12 03:34:20.589100 2026] [:error] [pid 44700:tid 44748] [client 20.203.242.229:10951] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/1.php"] [unique_id "adqiPGryPgh_uW4QPCmQ_gAAAMQ"]
[Sun Apr 12 03:34:21.111671 2026] [:error] [pid 44701:tid 44778] [client 20.203.242.229:10973] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "adqiPRGZAP4MrlxEPFdoAQAAAEY"]
[Sun Apr 12 03:34:21.586143 2026] [:error] [pid 44701:tid 44781] [client 20.203.242.229:11252] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "adqiPRGZAP4MrlxEPFdoAwAAAEg"]
[Sun Apr 12 03:34:22.047608 2026] [:error] [pid 36909:tid 36931] [client 20.203.242.229:10985] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "adqiPkGk5GhxTCzHUOpU8AAAARQ"]
[Sun Apr 12 03:34:22.514116 2026] [:error] [pid 44700:tid 44746] [client 20.203.242.229:10967] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "adqiPmryPgh_uW4QPCmRBAAAAMI"]
[Sun Apr 12 03:34:23.030847 2026] [:error] [pid 36938:tid 36946] [client 20.203.242.229:11204] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "adqiP4SWpa_VL1JPU6wNiAAAAYY"]
[Sun Apr 12 03:34:23.496815 2026] [:error] [pid 44701:tid 44800] [client 20.203.242.229:11209] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "adqiPxGZAP4MrlxEPFdoBwAAAFg"]
[Sun Apr 12 03:34:23.966987 2026] [:error] [pid 36909:tid 36925] [client 20.203.242.229:10995] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "adqiP0Gk5GhxTCzHUOpU9QAAAQ4"]
[Sun Apr 12 03:34:24.433129 2026] [:error] [pid 36909:tid 36921] [client 20.203.242.229:11215] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "adqiQEGk5GhxTCzHUOpU-QAAAQo"]
[Sun Apr 12 03:34:24.930495 2026] [:error] [pid 44698:tid 44713] [client 20.203.242.229:11200] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "adqiQBgoH9UWd-U3D56i4gAAAIo"]
[Sun Apr 12 03:34:25.401454 2026] [:error] [pid 36909:tid 36928] [client 20.203.242.229:10998] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "adqiQUGk5GhxTCzHUOpU_AAAARE"]
[Sun Apr 12 03:34:25.882954 2026] [:error] [pid 36909:tid 36919] [client 20.203.242.229:10949] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "adqiQUGk5GhxTCzHUOpU_wAAAQg"]
[Sun Apr 12 03:34:26.353123 2026] [:error] [pid 44701:tid 44782] [client 20.203.242.229:11230] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "adqiQhGZAP4MrlxEPFdoDAAAAEk"]
[Sun Apr 12 03:34:26.837118 2026] [:error] [pid 36909:tid 36911] [client 20.203.242.229:10482] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "adqiQkGk5GhxTCzHUOpVAwAAAQA"]
[Sun Apr 12 03:34:27.310338 2026] [:error] [pid 36938:tid 36952] [client 20.203.242.229:10478] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "adqiQ4SWpa_VL1JPU6wNjQAAAYw"]
[Sun Apr 12 03:34:27.777704 2026] [:error] [pid 45064:tid 45098] [client 20.203.242.229:11003] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "adqiQ5cHBvLyJ6EUhUonHQAAAUY"]
[Sun Apr 12 03:34:28.261148 2026] [:error] [pid 44701:tid 44785] [client 20.203.242.229:10446] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "adqiRBGZAP4MrlxEPFdoFwAAAEs"]
[Sun Apr 12 03:34:28.768062 2026] [:error] [pid 44701:tid 44782] [client 20.203.242.229:11006] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "adqiRBGZAP4MrlxEPFdoGgAAAEk"]
[Sun Apr 12 03:34:29.248478 2026] [:error] [pid 45064:tid 45102] [client 20.203.242.229:11211] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "adqiRZcHBvLyJ6EUhUonIQAAAUk"]
[Sun Apr 12 03:34:29.732246 2026] [:error] [pid 45064:tid 45110] [client 20.203.242.229:10492] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "adqiRZcHBvLyJ6EUhUonIwAAAVE"]
[Sun Apr 12 03:34:30.239669 2026] [:error] [pid 36909:tid 36914] [client 20.203.242.229:11004] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "adqiRkGk5GhxTCzHUOpVCAAAAQM"]
[Sun Apr 12 03:34:30.740209 2026] [:error] [pid 36909:tid 36931] [client 20.203.242.229:10469] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "adqiRkGk5GhxTCzHUOpVDwAAARQ"]
[Sun Apr 12 03:34:31.258788 2026] [:error] [pid 44701:tid 44775] [client 20.203.242.229:10996] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "adqiRxGZAP4MrlxEPFdoIgAAAEM"]
[Sun Apr 12 03:34:31.728001 2026] [:error] [pid 45064:tid 45104] [client 20.203.242.229:10977] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "adqiR5cHBvLyJ6EUhUonJQAAAUs"]
[Sun Apr 12 03:34:32.239915 2026] [:error] [pid 36909:tid 36931] [client 20.203.242.229:11237] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "adqiSEGk5GhxTCzHUOpVHAAAARQ"]
[Sun Apr 12 03:34:32.745610 2026] [:error] [pid 34152:tid 34161] [client 20.203.242.229:10491] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "adqiSIFtE4RhFslT1DroHQAAAAc"]
[Sun Apr 12 03:34:33.315201 2026] [:error] [pid 44698:tid 44724] [client 20.203.242.229:11253] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "adqiSRgoH9UWd-U3D56i6AAAAJU"]
[Sun Apr 12 03:34:33.855364 2026] [:error] [pid 34152:tid 34156] [client 20.203.242.229:11201] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "adqiSYFtE4RhFslT1DroKQAAAAI"]
[Sun Apr 12 03:34:34.434063 2026] [:error] [pid 44698:tid 44709] [client 20.203.242.229:10982] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "adqiShgoH9UWd-U3D56i6wAAAIY"]
[Sun Apr 12 03:34:35.012395 2026] [:error] [pid 36909:tid 36930] [client 20.203.242.229:10457] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "adqiS0Gk5GhxTCzHUOpVJAAAARM"]
[Sun Apr 12 03:34:35.496486 2026] [:error] [pid 44701:tid 44790] [client 20.203.242.229:11000] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "adqiSxGZAP4MrlxEPFdoJAAAAE8"]
[Sun Apr 12 03:34:36.021742 2026] [:error] [pid 36909:tid 36913] [client 20.203.242.229:11166] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "adqiTEGk5GhxTCzHUOpVLQAAAQI"]
[Sun Apr 12 03:34:36.673862 2026] [:error] [pid 36938:tid 36949] [client 20.203.242.229:10986] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "adqiTISWpa_VL1JPU6wNkwAAAYk"]
[Sun Apr 12 03:34:37.210832 2026] [:error] [pid 44698:tid 44727] [client 20.203.242.229:11213] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "adqiTRgoH9UWd-U3D56i7QAAAJg"]
[Sun Apr 12 03:34:37.747316 2026] [:error] [pid 36909:tid 36918] [client 20.203.242.229:10472] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "adqiTUGk5GhxTCzHUOpVOQAAAQc"]
[Sun Apr 12 03:34:38.248988 2026] [:error] [pid 36938:tid 36962] [client 20.203.242.229:10969] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "adqiToSWpa_VL1JPU6wNlgAAAZY"]
[Sun Apr 12 03:34:38.765522 2026] [:error] [pid 34152:tid 34177] [client 20.203.242.229:11245] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "adqiToFtE4RhFslT1DroMgAAABc"]
[Sun Apr 12 03:34:39.318877 2026] [:error] [pid 34152:tid 34164] [client 20.203.242.229:10477] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nano.php"] [unique_id "adqiT4FtE4RhFslT1DroMwAAAAo"]
[Sun Apr 12 03:34:39.841385 2026] [:error] [pid 36938:tid 36944] [client 20.203.242.229:11234] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nano.php"] [unique_id "adqiT4SWpa_VL1JPU6wNmgAAAYQ"]
[Sun Apr 12 03:34:40.333555 2026] [proxy_fcgi:error] [pid 34152:tid 34170] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:40.577602 2026] [proxy_fcgi:error] [pid 34152:tid 34178] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:40.832687 2026] [proxy_fcgi:error] [pid 34152:tid 34176] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:41.072072 2026] [proxy_fcgi:error] [pid 34152:tid 34156] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:41.312357 2026] [proxy_fcgi:error] [pid 34152:tid 34159] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:42.984292 2026] [proxy_fcgi:error] [pid 34152:tid 34155] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:43.228920 2026] [proxy_fcgi:error] [pid 34152:tid 34163] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:43.466847 2026] [proxy_fcgi:error] [pid 34152:tid 34172] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:43.704293 2026] [proxy_fcgi:error] [pid 34152:tid 34162] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:43.943398 2026] [proxy_fcgi:error] [pid 34152:tid 34157] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:44.182038 2026] [proxy_fcgi:error] [pid 34152:tid 34158] [client 20.203.242.229:11174] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:34:44.416788 2026] [:error] [pid 34152:tid 34173] [client 20.203.242.229:11174] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fine.php"] [unique_id "adqiVIFtE4RhFslT1DroQgAAABM"]
[Sun Apr 12 03:34:44.929848 2026] [:error] [pid 34152:tid 34169] [client 20.203.242.229:11227] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fine.php"] [unique_id "adqiVIFtE4RhFslT1DroQwAAAA8"]
[Sun Apr 12 03:34:45.440887 2026] [:error] [pid 44701:tid 44774] [client 20.203.242.229:11206] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fine.php"] [unique_id "adqiVRGZAP4MrlxEPFdoKgAAAEI"]
[Sun Apr 12 03:34:45.966767 2026] [:error] [pid 44700:tid 44758] [client 20.203.242.229:10448] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fine.php"] [unique_id "adqiVWryPgh_uW4QPCmRGQAAAM4"]
[Sun Apr 12 03:34:46.442169 2026] [:error] [pid 44698:tid 44709] [client 20.203.242.229:10980] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zample.php"] [unique_id "adqiVhgoH9UWd-U3D56i-wAAAIY"]
[Sun Apr 12 03:34:46.911542 2026] [:error] [pid 36909:tid 36911] [client 20.203.242.229:10975] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zample.php"] [unique_id "adqiVkGk5GhxTCzHUOpVUAAAAQA"]
[Sun Apr 12 03:34:47.415512 2026] [:error] [pid 36909:tid 36923] [client 20.203.242.229:11142] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zample.php"] [unique_id "adqiV0Gk5GhxTCzHUOpVUwAAAQw"]
[Sun Apr 12 03:34:47.969202 2026] [:error] [pid 44698:tid 44727] [client 20.203.242.229:10433] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zample.php"] [unique_id "adqiVxgoH9UWd-U3D56i_QAAAJg"]
[Sun Apr 12 03:34:48.450658 2026] [:error] [pid 44700:tid 44765] [client 20.203.242.229:10960] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "adqiWGryPgh_uW4QPCmRHgAAANU"]
[Sun Apr 12 03:34:48.938442 2026] [:error] [pid 34152:tid 34175] [client 20.203.242.229:11192] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "adqiWIFtE4RhFslT1DroRQAAABU"]
[Sun Apr 12 03:34:49.414460 2026] [:error] [pid 44698:tid 44715] [client 20.203.242.229:11218] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "adqiWRgoH9UWd-U3D56jAAAAAIw"]
[Sun Apr 12 03:34:49.939104 2026] [:error] [pid 36909:tid 36921] [client 20.203.242.229:11223] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "adqiWUGk5GhxTCzHUOpVXgAAAQo"]
[Sun Apr 12 03:34:50.466571 2026] [:error] [pid 36938:tid 36950] [client 20.203.242.229:10438] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "adqiWoSWpa_VL1JPU6wNoQAAAYo"]
[Sun Apr 12 03:34:50.986885 2026] [:error] [pid 36938:tid 36948] [client 20.203.242.229:11251] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "adqiWoSWpa_VL1JPU6wNowAAAYg"]
[Sun Apr 12 03:34:51.456850 2026] [:error] [pid 36938:tid 36954] [client 20.203.242.229:11248] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "adqiW4SWpa_VL1JPU6wNqAAAAY4"]
[Sun Apr 12 03:34:51.920619 2026] [:error] [pid 36909:tid 36933] [client 20.203.242.229:10990] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "adqiW0Gk5GhxTCzHUOpVYQAAARY"]
[Sun Apr 12 03:34:52.391732 2026] [:error] [pid 36909:tid 36923] [client 20.203.242.229:11228] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "adqiXEGk5GhxTCzHUOpVZAAAAQw"]
[Sun Apr 12 03:34:52.867934 2026] [:error] [pid 44698:tid 44711] [client 20.203.242.229:11232] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "adqiXBgoH9UWd-U3D56jBwAAAIg"]
[Sun Apr 12 03:34:53.334310 2026] [:error] [pid 44698:tid 44724] [client 20.203.242.229:11151] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "adqiXRgoH9UWd-U3D56jCQAAAJU"]
[Sun Apr 12 03:34:53.816009 2026] [:error] [pid 45064:tid 45095] [client 20.203.242.229:11146] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "adqiXZcHBvLyJ6EUhUonQAAAAUM"]
[Sun Apr 12 03:34:54.285177 2026] [:error] [pid 36938:tid 36959] [client 20.203.242.229:11177] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "adqiXoSWpa_VL1JPU6wNrAAAAZM"]
[Sun Apr 12 03:34:54.749747 2026] [:error] [pid 36909:tid 36919] [client 20.203.242.229:11208] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "adqiXkGk5GhxTCzHUOpVawAAAQg"]
[Sun Apr 12 03:34:55.224040 2026] [:error] [pid 45064:tid 45110] [client 20.203.242.229:11221] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "adqiX5cHBvLyJ6EUhUonRAAAAVE"]
[Sun Apr 12 03:34:55.722958 2026] [:error] [pid 44701:tid 44783] [client 20.203.242.229:11238] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "adqiXxGZAP4MrlxEPFdoMwAAAEo"]
[Sun Apr 12 03:34:56.207318 2026] [:error] [pid 45064:tid 45094] [client 20.203.242.229:10948] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiYJcHBvLyJ6EUhUonRgAAAUI"]
[Sun Apr 12 03:34:56.682969 2026] [:error] [pid 44698:tid 44715] [client 20.203.242.229:11212] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiYBgoH9UWd-U3D56jDwAAAIw"]
[Sun Apr 12 03:34:57.157914 2026] [:error] [pid 44701:tid 44771] [client 20.203.242.229:11144] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiYRGZAP4MrlxEPFdoNgAAAEA"]
[Sun Apr 12 03:34:57.624140 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:11216] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiYUGk5GhxTCzHUOpVcQAAARU"]
[Sun Apr 12 03:34:58.097440 2026] [:error] [pid 34152:tid 34168] [client 20.203.242.229:11165] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adqiYoFtE4RhFslT1DroTwAAAA4"]
[Sun Apr 12 03:34:58.569956 2026] [:error] [pid 34152:tid 34158] [client 20.203.242.229:11007] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adqiYoFtE4RhFslT1DroUQAAAAQ"]
[Sun Apr 12 03:34:59.045217 2026] [:error] [pid 44700:tid 44756] [client 20.203.242.229:10965] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adqiY2ryPgh_uW4QPCmRJQAAAMw"]
[Sun Apr 12 03:34:59.520713 2026] [:error] [pid 44700:tid 44754] [client 20.203.242.229:10474] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "adqiY2ryPgh_uW4QPCmRJwAAAMo"]
[Sun Apr 12 03:35:00.010661 2026] [:error] [pid 45064:tid 45106] [client 20.203.242.229:11153] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "adqiZJcHBvLyJ6EUhUonRwAAAU0"]
[Sun Apr 12 03:35:00.482593 2026] [:error] [pid 44698:tid 44719] [client 20.203.242.229:11167] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "adqiZBgoH9UWd-U3D56jFwAAAJA"]
[Sun Apr 12 03:35:00.977552 2026] [:error] [pid 45064:tid 45108] [client 20.203.242.229:11164] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "adqiZJcHBvLyJ6EUhUonSgAAAU8"]
[Sun Apr 12 03:35:01.457651 2026] [:error] [pid 36909:tid 36916] [client 20.203.242.229:11243] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "adqiZUGk5GhxTCzHUOpVeQAAAQU"]
[Sun Apr 12 03:35:02.010628 2026] [:error] [pid 34152:tid 34170] [client 20.203.242.229:11075] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "adqiZoFtE4RhFslT1DroVwAAABA"]
[Sun Apr 12 03:35:02.497920 2026] [:error] [pid 36909:tid 36928] [client 20.203.242.229:11240] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "adqiZkGk5GhxTCzHUOpVgAAAARE"]
[Sun Apr 12 03:35:03.027213 2026] [:error] [pid 36909:tid 36931] [client 20.203.242.229:11239] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "adqiZ0Gk5GhxTCzHUOpVgwAAARQ"]
[Sun Apr 12 03:35:03.524498 2026] [:error] [pid 36909:tid 36913] [client 20.203.242.229:11094] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "adqiZ0Gk5GhxTCzHUOpVhgAAAQI"]
[Sun Apr 12 03:35:04.061151 2026] [:error] [pid 45064:tid 45101] [client 20.203.242.229:10988] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "adqiaJcHBvLyJ6EUhUonTQAAAUg"]
[Sun Apr 12 03:35:04.539218 2026] [:error] [pid 45064:tid 45093] [client 20.203.242.229:10467] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "adqiaJcHBvLyJ6EUhUonTwAAAUE"]
[Sun Apr 12 03:35:05.017185 2026] [:error] [pid 44701:tid 44794] [client 20.203.242.229:11105] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "adqiaRGZAP4MrlxEPFdoOwAAAFM"]
[Sun Apr 12 03:35:05.532747 2026] [:error] [pid 36909:tid 36933] [client 20.203.242.229:11109] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "adqiaUGk5GhxTCzHUOpVjAAAARY"]
[Sun Apr 12 03:35:06.048146 2026] [:error] [pid 36909:tid 36914] [client 20.203.242.229:11160] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "adqiakGk5GhxTCzHUOpVjwAAAQM"]
[Sun Apr 12 03:35:06.516705 2026] [:error] [pid 36909:tid 36929] [client 20.203.242.229:11217] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "adqiakGk5GhxTCzHUOpVkgAAARI"]
[Sun Apr 12 03:35:06.988880 2026] [:error] [pid 45064:tid 45096] [client 20.203.242.229:11249] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "adqiapcHBvLyJ6EUhUonUQAAAUQ"]
[Sun Apr 12 03:35:07.462480 2026] [:error] [pid 44700:tid 44747] [client 20.203.242.229:10962] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "adqia2ryPgh_uW4QPCmRLAAAAMM"]
[Sun Apr 12 03:35:07.934109 2026] [:error] [pid 44701:tid 44775] [client 20.203.242.229:10994] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "adqiaxGZAP4MrlxEPFdoPgAAAEM"]
[Sun Apr 12 03:35:08.447772 2026] [:error] [pid 34152:tid 34155] [client 20.203.242.229:11256] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "adqibIFtE4RhFslT1DroXAAAAAE"]
[Sun Apr 12 03:35:08.909750 2026] [:error] [pid 45064:tid 45112] [client 20.203.242.229:11143] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "adqibJcHBvLyJ6EUhUonVQAAAVM"]
[Sun Apr 12 03:35:09.394068 2026] [:error] [pid 44698:tid 44718] [client 20.203.242.229:11257] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "adqibRgoH9UWd-U3D56jGgAAAI8"]
[Sun Apr 12 03:35:09.862751 2026] [:error] [pid 36909:tid 36928] [client 20.203.242.229:11175] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "adqibUGk5GhxTCzHUOpVnQAAARE"]
[Sun Apr 12 03:35:10.334080 2026] [:error] [pid 36909:tid 36920] [client 20.203.242.229:11207] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "adqibkGk5GhxTCzHUOpVnwAAAQk"]
[Sun Apr 12 03:35:10.795527 2026] [:error] [pid 44701:tid 44777] [client 20.203.242.229:10458] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "adqibhGZAP4MrlxEPFdoPwAAAEU"]
[Sun Apr 12 03:35:11.265924 2026] [:error] [pid 44701:tid 44792] [client 20.203.242.229:11155] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "adqibxGZAP4MrlxEPFdoQQAAAFE"]
[Sun Apr 12 03:35:11.757629 2026] [:error] [pid 44698:tid 44715] [client 20.203.242.229:11255] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "adqibxgoH9UWd-U3D56jHAAAAIw"]
[Sun Apr 12 03:35:12.285537 2026] [:error] [pid 36909:tid 36922] [client 20.203.242.229:11159] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "adqicEGk5GhxTCzHUOpVpAAAAQs"]
[Sun Apr 12 03:35:12.815814 2026] [:error] [pid 36909:tid 36935] [client 20.203.242.229:10989] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "adqicEGk5GhxTCzHUOpVpgAAARg"]
[Sun Apr 12 03:35:13.336709 2026] [:error] [pid 34152:tid 34162] [client 20.203.242.229:11152] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "adqicYFtE4RhFslT1DroXgAAAAg"]
[Sun Apr 12 03:35:13.888921 2026] [:error] [pid 44701:tid 44778] [client 20.203.242.229:11231] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqicRGZAP4MrlxEPFdoSwAAAEY"]
[Sun Apr 12 03:35:14.367119 2026] [:error] [pid 34152:tid 34163] [client 20.203.242.229:11226] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqicoFtE4RhFslT1DroZAAAAAk"]
[Sun Apr 12 03:35:14.928276 2026] [:error] [pid 44698:tid 44722] [client 20.203.242.229:11158] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqichgoH9UWd-U3D56jHQAAAJM"]
[Sun Apr 12 03:35:15.419705 2026] [:error] [pid 36909:tid 36914] [client 20.203.242.229:10957] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqic0Gk5GhxTCzHUOpVqAAAAQM"]
[Sun Apr 12 03:35:15.914816 2026] [:error] [pid 36909:tid 36927] [client 20.203.242.229:11203] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/66.php"] [unique_id "adqic0Gk5GhxTCzHUOpVqQAAARA"]
[Sun Apr 12 03:35:16.386219 2026] [:error] [pid 45064:tid 45097] [client 20.203.242.229:11219] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/66.php"] [unique_id "adqidJcHBvLyJ6EUhUonXAAAAUU"]
[Sun Apr 12 03:35:16.909326 2026] [:error] [pid 45064:tid 45112] [client 20.203.242.229:10999] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/66.php"] [unique_id "adqidJcHBvLyJ6EUhUonYwAAAVM"]
[Sun Apr 12 03:35:17.377189 2026] [:error] [pid 44698:tid 44723] [client 20.203.242.229:11163] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/66.php"] [unique_id "adqidRgoH9UWd-U3D56jHgAAAJQ"]
[Sun Apr 12 03:35:17.909162 2026] [:error] [pid 44701:tid 44793] [client 20.203.242.229:11088] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adqidRGZAP4MrlxEPFdoUAAAAFI"]
[Sun Apr 12 03:35:18.425375 2026] [:error] [pid 44700:tid 44754] [client 20.203.242.229:11199] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adqidmryPgh_uW4QPCmRNQAAAMo"]
[Sun Apr 12 03:35:18.985128 2026] [:error] [pid 36909:tid 36929] [client 20.203.242.229:11244] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adqidkGk5GhxTCzHUOpVrQAAARI"]
[Sun Apr 12 03:35:19.461529 2026] [:error] [pid 34152:tid 34154] [client 20.203.242.229:11147] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "adqid4FtE4RhFslT1DroaQAAAAA"]
[Sun Apr 12 03:35:20.106017 2026] [:error] [pid 36909:tid 36912] [client 20.203.242.229:11260] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ol.php"] [unique_id "adqieEGk5GhxTCzHUOpVtAAAAQE"]
[Sun Apr 12 03:35:20.658988 2026] [:error] [pid 36909:tid 36927] [client 20.203.242.229:11099] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ol.php"] [unique_id "adqieEGk5GhxTCzHUOpVtwAAARA"]
[Sun Apr 12 03:35:21.192304 2026] [:error] [pid 36909:tid 36929] [client 20.203.242.229:11005] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ol.php"] [unique_id "adqieUGk5GhxTCzHUOpVuwAAARI"]
[Sun Apr 12 03:35:21.719949 2026] [:error] [pid 44701:tid 44786] [client 20.203.242.229:11250] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ol.php"] [unique_id "adqieRGZAP4MrlxEPFdoUgAAAEw"]
[Sun Apr 12 03:35:22.279131 2026] [:error] [pid 36909:tid 36933] [client 20.203.242.229:10459] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f6.php"] [unique_id "adqiekGk5GhxTCzHUOpVwgAAARY"]
[Sun Apr 12 03:35:22.783679 2026] [:error] [pid 36909:tid 36922] [client 20.203.242.229:11254] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f6.php"] [unique_id "adqiekGk5GhxTCzHUOpVxgAAAQs"]
[Sun Apr 12 03:35:23.267066 2026] [:error] [pid 36938:tid 36960] [client 20.203.242.229:11259] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f6.php"] [unique_id "adqie4SWpa_VL1JPU6wNtQAAAZQ"]
[Sun Apr 12 03:35:23.766052 2026] [:error] [pid 36909:tid 36919] [client 20.203.242.229:11154] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f6.php"] [unique_id "adqie0Gk5GhxTCzHUOpVzQAAAQg"]
[Sun Apr 12 03:35:24.267080 2026] [:error] [pid 44701:tid 44781] [client 20.203.242.229:11095] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "adqifBGZAP4MrlxEPFdoUwAAAEg"]
[Sun Apr 12 03:35:24.746813 2026] [:error] [pid 44698:tid 44721] [client 20.203.242.229:11224] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "adqifBgoH9UWd-U3D56jKQAAAJI"]
[Sun Apr 12 03:35:25.233308 2026] [:error] [pid 34152:tid 34162] [client 20.203.242.229:11172] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "adqifYFtE4RhFslT1DroawAAAAg"]
[Sun Apr 12 03:35:25.762205 2026] [:error] [pid 36909:tid 36926] [client 20.203.242.229:11115] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "adqifUGk5GhxTCzHUOpV1gAAAQ8"]
[Sun Apr 12 03:35:26.249190 2026] [:error] [pid 44698:tid 44723] [client 20.203.242.229:11173] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/style.php"] [unique_id "adqifhgoH9UWd-U3D56jLQAAAJQ"]
[Sun Apr 12 03:35:26.774918 2026] [:error] [pid 36909:tid 36916] [client 20.203.242.229:11181] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/style.php"] [unique_id "adqifkGk5GhxTCzHUOpV3QAAAQU"]
[Sun Apr 12 03:35:27.332006 2026] [:error] [pid 34152:tid 34157] [client 20.203.242.229:11235] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/style.php"] [unique_id "adqif4FtE4RhFslT1DrobgAAAAM"]
[Sun Apr 12 03:35:27.850904 2026] [:error] [pid 34152:tid 34161] [client 20.203.242.229:11261] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/style.php"] [unique_id "adqif4FtE4RhFslT1DrobwAAAAc"]
[Sun Apr 12 03:35:28.335545 2026] [:error] [pid 44698:tid 44710] [client 20.203.242.229:11073] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adqigBgoH9UWd-U3D56jMgAAAIc"]
[Sun Apr 12 03:35:28.855018 2026] [:error] [pid 36938:tid 36948] [client 20.203.242.229:11116] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adqigISWpa_VL1JPU6wNvgAAAYg"]
[Sun Apr 12 03:35:29.370145 2026] [:error] [pid 34152:tid 34164] [client 20.203.242.229:11156] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adqigYFtE4RhFslT1DrocgAAAAo"]
[Sun Apr 12 03:35:30.002047 2026] [:error] [pid 44698:tid 44717] [client 20.203.242.229:11138] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aa.php"] [unique_id "adqighgoH9UWd-U3D56jMwAAAI4"]
[Sun Apr 12 03:35:30.828289 2026] [:error] [pid 44698:tid 44725] [client 20.203.242.229:11246] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqighgoH9UWd-U3D56jNAAAAJY"]
[Sun Apr 12 03:35:31.981895 2026] [:error] [pid 36909:tid 36934] [client 20.203.242.229:11229] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqig0Gk5GhxTCzHUOpV6gAAARc"]
[Sun Apr 12 03:35:32.933837 2026] [:error] [pid 44698:tid 44703] [client 20.203.242.229:11081] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqihBgoH9UWd-U3D56jNgAAAIA"]
[Sun Apr 12 03:35:34.419023 2026] [:error] [pid 36909:tid 36921] [client 20.203.242.229:11187] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqihkGk5GhxTCzHUOpV9AAAAQo"]
[Sun Apr 12 03:35:35.040840 2026] [:error] [pid 36909:tid 36916] [client 20.203.242.229:11150] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqih0Gk5GhxTCzHUOpV9gAAAQU"]
[Sun Apr 12 03:35:35.713096 2026] [:error] [pid 36909:tid 36933] [client 20.203.242.229:11080] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqih0Gk5GhxTCzHUOpV_AAAARY"]
[Sun Apr 12 03:35:36.390492 2026] [:error] [pid 44698:tid 44722] [client 20.203.242.229:10465] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqiiBgoH9UWd-U3D56jOgAAAJM"]
[Sun Apr 12 03:35:36.890787 2026] [:error] [pid 45064:tid 45094] [client 20.203.242.229:11179] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqiiJcHBvLyJ6EUhUonagAAAUI"]
[Sun Apr 12 03:35:37.578784 2026] [:error] [pid 34152:tid 34167] [client 20.203.242.229:11001] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "adqiiYFtE4RhFslT1DroeAAAAA0"]
[Sun Apr 12 03:35:38.179829 2026] [:error] [pid 44701:tid 44783] [client 20.203.242.229:11182] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "adqiihGZAP4MrlxEPFdoWQAAAEo"]
[Sun Apr 12 03:35:38.678918 2026] [:error] [pid 44701:tid 44782] [client 20.203.242.229:11262] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "adqiihGZAP4MrlxEPFdoWgAAAEk"]
[Sun Apr 12 03:35:39.253663 2026] [:error] [pid 44701:tid 44792] [client 20.203.242.229:11183] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "adqiixGZAP4MrlxEPFdoXAAAAFE"]
[Sun Apr 12 03:35:39.904120 2026] [:error] [pid 44698:tid 44710] [client 20.203.242.229:11186] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "adqiixgoH9UWd-U3D56jQAAAAIc"]
[Sun Apr 12 03:35:40.471501 2026] [:error] [pid 44700:tid 44763] [client 20.203.242.229:11214] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "adqijGryPgh_uW4QPCmRQgAAANM"]
[Sun Apr 12 03:35:41.052747 2026] [:error] [pid 36909:tid 36934] [client 20.203.242.229:11084] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "adqijUGk5GhxTCzHUOpWAwAAARc"]
[Sun Apr 12 03:35:41.597173 2026] [:error] [pid 34152:tid 34168] [client 20.203.242.229:11119] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "adqijYFtE4RhFslT1DrofAAAAA4"]
[Sun Apr 12 03:35:42.106578 2026] [:error] [pid 34152:tid 34169] [client 20.203.242.229:11089] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "adqijoFtE4RhFslT1DrofwAAAA8"]
[Sun Apr 12 03:35:42.677057 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:11193] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "adqijkGk5GhxTCzHUOpWBQAAARU"]
[Sun Apr 12 03:35:43.156116 2026] [:error] [pid 36909:tid 36911] [client 20.203.242.229:11139] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "adqij0Gk5GhxTCzHUOpWBgAAAQA"]
[Sun Apr 12 03:35:43.718269 2026] [:error] [pid 44701:tid 44776] [client 20.203.242.229:11122] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "adqijxGZAP4MrlxEPFdoZgAAAEQ"]
[Sun Apr 12 03:35:44.237504 2026] [proxy_fcgi:error] [pid 36909:tid 36920] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:44.476452 2026] [proxy_fcgi:error] [pid 36909:tid 36930] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:44.760749 2026] [proxy_fcgi:error] [pid 36909:tid 36928] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:45.254254 2026] [proxy_fcgi:error] [pid 36909:tid 36934] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:45.502090 2026] [proxy_fcgi:error] [pid 36909:tid 36918] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:45.752904 2026] [proxy_fcgi:error] [pid 36909:tid 36923] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:45.998699 2026] [proxy_fcgi:error] [pid 36909:tid 36922] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:46.711285 2026] [proxy_fcgi:error] [pid 36909:tid 36929] [client 20.203.242.229:11258] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:35:46.944052 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:11258] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "adqikkGk5GhxTCzHUOpWJAAAARU"]
[Sun Apr 12 03:35:47.687835 2026] [:error] [pid 45064:tid 45113] [client 20.203.242.229:11145] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "adqik5cHBvLyJ6EUhUoncAAAAVQ"]
[Sun Apr 12 03:35:48.291767 2026] [:error] [pid 44701:tid 44787] [client 20.203.242.229:10976] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "adqilBGZAP4MrlxEPFdobwAAAE0"]
[Sun Apr 12 03:35:48.790970 2026] [:error] [pid 45064:tid 45116] [client 20.203.242.229:11171] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "adqilJcHBvLyJ6EUhUoncQAAAVc"]
[Sun Apr 12 03:35:49.366696 2026] [:error] [pid 45064:tid 45108] [client 20.203.242.229:11091] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/goods.php"] [unique_id "adqilZcHBvLyJ6EUhUoncgAAAU8"]
[Sun Apr 12 03:35:50.075709 2026] [:error] [pid 36909:tid 36911] [client 20.203.242.229:11130] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/goods.php"] [unique_id "adqilkGk5GhxTCzHUOpWKQAAAQA"]
[Sun Apr 12 03:35:50.607696 2026] [:error] [pid 36909:tid 36921] [client 20.203.242.229:11185] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/goods.php"] [unique_id "adqilkGk5GhxTCzHUOpWKgAAAQo"]
[Sun Apr 12 03:35:51.124396 2026] [:error] [pid 36938:tid 36962] [client 20.203.242.229:11184] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/goods.php"] [unique_id "adqil4SWpa_VL1JPU6wNywAAAZY"]
[Sun Apr 12 03:35:51.617012 2026] [:error] [pid 44700:tid 44762] [client 20.203.242.229:11107] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "adqil2ryPgh_uW4QPCmRSAAAANI"]
[Sun Apr 12 03:35:52.081777 2026] [:error] [pid 45064:tid 45109] [client 20.203.242.229:11106] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "adqimJcHBvLyJ6EUhUonegAAAVA"]
[Sun Apr 12 03:35:52.618831 2026] [:error] [pid 45064:tid 45117] [client 20.203.242.229:11011] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "adqimJcHBvLyJ6EUhUonfAAAAVg"]
[Sun Apr 12 03:35:53.118698 2026] [:error] [pid 36909:tid 36931] [client 20.203.242.229:11189] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "adqimUGk5GhxTCzHUOpWLAAAARQ"]
[Sun Apr 12 03:35:53.629685 2026] [:error] [pid 36909:tid 36913] [client 20.203.242.229:11098] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/222.php"] [unique_id "adqimUGk5GhxTCzHUOpWLwAAAQI"]
[Sun Apr 12 03:35:54.114653 2026] [:error] [pid 36909:tid 36927] [client 20.203.242.229:11124] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/222.php"] [unique_id "adqimkGk5GhxTCzHUOpWMgAAARA"]
[Sun Apr 12 03:35:54.619208 2026] [:error] [pid 36938:tid 36942] [client 20.203.242.229:10479] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/222.php"] [unique_id "adqimoSWpa_VL1JPU6wNzgAAAYI"]
[Sun Apr 12 03:35:55.155799 2026] [:error] [pid 36909:tid 36919] [client 20.203.242.229:11225] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/222.php"] [unique_id "adqim0Gk5GhxTCzHUOpWPQAAAQg"]
[Sun Apr 12 03:35:55.881398 2026] [:error] [pid 44701:tid 44781] [client 20.203.242.229:11180] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqimxGZAP4MrlxEPFdocQAAAEg"]
[Sun Apr 12 03:35:56.407837 2026] [:error] [pid 44701:tid 44771] [client 20.203.242.229:11110] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqinBGZAP4MrlxEPFdodwAAAEA"]
[Sun Apr 12 03:35:57.013197 2026] [:error] [pid 44698:tid 44709] [client 20.203.242.229:11195] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqinRgoH9UWd-U3D56jSAAAAIY"]
[Sun Apr 12 03:35:57.522875 2026] [:error] [pid 36909:tid 36922] [client 20.203.242.229:11013] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqinUGk5GhxTCzHUOpWRAAAAQs"]
[Sun Apr 12 03:35:58.015169 2026] [:error] [pid 44698:tid 44723] [client 20.203.242.229:11057] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fff.php"] [unique_id "adqinhgoH9UWd-U3D56jSQAAAJQ"]
[Sun Apr 12 03:35:58.582993 2026] [:error] [pid 44698:tid 44714] [client 20.203.242.229:11087] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fff.php"] [unique_id "adqinhgoH9UWd-U3D56jSwAAAIs"]
[Sun Apr 12 03:35:59.124412 2026] [:error] [pid 44701:tid 44787] [client 20.203.242.229:11170] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fff.php"] [unique_id "adqinxGZAP4MrlxEPFdofwAAAE0"]
[Sun Apr 12 03:35:59.664592 2026] [:error] [pid 44700:tid 44745] [client 20.203.242.229:11074] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fff.php"] [unique_id "adqin2ryPgh_uW4QPCmRUAAAAME"]
[Sun Apr 12 03:36:00.178062 2026] [:error] [pid 45064:tid 45105] [client 20.203.242.229:11136] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqioJcHBvLyJ6EUhUongwAAAUw"]
[Sun Apr 12 03:36:00.773940 2026] [:error] [pid 44701:tid 44790] [client 20.203.242.229:11097] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqioBGZAP4MrlxEPFdogwAAAE8"]
[Sun Apr 12 03:36:01.316904 2026] [:error] [pid 45064:tid 45094] [client 20.203.242.229:11026] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqioZcHBvLyJ6EUhUonhQAAAUI"]
[Sun Apr 12 03:36:01.922103 2026] [:error] [pid 44701:tid 44794] [client 20.203.242.229:11093] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqioRGZAP4MrlxEPFdoiAAAAFM"]
[Sun Apr 12 03:36:02.466003 2026] [:error] [pid 34152:tid 34161] [client 20.203.242.229:11205] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "adqiooFtE4RhFslT1DroigAAAAc"]
[Sun Apr 12 03:36:03.084834 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:11111] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "adqio0Gk5GhxTCzHUOpWSAAAARU"]
[Sun Apr 12 03:36:03.629084 2026] [:error] [pid 44701:tid 44789] [client 20.203.242.229:11077] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "adqioxGZAP4MrlxEPFdoiwAAAE4"]
[Sun Apr 12 03:36:04.143082 2026] [:error] [pid 34152:tid 34163] [client 20.203.242.229:11161] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "adqipIFtE4RhFslT1DroiwAAAAk"]
[Sun Apr 12 03:36:04.678818 2026] [:error] [pid 34152:tid 34158] [client 20.203.242.229:11188] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "adqipIFtE4RhFslT1DrojQAAAAQ"]
[Sun Apr 12 03:36:05.229893 2026] [:error] [pid 34152:tid 34171] [client 20.203.242.229:10447] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "adqipYFtE4RhFslT1DrojwAAABE"]
[Sun Apr 12 03:36:05.704151 2026] [:error] [pid 36938:tid 36959] [client 20.203.242.229:11096] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "adqipYSWpa_VL1JPU6wN1QAAAZM"]
[Sun Apr 12 03:36:06.290716 2026] [:error] [pid 44700:tid 44755] [client 20.203.242.229:11015] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "adqipmryPgh_uW4QPCmRWAAAAMs"]
[Sun Apr 12 03:36:06.909390 2026] [:error] [pid 44698:tid 44709] [client 20.203.242.229:11030] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "adqiphgoH9UWd-U3D56jWAAAAIY"]
[Sun Apr 12 03:36:07.390936 2026] [:error] [pid 44698:tid 44714] [client 20.203.242.229:11103] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "adqipxgoH9UWd-U3D56jWwAAAIs"]
[Sun Apr 12 03:36:07.906729 2026] [:error] [pid 34152:tid 34159] [client 20.203.242.229:11168] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "adqip4FtE4RhFslT1DrokQAAAAU"]
[Sun Apr 12 03:36:08.387285 2026] [:error] [pid 44698:tid 44719] [client 20.203.242.229:10440] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "adqiqBgoH9UWd-U3D56jXgAAAJA"]
[Sun Apr 12 03:36:08.903097 2026] [:error] [pid 44698:tid 44715] [client 20.203.242.229:11236] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "adqiqBgoH9UWd-U3D56jXwAAAIw"]
[Sun Apr 12 03:36:09.377115 2026] [:error] [pid 44698:tid 44711] [client 20.203.242.229:11012] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "adqiqRgoH9UWd-U3D56jYAAAAIg"]
[Sun Apr 12 03:36:09.845392 2026] [:error] [pid 44700:tid 44749] [client 20.203.242.229:11202] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "adqiqWryPgh_uW4QPCmRXAAAAMU"]
[Sun Apr 12 03:36:10.315949 2026] [:error] [pid 44698:tid 44716] [client 20.203.242.229:11078] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "adqiqhgoH9UWd-U3D56jYwAAAI0"]
[Sun Apr 12 03:36:10.796579 2026] [:error] [pid 44700:tid 44751] [client 20.203.242.229:11072] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adqiqmryPgh_uW4QPCmRXgAAAMc"]
[Sun Apr 12 03:36:11.286552 2026] [:error] [pid 44701:tid 44785] [client 20.203.242.229:11263] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adqiqxGZAP4MrlxEPFdokgAAAEs"]
[Sun Apr 12 03:36:11.761914 2026] [:error] [pid 34152:tid 34157] [client 20.203.242.229:11157] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adqiq4FtE4RhFslT1DronAAAAAM"]
[Sun Apr 12 03:36:12.231450 2026] [:error] [pid 44698:tid 44712] [client 20.203.242.229:11031] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "adqirBgoH9UWd-U3D56jZwAAAIk"]
[Sun Apr 12 03:36:12.734985 2026] [:error] [pid 44700:tid 44754] [client 20.203.242.229:11112] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqirGryPgh_uW4QPCmRXwAAAMo"]
[Sun Apr 12 03:36:13.217103 2026] [:error] [pid 36909:tid 36928] [client 20.203.242.229:11100] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqirUGk5GhxTCzHUOpWUwAAARE"]
[Sun Apr 12 03:36:13.739103 2026] [:error] [pid 44698:tid 44704] [client 20.203.242.229:11040] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqirRgoH9UWd-U3D56jbAAAAIE"]
[Sun Apr 12 03:36:14.279815 2026] [:error] [pid 44698:tid 44720] [client 20.203.242.229:11039] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqirhgoH9UWd-U3D56jbgAAAJE"]
[Sun Apr 12 03:36:14.740744 2026] [:error] [pid 34152:tid 34170] [client 20.203.242.229:10958] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqiroFtE4RhFslT1DroogAAABA"]
[Sun Apr 12 03:36:15.215963 2026] [:error] [pid 44698:tid 44717] [client 20.203.242.229:11023] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqirxgoH9UWd-U3D56jcgAAAI4"]
[Sun Apr 12 03:36:15.698015 2026] [:error] [pid 36938:tid 36963] [client 20.203.242.229:11050] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqir4SWpa_VL1JPU6wN2gAAAZc"]
[Sun Apr 12 03:36:16.218824 2026] [:error] [pid 44698:tid 44721] [client 20.203.242.229:11104] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqisBgoH9UWd-U3D56jcwAAAJI"]
[Sun Apr 12 03:36:16.695817 2026] [:error] [pid 44698:tid 44722] [client 20.203.242.229:11118] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqisBgoH9UWd-U3D56jdgAAAJM"]
[Sun Apr 12 03:36:17.208048 2026] [:error] [pid 34152:tid 34176] [client 20.203.242.229:11076] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqisYFtE4RhFslT1DropQAAABY"]
[Sun Apr 12 03:36:17.683765 2026] [:error] [pid 34152:tid 34174] [client 20.203.242.229:11194] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqisYFtE4RhFslT1DropwAAABQ"]
[Sun Apr 12 03:36:18.179098 2026] [:error] [pid 44701:tid 44795] [client 20.203.242.229:11049] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqishGZAP4MrlxEPFdonQAAAFQ"]
[Sun Apr 12 03:36:18.647634 2026] [:error] [pid 36938:tid 36962] [client 20.203.242.229:11057] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "adqisoSWpa_VL1JPU6wN3AAAAZY"]
[Sun Apr 12 03:36:19.150054 2026] [:error] [pid 34152:tid 34172] [client 20.203.242.229:11113] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "adqis4FtE4RhFslT1DrorwAAABI"]
[Sun Apr 12 03:36:19.619956 2026] [:error] [pid 36938:tid 36946] [client 20.203.242.229:11127] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "adqis4SWpa_VL1JPU6wN3QAAAYY"]
[Sun Apr 12 03:36:20.100959 2026] [:error] [pid 44700:tid 44757] [client 20.203.242.229:11148] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "adqitGryPgh_uW4QPCmRagAAAM0"]
[Sun Apr 12 03:36:20.566477 2026] [:error] [pid 44698:tid 44704] [client 20.203.242.229:11041] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adqitBgoH9UWd-U3D56jfAAAAIE"]
[Sun Apr 12 03:36:21.046473 2026] [:error] [pid 44698:tid 44705] [client 20.203.242.229:11082] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adqitRgoH9UWd-U3D56jfgAAAII"]
[Sun Apr 12 03:36:21.518466 2026] [:error] [pid 44701:tid 44787] [client 20.203.242.229:11056] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adqitRGZAP4MrlxEPFdopAAAAE0"]
[Sun Apr 12 03:36:21.984785 2026] [:error] [pid 36909:tid 36919] [client 20.203.242.229:11196] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp.php"] [unique_id "adqitUGk5GhxTCzHUOpWXQAAAQg"]
[Sun Apr 12 03:36:22.452133 2026] [:error] [pid 36938:tid 36940] [client 20.203.242.229:10565] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqitoSWpa_VL1JPU6wN4wAAAYA"]
[Sun Apr 12 03:36:22.915150 2026] [:error] [pid 44701:tid 44796] [client 20.203.242.229:11083] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqithGZAP4MrlxEPFdopwAAAFU"]
[Sun Apr 12 03:36:23.511537 2026] [:error] [pid 34152:tid 34168] [client 20.203.242.229:11121] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqit4FtE4RhFslT1DrouQAAAA4"]
[Sun Apr 12 03:36:24.077059 2026] [:error] [pid 44701:tid 44795] [client 20.203.242.229:11079] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqiuBGZAP4MrlxEPFdoqAAAAFQ"]
[Sun Apr 12 03:36:24.562281 2026] [:error] [pid 44700:tid 44756] [client 20.203.242.229:11068] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiuGryPgh_uW4QPCmRbgAAAMw"]
[Sun Apr 12 03:36:25.056622 2026] [:error] [pid 44701:tid 44771] [client 20.203.242.229:11086] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiuRGZAP4MrlxEPFdosgAAAEA"]
[Sun Apr 12 03:36:25.546983 2026] [:error] [pid 44701:tid 44778] [client 20.203.242.229:11114] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiuRGZAP4MrlxEPFdotQAAAEY"]
[Sun Apr 12 03:36:26.010034 2026] [:error] [pid 36909:tid 36929] [client 20.203.242.229:11092] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "adqiukGk5GhxTCzHUOpWZAAAARI"]
[Sun Apr 12 03:36:26.476131 2026] [:error] [pid 44700:tid 44750] [client 20.203.242.229:11241] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqiumryPgh_uW4QPCmRcgAAAMY"]
[Sun Apr 12 03:36:26.957707 2026] [:error] [pid 44701:tid 44781] [client 20.203.242.229:11162] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqiuhGZAP4MrlxEPFdouQAAAEg"]
[Sun Apr 12 03:36:27.438421 2026] [:error] [pid 34152:tid 34167] [client 20.203.242.229:11019] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqiu4FtE4RhFslT1DrovAAAAA0"]
[Sun Apr 12 03:36:27.912716 2026] [:error] [pid 44701:tid 44782] [client 20.203.242.229:11140] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqiuxGZAP4MrlxEPFdougAAAEk"]
[Sun Apr 12 03:36:28.377118 2026] [:error] [pid 44701:tid 44786] [client 20.203.242.229:11009] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqivBGZAP4MrlxEPFdovAAAAEw"]
[Sun Apr 12 03:36:28.869173 2026] [:error] [pid 44701:tid 44787] [client 20.203.242.229:11128] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqivBGZAP4MrlxEPFdowgAAAE0"]
[Sun Apr 12 03:36:29.422908 2026] [:error] [pid 44698:tid 44721] [client 20.203.242.229:11191] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqivRgoH9UWd-U3D56jgwAAAJI"]
[Sun Apr 12 03:36:29.892553 2026] [:error] [pid 44698:tid 44712] [client 20.203.242.229:11085] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/av.php"] [unique_id "adqivRgoH9UWd-U3D56jhAAAAIk"]
[Sun Apr 12 03:36:30.401677 2026] [:error] [pid 36909:tid 36919] [client 20.203.242.229:11032] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "adqivkGk5GhxTCzHUOpWawAAAQg"]
[Sun Apr 12 03:36:30.886736 2026] [:error] [pid 36909:tid 36911] [client 20.203.242.229:11008] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "adqivkGk5GhxTCzHUOpWcAAAAQA"]
[Sun Apr 12 03:36:31.358301 2026] [:error] [pid 36909:tid 36914] [client 20.203.242.229:11178] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "adqiv0Gk5GhxTCzHUOpWcgAAAQM"]
[Sun Apr 12 03:36:31.872681 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:11021] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "adqiv0Gk5GhxTCzHUOpWdgAAARU"]
[Sun Apr 12 03:36:32.338716 2026] [:error] [pid 45064:tid 45102] [client 20.203.242.229:10569] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fi.php"] [unique_id "adqiwJcHBvLyJ6EUhUonlQAAAUk"]
[Sun Apr 12 03:36:32.810619 2026] [:error] [pid 44698:tid 44710] [client 20.203.242.229:11097] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fi.php"] [unique_id "adqiwBgoH9UWd-U3D56jiwAAAIc"]
[Sun Apr 12 03:36:33.296372 2026] [:error] [pid 44701:tid 44776] [client 20.203.242.229:11037] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fi.php"] [unique_id "adqiwRGZAP4MrlxEPFdozQAAAEQ"]
[Sun Apr 12 03:36:33.777637 2026] [:error] [pid 44701:tid 44798] [client 20.203.242.229:10981] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fi.php"] [unique_id "adqiwRGZAP4MrlxEPFdo0QAAAFY"]
[Sun Apr 12 03:36:34.251652 2026] [:error] [pid 44701:tid 44791] [client 20.203.242.229:10599] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a1.php"] [unique_id "adqiwhGZAP4MrlxEPFdo1AAAAFA"]
[Sun Apr 12 03:36:34.731669 2026] [:error] [pid 34152:tid 34178] [client 20.203.242.229:11141] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a1.php"] [unique_id "adqiwoFtE4RhFslT1DrovQAAABg"]
[Sun Apr 12 03:36:35.214369 2026] [:error] [pid 45064:tid 45117] [client 20.203.242.229:11027] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a1.php"] [unique_id "adqiw5cHBvLyJ6EUhUonmAAAAVg"]
[Sun Apr 12 03:36:35.696292 2026] [:error] [pid 45064:tid 45096] [client 20.203.242.229:11055] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a1.php"] [unique_id "adqiw5cHBvLyJ6EUhUonmQAAAUQ"]
[Sun Apr 12 03:36:36.169879 2026] [:error] [pid 34152:tid 34176] [client 20.203.242.229:11066] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "adqixIFtE4RhFslT1DrowQAAABY"]
[Sun Apr 12 03:36:36.638558 2026] [:error] [pid 44701:tid 44779] [client 20.203.242.229:10972] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "adqixBGZAP4MrlxEPFdo2gAAAEc"]
[Sun Apr 12 03:36:37.102976 2026] [:error] [pid 44701:tid 44775] [client 20.203.242.229:11036] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "adqixRGZAP4MrlxEPFdo3gAAAEM"]
[Sun Apr 12 03:36:37.589696 2026] [:error] [pid 36938:tid 36950] [client 20.203.242.229:11090] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "adqixYSWpa_VL1JPU6wN9QAAAYo"]
[Sun Apr 12 03:36:38.056438 2026] [:error] [pid 44698:tid 44721] [client 20.203.242.229:11108] [client 20.203.242.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adqixhgoH9UWd-U3D56jjQAAAJI"]
[Sun Apr 12 03:36:38.536851 2026] [:error] [pid 45064:tid 45116] [client 20.203.242.229:11064] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f35.php"] [unique_id "adqixpcHBvLyJ6EUhUonmgAAAVc"]
[Sun Apr 12 03:36:39.005535 2026] [:error] [pid 44701:tid 44787] [client 20.203.242.229:10611] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f35.php"] [unique_id "adqixxGZAP4MrlxEPFdo4QAAAE0"]
[Sun Apr 12 03:36:39.480302 2026] [:error] [pid 44700:tid 44751] [client 20.203.242.229:10992] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f35.php"] [unique_id "adqix2ryPgh_uW4QPCmRewAAAMc"]
[Sun Apr 12 03:36:39.947691 2026] [:error] [pid 44698:tid 44704] [client 20.203.242.229:11176] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqixxgoH9UWd-U3D56jlAAAAIE"]
[Sun Apr 12 03:36:40.414998 2026] [:error] [pid 44700:tid 44748] [client 20.203.242.229:11125] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqiyGryPgh_uW4QPCmRfQAAAMQ"]
[Sun Apr 12 03:36:40.884001 2026] [:error] [pid 44700:tid 44745] [client 20.203.242.229:10562] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqiyGryPgh_uW4QPCmRfgAAAME"]
[Sun Apr 12 03:36:41.400595 2026] [:error] [pid 44701:tid 44773] [client 20.203.242.229:11010] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqiyRGZAP4MrlxEPFdo5wAAAEE"]
[Sun Apr 12 03:36:41.885638 2026] [:error] [pid 44701:tid 44794] [client 20.203.242.229:11124] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqiyRGZAP4MrlxEPFdo6wAAAFM"]
[Sun Apr 12 03:36:42.354391 2026] [:error] [pid 45064:tid 45094] [client 20.203.242.229:11038] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqiypcHBvLyJ6EUhUonoAAAAUI"]
[Sun Apr 12 03:36:42.837055 2026] [:error] [pid 44701:tid 44800] [client 20.203.242.229:11067] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqiyhGZAP4MrlxEPFdo8wAAAFg"]
[Sun Apr 12 03:36:43.319836 2026] [:error] [pid 36938:tid 36960] [client 20.203.242.229:11014] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqiy4SWpa_VL1JPU6wN9gAAAZQ"]
[Sun Apr 12 03:36:43.808899 2026] [:error] [pid 45064:tid 45104] [client 20.203.242.229:10598] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "adqiy5cHBvLyJ6EUhUonoQAAAUs"]
[Sun Apr 12 03:36:44.279595 2026] [:error] [pid 34152:tid 34159] [client 20.203.242.229:11033] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "adqizIFtE4RhFslT1DroxwAAAAU"]
[Sun Apr 12 03:36:44.787594 2026] [:error] [pid 44700:tid 44759] [client 20.203.242.229:11132] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "adqizGryPgh_uW4QPCmRgAAAAM8"]
[Sun Apr 12 03:36:45.262702 2026] [:error] [pid 44700:tid 44746] [client 20.203.242.229:10609] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "adqizWryPgh_uW4QPCmRggAAAMI"]
[Sun Apr 12 03:36:45.733006 2026] [:error] [pid 45064:tid 45093] [client 20.203.242.229:11135] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/k.php"] [unique_id "adqizZcHBvLyJ6EUhUonowAAAUE"]
[Sun Apr 12 03:36:46.254757 2026] [proxy_fcgi:error] [pid 45064:tid 45099] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:46.494597 2026] [proxy_fcgi:error] [pid 45064:tid 45097] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:46.732022 2026] [proxy_fcgi:error] [pid 45064:tid 45103] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:46.969411 2026] [proxy_fcgi:error] [pid 45064:tid 45092] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:47.207035 2026] [proxy_fcgi:error] [pid 45064:tid 45101] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:47.445222 2026] [proxy_fcgi:error] [pid 45064:tid 45110] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:47.683626 2026] [proxy_fcgi:error] [pid 45064:tid 45102] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:47.924917 2026] [proxy_fcgi:error] [pid 45064:tid 45104] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:48.406227 2026] [proxy_fcgi:error] [pid 45064:tid 45098] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:48.645463 2026] [proxy_fcgi:error] [pid 45064:tid 45093] [client 20.203.242.229:10590] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 03:36:48.879378 2026] [:error] [pid 45064:tid 45109] [client 20.203.242.229:10590] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "adqi0JcHBvLyJ6EUhUontQAAAVA"]
[Sun Apr 12 03:36:49.344063 2026] [:error] [pid 44700:tid 44746] [client 20.203.242.229:11242] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "adqi0WryPgh_uW4QPCmRjgAAAMI"]
[Sun Apr 12 03:36:49.817917 2026] [:error] [pid 44700:tid 44764] [client 20.203.242.229:10560] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "adqi0WryPgh_uW4QPCmRkAAAANQ"]
[Sun Apr 12 03:36:50.290321 2026] [:error] [pid 34152:tid 34174] [client 20.203.242.229:11134] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "adqi0oFtE4RhFslT1DrozAAAABQ"]
[Sun Apr 12 03:36:50.759138 2026] [:error] [pid 44700:tid 44767] [client 20.203.242.229:11198] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "adqi0mryPgh_uW4QPCmRlgAAANc"]
[Sun Apr 12 03:36:51.248002 2026] [:error] [pid 34152:tid 34166] [client 20.203.242.229:11052] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "adqi04FtE4RhFslT1DrozQAAAAw"]
[Sun Apr 12 03:36:51.716661 2026] [:error] [pid 44700:tid 44750] [client 20.203.242.229:10583] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "adqi02ryPgh_uW4QPCmRmAAAAMY"]
[Sun Apr 12 03:36:52.186174 2026] [:error] [pid 45064:tid 45097] [client 20.203.242.229:10576] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "adqi1JcHBvLyJ6EUhUontwAAAUU"]
[Sun Apr 12 03:36:52.655156 2026] [:error] [pid 44700:tid 44768] [client 20.203.242.229:11046] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "adqi1GryPgh_uW4QPCmRnAAAANg"]
[Sun Apr 12 03:36:53.125349 2026] [:error] [pid 44700:tid 44756] [client 20.203.242.229:10573] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "adqi1WryPgh_uW4QPCmRoAAAAMw"]
[Sun Apr 12 03:36:53.593506 2026] [:error] [pid 45064:tid 45103] [client 20.203.242.229:11020] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "adqi1ZcHBvLyJ6EUhUonuAAAAUo"]
[Sun Apr 12 03:36:54.060343 2026] [:error] [pid 36909:tid 36921] [client 20.203.242.229:11133] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "adqi1kGk5GhxTCzHUOpWjAAAAQo"]
[Sun Apr 12 03:36:54.523753 2026] [:error] [pid 36909:tid 36911] [client 20.203.242.229:11047] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "adqi1kGk5GhxTCzHUOpWjQAAAQA"]
[Sun Apr 12 03:36:54.995618 2026] [:error] [pid 34152:tid 34163] [client 20.203.242.229:11152] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "adqi1oFtE4RhFslT1Dro0QAAAAk"]
[Sun Apr 12 03:36:55.462925 2026] [:error] [pid 44698:tid 44713] [client 20.203.242.229:11048] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "adqi1xgoH9UWd-U3D56jnAAAAIo"]
[Sun Apr 12 03:36:55.929575 2026] [:error] [pid 45064:tid 45095] [client 20.203.242.229:11131] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "adqi15cHBvLyJ6EUhUonvgAAAUM"]
[Sun Apr 12 03:36:56.401633 2026] [:error] [pid 45064:tid 45111] [client 20.203.242.229:11101] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqi2JcHBvLyJ6EUhUonvwAAAVI"]
[Sun Apr 12 03:36:56.867939 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:10580] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqi2EGk5GhxTCzHUOpWkQAAARU"]
[Sun Apr 12 03:36:57.335248 2026] [:error] [pid 36909:tid 36926] [client 20.203.242.229:11028] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqi2UGk5GhxTCzHUOpWlAAAAQ8"]
[Sun Apr 12 03:36:57.812027 2026] [:error] [pid 36938:tid 36945] [client 20.203.242.229:11102] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "adqi2YSWpa_VL1JPU6wOCgAAAYU"]
[Sun Apr 12 03:36:58.284040 2026] [:error] [pid 44698:tid 44724] [client 20.203.242.229:11063] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/simple.php"] [unique_id "adqi2hgoH9UWd-U3D56jngAAAJU"]
[Sun Apr 12 03:36:58.783822 2026] [:error] [pid 36909:tid 36921] [client 20.203.242.229:11061] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/simple.php"] [unique_id "adqi2kGk5GhxTCzHUOpWnAAAAQo"]
[Sun Apr 12 03:36:59.266965 2026] [:error] [pid 36909:tid 36919] [client 20.203.242.229:11190] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/simple.php"] [unique_id "adqi20Gk5GhxTCzHUOpWngAAAQg"]
[Sun Apr 12 03:36:59.745304 2026] [:error] [pid 34152:tid 34178] [client 20.203.242.229:11063] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/simple.php"] [unique_id "adqi24FtE4RhFslT1Dro1wAAABg"]
[Sun Apr 12 03:37:00.264768 2026] [:error] [pid 36909:tid 36925] [client 20.203.242.229:10614] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ew.php"] [unique_id "adqi3EGk5GhxTCzHUOpWowAAAQ4"]
[Sun Apr 12 03:37:00.737818 2026] [:error] [pid 45064:tid 45096] [client 20.203.242.229:11024] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ew.php"] [unique_id "adqi3JcHBvLyJ6EUhUonyAAAAUQ"]
[Sun Apr 12 03:37:01.224909 2026] [:error] [pid 34152:tid 34160] [client 20.203.242.229:11065] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ew.php"] [unique_id "adqi3YFtE4RhFslT1Dro2QAAAAY"]
[Sun Apr 12 03:37:01.692908 2026] [:error] [pid 36909:tid 36924] [client 20.203.242.229:11044] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ew.php"] [unique_id "adqi3UGk5GhxTCzHUOpWqwAAAQ0"]
[Sun Apr 12 03:37:02.193501 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:10605] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file21.php"] [unique_id "adqi3kGk5GhxTCzHUOpWrQAAARU"]
[Sun Apr 12 03:37:02.687758 2026] [:error] [pid 34152:tid 34174] [client 20.203.242.229:10575] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file21.php"] [unique_id "adqi3oFtE4RhFslT1Dro2wAAABQ"]
[Sun Apr 12 03:37:03.193149 2026] [:error] [pid 36909:tid 36916] [client 20.203.242.229:10616] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file21.php"] [unique_id "adqi30Gk5GhxTCzHUOpWsQAAAQU"]
[Sun Apr 12 03:37:03.685949 2026] [:error] [pid 45064:tid 45106] [client 20.203.242.229:10591] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file21.php"] [unique_id "adqi35cHBvLyJ6EUhUonzQAAAU0"]
[Sun Apr 12 03:37:04.155123 2026] [:error] [pid 44700:tid 44757] [client 20.203.242.229:10887] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class19.php"] [unique_id "adqi4GryPgh_uW4QPCmRpgAAAM0"]
[Sun Apr 12 03:37:04.629677 2026] [:error] [pid 44700:tid 44762] [client 20.203.242.229:10603] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class19.php"] [unique_id "adqi4GryPgh_uW4QPCmRqAAAANI"]
[Sun Apr 12 03:37:05.158294 2026] [:error] [pid 44701:tid 44773] [client 20.203.242.229:11123] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class19.php"] [unique_id "adqi4RGZAP4MrlxEPFdpBgAAAEE"]
[Sun Apr 12 03:37:05.632879 2026] [:error] [pid 45064:tid 45108] [client 20.203.242.229:11169] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class19.php"] [unique_id "adqi4ZcHBvLyJ6EUhUon1AAAAU8"]
[Sun Apr 12 03:37:06.102339 2026] [:error] [pid 44700:tid 44753] [client 20.203.242.229:10584] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class20.php"] [unique_id "adqi4mryPgh_uW4QPCmRqgAAAMk"]
[Sun Apr 12 03:37:06.567149 2026] [:error] [pid 34152:tid 34163] [client 20.203.242.229:10884] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class20.php"] [unique_id "adqi4oFtE4RhFslT1Dro4AAAAAk"]
[Sun Apr 12 03:37:07.042619 2026] [:error] [pid 34152:tid 34169] [client 20.203.242.229:10925] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class20.php"] [unique_id "adqi44FtE4RhFslT1Dro4wAAAA8"]
[Sun Apr 12 03:37:07.516092 2026] [:error] [pid 36909:tid 36926] [client 20.203.242.229:10597] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class20.php"] [unique_id "adqi40Gk5GhxTCzHUOpWvAAAAQ8"]
[Sun Apr 12 03:37:07.978223 2026] [:error] [pid 44701:tid 44794] [client 20.203.242.229:11059] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file18.php"] [unique_id "adqi4xGZAP4MrlxEPFdpCwAAAFM"]
[Sun Apr 12 03:37:08.457138 2026] [:error] [pid 36909:tid 36912] [client 20.203.242.229:11069] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file18.php"] [unique_id "adqi5EGk5GhxTCzHUOpWvgAAAQE"]
[Sun Apr 12 03:37:08.924687 2026] [:error] [pid 44701:tid 44790] [client 20.203.242.229:10579] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file18.php"] [unique_id "adqi5BGZAP4MrlxEPFdpDAAAAE8"]
[Sun Apr 12 03:37:09.398130 2026] [:error] [pid 36938:tid 36954] [client 20.203.242.229:10585] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file18.php"] [unique_id "adqi5YSWpa_VL1JPU6wOEAAAAY4"]
[Sun Apr 12 03:37:09.865562 2026] [:error] [pid 34152:tid 34170] [client 20.203.242.229:10891] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/vee.php"] [unique_id "adqi5YFtE4RhFslT1Dro5QAAABA"]
[Sun Apr 12 03:37:10.338084 2026] [:error] [pid 44698:tid 44723] [client 20.203.242.229:11062] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/vee.php"] [unique_id "adqi5hgoH9UWd-U3D56jowAAAJQ"]
[Sun Apr 12 03:37:10.813553 2026] [:error] [pid 44701:tid 44789] [client 20.203.242.229:11016] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/vee.php"] [unique_id "adqi5hGZAP4MrlxEPFdpDwAAAE4"]
[Sun Apr 12 03:37:11.278708 2026] [:error] [pid 44698:tid 44704] [client 20.203.242.229:10910] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/vee.php"] [unique_id "adqi5xgoH9UWd-U3D56jqQAAAIE"]
[Sun Apr 12 03:37:11.749826 2026] [:error] [pid 36938:tid 36949] [client 20.203.242.229:11026] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "adqi54SWpa_VL1JPU6wOFQAAAYk"]
[Sun Apr 12 03:37:12.213955 2026] [:error] [pid 36909:tid 36932] [client 20.203.242.229:11126] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "adqi6EGk5GhxTCzHUOpWwwAAARU"]
[Sun Apr 12 03:37:12.682865 2026] [:error] [pid 45064:tid 45093] [client 20.203.242.229:11043] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "adqi6JcHBvLyJ6EUhUon1wAAAUE"]
[Sun Apr 12 03:37:13.155690 2026] [:error] [pid 44701:tid 44774] [client 20.203.242.229:10592] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "adqi6RGZAP4MrlxEPFdpGgAAAEI"]
[Sun Apr 12 03:37:13.653404 2026] [:error] [pid 44701:tid 44796] [client 20.203.242.229:11053] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adqi6RGZAP4MrlxEPFdpHgAAAFU"]
[Sun Apr 12 03:37:14.132803 2026] [:error] [pid 44701:tid 44791] [client 20.203.242.229:11120] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adqi6hGZAP4MrlxEPFdpIgAAAFA"]
[Sun Apr 12 03:37:14.666448 2026] [:error] [pid 44700:tid 44751] [client 20.203.242.229:10601] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adqi6mryPgh_uW4QPCmRtgAAAMc"]
[Sun Apr 12 03:37:15.167268 2026] [:error] [pid 44700:tid 44749] [client 20.203.242.229:10578] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "adqi62ryPgh_uW4QPCmRuAAAAMU"]
[Sun Apr 12 03:37:15.663575 2026] [:error] [pid 34152:tid 34178] [client 20.203.242.229:11137] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "adqi64FtE4RhFslT1Dro5wAAABg"]
[Sun Apr 12 03:37:16.155196 2026] [:error] [pid 44700:tid 44750] [client 20.203.242.229:11070] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "adqi7GryPgh_uW4QPCmRuwAAAMY"]
[Sun Apr 12 03:37:16.640061 2026] [:error] [pid 45064:tid 45097] [client 20.203.242.229:11018] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "adqi7JcHBvLyJ6EUhUon3gAAAUU"]
[Sun Apr 12 03:37:17.113863 2026] [:error] [pid 36938:tid 36956] [client 20.203.242.229:11042] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "adqi7YSWpa_VL1JPU6wOGQAAAZA"]
[Sun Apr 12 03:37:17.592298 2026] [:error] [pid 36909:tid 36925] [client 20.203.242.229:10570] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adqi7UGk5GhxTCzHUOpWyQAAAQ4"]
[Sun Apr 12 03:37:18.076955 2026] [:error] [pid 36938:tid 36950] [client 20.203.242.229:10586] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adqi7oSWpa_VL1JPU6wOGwAAAYo"]
[Sun Apr 12 03:37:18.548101 2026] [:error] [pid 44701:tid 44793] [client 20.203.242.229:10913] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adqi7hGZAP4MrlxEPFdpLgAAAFI"]
[Sun Apr 12 03:37:19.029038 2026] [:error] [pid 44698:tid 44725] [client 20.203.242.229:10880] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "adqi7xgoH9UWd-U3D56jrgAAAJY"]
[Sun Apr 12 03:37:19.537935 2026] [:error] [pid 44698:tid 44703] [client 20.203.242.229:10608] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "adqi7xgoH9UWd-U3D56jsAAAAIA"]
[Sun Apr 12 03:37:20.044933 2026] [:error] [pid 36909:tid 36916] [client 20.203.242.229:10572] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "adqi8EGk5GhxTCzHUOpW0wAAAQU"]
[Sun Apr 12 03:37:20.509905 2026] [:error] [pid 36909:tid 36912] [client 20.203.242.229:10896] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "adqi8EGk5GhxTCzHUOpW1wAAAQE"]
[Sun Apr 12 03:37:21.056625 2026] [:error] [pid 36938:tid 36941] [client 20.203.242.229:11029] [client 20.203.242.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "adqi8YSWpa_VL1JPU6wOHQAAAYE"]
[Sun Apr 12 05:45:13.635106 2026] [:error] [pid 25328:tid 25408] [client 104.28.163.39:38944] [client 104.28.163.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "adrA6cxUaQZxT-e0YsDheAAAAFg"]
[Sun Apr 12 13:32:04.857894 2026] [:error] [pid 25328:tid 25396] [client 103.99.181.113:52112] [client 103.99.181.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.99.181.113, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adsuVMxUaQZxT-e0YsCfXwAAAFM"]
[Sun Apr 12 13:32:04.868165 2026] [proxy_fcgi:error] [pid 25328:tid 25396] [client 103.99.181.113:52112] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 14:10:07.429403 2026] [autoindex:error] [pid 25328:tid 25375] [client 143.110.240.70:54781] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 17:53:46.985314 2026] [autoindex:error] [pid 25328:tid 25372] [client 143.110.240.70:52265] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Apr 13 05:26:29.136910 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:21466] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "adwOBeCGj3EEJtCwa0OGYgAAAQY"]
[Mon Apr 13 05:26:29.588943 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:21486] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "adwOBeCGj3EEJtCwa0OGZQAAARc"]
[Mon Apr 13 05:26:30.023240 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:21500] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "adwOBqyoXuZjocnxM5FjAQAAAIU"]
[Mon Apr 13 05:26:30.562249 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:21461] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "adwOBqyoXuZjocnxM5FjBAAAAIQ"]
[Mon Apr 13 05:26:31.110170 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:21445] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rkszbxbh.php"] [unique_id "adwOB6yoXuZjocnxM5FjBwAAAJY"]
[Mon Apr 13 05:26:31.686700 2026] [:error] [pid 34048:tid 34055] [client 20.151.218.28:21457] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rkszbxbh.php"] [unique_id "adwOB_SiQ_PJjlY5Ehzx4AAAAMU"]
[Mon Apr 13 05:26:32.341534 2026] [:error] [pid 34048:tid 34058] [client 20.151.218.28:21481] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rkszbxbh.php"] [unique_id "adwOCPSiQ_PJjlY5Ehzx4gAAAMg"]
[Mon Apr 13 05:26:32.812106 2026] [:error] [pid 33941:tid 33959] [client 20.151.218.28:21464] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rkszbxbh.php"] [unique_id "adwOCG_NKERAxgG-rYM0xAAAAAg"]
[Mon Apr 13 05:26:34.058119 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:21390] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanna1337.php"] [unique_id "adwOCuCGj3EEJtCwa0OGcAAAAQs"]
[Mon Apr 13 05:26:34.526180 2026] [:error] [pid 34048:tid 34062] [client 20.151.218.28:21376] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanna1337.php"] [unique_id "adwOCvSiQ_PJjlY5Ehzx5AAAAMw"]
[Mon Apr 13 05:26:35.025009 2026] [:error] [pid 33941:tid 33972] [client 20.151.218.28:21463] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanna1337.php"] [unique_id "adwOC2_NKERAxgG-rYM0yQAAABU"]
[Mon Apr 13 05:26:35.576436 2026] [:error] [pid 34048:tid 34051] [client 20.151.218.28:21467] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanna1337.php"] [unique_id "adwOC_SiQ_PJjlY5Ehzx5QAAAME"]
[Mon Apr 13 05:26:36.146071 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:21441] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gt.php"] [unique_id "adwODOCGj3EEJtCwa0OGcwAAAQw"]
[Mon Apr 13 05:26:36.581773 2026] [:error] [pid 11325:tid 11347] [client 20.151.218.28:21488] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gt.php"] [unique_id "adwODOCGj3EEJtCwa0OGdgAAARQ"]
[Mon Apr 13 05:26:37.054700 2026] [:error] [pid 33941:tid 33965] [client 20.151.218.28:21459] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gt.php"] [unique_id "adwODW_NKERAxgG-rYM0zAAAAA4"]
[Mon Apr 13 05:26:37.535312 2026] [:error] [pid 11325:tid 11330] [client 20.151.218.28:21382] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gt.php"] [unique_id "adwODeCGj3EEJtCwa0OGfAAAAQM"]
[Mon Apr 13 05:26:38.292065 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:21490] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/datab"] [unique_id "adwODhNHe8geO_lMeFaWCQAAAFg"]
[Mon Apr 13 05:26:38.987646 2026] [:error] [pid 33942:tid 33982] [client 20.151.218.28:21391] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/datab"] [unique_id "adwODhNHe8geO_lMeFaWCwAAAEM"]
[Mon Apr 13 05:26:39.522932 2026] [:error] [pid 34048:tid 34072] [client 20.151.218.28:21465] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/datab"] [unique_id "adwOD_SiQ_PJjlY5Ehzx7AAAANY"]
[Mon Apr 13 05:26:39.978423 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21446] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/datab"] [unique_id "adwOD6yoXuZjocnxM5FjGAAAAIE"]
[Mon Apr 13 05:26:40.874119 2026] [:error] [pid 33943:tid 34017] [client 20.151.218.28:21452] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/sxx.php"] [unique_id "adwOEKyoXuZjocnxM5FjGQAAAIs"]
[Mon Apr 13 05:26:41.912053 2026] [:error] [pid 33943:tid 34026] [client 20.151.218.28:21383] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/sxx.php"] [unique_id "adwOEayoXuZjocnxM5FjHAAAAJQ"]
[Mon Apr 13 05:26:42.667060 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:21474] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/sxx.php"] [unique_id "adwOEqyoXuZjocnxM5FjHwAAAIQ"]
[Mon Apr 13 05:26:43.174338 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:21487] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/sxx.php"] [unique_id "adwOE-CGj3EEJtCwa0OGiAAAAQ4"]
[Mon Apr 13 05:26:43.584859 2026] [:error] [pid 11325:tid 11336] [client 20.151.218.28:21447] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/r1.php"] [unique_id "adwOE-CGj3EEJtCwa0OGiQAAAQk"]
[Mon Apr 13 05:26:44.112958 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:21472] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/r1.php"] [unique_id "adwOFOCGj3EEJtCwa0OGiwAAAQo"]
[Mon Apr 13 05:26:44.934880 2026] [:error] [pid 33942:tid 33984] [client 20.151.218.28:21406] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/r1.php"] [unique_id "adwOFBNHe8geO_lMeFaWFQAAAEU"]
[Mon Apr 13 05:26:46.303052 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:21477] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css/r1.php"] [unique_id "adwOFuCGj3EEJtCwa0OGkQAAAQY"]
[Mon Apr 13 05:26:47.249013 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:21401] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rk1.php"] [unique_id "adwOF-CGj3EEJtCwa0OGlgAAAQw"]
[Mon Apr 13 05:26:48.101541 2026] [:error] [pid 34048:tid 34065] [client 20.151.218.28:21396] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rk1.php"] [unique_id "adwOGPSiQ_PJjlY5Ehzx8wAAAM8"]
[Mon Apr 13 05:26:49.217177 2026] [:error] [pid 34048:tid 34062] [client 20.151.218.28:21395] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rk1.php"] [unique_id "adwOGfSiQ_PJjlY5Ehzx-AAAAMw"]
[Mon Apr 13 05:26:50.136869 2026] [:error] [pid 33942:tid 33990] [client 20.151.218.28:21478] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rk1.php"] [unique_id "adwOGhNHe8geO_lMeFaWGAAAAEs"]
[Mon Apr 13 05:26:50.848750 2026] [:error] [pid 34048:tid 34052] [client 20.151.218.28:21381] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwOGvSiQ_PJjlY5EhzyAAAAAMI"]
[Mon Apr 13 05:26:51.862501 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:21398] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwOG6yoXuZjocnxM5FjSwAAAIU"]
[Mon Apr 13 05:26:52.916324 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:21380] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwOHOCGj3EEJtCwa0OGxQAAAQo"]
[Mon Apr 13 05:26:54.467524 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21495] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwOHqyoXuZjocnxM5FjUgAAAIE"]
[Mon Apr 13 05:26:55.777105 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:21475] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pegi.PhP8"] [unique_id "adwOH-CGj3EEJtCwa0OGzgAAAQY"]
[Mon Apr 13 05:26:57.323040 2026] [:error] [pid 11325:tid 11331] [client 20.151.218.28:21403] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pegi.PhP8"] [unique_id "adwOIeCGj3EEJtCwa0OG1gAAAQQ"]
[Mon Apr 13 05:26:58.333556 2026] [:error] [pid 33942:tid 33980] [client 20.151.218.28:21489] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pegi.PhP8"] [unique_id "adwOIhNHe8geO_lMeFaWJAAAAEE"]
[Mon Apr 13 05:26:59.451409 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:21387] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pegi.PhP8"] [unique_id "adwOI-CGj3EEJtCwa0OG5AAAAQc"]
[Mon Apr 13 05:27:00.699164 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:21378] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwOJOCGj3EEJtCwa0OG8AAAARM"]
[Mon Apr 13 05:27:01.596379 2026] [:error] [pid 33942:tid 33987] [client 20.151.218.28:21494] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwOJRNHe8geO_lMeFaWJwAAAEg"]
[Mon Apr 13 05:27:02.477147 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:21392] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwOJqyoXuZjocnxM5FjXAAAAI0"]
[Mon Apr 13 05:27:03.284158 2026] [:error] [pid 33942:tid 33981] [client 20.151.218.28:21499] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwOJxNHe8geO_lMeFaWKQAAAEI"]
[Mon Apr 13 05:27:03.869808 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:21385] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/suck.php"] [unique_id "adwOJ-CGj3EEJtCwa0OHBwAAAQo"]
[Mon Apr 13 05:27:04.327190 2026] [:error] [pid 11325:tid 11347] [client 20.151.218.28:21503] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/suck.php"] [unique_id "adwOKOCGj3EEJtCwa0OHDAAAARQ"]
[Mon Apr 13 05:27:05.249177 2026] [:error] [pid 33942:tid 34000] [client 20.151.218.28:21501] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/suck.php"] [unique_id "adwOKRNHe8geO_lMeFaWMQAAAFU"]
[Mon Apr 13 05:27:06.798890 2026] [:error] [pid 33942:tid 33979] [client 20.151.218.28:21443] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/suck.php"] [unique_id "adwOKhNHe8geO_lMeFaWPgAAAEA"]
[Mon Apr 13 05:27:07.751512 2026] [:error] [pid 33942:tid 34000] [client 20.151.218.28:21476] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hikudpno.php"] [unique_id "adwOKxNHe8geO_lMeFaWQgAAAFU"]
[Mon Apr 13 05:27:08.378378 2026] [:error] [pid 33943:tid 34026] [client 20.151.218.28:21448] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hikudpno.php"] [unique_id "adwOLKyoXuZjocnxM5FjbQAAAJQ"]
[Mon Apr 13 05:27:08.986785 2026] [:error] [pid 33942:tid 33984] [client 20.151.218.28:21473] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hikudpno.php"] [unique_id "adwOLBNHe8geO_lMeFaWSwAAAEU"]
[Mon Apr 13 05:27:09.499503 2026] [:error] [pid 33942:tid 33981] [client 20.151.218.28:21384] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hikudpno.php"] [unique_id "adwOLRNHe8geO_lMeFaWUwAAAEI"]
[Mon Apr 13 05:27:09.985595 2026] [:error] [pid 33942:tid 33996] [client 20.151.218.28:21453] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwOLRNHe8geO_lMeFaWVgAAAFE"]
[Mon Apr 13 05:27:10.506698 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:21400] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwOLhNHe8geO_lMeFaWWAAAAEc"]
[Mon Apr 13 05:27:11.170899 2026] [:error] [pid 33942:tid 33992] [client 20.151.218.28:21393] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwOLxNHe8geO_lMeFaWWwAAAE0"]
[Mon Apr 13 05:27:12.077745 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:21454] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwOMOCGj3EEJtCwa0OHHAAAARM"]
[Mon Apr 13 05:27:13.415999 2026] [:error] [pid 33943:tid 34029] [client 20.151.218.28:21399] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sure.php"] [unique_id "adwOMayoXuZjocnxM5FjcgAAAJc"]
[Mon Apr 13 05:27:13.892763 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:21348] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sure.php"] [unique_id "adwOMayoXuZjocnxM5FjdAAAAIo"]
[Mon Apr 13 05:27:14.627347 2026] [:error] [pid 33941:tid 33961] [client 20.151.218.28:21497] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sure.php"] [unique_id "adwOMm_NKERAxgG-rYM08QAAAAo"]
[Mon Apr 13 05:27:16.005994 2026] [:error] [pid 11325:tid 11335] [client 20.151.218.28:21319] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sure.php"] [unique_id "adwONOCGj3EEJtCwa0OHKAAAAQg"]
[Mon Apr 13 05:27:16.731753 2026] [:error] [pid 33941:tid 33968] [client 20.151.218.28:21404] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "adwONG_NKERAxgG-rYM09gAAABE"]
[Mon Apr 13 05:27:17.698202 2026] [:error] [pid 11325:tid 11327] [client 20.151.218.28:21502] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "adwONeCGj3EEJtCwa0OHMAAAAQA"]
[Mon Apr 13 05:27:18.688857 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:21437] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "adwONqyoXuZjocnxM5FjeAAAAI0"]
[Mon Apr 13 05:27:19.364889 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:21480] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "adwON6yoXuZjocnxM5FjegAAAJY"]
[Mon Apr 13 05:27:19.876444 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:21442] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4563.php"] [unique_id "adwONxNHe8geO_lMeFaWYwAAAFg"]
[Mon Apr 13 05:27:20.656707 2026] [:error] [pid 34048:tid 34069] [client 20.151.218.28:21330] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4563.php"] [unique_id "adwOOPSiQ_PJjlY5EhzyOwAAANM"]
[Mon Apr 13 05:27:21.630151 2026] [:error] [pid 34048:tid 34071] [client 20.151.218.28:21405] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4563.php"] [unique_id "adwOOfSiQ_PJjlY5EhzyPgAAANU"]
[Mon Apr 13 05:27:22.345763 2026] [:error] [pid 34048:tid 34067] [client 20.151.218.28:21470] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4563.php"] [unique_id "adwOOvSiQ_PJjlY5EhzyQwAAANE"]
[Mon Apr 13 05:27:23.154002 2026] [:error] [pid 33942:tid 33995] [client 20.151.218.28:21427] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wunaivpl.php"] [unique_id "adwOOxNHe8geO_lMeFaWaAAAAFA"]
[Mon Apr 13 05:27:23.718221 2026] [:error] [pid 33941:tid 33967] [client 20.151.218.28:21462] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wunaivpl.php"] [unique_id "adwOO2_NKERAxgG-rYM1AAAAABA"]
[Mon Apr 13 05:27:24.307272 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:21419] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wunaivpl.php"] [unique_id "adwOPOCGj3EEJtCwa0OHOgAAARY"]
[Mon Apr 13 05:27:24.737049 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:21449] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wunaivpl.php"] [unique_id "adwOPOCGj3EEJtCwa0OHOwAAARc"]
[Mon Apr 13 05:27:25.286146 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:21485] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/reune.php"] [unique_id "adwOPeCGj3EEJtCwa0OHQgAAAQ4"]
[Mon Apr 13 05:27:25.729692 2026] [:error] [pid 33942:tid 33989] [client 20.151.218.28:21411] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/reune.php"] [unique_id "adwOPRNHe8geO_lMeFaWagAAAEo"]
[Mon Apr 13 05:27:26.362576 2026] [:error] [pid 33942:tid 33999] [client 20.151.218.28:21372] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/reune.php"] [unique_id "adwOPhNHe8geO_lMeFaWbAAAAFQ"]
[Mon Apr 13 05:27:27.017939 2026] [:error] [pid 33943:tid 34017] [client 20.151.218.28:21313] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/reune.php"] [unique_id "adwOP6yoXuZjocnxM5FjfwAAAIs"]
[Mon Apr 13 05:27:27.581528 2026] [:error] [pid 33941:tid 33964] [client 20.151.218.28:21482] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dw.php"] [unique_id "adwOP2_NKERAxgG-rYM1CwAAAA0"]
[Mon Apr 13 05:27:28.183432 2026] [proxy_fcgi:error] [pid 33941:tid 33971] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:28.635113 2026] [proxy_fcgi:error] [pid 33941:tid 33961] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:29.065219 2026] [proxy_fcgi:error] [pid 33941:tid 33957] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:29.275850 2026] [proxy_fcgi:error] [pid 33941:tid 33965] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:29.485821 2026] [proxy_fcgi:error] [pid 33941:tid 33962] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:29.699391 2026] [proxy_fcgi:error] [pid 33941:tid 33954] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:29.932076 2026] [proxy_fcgi:error] [pid 33941:tid 33968] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:30.350819 2026] [proxy_fcgi:error] [pid 33941:tid 33955] [client 20.151.218.28:21471] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:27:30.555843 2026] [:error] [pid 33941:tid 33964] [client 20.151.218.28:21471] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/termps.php"] [unique_id "adwOQm_NKERAxgG-rYM1HQAAAA0"]
[Mon Apr 13 05:27:31.081069 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:21327] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/termps.php"] [unique_id "adwOQ6yoXuZjocnxM5FjiQAAAJY"]
[Mon Apr 13 05:27:31.694788 2026] [:error] [pid 33942:tid 33984] [client 20.151.218.28:21267] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/termps.php"] [unique_id "adwOQxNHe8geO_lMeFaWegAAAEU"]
[Mon Apr 13 05:27:32.130114 2026] [:error] [pid 33943:tid 34025] [client 20.151.218.28:21409] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/termps.php"] [unique_id "adwORKyoXuZjocnxM5FjkAAAAJM"]
[Mon Apr 13 05:27:32.661170 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21460] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwORKyoXuZjocnxM5FjlgAAAIE"]
[Mon Apr 13 05:27:33.495559 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:21428] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwOReCGj3EEJtCwa0OHVQAAAQs"]
[Mon Apr 13 05:27:34.397079 2026] [:error] [pid 33943:tid 34030] [client 20.151.218.28:21389] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwORqyoXuZjocnxM5FjoQAAAJg"]
[Mon Apr 13 05:27:34.841373 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:21347] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwORqyoXuZjocnxM5FjowAAAIc"]
[Mon Apr 13 05:27:35.315890 2026] [:error] [pid 34048:tid 34068] [client 20.151.218.28:21342] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOR_SiQ_PJjlY5EhzyYQAAANI"]
[Mon Apr 13 05:27:35.880261 2026] [:error] [pid 34048:tid 34054] [client 20.151.218.28:21498] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOR_SiQ_PJjlY5EhzyZAAAAMQ"]
[Mon Apr 13 05:27:36.452157 2026] [:error] [pid 33942:tid 33997] [client 20.151.218.28:21320] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOSBNHe8geO_lMeFaWfgAAAFI"]
[Mon Apr 13 05:27:37.038659 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:21458] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOSayoXuZjocnxM5FjrQAAAIw"]
[Mon Apr 13 05:27:37.516898 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:21420] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rin.php"] [unique_id "adwOSayoXuZjocnxM5FjsAAAAIc"]
[Mon Apr 13 05:27:38.325643 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:21402] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rin.php"] [unique_id "adwOSvSiQ_PJjlY5EhzyZgAAAMs"]
[Mon Apr 13 05:27:39.126271 2026] [:error] [pid 34048:tid 34055] [client 20.151.218.28:21436] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rin.php"] [unique_id "adwOS_SiQ_PJjlY5EhzybAAAAMU"]
[Mon Apr 13 05:27:40.879967 2026] [:error] [pid 11325:tid 11332] [client 20.151.218.28:21456] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rin.php"] [unique_id "adwOTOCGj3EEJtCwa0OHZwAAAQU"]
[Mon Apr 13 05:27:41.776728 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:21351] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packages.php"] [unique_id "adwOTeCGj3EEJtCwa0OHawAAARA"]
[Mon Apr 13 05:27:42.689498 2026] [:error] [pid 33943:tid 34014] [client 20.151.218.28:21314] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packages.php"] [unique_id "adwOTqyoXuZjocnxM5FjwwAAAIg"]
[Mon Apr 13 05:27:43.561485 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:21410] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packages.php"] [unique_id "adwOT-CGj3EEJtCwa0OHcAAAAQo"]
[Mon Apr 13 05:27:44.137338 2026] [:error] [pid 11325:tid 11327] [client 20.151.218.28:21322] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packages.php"] [unique_id "adwOUOCGj3EEJtCwa0OHcwAAAQA"]
[Mon Apr 13 05:27:44.884720 2026] [:error] [pid 33942:tid 33997] [client 20.151.218.28:21451] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi.php"] [unique_id "adwOUBNHe8geO_lMeFaWjQAAAFI"]
[Mon Apr 13 05:27:46.032210 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21341] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi.php"] [unique_id "adwOUqyoXuZjocnxM5FjywAAAIE"]
[Mon Apr 13 05:27:50.169335 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:21358] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi.php"] [unique_id "adwOVqyoXuZjocnxM5Fj2QAAAIw"]
[Mon Apr 13 05:27:54.999656 2026] [:error] [pid 11325:tid 11331] [client 20.151.218.28:21364] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi.php"] [unique_id "adwOWuCGj3EEJtCwa0OHkgAAAQQ"]
[Mon Apr 13 05:27:57.010623 2026] [:error] [pid 34048:tid 34064] [client 20.151.218.28:21435] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vbv.php"] [unique_id "adwOXfSiQ_PJjlY5EhzyfgAAAM4"]
[Mon Apr 13 05:27:59.444425 2026] [:error] [pid 33941:tid 33963] [client 20.151.218.28:21394] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vbv.php"] [unique_id "adwOX2_NKERAxgG-rYM1MQAAAAw"]
[Mon Apr 13 05:28:01.360858 2026] [:error] [pid 33943:tid 34022] [client 20.151.218.28:21438] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vbv.php"] [unique_id "adwOYayoXuZjocnxM5Fj-wAAAJA"]
[Mon Apr 13 05:28:02.092782 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:21434] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vbv.php"] [unique_id "adwOYuCGj3EEJtCwa0OHmgAAARY"]
[Mon Apr 13 05:28:04.024134 2026] [:error] [pid 34048:tid 34069] [client 20.151.218.28:21377] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "adwOZPSiQ_PJjlY5EhzykQAAANM"]
[Mon Apr 13 05:28:04.743899 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:21483] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "adwOZOCGj3EEJtCwa0OHngAAAQ4"]
[Mon Apr 13 05:28:05.363190 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:21493] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "adwOZeCGj3EEJtCwa0OHogAAARM"]
[Mon Apr 13 05:28:06.984015 2026] [:error] [pid 33941:tid 33968] [client 20.151.218.28:21333] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "adwOZm_NKERAxgG-rYM1QAAAABE"]
[Mon Apr 13 05:28:07.436917 2026] [:error] [pid 33942:tid 33980] [client 20.151.218.28:21439] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moderation.php"] [unique_id "adwOZxNHe8geO_lMeFaWrgAAAEE"]
[Mon Apr 13 05:28:07.884025 2026] [:error] [pid 33941:tid 33966] [client 20.151.218.28:21345] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moderation.php"] [unique_id "adwOZ2_NKERAxgG-rYM1QgAAAA8"]
[Mon Apr 13 05:28:08.742647 2026] [:error] [pid 33941:tid 33959] [client 20.151.218.28:21432] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moderation.php"] [unique_id "adwOaG_NKERAxgG-rYM1RgAAAAg"]
[Mon Apr 13 05:28:09.485439 2026] [:error] [pid 33942:tid 33996] [client 20.151.218.28:21316] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moderation.php"] [unique_id "adwOaRNHe8geO_lMeFaWtwAAAFE"]
[Mon Apr 13 05:28:10.101966 2026] [:error] [pid 33942:tid 33997] [client 20.151.218.28:21429] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple-shell.php"] [unique_id "adwOahNHe8geO_lMeFaWuAAAAFI"]
[Mon Apr 13 05:28:10.515793 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:21340] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple-shell.php"] [unique_id "adwOauCGj3EEJtCwa0OHqAAAARY"]
[Mon Apr 13 05:28:10.948351 2026] [:error] [pid 11325:tid 11348] [client 20.151.218.28:21332] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple-shell.php"] [unique_id "adwOauCGj3EEJtCwa0OHqwAAARU"]
[Mon Apr 13 05:28:11.635036 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21367] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple-shell.php"] [unique_id "adwOa6yoXuZjocnxM5FkEgAAAIE"]
[Mon Apr 13 05:28:12.167655 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:21484] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwObKyoXuZjocnxM5FkFAAAAIQ"]
[Mon Apr 13 05:28:12.895965 2026] [:error] [pid 33943:tid 34006] [client 20.151.218.28:21418] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwObKyoXuZjocnxM5FkGAAAAIA"]
[Mon Apr 13 05:28:13.677089 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:21469] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwObayoXuZjocnxM5FkHwAAAIc"]
[Mon Apr 13 05:28:14.163057 2026] [:error] [pid 33943:tid 34022] [client 20.151.218.28:21318] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwObqyoXuZjocnxM5FkIQAAAJA"]
[Mon Apr 13 05:28:14.658979 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:21444] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwObqyoXuZjocnxM5FkJQAAAIQ"]
[Mon Apr 13 05:28:15.194091 2026] [:error] [pid 33942:tid 33979] [client 20.151.218.28:21431] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwObxNHe8geO_lMeFaWvQAAAEA"]
[Mon Apr 13 05:28:15.805650 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:21328] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwOb-CGj3EEJtCwa0OHuQAAAQc"]
[Mon Apr 13 05:28:16.353502 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:21425] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwOcOCGj3EEJtCwa0OHwgAAAQs"]
[Mon Apr 13 05:28:17.003518 2026] [:error] [pid 33943:tid 34030] [client 20.151.218.28:21450] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bsr.php"] [unique_id "adwOcayoXuZjocnxM5FkMgAAAJg"]
[Mon Apr 13 05:28:17.774706 2026] [:error] [pid 34048:tid 34054] [client 20.151.218.28:21346] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bsr.php"] [unique_id "adwOcfSiQ_PJjlY5EhzypAAAAMQ"]
[Mon Apr 13 05:28:18.313105 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:21299] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bsr.php"] [unique_id "adwOcqyoXuZjocnxM5FkNAAAAIU"]
[Mon Apr 13 05:28:18.790591 2026] [:error] [pid 33943:tid 34027] [client 20.151.218.28:21407] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bsr.php"] [unique_id "adwOcqyoXuZjocnxM5FkNgAAAJU"]
[Mon Apr 13 05:28:19.460605 2026] [:error] [pid 34048:tid 34058] [client 20.151.218.28:21388] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ans.php"] [unique_id "adwOc_SiQ_PJjlY5EhzyqwAAAMg"]
[Mon Apr 13 05:28:19.900992 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:21323] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ans.php"] [unique_id "adwOc6yoXuZjocnxM5FkPgAAAIc"]
[Mon Apr 13 05:28:20.351727 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:21397] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ans.php"] [unique_id "adwOdOCGj3EEJtCwa0OIDAAAARA"]
[Mon Apr 13 05:28:21.353250 2026] [:error] [pid 33943:tid 34022] [client 20.151.218.28:21260] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ans.php"] [unique_id "adwOdayoXuZjocnxM5FkQwAAAJA"]
[Mon Apr 13 05:28:21.895825 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:21356] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tot.php"] [unique_id "adwOdeCGj3EEJtCwa0OIGAAAARA"]
[Mon Apr 13 05:28:22.317598 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:21413] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tot.php"] [unique_id "adwOduCGj3EEJtCwa0OIGwAAAQs"]
[Mon Apr 13 05:28:22.838497 2026] [:error] [pid 11325:tid 11336] [client 20.151.218.28:21440] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tot.php"] [unique_id "adwOduCGj3EEJtCwa0OIHwAAAQk"]
[Mon Apr 13 05:28:23.265476 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:21315] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-tot.php"] [unique_id "adwOd-CGj3EEJtCwa0OIIgAAAQo"]
[Mon Apr 13 05:28:23.695230 2026] [:error] [pid 33942:tid 33980] [client 20.151.218.28:21455] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Core-wp.php"] [unique_id "adwOdxNHe8geO_lMeFaW2wAAAEE"]
[Mon Apr 13 05:28:24.257980 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:21360] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Core-wp.php"] [unique_id "adwOeBNHe8geO_lMeFaW3AAAAFg"]
[Mon Apr 13 05:28:25.215106 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:21338] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Core-wp.php"] [unique_id "adwOeayoXuZjocnxM5FkSAAAAJY"]
[Mon Apr 13 05:28:25.801773 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:21496] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Core-wp.php"] [unique_id "adwOeeCGj3EEJtCwa0OIMwAAARM"]
[Mon Apr 13 05:28:26.435163 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:21492] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/src.php"] [unique_id "adwOehNHe8geO_lMeFaW3wAAAEc"]
[Mon Apr 13 05:28:27.410363 2026] [:error] [pid 33942:tid 33997] [client 20.151.218.28:21312] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/src.php"] [unique_id "adwOexNHe8geO_lMeFaW4QAAAFI"]
[Mon Apr 13 05:28:28.261865 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:21353] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/src.php"] [unique_id "adwOfKyoXuZjocnxM5FkTQAAAIc"]
[Mon Apr 13 05:28:29.217577 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:21483] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/src.php"] [unique_id "adwOfRNHe8geO_lMeFaW5QAAAEY"]
[Mon Apr 13 05:28:29.908100 2026] [:error] [pid 11325:tid 11347] [client 20.151.218.28:21324] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo/v2.php"] [unique_id "adwOfeCGj3EEJtCwa0OIRgAAARQ"]
[Mon Apr 13 05:28:30.602929 2026] [proxy_fcgi:error] [pid 33943:tid 34026] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:30.814667 2026] [proxy_fcgi:error] [pid 33943:tid 34012] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:31.023977 2026] [proxy_fcgi:error] [pid 33943:tid 34020] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:32.511450 2026] [proxy_fcgi:error] [pid 33943:tid 34010] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:33.027831 2026] [proxy_fcgi:error] [pid 33943:tid 34006] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:33.246902 2026] [proxy_fcgi:error] [pid 33943:tid 34023] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:33.456905 2026] [proxy_fcgi:error] [pid 33943:tid 34015] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:33.793107 2026] [proxy_fcgi:error] [pid 33943:tid 34007] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:36.328801 2026] [proxy_fcgi:error] [pid 33943:tid 34027] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:36.581859 2026] [proxy_fcgi:error] [pid 33943:tid 34017] [client 20.151.218.28:21286] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:28:36.916958 2026] [:error] [pid 33943:tid 34022] [client 20.151.218.28:21286] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luf.php"] [unique_id "adwOhKyoXuZjocnxM5FkbwAAAJA"]
[Mon Apr 13 05:28:37.484732 2026] [:error] [pid 33942:tid 34001] [client 20.151.218.28:21356] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luf.php"] [unique_id "adwOhRNHe8geO_lMeFaW9wAAAFY"]
[Mon Apr 13 05:28:37.957957 2026] [:error] [pid 34048:tid 34056] [client 20.151.218.28:21408] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luf.php"] [unique_id "adwOhfSiQ_PJjlY5EhzyuAAAAMY"]
[Mon Apr 13 05:28:38.727171 2026] [:error] [pid 34048:tid 34064] [client 20.151.218.28:21359] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luf.php"] [unique_id "adwOhvSiQ_PJjlY5EhzyvQAAAM4"]
[Mon Apr 13 05:28:39.537402 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:21254] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs2.php"] [unique_id "adwOh6yoXuZjocnxM5FkcQAAAIc"]
[Mon Apr 13 05:28:40.545096 2026] [:error] [pid 34048:tid 34074] [client 20.151.218.28:21251] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs2.php"] [unique_id "adwOiPSiQ_PJjlY5EhzyxgAAANg"]
[Mon Apr 13 05:28:42.711491 2026] [:error] [pid 33942:tid 33987] [client 20.151.218.28:21386] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs2.php"] [unique_id "adwOihNHe8geO_lMeFaXCAAAAEg"]
[Mon Apr 13 05:28:43.512786 2026] [:error] [pid 34048:tid 34059] [client 20.151.218.28:21188] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs2.php"] [unique_id "adwOi_SiQ_PJjlY5EhzyyQAAAMk"]
[Mon Apr 13 05:28:44.169211 2026] [:error] [pid 34048:tid 34072] [client 20.151.218.28:21339] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wf.php"] [unique_id "adwOjPSiQ_PJjlY5EhzyywAAANY"]
[Mon Apr 13 05:28:44.889657 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:21326] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wf.php"] [unique_id "adwOjKyoXuZjocnxM5FkeQAAAIk"]
[Mon Apr 13 05:28:45.749647 2026] [:error] [pid 34048:tid 34060] [client 20.151.218.28:21417] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wf.php"] [unique_id "adwOjfSiQ_PJjlY5EhzyzgAAAMo"]
[Mon Apr 13 05:28:47.204694 2026] [:error] [pid 11325:tid 11331] [client 20.151.218.28:21416] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wf.php"] [unique_id "adwOj-CGj3EEJtCwa0OIdAAAAQQ"]
[Mon Apr 13 05:28:47.922941 2026] [:error] [pid 33943:tid 34025] [client 20.151.218.28:21335] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vcard.php"] [unique_id "adwOj6yoXuZjocnxM5FkfwAAAJM"]
[Mon Apr 13 05:28:48.379547 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:21412] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vcard.php"] [unique_id "adwOkKyoXuZjocnxM5FkgwAAAI0"]
[Mon Apr 13 05:28:48.802611 2026] [:error] [pid 34048:tid 34071] [client 20.151.218.28:21253] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vcard.php"] [unique_id "adwOkPSiQ_PJjlY5Ehzy1QAAANU"]
[Mon Apr 13 05:28:49.284372 2026] [:error] [pid 33943:tid 34014] [client 20.151.218.28:21344] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vcard.php"] [unique_id "adwOkayoXuZjocnxM5FkhwAAAIg"]
[Mon Apr 13 05:28:49.767128 2026] [:error] [pid 33942:tid 33999] [client 20.151.218.28:21415] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwOkRNHe8geO_lMeFaXFAAAAFQ"]
[Mon Apr 13 05:28:50.433244 2026] [:error] [pid 11325:tid 11347] [client 20.151.218.28:21250] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwOkuCGj3EEJtCwa0OIewAAARQ"]
[Mon Apr 13 05:28:51.026090 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:21424] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwOk_SiQ_PJjlY5Ehzy2QAAAMs"]
[Mon Apr 13 05:28:52.005112 2026] [:error] [pid 33942:tid 33982] [client 20.151.218.28:21371] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwOlBNHe8geO_lMeFaXGAAAAEM"]
[Mon Apr 13 05:28:55.612752 2026] [:error] [pid 11325:tid 11327] [client 20.151.218.28:21426] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddgg.php"] [unique_id "adwOl-CGj3EEJtCwa0OIhgAAAQA"]
[Mon Apr 13 05:28:57.029711 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:21422] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddgg.php"] [unique_id "adwOmeCGj3EEJtCwa0OIigAAARY"]
[Mon Apr 13 05:28:57.818057 2026] [:error] [pid 33942:tid 33988] [client 20.151.218.28:21362] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddgg.php"] [unique_id "adwOmRNHe8geO_lMeFaXJgAAAEk"]
[Mon Apr 13 05:28:58.369363 2026] [:error] [pid 33943:tid 34024] [client 20.151.218.28:21331] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ddgg.php"] [unique_id "adwOmqyoXuZjocnxM5FklwAAAJI"]
[Mon Apr 13 05:28:59.200783 2026] [:error] [pid 33943:tid 34006] [client 20.151.218.28:21375] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwOm6yoXuZjocnxM5FknAAAAIA"]
[Mon Apr 13 05:29:01.542449 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:21249] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwOnayoXuZjocnxM5FkpQAAAIk"]
[Mon Apr 13 05:29:03.256630 2026] [:error] [pid 11325:tid 11330] [client 20.151.218.28:21468] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwOn-CGj3EEJtCwa0OInQAAAQM"]
[Mon Apr 13 05:29:04.351282 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:21457] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rc.php7"] [unique_id "adwOoOCGj3EEJtCwa0OIowAAARY"]
[Mon Apr 13 05:29:05.146987 2026] [:error] [pid 11325:tid 11331] [client 20.151.218.28:21184] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOoeCGj3EEJtCwa0OIqAAAAQQ"]
[Mon Apr 13 05:29:05.617506 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:21273] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOoeCGj3EEJtCwa0OIqwAAAQs"]
[Mon Apr 13 05:29:06.770478 2026] [:error] [pid 34048:tid 34051] [client 20.151.218.28:21304] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOovSiQ_PJjlY5Ehzy4wAAAME"]
[Mon Apr 13 05:29:07.438547 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:21269] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/indo.php"] [unique_id "adwOo-CGj3EEJtCwa0OItgAAAQw"]
[Mon Apr 13 05:29:07.947678 2026] [:error] [pid 33941:tid 33965] [client 20.151.218.28:21202] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pu.php"] [unique_id "adwOo2_NKERAxgG-rYM1jgAAAA4"]
[Mon Apr 13 05:29:08.380311 2026] [:error] [pid 34048:tid 34065] [client 20.151.218.28:21352] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pu.php"] [unique_id "adwOpPSiQ_PJjlY5Ehzy6QAAAM8"]
[Mon Apr 13 05:29:08.878367 2026] [:error] [pid 11325:tid 11327] [client 20.151.218.28:21279] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pu.php"] [unique_id "adwOpOCGj3EEJtCwa0OIwAAAAQA"]
[Mon Apr 13 05:29:09.477421 2026] [:error] [pid 11325:tid 11330] [client 20.151.218.28:21334] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pu.php"] [unique_id "adwOpeCGj3EEJtCwa0OIxAAAAQM"]
[Mon Apr 13 05:29:10.000577 2026] [:error] [pid 33941:tid 33968] [client 20.151.218.28:21293] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/docs.php"] [unique_id "adwOpW_NKERAxgG-rYM1jwAAABE"]
[Mon Apr 13 05:29:10.514647 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:21491] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/docs.php"] [unique_id "adwOpuCGj3EEJtCwa0OIyQAAARg"]
[Mon Apr 13 05:29:11.418351 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:21223] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/docs.php"] [unique_id "adwOp6yoXuZjocnxM5FkrwAAAJY"]
[Mon Apr 13 05:29:12.005940 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:21370] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/docs.php"] [unique_id "adwOqOCGj3EEJtCwa0OI0AAAAQo"]
[Mon Apr 13 05:29:12.459417 2026] [:error] [pid 11325:tid 11329] [client 20.151.218.28:21272] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/cache.php"] [unique_id "adwOqOCGj3EEJtCwa0OI1AAAAQI"]
[Mon Apr 13 05:29:13.289390 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:21479] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/cache.php"] [unique_id "adwOqeCGj3EEJtCwa0OI1gAAAQ8"]
[Mon Apr 13 05:29:13.926982 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:21296] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/cache.php"] [unique_id "adwOqeCGj3EEJtCwa0OI2AAAARg"]
[Mon Apr 13 05:29:14.577351 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:21255] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/cache.php"] [unique_id "adwOquCGj3EEJtCwa0OI3AAAAQY"]
[Mon Apr 13 05:29:15.201970 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:21392] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "adwOq-CGj3EEJtCwa0OI4QAAARY"]
[Mon Apr 13 05:29:15.648900 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:21301] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "adwOq-CGj3EEJtCwa0OI5gAAARE"]
[Mon Apr 13 05:29:16.229905 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:21317] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "adwOrOCGj3EEJtCwa0OI7AAAAQY"]
[Mon Apr 13 05:29:16.889360 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:21414] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "adwOrOCGj3EEJtCwa0OI7wAAARc"]
[Mon Apr 13 05:29:17.398804 2026] [:error] [pid 33941:tid 33955] [client 20.151.218.28:21248] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/XX.php"] [unique_id "adwOrW_NKERAxgG-rYM1lwAAAAU"]
[Mon Apr 13 05:29:17.818493 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:21277] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/XX.php"] [unique_id "adwOreCGj3EEJtCwa0OI9AAAARg"]
[Mon Apr 13 05:29:18.386917 2026] [:error] [pid 33942:tid 33989] [client 20.151.218.28:21229] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/XX.php"] [unique_id "adwOrhNHe8geO_lMeFaXRAAAAEo"]
[Mon Apr 13 05:29:19.221708 2026] [:error] [pid 34048:tid 34051] [client 20.151.218.28:21271] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/XX.php"] [unique_id "adwOr_SiQ_PJjlY5Ehzy-QAAAME"]
[Mon Apr 13 05:29:19.756079 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:21220] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwOrxNHe8geO_lMeFaXRgAAAEc"]
[Mon Apr 13 05:29:20.293491 2026] [:error] [pid 33941:tid 33968] [client 20.151.218.28:21257] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwOsG_NKERAxgG-rYM1nQAAABE"]
[Mon Apr 13 05:29:20.721246 2026] [:error] [pid 33941:tid 33953] [client 20.151.218.28:21298] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwOsG_NKERAxgG-rYM1nwAAAAM"]
[Mon Apr 13 05:29:21.190408 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:21274] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwOsayoXuZjocnxM5FkuAAAAIc"]
[Mon Apr 13 05:29:21.604100 2026] [:error] [pid 33941:tid 33973] [client 20.151.218.28:21283] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwOsW_NKERAxgG-rYM1pAAAABY"]
[Mon Apr 13 05:29:22.075785 2026] [:error] [pid 33942:tid 33981] [client 20.151.218.28:21355] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwOshNHe8geO_lMeFaXTgAAAEI"]
[Mon Apr 13 05:29:22.647120 2026] [:error] [pid 33943:tid 34012] [client 20.151.218.28:21430] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwOsqyoXuZjocnxM5FkuwAAAIY"]
[Mon Apr 13 05:29:23.257527 2026] [:error] [pid 33942:tid 34002] [client 20.151.218.28:21192] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwOsxNHe8geO_lMeFaXTwAAAFc"]
[Mon Apr 13 05:29:23.742796 2026] [:error] [pid 34048:tid 34059] [client 20.151.218.28:21285] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owlmailer.php"] [unique_id "adwOs_SiQ_PJjlY5Ehzy_QAAAMk"]
[Mon Apr 13 05:29:24.454276 2026] [:error] [pid 34048:tid 34057] [client 20.151.218.28:21130] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owlmailer.php"] [unique_id "adwOtPSiQ_PJjlY5Ehzy_gAAAMc"]
[Mon Apr 13 05:29:25.424126 2026] [:error] [pid 33942:tid 33995] [client 20.151.218.28:21280] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owlmailer.php"] [unique_id "adwOtRNHe8geO_lMeFaXVQAAAFA"]
[Mon Apr 13 05:29:26.116476 2026] [:error] [pid 33943:tid 34017] [client 20.151.218.28:21361] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owlmailer.php"] [unique_id "adwOtqyoXuZjocnxM5FkxwAAAIs"]
[Mon Apr 13 05:29:26.824493 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:21321] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/F0x.php"] [unique_id "adwOtqyoXuZjocnxM5FkyAAAAI8"]
[Mon Apr 13 05:29:28.166033 2026] [:error] [pid 33942:tid 33996] [client 20.151.218.28:21256] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/F0x.php"] [unique_id "adwOuBNHe8geO_lMeFaXVwAAAFE"]
[Mon Apr 13 05:29:30.215377 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:21292] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/F0x.php"] [unique_id "adwOuvSiQ_PJjlY5EhzzFQAAAMs"]
[Mon Apr 13 05:29:31.647328 2026] [:error] [pid 34048:tid 34074] [client 20.151.218.28:21295] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/F0x.php"] [unique_id "adwOu_SiQ_PJjlY5EhzzHAAAANg"]
[Mon Apr 13 05:29:34.399365 2026] [:error] [pid 34048:tid 34053] [client 20.151.218.28:21191] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rlpc.php"] [unique_id "adwOvvSiQ_PJjlY5EhzzIAAAAMM"]
[Mon Apr 13 05:29:36.582433 2026] [proxy_fcgi:error] [pid 33942:tid 33987] [client 20.151.218.28:21193] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:29:37.098754 2026] [proxy_fcgi:error] [pid 33942:tid 34003] [client 20.151.218.28:21193] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:29:37.312583 2026] [proxy_fcgi:error] [pid 33942:tid 33993] [client 20.151.218.28:21193] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:29:37.549809 2026] [proxy_fcgi:error] [pid 33942:tid 33997] [client 20.151.218.28:21193] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:29:37.763918 2026] [proxy_fcgi:error] [pid 33942:tid 33989] [client 20.151.218.28:21193] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:29:37.973484 2026] [proxy_fcgi:error] [pid 33942:tid 33986] [client 20.151.218.28:21193] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:29:38.183552 2026] [proxy_fcgi:error] [pid 33942:tid 33996] [client 20.151.218.28:21193] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:29:38.396528 2026] [:error] [pid 33942:tid 33980] [client 20.151.218.28:21193] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ssxsl.php"] [unique_id "adwOwhNHe8geO_lMeFaXZwAAAEE"]
[Mon Apr 13 05:29:38.850754 2026] [:error] [pid 33943:tid 34025] [client 20.151.218.28:21329] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ssxsl.php"] [unique_id "adwOwqyoXuZjocnxM5Fk6wAAAJM"]
[Mon Apr 13 05:29:39.379110 2026] [:error] [pid 34048:tid 34051] [client 20.151.218.28:21258] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ssxsl.php"] [unique_id "adwOw_SiQ_PJjlY5EhzzKAAAAME"]
[Mon Apr 13 05:29:39.835848 2026] [:error] [pid 34048:tid 34064] [client 20.151.218.28:21247] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ssxsl.php"] [unique_id "adwOw_SiQ_PJjlY5EhzzKQAAAM4"]
[Mon Apr 13 05:29:40.477386 2026] [:error] [pid 33942:tid 34001] [client 20.151.218.28:21291] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/AE5VAL.php"] [unique_id "adwOxBNHe8geO_lMeFaXawAAAFY"]
[Mon Apr 13 05:29:41.696612 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21218] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/AE5VAL.php"] [unique_id "adwOxayoXuZjocnxM5Fk8gAAAIE"]
[Mon Apr 13 05:29:42.504735 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:21284] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/AE5VAL.php"] [unique_id "adwOxuCGj3EEJtCwa0OJGgAAARY"]
[Mon Apr 13 05:29:43.164686 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:21211] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/AE5VAL.php"] [unique_id "adwOx6yoXuZjocnxM5Fk9gAAAJY"]
[Mon Apr 13 05:29:43.864468 2026] [:error] [pid 33942:tid 33987] [client 20.151.218.28:21194] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gold.php"] [unique_id "adwOxxNHe8geO_lMeFaXbwAAAEg"]
[Mon Apr 13 05:29:44.349115 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:21374] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gold.php"] [unique_id "adwOyBNHe8geO_lMeFaXcQAAAFg"]
[Mon Apr 13 05:29:45.058391 2026] [:error] [pid 33942:tid 33990] [client 20.151.218.28:21392] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gold.php"] [unique_id "adwOyRNHe8geO_lMeFaXeAAAAEs"]
[Mon Apr 13 05:29:45.649539 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:21214] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gold.php"] [unique_id "adwOyayoXuZjocnxM5Fk_wAAAJY"]
[Mon Apr 13 05:29:46.250825 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:21294] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gely.php"] [unique_id "adwOyqyoXuZjocnxM5FlAQAAAI8"]
[Mon Apr 13 05:29:47.215146 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:21307] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gely.php"] [unique_id "adwOy6yoXuZjocnxM5FlBQAAAIU"]
[Mon Apr 13 05:29:47.724936 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:21421] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gely.php"] [unique_id "adwOy6yoXuZjocnxM5FlCAAAAIw"]
[Mon Apr 13 05:29:48.404204 2026] [:error] [pid 33941:tid 33963] [client 20.151.218.28:21366] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gely.php"] [unique_id "adwOzG_NKERAxgG-rYM1qQAAAAw"]
[Mon Apr 13 05:29:49.170693 2026] [:error] [pid 33941:tid 33957] [client 20.151.218.28:21365] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwOzW_NKERAxgG-rYM1rQAAAAc"]
[Mon Apr 13 05:29:49.886862 2026] [:error] [pid 34048:tid 34062] [client 20.151.218.28:21311] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwOzfSiQ_PJjlY5EhzzPQAAAMw"]
[Mon Apr 13 05:29:50.525697 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:21325] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwOzqyoXuZjocnxM5FlGAAAAI0"]
[Mon Apr 13 05:29:50.988855 2026] [:error] [pid 34048:tid 34050] [client 20.151.218.28:21369] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwOzvSiQ_PJjlY5EhzzQgAAAMA"]
[Mon Apr 13 05:29:51.404632 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21282] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sagafif.php"] [unique_id "adwOz6yoXuZjocnxM5FlHQAAAIE"]
[Mon Apr 13 05:29:51.877696 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:21423] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sagafif.php"] [unique_id "adwOz6yoXuZjocnxM5FlIAAAAIk"]
[Mon Apr 13 05:29:52.396311 2026] [:error] [pid 33941:tid 33973] [client 20.151.218.28:21186] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sagafif.php"] [unique_id "adwO0G_NKERAxgG-rYM1tAAAABY"]
[Mon Apr 13 05:29:52.818987 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:21262] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sagafif.php"] [unique_id "adwO0KyoXuZjocnxM5FlIgAAAIw"]
[Mon Apr 13 05:29:53.355714 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:21204] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trc.php"] [unique_id "adwO0ayoXuZjocnxM5FlJAAAAI8"]
[Mon Apr 13 05:29:53.834114 2026] [:error] [pid 34048:tid 34055] [client 20.151.218.28:21196] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trc.php"] [unique_id "adwO0fSiQ_PJjlY5EhzzSgAAAMU"]
[Mon Apr 13 05:29:54.276893 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:21368] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trc.php"] [unique_id "adwO0qyoXuZjocnxM5FlKgAAAIE"]
[Mon Apr 13 05:29:54.725899 2026] [:error] [pid 33941:tid 33951] [client 20.151.218.28:21306] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trc.php"] [unique_id "adwO0m_NKERAxgG-rYM1ugAAAAE"]
[Mon Apr 13 05:29:55.175545 2026] [:error] [pid 33941:tid 33956] [client 20.151.218.28:21297] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tesla1.php"] [unique_id "adwO02_NKERAxgG-rYM1uwAAAAY"]
[Mon Apr 13 05:29:55.690065 2026] [:error] [pid 11325:tid 11348] [client 20.151.218.28:21433] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tesla1.php"] [unique_id "adwO0-CGj3EEJtCwa0OJLQAAARU"]
[Mon Apr 13 05:29:56.113952 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:21357] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tesla1.php"] [unique_id "adwO1OCGj3EEJtCwa0OJMAAAAQE"]
[Mon Apr 13 05:29:56.579528 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:21232] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tesla1.php"] [unique_id "adwO1KyoXuZjocnxM5FlNgAAAIk"]
[Mon Apr 13 05:29:57.295420 2026] [:error] [pid 33941:tid 33971] [client 20.151.218.28:21169] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aks.php"] [unique_id "adwO1W_NKERAxgG-rYM1xAAAABQ"]
[Mon Apr 13 05:29:57.735867 2026] [:error] [pid 33941:tid 33952] [client 20.151.218.28:21172] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aks.php"] [unique_id "adwO1W_NKERAxgG-rYM1yAAAAAI"]
[Mon Apr 13 05:29:58.200746 2026] [:error] [pid 33943:tid 34014] [client 20.151.218.28:21142] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aks.php"] [unique_id "adwO1qyoXuZjocnxM5FlOwAAAIg"]
[Mon Apr 13 05:29:58.700839 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:21057] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aks.php"] [unique_id "adwO1qyoXuZjocnxM5FlQQAAAI0"]
[Mon Apr 13 05:29:59.314232 2026] [:error] [pid 34048:tid 34053] [client 20.151.218.28:21129] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo/l.php"] [unique_id "adwO1_SiQ_PJjlY5EhzzUAAAAMM"]
[Mon Apr 13 05:29:59.812877 2026] [:error] [pid 11325:tid 11345] [client 20.151.218.28:21379] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo/l.php"] [unique_id "adwO1-CGj3EEJtCwa0OJMgAAARI"]
[Mon Apr 13 05:30:00.573124 2026] [:error] [pid 33943:tid 34029] [client 20.151.218.28:21379] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo/l.php"] [unique_id "adwO2KyoXuZjocnxM5FlSgAAAJc"]
[Mon Apr 13 05:30:02.607493 2026] [:error] [pid 34048:tid 34066] [client 20.151.218.28:21288] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo/l.php"] [unique_id "adwO2vSiQ_PJjlY5EhzzUwAAANA"]
[Mon Apr 13 05:30:03.959760 2026] [:error] [pid 34048:tid 34072] [client 20.151.218.28:21185] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ase.php"] [unique_id "adwO2_SiQ_PJjlY5EhzzVgAAANY"]
[Mon Apr 13 05:30:05.335613 2026] [:error] [pid 34048:tid 34064] [client 20.151.218.28:21290] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ase.php"] [unique_id "adwO3fSiQ_PJjlY5EhzzXgAAAM4"]
[Mon Apr 13 05:30:06.377826 2026] [:error] [pid 33943:tid 34008] [client 20.151.218.28:21349] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ase.php"] [unique_id "adwO3qyoXuZjocnxM5FlYgAAAII"]
[Mon Apr 13 05:30:07.442547 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:21263] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ase.php"] [unique_id "adwO3xNHe8geO_lMeFaXjwAAAFg"]
[Mon Apr 13 05:30:08.371817 2026] [:error] [pid 33941:tid 33960] [client 20.151.218.28:21300] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktgob.php"] [unique_id "adwO4G_NKERAxgG-rYM12gAAAAk"]
[Mon Apr 13 05:30:09.420095 2026] [:error] [pid 33942:tid 33989] [client 20.151.218.28:21056] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktgob.php"] [unique_id "adwO4RNHe8geO_lMeFaXkgAAAEo"]
[Mon Apr 13 05:30:10.367449 2026] [:error] [pid 33943:tid 34025] [client 20.151.218.28:21265] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktgob.php"] [unique_id "adwO4qyoXuZjocnxM5FlbAAAAJM"]
[Mon Apr 13 05:30:10.919791 2026] [:error] [pid 33943:tid 34017] [client 20.151.218.28:21152] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktgob.php"] [unique_id "adwO4qyoXuZjocnxM5FldAAAAIs"]
[Mon Apr 13 05:30:11.481746 2026] [:error] [pid 33943:tid 34009] [client 20.151.218.28:21122] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "adwO46yoXuZjocnxM5FleQAAAIM"]
[Mon Apr 13 05:30:11.999009 2026] [:error] [pid 33943:tid 34029] [client 20.151.218.28:21131] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "adwO46yoXuZjocnxM5FlfAAAAJc"]
[Mon Apr 13 05:30:12.642921 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:21136] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "adwO5PSiQ_PJjlY5EhzzegAAAMs"]
[Mon Apr 13 05:30:13.064322 2026] [:error] [pid 33942:tid 34001] [client 20.151.218.28:21278] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "adwO5RNHe8geO_lMeFaXmAAAAFY"]
[Mon Apr 13 05:30:13.495555 2026] [:error] [pid 33941:tid 33975] [client 20.151.218.28:21116] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/afile.php"] [unique_id "adwO5W_NKERAxgG-rYM15gAAABg"]
[Mon Apr 13 05:30:14.077445 2026] [:error] [pid 33942:tid 33998] [client 20.151.218.28:21225] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/afile.php"] [unique_id "adwO5hNHe8geO_lMeFaXnwAAAFM"]
[Mon Apr 13 05:30:14.512337 2026] [:error] [pid 33942:tid 33989] [client 20.151.218.28:21135] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/afile.php"] [unique_id "adwO5hNHe8geO_lMeFaXoAAAAEo"]
[Mon Apr 13 05:30:15.078278 2026] [:error] [pid 34048:tid 34062] [client 20.151.218.28:21110] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/afile.php"] [unique_id "adwO5_SiQ_PJjlY5EhzzgwAAAMw"]
[Mon Apr 13 05:30:15.591005 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:21219] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwO5-CGj3EEJtCwa0OJTgAAARc"]
[Mon Apr 13 05:30:16.082711 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:21176] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwO6BNHe8geO_lMeFaXpQAAAEY"]
[Mon Apr 13 05:30:16.526211 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:21158] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwO6KyoXuZjocnxM5FlgAAAAI0"]
[Mon Apr 13 05:30:17.194333 2026] [:error] [pid 33941:tid 33959] [client 20.151.218.28:21236] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xBrain.php"] [unique_id "adwO6W_NKERAxgG-rYM18wAAAAg"]
[Mon Apr 13 05:30:17.690275 2026] [:error] [pid 11325:tid 11330] [client 20.151.218.28:21180] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yunu.php"] [unique_id "adwO6eCGj3EEJtCwa0OJXAAAAQM"]
[Mon Apr 13 05:30:18.154461 2026] [:error] [pid 33942:tid 33994] [client 20.151.218.28:21147] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yunu.php"] [unique_id "adwO6hNHe8geO_lMeFaXrAAAAE8"]
[Mon Apr 13 05:30:18.663367 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:21210] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yunu.php"] [unique_id "adwO6uCGj3EEJtCwa0OJZAAAARM"]
[Mon Apr 13 05:30:19.199573 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:21124] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yunu.php"] [unique_id "adwO66yoXuZjocnxM5FlgwAAAIk"]
[Mon Apr 13 05:30:19.693392 2026] [:error] [pid 34048:tid 34060] [client 20.151.218.28:21206] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lexy.php"] [unique_id "adwO6_SiQ_PJjlY5EhzzkAAAAMo"]
[Mon Apr 13 05:30:20.180544 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:21197] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lexy.php"] [unique_id "adwO7OCGj3EEJtCwa0OJawAAARE"]
[Mon Apr 13 05:30:21.173414 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:21190] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lexy.php"] [unique_id "adwO7ayoXuZjocnxM5FljQAAAI8"]
[Mon Apr 13 05:30:21.704171 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:21309] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lexy.php"] [unique_id "adwO7eCGj3EEJtCwa0OJdwAAAQs"]
[Mon Apr 13 11:23:06.791039 2026] [:error] [pid 57183:tid 57185] [client 45.181.57.186:41923] [client 45.181.57.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.181.57.186, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "adxhmjDO3t8R5NaxzYQSwgAAAUA"]
[Mon Apr 13 11:23:06.807657 2026] [proxy_fcgi:error] [pid 57183:tid 57185] [client 45.181.57.186:41923] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 20:40:59.840659 2026] [:error] [pid 63406:tid 63434] [client 103.77.107.178:63908] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "adzkW7HZEIkQ0Zmgp5qq8QAAANc"]
[Mon Apr 13 20:41:00.045307 2026] [:error] [pid 63309:tid 63313] [client 103.77.107.178:63931] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkXEpIKZ10weXpf0UoSgAAAAA"]
[Tue Apr 14 03:15:13.439565 2026] [:error] [pid 16604:tid 16609] [client 177.17.241.189:61596] [client 177.17.241.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.17.241.189, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ad1AwcT5wOVcgi9OAxy5igAAAMI"]
[Tue Apr 14 03:15:13.449525 2026] [proxy_fcgi:error] [pid 16604:tid 16609] [client 177.17.241.189:61596] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 07:28:34.734167 2026] [:error] [pid 35628:tid 35652] [client 216.73.216.4:33569] [client 216.73.216.4] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||stratapluswa.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/robots.txt"] [unique_id "ad18IufPm-ozGuwCWXKg4wAAABQ"]
[Tue Apr 14 09:58:45.901800 2026] [:error] [pid 35628:tid 35637] [client 216.73.216.4:44025] [client 216.73.216.4] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.stratapluswa.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stratapluswa.com.au"] [uri "/robots.txt"] [unique_id "ad2fVefPm-ozGuwCWXK1ZwAAAAU"]
[Tue Apr 14 16:35:37.502024 2026] [:error] [pid 59986:tid 60039] [client 34.85.144.184:59489] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ad38WZ6axKeW6bX4H7cHGwAAAFM"]
[Tue Apr 14 16:35:37.934650 2026] [:error] [pid 60074:tid 60096] [client 34.85.144.184:51286] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ad38WetqnEmNU9vpHCkTCgAAANQ"]
[Tue Apr 14 16:35:38.367456 2026] [:error] [pid 60074:tid 60076] [client 34.85.144.184:60531] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ad38WutqnEmNU9vpHCkTCwAAAMA"]
[Tue Apr 14 21:51:08.685592 2026] [:error] [pid 22177:tid 22195] [client 64.44.86.134:42280] [client 64.44.86.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.44.86.134, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ad5GTITVeJSXHDIlEDuPeAAAARA"]
[Tue Apr 14 21:51:08.697041 2026] [proxy_fcgi:error] [pid 22177:tid 22195] [client 64.44.86.134:42280] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 21:58:09.069400 2026] [:error] [pid 60074:tid 60086] [client 34.106.191.236:57222] [client 34.106.191.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad5H8etqnEmNU9vpHCmylQAAAMo"]
[Wed Apr 15 04:36:09.553854 2026] [:error] [pid 4067:tid 4142] [client 216.81.248.211:55242] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad6lOe5XHBJU8ZrRxZ0ajAAAAIs"]
[Wed Apr 15 16:43:31.219097 2026] [:error] [pid 65412:tid 65434] [client 216.73.216.35:53966] [client 216.73.216.35] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||stratapluswa.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/robots.txt"] [unique_id "ad9Ps_EYT61VHfhVE5fvnwAAAZQ"]
[Thu Apr 16 00:13:58.327912 2026] [proxy_fcgi:error] [pid 31053:tid 31079] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:13:58.583737 2026] [proxy_fcgi:error] [pid 31053:tid 31067] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:13:58.826870 2026] [proxy_fcgi:error] [pid 31053:tid 31065] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:13:59.070342 2026] [proxy_fcgi:error] [pid 31053:tid 31071] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:13:59.327942 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:13:59.814993 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:14:00.058007 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:14:00.302739 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:14:00.546373 2026] [proxy_fcgi:error] [pid 31053:tid 31057] [client 158.158.55.117:63775] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:14:00.800545 2026] [:error] [pid 31053:tid 31074] [client 158.158.55.117:63775] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "ad-5SBcEkLCmvF0fjDdsDQAAAJI"]
[Thu Apr 16 00:14:01.486786 2026] [:error] [pid 31053:tid 31056] [client 158.158.55.117:59153] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "ad-5SRcEkLCmvF0fjDdsEgAAAIA"]
[Thu Apr 16 00:14:02.259217 2026] [:error] [pid 30958:tid 31027] [client 158.158.55.117:37386] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "ad-5SseG3wSKTO7NWFH5cgAAAMs"]
[Thu Apr 16 00:14:03.072605 2026] [:error] [pid 31053:tid 31076] [client 158.158.55.117:56614] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "ad-5SxcEkLCmvF0fjDdsIwAAAJQ"]
[Thu Apr 16 00:14:03.987823 2026] [:error] [pid 30958:tid 31016] [client 158.158.55.117:63869] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ad-5S8eG3wSKTO7NWFH5dgAAAMA"]
[Thu Apr 16 00:14:05.525116 2026] [:error] [pid 30958:tid 31034] [client 158.158.55.117:64782] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ad-5TceG3wSKTO7NWFH5fgAAANI"]
[Thu Apr 16 00:14:06.362047 2026] [:error] [pid 30958:tid 31038] [client 158.158.55.117:59187] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ad-5TseG3wSKTO7NWFH5ggAAANY"]
[Thu Apr 16 00:14:07.407542 2026] [:error] [pid 30958:tid 31031] [client 158.158.55.117:63748] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ad-5T8eG3wSKTO7NWFH5iQAAAM8"]
[Thu Apr 16 00:14:08.256981 2026] [:error] [pid 30958:tid 31029] [client 158.158.55.117:63803] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "ad-5UMeG3wSKTO7NWFH5jAAAAM0"]
[Thu Apr 16 00:14:08.881070 2026] [:error] [pid 30958:tid 31026] [client 158.158.55.117:51838] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "ad-5UMeG3wSKTO7NWFH5kAAAAMo"]
[Thu Apr 16 00:14:09.639000 2026] [:error] [pid 30958:tid 31039] [client 158.158.55.117:45793] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "ad-5UceG3wSKTO7NWFH5lQAAANc"]
[Thu Apr 16 00:14:10.443195 2026] [:error] [pid 30958:tid 31030] [client 158.158.55.117:45772] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "ad-5UseG3wSKTO7NWFH5mQAAAM4"]
[Thu Apr 16 00:14:10.999914 2026] [:error] [pid 30956:tid 30973] [client 158.158.55.117:45761] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ad-5UkBGUpjaWntNYq2uwQAAAA0"]
[Thu Apr 16 00:14:11.619029 2026] [:error] [pid 30956:tid 30961] [client 158.158.55.117:63772] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ad-5U0BGUpjaWntNYq2uwwAAAAE"]
[Thu Apr 16 00:14:12.298981 2026] [:error] [pid 30956:tid 30965] [client 158.158.55.117:51829] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ad-5VEBGUpjaWntNYq2uxwAAAAU"]
[Thu Apr 16 00:14:12.870581 2026] [:error] [pid 30958:tid 31037] [client 158.158.55.117:51807] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ad-5VMeG3wSKTO7NWFH5nQAAANU"]
[Thu Apr 16 00:14:13.467606 2026] [:error] [pid 23913:tid 23921] [client 158.158.55.117:45764] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ad-5VVUaK3MLdSaLOyjwtAAAAUY"]
[Thu Apr 16 00:14:13.995308 2026] [:error] [pid 30957:tid 31001] [client 158.158.55.117:36134] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ad-5VX5gwVEVXHfVSirN9QAAAEw"]
[Thu Apr 16 00:14:14.628716 2026] [:error] [pid 30957:tid 31012] [client 158.158.55.117:65007] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ad-5Vn5gwVEVXHfVSirN-wAAAFc"]
[Thu Apr 16 00:14:15.192367 2026] [:error] [pid 30958:tid 31037] [client 158.158.55.117:63753] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ad-5V8eG3wSKTO7NWFH5qAAAANU"]
[Thu Apr 16 00:14:15.726137 2026] [:error] [pid 31053:tid 31057] [client 158.158.55.117:64997] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ad-5VxcEkLCmvF0fjDdsSQAAAIE"]
[Thu Apr 16 00:14:16.409401 2026] [:error] [pid 30956:tid 30968] [client 158.158.55.117:63870] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ad-5WEBGUpjaWntNYq2u0QAAAAg"]
[Thu Apr 16 00:14:17.004480 2026] [:error] [pid 30958:tid 31026] [client 158.158.55.117:45795] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ad-5WceG3wSKTO7NWFH5rQAAAMo"]
[Thu Apr 16 00:14:17.536376 2026] [:error] [pid 37370:tid 37393] [client 158.158.55.117:36126] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ad-5WXg-gnM2Ga0cGAC3EgAAARU"]
[Thu Apr 16 00:14:18.079148 2026] [:error] [pid 23913:tid 23918] [client 158.158.55.117:64989] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "ad-5WlUaK3MLdSaLOyjwugAAAUM"]
[Thu Apr 16 00:14:18.573077 2026] [:error] [pid 30957:tid 30996] [client 158.158.55.117:63819] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "ad-5Wn5gwVEVXHfVSirOEQAAAEc"]
[Thu Apr 16 00:14:19.089114 2026] [:error] [pid 30958:tid 31030] [client 158.158.55.117:45784] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "ad-5W8eG3wSKTO7NWFH5sQAAAM4"]
[Thu Apr 16 00:14:19.714956 2026] [:error] [pid 30956:tid 30972] [client 158.158.55.117:63821] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file.php"] [unique_id "ad-5W0BGUpjaWntNYq2u1QAAAAw"]
[Thu Apr 16 00:14:20.228531 2026] [:error] [pid 30957:tid 31009] [client 158.158.55.117:37405] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ad-5XH5gwVEVXHfVSirOHAAAAFQ"]
[Thu Apr 16 00:14:20.742131 2026] [:error] [pid 31053:tid 31070] [client 158.158.55.117:65064] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ad-5XBcEkLCmvF0fjDdsUgAAAI4"]
[Thu Apr 16 00:14:21.247986 2026] [:error] [pid 31053:tid 31065] [client 158.158.55.117:51825] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ad-5XRcEkLCmvF0fjDdsWAAAAIk"]
[Thu Apr 16 00:14:21.748252 2026] [:error] [pid 30957:tid 31011] [client 158.158.55.117:65010] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ad-5XX5gwVEVXHfVSirOJAAAAFY"]
[Thu Apr 16 00:14:22.291202 2026] [:error] [pid 30957:tid 30996] [client 158.158.55.117:64786] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "ad-5Xn5gwVEVXHfVSirOJgAAAEc"]
[Thu Apr 16 00:14:22.793327 2026] [:error] [pid 30958:tid 31022] [client 158.158.55.117:37422] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "ad-5XseG3wSKTO7NWFH5tAAAAMY"]
[Thu Apr 16 00:14:23.300918 2026] [:error] [pid 31053:tid 31059] [client 158.158.55.117:63865] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "ad-5XxcEkLCmvF0fjDdsYAAAAIM"]
[Thu Apr 16 00:14:23.833034 2026] [:error] [pid 30958:tid 31024] [client 158.158.55.117:56629] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "ad-5X8eG3wSKTO7NWFH5uwAAAMg"]
[Thu Apr 16 00:14:24.408709 2026] [:error] [pid 31053:tid 31061] [client 158.158.55.117:63824] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "ad-5YBcEkLCmvF0fjDdsZAAAAIU"]
[Thu Apr 16 00:14:24.901047 2026] [:error] [pid 30956:tid 30968] [client 158.158.55.117:64962] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "ad-5YEBGUpjaWntNYq2u2AAAAAg"]
[Thu Apr 16 00:14:25.405437 2026] [:error] [pid 30957:tid 30994] [client 158.158.55.117:64807] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "ad-5YX5gwVEVXHfVSirOOgAAAEU"]
[Thu Apr 16 00:14:25.937075 2026] [:error] [pid 23913:tid 23923] [client 158.158.55.117:63809] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blogs.php"] [unique_id "ad-5YVUaK3MLdSaLOyjwxQAAAUg"]
[Thu Apr 16 00:14:26.461982 2026] [:error] [pid 30958:tid 31029] [client 158.158.55.117:51830] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ad-5YseG3wSKTO7NWFH5wAAAAM0"]
[Thu Apr 16 00:14:27.033554 2026] [:error] [pid 30957:tid 30997] [client 158.158.55.117:63871] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ad-5Y35gwVEVXHfVSirOQAAAAEg"]
[Thu Apr 16 00:14:27.660932 2026] [:error] [pid 30956:tid 30963] [client 158.158.55.117:36127] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ad-5Y0BGUpjaWntNYq2u3gAAAAM"]
[Thu Apr 16 00:14:28.273611 2026] [:error] [pid 30956:tid 30961] [client 158.158.55.117:65009] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ad-5ZEBGUpjaWntNYq2u5AAAAAE"]
[Thu Apr 16 00:14:28.826635 2026] [:error] [pid 30956:tid 30979] [client 158.158.55.117:51778] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "ad-5ZEBGUpjaWntNYq2u7AAAABM"]
[Thu Apr 16 00:14:29.348271 2026] [:error] [pid 30957:tid 30989] [client 158.158.55.117:64981] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "ad-5ZX5gwVEVXHfVSirORAAAAEA"]
[Thu Apr 16 00:14:29.930869 2026] [:error] [pid 30956:tid 30971] [client 158.158.55.117:45782] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "ad-5ZUBGUpjaWntNYq2u8gAAAAs"]
[Thu Apr 16 00:14:30.594994 2026] [:error] [pid 23913:tid 23931] [client 158.158.55.117:45786] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "ad-5ZlUaK3MLdSaLOyjwxwAAAVA"]
[Thu Apr 16 00:14:31.204958 2026] [:error] [pid 37370:tid 37379] [client 158.158.55.117:45815] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ad-5Z3g-gnM2Ga0cGAC3HAAAAQc"]
[Thu Apr 16 00:14:31.709388 2026] [:error] [pid 30958:tid 31020] [client 158.158.55.117:63840] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ad-5Z8eG3wSKTO7NWFH5wgAAAMQ"]
[Thu Apr 16 00:14:32.278920 2026] [:error] [pid 30957:tid 31003] [client 158.158.55.117:64819] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ad-5aH5gwVEVXHfVSirOSgAAAE4"]
[Thu Apr 16 00:14:32.768542 2026] [:error] [pid 30956:tid 30982] [client 158.158.55.117:64986] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ad-5aEBGUpjaWntNYq2u-AAAABY"]
[Thu Apr 16 00:14:33.306173 2026] [:error] [pid 23913:tid 23928] [client 158.158.55.117:63758] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "ad-5aVUaK3MLdSaLOyjwywAAAU0"]
[Thu Apr 16 00:14:33.843798 2026] [:error] [pid 31053:tid 31070] [client 158.158.55.117:63811] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "ad-5aRcEkLCmvF0fjDdscgAAAI4"]
[Thu Apr 16 00:14:34.340332 2026] [:error] [pid 23913:tid 23932] [client 158.158.55.117:36107] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "ad-5alUaK3MLdSaLOyjwzwAAAVE"]
[Thu Apr 16 00:14:34.839194 2026] [:error] [pid 37370:tid 37394] [client 158.158.55.117:56586] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "ad-5ang-gnM2Ga0cGAC3IgAAARY"]
[Thu Apr 16 00:14:35.346058 2026] [:error] [pid 31053:tid 31074] [client 158.158.55.117:51828] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "ad-5axcEkLCmvF0fjDdsdgAAAJI"]
[Thu Apr 16 00:14:35.909569 2026] [:error] [pid 30957:tid 31002] [client 158.158.55.117:64825] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "ad-5a35gwVEVXHfVSirOTQAAAE0"]
[Thu Apr 16 00:14:36.406506 2026] [:error] [pid 23913:tid 23920] [client 158.158.55.117:64790] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "ad-5bFUaK3MLdSaLOyjw0AAAAUU"]
[Thu Apr 16 00:14:36.903951 2026] [:error] [pid 23913:tid 23927] [client 158.158.55.117:37407] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms.php"] [unique_id "ad-5bFUaK3MLdSaLOyjw0QAAAUw"]
[Thu Apr 16 00:14:37.432600 2026] [:error] [pid 23913:tid 23934] [client 158.158.55.117:56583] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "ad-5bVUaK3MLdSaLOyjw0wAAAVM"]
[Thu Apr 16 00:14:38.081834 2026] [:error] [pid 23913:tid 23926] [client 158.158.55.117:56615] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "ad-5blUaK3MLdSaLOyjw1QAAAUs"]
[Thu Apr 16 00:14:38.575424 2026] [:error] [pid 30958:tid 31026] [client 158.158.55.117:45783] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "ad-5bseG3wSKTO7NWFH5xwAAAMo"]
[Thu Apr 16 00:14:39.173837 2026] [:error] [pid 31053:tid 31066] [client 158.158.55.117:65012] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "ad-5bxcEkLCmvF0fjDdshQAAAIo"]
[Thu Apr 16 00:14:39.693382 2026] [:error] [pid 23913:tid 23916] [client 158.158.55.117:65024] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "ad-5b1UaK3MLdSaLOyjw1gAAAUE"]
[Thu Apr 16 00:14:40.205987 2026] [:error] [pid 30958:tid 31027] [client 158.158.55.117:64812] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "ad-5cMeG3wSKTO7NWFH5yAAAAMs"]
[Thu Apr 16 00:14:40.878750 2026] [:error] [pid 23913:tid 23919] [client 158.158.55.117:56628] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "ad-5cFUaK3MLdSaLOyjw1wAAAUQ"]
[Thu Apr 16 00:14:41.360332 2026] [:error] [pid 31053:tid 31079] [client 158.158.55.117:63860] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "ad-5cRcEkLCmvF0fjDdsiwAAAJc"]
[Thu Apr 16 00:14:41.876092 2026] [:error] [pid 31053:tid 31066] [client 158.158.55.117:56581] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ad-5cRcEkLCmvF0fjDdsjQAAAIo"]
[Thu Apr 16 00:14:42.545270 2026] [:error] [pid 31053:tid 31077] [client 158.158.55.117:63798] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ad-5chcEkLCmvF0fjDdskAAAAJU"]
[Thu Apr 16 00:14:43.692860 2026] [:error] [pid 30958:tid 31020] [client 158.158.55.117:63808] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ad-5c8eG3wSKTO7NWFH5zQAAAMQ"]
[Thu Apr 16 00:14:44.836415 2026] [:error] [pid 30957:tid 30993] [client 158.158.55.117:64781] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ad-5dH5gwVEVXHfVSirOTwAAAEQ"]
[Thu Apr 16 00:14:45.854193 2026] [:error] [pid 30958:tid 31038] [client 158.158.55.117:37427] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ad-5dceG3wSKTO7NWFH51gAAANY"]
[Thu Apr 16 00:14:46.400949 2026] [:error] [pid 30958:tid 31037] [client 158.158.55.117:63829] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ad-5dseG3wSKTO7NWFH52wAAANU"]
[Thu Apr 16 00:14:46.961429 2026] [:error] [pid 23913:tid 23925] [client 158.158.55.117:63788] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ad-5dlUaK3MLdSaLOyjw4gAAAUo"]
[Thu Apr 16 00:14:47.721519 2026] [:error] [pid 30957:tid 30998] [client 158.158.55.117:56613] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ad-5d35gwVEVXHfVSirOWAAAAEk"]
[Thu Apr 16 00:14:48.767448 2026] [:error] [pid 30956:tid 30971] [client 158.158.55.117:64817] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "ad-5eEBGUpjaWntNYq2vAgAAAAs"]
[Thu Apr 16 00:14:49.761812 2026] [:error] [pid 30957:tid 30994] [client 158.158.55.117:65034] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "ad-5eX5gwVEVXHfVSirOWwAAAEU"]
[Thu Apr 16 00:14:50.656701 2026] [:error] [pid 30957:tid 30999] [client 158.158.55.117:45811] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "ad-5en5gwVEVXHfVSirOXwAAAEo"]
[Thu Apr 16 00:14:51.302882 2026] [:error] [pid 30956:tid 30963] [client 158.158.55.117:56584] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "ad-5e0BGUpjaWntNYq2vBgAAAAM"]
[Thu Apr 16 00:14:51.791313 2026] [:error] [pid 31053:tid 31072] [client 158.158.55.117:56631] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "ad-5excEkLCmvF0fjDdsqAAAAJA"]
[Thu Apr 16 00:14:52.286127 2026] [:error] [pid 30957:tid 30989] [client 158.158.55.117:56610] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "ad-5fH5gwVEVXHfVSirOYwAAAEA"]
[Thu Apr 16 00:14:52.846622 2026] [:error] [pid 30958:tid 31021] [client 158.158.55.117:65047] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "ad-5fMeG3wSKTO7NWFH57AAAAMU"]
[Thu Apr 16 00:14:53.530348 2026] [:error] [pid 30958:tid 31023] [client 158.158.55.117:62610] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "ad-5fceG3wSKTO7NWFH57wAAAMc"]
[Thu Apr 16 00:14:54.226495 2026] [:error] [pid 30958:tid 31016] [client 158.158.55.117:63861] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "ad-5fseG3wSKTO7NWFH58wAAAMA"]
[Thu Apr 16 00:14:54.833304 2026] [:error] [pid 30958:tid 31036] [client 158.158.55.117:51804] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "ad-5fseG3wSKTO7NWFH59wAAANQ"]
[Thu Apr 16 00:14:55.380403 2026] [:error] [pid 30958:tid 31035] [client 158.158.55.117:37407] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "ad-5f8eG3wSKTO7NWFH5-gAAANM"]
[Thu Apr 16 00:14:56.093300 2026] [:error] [pid 30958:tid 31025] [client 158.158.55.117:64793] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "ad-5gMeG3wSKTO7NWFH5_QAAAMk"]
[Thu Apr 16 00:14:56.952775 2026] [:error] [pid 31053:tid 31064] [client 158.158.55.117:51836] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "ad-5gBcEkLCmvF0fjDdstAAAAIg"]
[Thu Apr 16 00:14:57.504756 2026] [:error] [pid 30957:tid 30998] [client 158.158.55.117:37430] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "ad-5gX5gwVEVXHfVSirOagAAAEk"]
[Thu Apr 16 00:14:58.067898 2026] [:error] [pid 30958:tid 31018] [client 158.158.55.117:56619] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "ad-5gseG3wSKTO7NWFH6BgAAAMI"]
[Thu Apr 16 00:14:58.639644 2026] [:error] [pid 31053:tid 31061] [client 158.158.55.117:65016] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "ad-5ghcEkLCmvF0fjDdstwAAAIU"]
[Thu Apr 16 00:14:59.213014 2026] [:error] [pid 30958:tid 31040] [client 158.158.55.117:56638] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "ad-5g8eG3wSKTO7NWFH6DAAAANg"]
[Thu Apr 16 00:14:59.695344 2026] [:error] [pid 30956:tid 30960] [client 158.158.55.117:45817] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "ad-5g0BGUpjaWntNYq2vCgAAAAA"]
[Thu Apr 16 00:15:00.239846 2026] [proxy_fcgi:error] [pid 30957:tid 31006] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:00.506857 2026] [proxy_fcgi:error] [pid 30957:tid 31000] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:02.184063 2026] [proxy_fcgi:error] [pid 30957:tid 31010] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:02.476525 2026] [proxy_fcgi:error] [pid 30957:tid 31004] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:02.741231 2026] [proxy_fcgi:error] [pid 30957:tid 30991] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:03.469810 2026] [proxy_fcgi:error] [pid 30957:tid 30993] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:03.972540 2026] [proxy_fcgi:error] [pid 30957:tid 31011] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:04.222457 2026] [proxy_fcgi:error] [pid 30957:tid 30998] [client 158.158.55.117:56602] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:15:04.462020 2026] [:error] [pid 30957:tid 31013] [client 158.158.55.117:56602] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ad-5iH5gwVEVXHfVSirOeQAAAFg"]
[Thu Apr 16 00:15:04.971003 2026] [:error] [pid 30957:tid 31006] [client 158.158.55.117:63745] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ad-5iH5gwVEVXHfVSirOfgAAAFE"]
[Thu Apr 16 00:15:05.458678 2026] [:error] [pid 31053:tid 31078] [client 158.158.55.117:51796] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ad-5iRcEkLCmvF0fjDdswQAAAJY"]
[Thu Apr 16 00:15:05.981317 2026] [:error] [pid 37370:tid 37382] [client 158.158.55.117:51816] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "ad-5iXg-gnM2Ga0cGAC3OwAAAQo"]
[Thu Apr 16 00:15:06.598619 2026] [:error] [pid 30958:tid 31039] [client 158.158.55.117:56577] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "ad-5iseG3wSKTO7NWFH6IQAAANc"]
[Thu Apr 16 00:15:07.199442 2026] [:error] [pid 31053:tid 31080] [client 158.158.55.117:36096] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "ad-5ixcEkLCmvF0fjDdsyQAAAJg"]
[Thu Apr 16 00:15:07.695375 2026] [:error] [pid 37370:tid 37386] [client 158.158.55.117:65051] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "ad-5i3g-gnM2Ga0cGAC3PQAAAQ4"]
[Thu Apr 16 00:15:08.182071 2026] [:error] [pid 31053:tid 31067] [client 158.158.55.117:36099] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/900.php"] [unique_id "ad-5jBcEkLCmvF0fjDds0AAAAIs"]
[Thu Apr 16 00:15:08.693921 2026] [:error] [pid 37370:tid 37388] [client 158.158.55.117:56580] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ad-5jHg-gnM2Ga0cGAC3PwAAARA"]
[Thu Apr 16 00:15:09.198129 2026] [:error] [pid 31053:tid 31078] [client 158.158.55.117:36152] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ad-5jRcEkLCmvF0fjDds1AAAAJY"]
[Thu Apr 16 00:15:10.129485 2026] [:error] [pid 37370:tid 37377] [client 158.158.55.117:45810] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ad-5jng-gnM2Ga0cGAC3QQAAAQU"]
[Thu Apr 16 00:15:10.799358 2026] [:error] [pid 30956:tid 30976] [client 158.158.55.117:5936] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ad-5jkBGUpjaWntNYq2vEQAAABA"]
[Thu Apr 16 00:15:11.628571 2026] [:error] [pid 31053:tid 31067] [client 158.158.55.117:64778] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "ad-5jxcEkLCmvF0fjDds3QAAAIs"]
[Thu Apr 16 00:15:13.457682 2026] [:error] [pid 30956:tid 30970] [client 158.158.55.117:64831] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "ad-5kUBGUpjaWntNYq2vFgAAAAo"]
[Thu Apr 16 00:15:15.549640 2026] [:error] [pid 30958:tid 31021] [client 158.158.55.117:51837] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "ad-5k8eG3wSKTO7NWFH6QwAAAMU"]
[Thu Apr 16 00:15:16.455677 2026] [:error] [pid 30957:tid 30994] [client 158.158.55.117:65058] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "ad-5lH5gwVEVXHfVSirOmQAAAEU"]
[Thu Apr 16 00:15:17.537048 2026] [:error] [pid 31053:tid 31072] [client 158.158.55.117:64999] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ad-5lRcEkLCmvF0fjDds7wAAAJA"]
[Thu Apr 16 00:15:18.310936 2026] [:error] [pid 30958:tid 31028] [client 158.158.55.117:45780] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ad-5lseG3wSKTO7NWFH6TwAAAMw"]
[Thu Apr 16 00:15:18.981418 2026] [:error] [pid 31053:tid 31058] [client 158.158.55.117:65038] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ad-5lhcEkLCmvF0fjDds8gAAAII"]
[Thu Apr 16 00:15:19.505484 2026] [:error] [pid 31053:tid 31073] [client 158.158.55.117:45792] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "ad-5lxcEkLCmvF0fjDds9QAAAJE"]
[Thu Apr 16 00:15:20.060541 2026] [:error] [pid 30957:tid 30989] [client 158.158.55.117:37383] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ad-5mH5gwVEVXHfVSirOoAAAAEA"]
[Thu Apr 16 00:15:20.697376 2026] [:error] [pid 37370:tid 37395] [client 158.158.55.117:6047] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ad-5mHg-gnM2Ga0cGAC3UgAAARc"]
[Thu Apr 16 00:15:21.279913 2026] [:error] [pid 31053:tid 31079] [client 158.158.55.117:56612] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ad-5mRcEkLCmvF0fjDdtBAAAAJc"]
[Thu Apr 16 00:15:22.116755 2026] [:error] [pid 30958:tid 31027] [client 158.158.55.117:65070] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "ad-5mseG3wSKTO7NWFH6ZwAAAMs"]
[Thu Apr 16 00:15:23.251946 2026] [:error] [pid 31053:tid 31064] [client 158.158.55.117:56625] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "ad-5mxcEkLCmvF0fjDdtGAAAAIg"]
[Thu Apr 16 00:15:24.611009 2026] [:error] [pid 30957:tid 31005] [client 158.158.55.117:37433] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "ad-5nH5gwVEVXHfVSirOpwAAAFA"]
[Thu Apr 16 00:15:27.631335 2026] [:error] [pid 31053:tid 31070] [client 158.158.55.117:56634] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "ad-5nxcEkLCmvF0fjDdtLgAAAI4"]
[Thu Apr 16 00:15:30.876101 2026] [:error] [pid 23913:tid 23931] [client 158.158.55.117:64791] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "ad-5olUaK3MLdSaLOyjxIgAAAVA"]
[Thu Apr 16 00:15:33.624063 2026] [:error] [pid 31053:tid 31064] [client 158.158.55.117:36111] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "ad-5pRcEkLCmvF0fjDdtOAAAAIg"]
[Thu Apr 16 00:15:34.354541 2026] [:error] [pid 30957:tid 30997] [client 158.158.55.117:51832] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "ad-5pn5gwVEVXHfVSirOwgAAAEg"]
[Thu Apr 16 00:15:34.929571 2026] [:error] [pid 37370:tid 37381] [client 158.158.55.117:36122] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "ad-5png-gnM2Ga0cGAC3ZgAAAQk"]
[Thu Apr 16 00:15:35.523673 2026] [:error] [pid 30958:tid 31040] [client 158.158.55.117:36151] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "ad-5p8eG3wSKTO7NWFH6mQAAANg"]
[Thu Apr 16 00:15:36.071632 2026] [:error] [pid 30958:tid 31027] [client 158.158.55.117:45800] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ad-5qMeG3wSKTO7NWFH6ngAAAMs"]
[Thu Apr 16 00:15:36.597867 2026] [:error] [pid 30957:tid 31007] [client 158.158.55.117:36116] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ad-5qH5gwVEVXHfVSirOyQAAAFI"]
[Thu Apr 16 00:15:37.179497 2026] [:error] [pid 31053:tid 31064] [client 158.158.55.117:36140] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ad-5qRcEkLCmvF0fjDdtRAAAAIg"]
[Thu Apr 16 00:15:37.807120 2026] [:error] [pid 30957:tid 30990] [client 158.158.55.117:65035] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ad-5qX5gwVEVXHfVSirO1QAAAEE"]
[Thu Apr 16 00:15:38.308924 2026] [:error] [pid 23913:tid 23925] [client 158.158.55.117:65087] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ad-5qlUaK3MLdSaLOyjxPAAAAUo"]
[Thu Apr 16 00:15:38.889705 2026] [:error] [pid 23913:tid 23931] [client 158.158.55.117:37392] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ad-5qlUaK3MLdSaLOyjxQwAAAVA"]
[Thu Apr 16 00:15:39.547049 2026] [:error] [pid 31053:tid 31075] [client 158.158.55.117:63762] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ad-5qxcEkLCmvF0fjDdtSgAAAJM"]
[Thu Apr 16 00:15:40.241168 2026] [:error] [pid 30957:tid 30993] [client 158.158.55.117:51818] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "ad-5rH5gwVEVXHfVSirO1wAAAEQ"]
[Thu Apr 16 00:15:40.747255 2026] [:error] [pid 30958:tid 31030] [client 158.158.55.117:56633] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-5rMeG3wSKTO7NWFH6pgAAAM4"]
[Thu Apr 16 00:15:41.301299 2026] [:error] [pid 30958:tid 31028] [client 158.158.55.117:63749] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-5rceG3wSKTO7NWFH6rgAAAMw"]
[Thu Apr 16 00:15:42.120466 2026] [:error] [pid 31053:tid 31076] [client 158.158.55.117:64776] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-5rhcEkLCmvF0fjDdtVQAAAJQ"]
[Thu Apr 16 00:15:42.745432 2026] [:error] [pid 37370:tid 37376] [client 158.158.55.117:45813] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-5rng-gnM2Ga0cGAC3agAAAQQ"]
[Thu Apr 16 00:15:43.718062 2026] [:error] [pid 30958:tid 31017] [client 158.158.55.117:63846] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "ad-5r8eG3wSKTO7NWFH6vAAAAME"]
[Thu Apr 16 00:15:44.273797 2026] [:error] [pid 30958:tid 31035] [client 158.158.55.117:45806] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "ad-5sMeG3wSKTO7NWFH6wQAAANM"]
[Thu Apr 16 00:15:45.135835 2026] [:error] [pid 31053:tid 31079] [client 158.158.55.117:64986] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "ad-5sRcEkLCmvF0fjDdtbAAAAJc"]
[Thu Apr 16 00:15:45.757286 2026] [:error] [pid 30958:tid 31024] [client 158.158.55.117:51820] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "ad-5sceG3wSKTO7NWFH6xgAAAMg"]
[Thu Apr 16 00:15:46.391497 2026] [:error] [pid 30958:tid 31022] [client 158.158.55.117:65037] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ad-5sseG3wSKTO7NWFH6zQAAAMY"]
[Thu Apr 16 00:15:47.274495 2026] [:error] [pid 37370:tid 37381] [client 158.158.55.117:64797] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ad-5s3g-gnM2Ga0cGAC3cQAAAQk"]
[Thu Apr 16 00:15:48.468087 2026] [:error] [pid 31053:tid 31056] [client 158.158.55.117:5925] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ad-5tBcEkLCmvF0fjDdtdwAAAIA"]
[Thu Apr 16 00:15:49.627492 2026] [:error] [pid 23913:tid 23924] [client 158.158.55.117:65034] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ad-5tVUaK3MLdSaLOyjxXAAAAUk"]
[Thu Apr 16 00:15:50.372731 2026] [:error] [pid 23913:tid 23932] [client 158.158.55.117:37439] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ad-5tlUaK3MLdSaLOyjxXwAAAVE"]
[Thu Apr 16 00:15:51.404877 2026] [:error] [pid 37370:tid 37387] [client 158.158.55.117:56611] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ad-5t3g-gnM2Ga0cGAC3jAAAAQ8"]
[Thu Apr 16 00:15:52.810995 2026] [:error] [pid 31053:tid 31070] [client 158.158.55.117:51808] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ad-5uBcEkLCmvF0fjDdtgQAAAI4"]
[Thu Apr 16 00:16:00.093763 2026] [:error] [pid 30958:tid 31029] [client 158.158.55.117:65080] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ad-5wMeG3wSKTO7NWFH7EgAAAM0"]
[Thu Apr 16 00:16:03.347160 2026] [:error] [pid 37370:tid 37378] [client 158.158.55.117:45805] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ad-5w3g-gnM2Ga0cGAC3oAAAAQY"]
[Thu Apr 16 00:16:04.179794 2026] [proxy_fcgi:error] [pid 30957:tid 31011] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:04.434480 2026] [proxy_fcgi:error] [pid 30957:tid 31005] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:04.679451 2026] [proxy_fcgi:error] [pid 30957:tid 31006] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:05.217798 2026] [proxy_fcgi:error] [pid 30957:tid 30998] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:05.461304 2026] [proxy_fcgi:error] [pid 30957:tid 30990] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:05.706469 2026] [proxy_fcgi:error] [pid 30957:tid 30989] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:05.948570 2026] [proxy_fcgi:error] [pid 30957:tid 30994] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:06.195925 2026] [proxy_fcgi:error] [pid 30957:tid 31013] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:06.440592 2026] [proxy_fcgi:error] [pid 30957:tid 31011] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:06.683802 2026] [proxy_fcgi:error] [pid 30957:tid 31006] [client 158.158.55.117:5950] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 00:16:06.942289 2026] [:error] [pid 30957:tid 30998] [client 158.158.55.117:5950] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ad-5xn5gwVEVXHfVSirPHQAAAEk"]
[Thu Apr 16 00:16:07.702143 2026] [:error] [pid 31053:tid 31075] [client 158.158.55.117:63863] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ad-5xxcEkLCmvF0fjDdtxwAAAJM"]
[Thu Apr 16 00:16:08.263022 2026] [:error] [pid 31053:tid 31063] [client 158.158.55.117:63820] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ad-5yBcEkLCmvF0fjDdtygAAAIc"]
[Thu Apr 16 00:16:08.798454 2026] [:error] [pid 30956:tid 30973] [client 158.158.55.117:5947] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "ad-5yEBGUpjaWntNYq2vZAAAAA0"]
[Thu Apr 16 00:16:09.298302 2026] [:error] [pid 30956:tid 30974] [client 158.158.55.117:51806] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5yUBGUpjaWntNYq2vZQAAAA4"]
[Thu Apr 16 00:16:09.905895 2026] [:error] [pid 37370:tid 37394] [client 158.158.55.117:64789] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5yXg-gnM2Ga0cGAC3qgAAARY"]
[Thu Apr 16 00:16:10.405075 2026] [:error] [pid 23913:tid 23935] [client 158.158.55.117:37385] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5ylUaK3MLdSaLOyjxuQAAAVQ"]
[Thu Apr 16 00:16:10.902012 2026] [:error] [pid 30958:tid 31034] [client 158.158.55.117:45809] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad-5yseG3wSKTO7NWFH7XgAAANI"]
[Thu Apr 16 00:16:11.748225 2026] [:error] [pid 30958:tid 31036] [client 158.158.55.117:37391] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ad-5y8eG3wSKTO7NWFH7ZgAAANQ"]
[Thu Apr 16 00:16:12.380593 2026] [:error] [pid 31053:tid 31056] [client 158.158.55.117:63848] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ad-5zBcEkLCmvF0fjDdt0QAAAIA"]
[Thu Apr 16 00:16:13.252281 2026] [:error] [pid 30957:tid 31009] [client 158.158.55.117:64775] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ad-5zX5gwVEVXHfVSirPKQAAAFQ"]
[Thu Apr 16 00:16:13.861836 2026] [:error] [pid 31053:tid 31077] [client 158.158.55.117:57838] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ad-5zRcEkLCmvF0fjDdt0gAAAJU"]
[Thu Apr 16 00:16:14.445773 2026] [:error] [pid 37370:tid 37376] [client 158.158.55.117:51791] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "ad-5zng-gnM2Ga0cGAC3swAAAQQ"]
[Thu Apr 16 00:16:15.184290 2026] [:error] [pid 23913:tid 23928] [client 158.158.55.117:56590] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "ad-5z1UaK3MLdSaLOyjxxAAAAU0"]
[Thu Apr 16 00:16:15.672391 2026] [:error] [pid 30956:tid 30963] [client 158.158.55.117:63746] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "ad-5z0BGUpjaWntNYq2vbQAAAAM"]
[Thu Apr 16 00:16:16.284477 2026] [:error] [pid 23913:tid 23938] [client 158.158.55.117:63756] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "ad-50FUaK3MLdSaLOyjxxwAAAVc"]
[Thu Apr 16 00:16:16.778843 2026] [:error] [pid 37370:tid 37373] [client 158.158.55.117:35451] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ad-50Hg-gnM2Ga0cGAC3uwAAAQE"]
[Thu Apr 16 00:16:17.281354 2026] [:error] [pid 30957:tid 30992] [client 158.158.55.117:45818] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ad-50X5gwVEVXHfVSirPOAAAAEM"]
[Thu Apr 16 00:16:17.773536 2026] [:error] [pid 30957:tid 31004] [client 158.158.55.117:57212] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ad-50X5gwVEVXHfVSirPOwAAAE8"]
[Thu Apr 16 00:16:18.303975 2026] [:error] [pid 31053:tid 31056] [client 158.158.55.117:63854] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ad-50hcEkLCmvF0fjDdt4QAAAIA"]
[Thu Apr 16 00:16:19.029320 2026] [:error] [pid 30957:tid 30991] [client 158.158.55.117:56596] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "ad-5035gwVEVXHfVSirPRAAAAEI"]
[Thu Apr 16 00:16:19.592651 2026] [:error] [pid 30958:tid 31026] [client 158.158.55.117:65072] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "ad-508eG3wSKTO7NWFH7eQAAAMo"]
[Thu Apr 16 00:16:20.325933 2026] [:error] [pid 30958:tid 31034] [client 158.158.55.117:36150] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "ad-51MeG3wSKTO7NWFH7fwAAANI"]
[Thu Apr 16 00:16:20.891650 2026] [:error] [pid 31053:tid 31071] [client 158.158.55.117:65074] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "ad-51BcEkLCmvF0fjDdt8AAAAI8"]
[Thu Apr 16 00:16:21.447916 2026] [:error] [pid 37370:tid 37384] [client 158.158.55.117:56618] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ad-51Xg-gnM2Ga0cGAC3vgAAAQw"]
[Thu Apr 16 00:16:22.011297 2026] [:error] [pid 30957:tid 31003] [client 158.158.55.117:45790] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ad-51n5gwVEVXHfVSirPSAAAAE4"]
[Thu Apr 16 00:16:22.510342 2026] [:error] [pid 30957:tid 31011] [client 158.158.55.117:51787] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ad-51n5gwVEVXHfVSirPTAAAAFY"]
[Thu Apr 16 00:16:23.051085 2026] [:error] [pid 30958:tid 31017] [client 158.158.55.117:56639] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-518eG3wSKTO7NWFH7jAAAAME"]
[Thu Apr 16 00:16:23.583267 2026] [:error] [pid 30957:tid 31000] [client 158.158.55.117:36120] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-5135gwVEVXHfVSirPUAAAAEs"]
[Thu Apr 16 00:16:24.086928 2026] [:error] [pid 31053:tid 31074] [client 158.158.55.117:36158] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-52BcEkLCmvF0fjDdt8gAAAJI"]
[Thu Apr 16 00:16:24.570428 2026] [:error] [pid 23913:tid 23920] [client 158.158.55.117:37393] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-52FUaK3MLdSaLOyjx0wAAAUU"]
[Thu Apr 16 00:16:25.128412 2026] [:error] [pid 31053:tid 31079] [client 158.158.55.117:37379] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "ad-52RcEkLCmvF0fjDdt-gAAAJc"]
[Thu Apr 16 00:16:25.640774 2026] [:error] [pid 30957:tid 30999] [client 158.158.55.117:65073] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "ad-52X5gwVEVXHfVSirPVAAAAEo"]
[Thu Apr 16 00:16:26.151483 2026] [:error] [pid 37370:tid 37393] [client 158.158.55.117:64785] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "ad-52ng-gnM2Ga0cGAC3wwAAARU"]
[Thu Apr 16 00:16:26.637437 2026] [:error] [pid 30956:tid 30963] [client 158.158.55.117:51812] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "ad-52kBGUpjaWntNYq2vcwAAAAM"]
[Thu Apr 16 00:16:27.156907 2026] [:error] [pid 30958:tid 31034] [client 158.158.55.117:6018] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "ad-528eG3wSKTO7NWFH7mQAAANI"]
[Thu Apr 16 00:16:27.656362 2026] [:error] [pid 31053:tid 31056] [client 158.158.55.117:57844] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "ad-52xcEkLCmvF0fjDduDQAAAIA"]
[Thu Apr 16 00:16:28.202439 2026] [:error] [pid 37370:tid 37395] [client 158.158.55.117:65039] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "ad-53Hg-gnM2Ga0cGAC3yAAAARc"]
[Thu Apr 16 00:16:28.682347 2026] [:error] [pid 30958:tid 31032] [client 158.158.55.117:63836] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "ad-53MeG3wSKTO7NWFH7nQAAANA"]
[Thu Apr 16 00:16:29.167674 2026] [:error] [pid 30957:tid 30994] [client 158.158.55.117:37420] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/set.php"] [unique_id "ad-53X5gwVEVXHfVSirPWgAAAEU"]
[Thu Apr 16 00:16:29.724089 2026] [:error] [pid 31053:tid 31079] [client 158.158.55.117:65056] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/set.php"] [unique_id "ad-53RcEkLCmvF0fjDduFgAAAJc"]
[Thu Apr 16 00:16:30.227457 2026] [:error] [pid 23913:tid 23925] [client 158.158.55.117:64805] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/set.php"] [unique_id "ad-53lUaK3MLdSaLOyjx4wAAAUo"]
[Thu Apr 16 00:16:30.782945 2026] [:error] [pid 16664:tid 16738] [client 158.158.55.117:37435] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/set.php"] [unique_id "ad-53jdzt684awDJwRS8oAAAAZM"]
[Thu Apr 16 00:16:31.267086 2026] [:error] [pid 16664:tid 16732] [client 158.158.55.117:64822] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "ad-53zdzt684awDJwRS8oQAAAY0"]
[Thu Apr 16 00:16:34.354399 2026] [:error] [pid 16664:tid 16730] [client 158.158.55.117:62627] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "ad-54jdzt684awDJwRS8swAAAYs"]
[Thu Apr 16 00:16:35.124658 2026] [:error] [pid 23913:tid 23929] [client 158.158.55.117:64800] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "ad-541UaK3MLdSaLOyjx7wAAAU4"]
[Thu Apr 16 00:16:35.772484 2026] [:error] [pid 23913:tid 23930] [client 158.158.55.117:51839] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hroxw.php"] [unique_id "ad-541UaK3MLdSaLOyjx8wAAAU8"]
[Thu Apr 16 00:16:36.369446 2026] [:error] [pid 16664:tid 16726] [client 158.158.55.117:36147] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ad-55Ddzt684awDJwRS8wwAAAYc"]
[Thu Apr 16 00:16:37.236609 2026] [:error] [pid 37370:tid 37385] [client 158.158.55.117:56585] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ad-55Xg-gnM2Ga0cGAC3zQAAAQ0"]
[Thu Apr 16 00:16:37.729913 2026] [:error] [pid 30956:tid 30960] [client 158.158.55.117:63828] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ad-55UBGUpjaWntNYq2vdwAAAAA"]
[Thu Apr 16 00:16:38.244999 2026] [:error] [pid 16664:tid 16740] [client 158.158.55.117:64966] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "ad-55jdzt684awDJwRS81gAAAZU"]
[Thu Apr 16 00:16:38.740399 2026] [:error] [pid 16664:tid 16729] [client 158.158.55.117:62652] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "ad-55jdzt684awDJwRS82QAAAYo"]
[Thu Apr 16 00:16:39.301697 2026] [:error] [pid 31053:tid 31066] [client 158.158.55.117:37416] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "ad-55xcEkLCmvF0fjDduJAAAAIo"]
[Thu Apr 16 00:16:39.938766 2026] [:error] [pid 16664:tid 16732] [client 158.158.55.117:36118] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "ad-55zdzt684awDJwRS85QAAAY0"]
[Thu Apr 16 00:16:40.865592 2026] [:error] [pid 37370:tid 37372] [client 158.158.55.117:63804] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "ad-56Hg-gnM2Ga0cGAC3zwAAAQA"]
[Thu Apr 16 00:16:41.382752 2026] [:error] [pid 30958:tid 31040] [client 158.158.55.117:45802] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "ad-56ceG3wSKTO7NWFH7rQAAANg"]
[Thu Apr 16 00:16:41.897656 2026] [:error] [pid 23913:tid 23919] [client 158.158.55.117:51813] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "ad-56VUaK3MLdSaLOyjyBgAAAUQ"]
[Thu Apr 16 00:16:42.452351 2026] [:error] [pid 30956:tid 30962] [client 158.158.55.117:56622] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "ad-56kBGUpjaWntNYq2vegAAAAI"]
[Thu Apr 16 00:16:42.948816 2026] [:error] [pid 16664:tid 16719] [client 158.158.55.117:37404] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "ad-56jdzt684awDJwRS87wAAAYA"]
[Thu Apr 16 00:16:43.499059 2026] [:error] [pid 23913:tid 23929] [client 158.158.55.117:64961] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-561UaK3MLdSaLOyjyEQAAAU4"]
[Thu Apr 16 00:16:44.827855 2026] [:error] [pid 16664:tid 16727] [client 158.158.55.117:64975] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-57Ddzt684awDJwRS88gAAAYg"]
[Thu Apr 16 00:16:46.398723 2026] [:error] [pid 31053:tid 31074] [client 158.158.55.117:63747] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-57hcEkLCmvF0fjDduLgAAAJI"]
[Thu Apr 16 00:16:47.419114 2026] [:error] [pid 16664:tid 16741] [client 158.158.55.117:6068] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-57zdzt684awDJwRS8_AAAAZY"]
[Thu Apr 16 00:16:47.979529 2026] [:error] [pid 30956:tid 30973] [client 158.158.55.117:36136] [client 158.158.55.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "ad-570BGUpjaWntNYq2vggAAAA0"]
[Thu Apr 16 00:16:48.463657 2026] [:error] [pid 16664:tid 16721] [client 158.158.55.117:57164] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-58Ddzt684awDJwRS9CgAAAYI"]
[Thu Apr 16 00:16:48.954174 2026] [:error] [pid 16664:tid 16738] [client 158.158.55.117:65076] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-58Ddzt684awDJwRS9DgAAAZM"]
[Thu Apr 16 00:16:49.707111 2026] [:error] [pid 16664:tid 16742] [client 158.158.55.117:65025] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-58Tdzt684awDJwRS9GwAAAZc"]
[Thu Apr 16 00:16:50.350551 2026] [:error] [pid 16664:tid 16743] [client 158.158.55.117:63857] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-58jdzt684awDJwRS9IAAAAZg"]
[Thu Apr 16 00:16:50.907638 2026] [:error] [pid 30958:tid 31038] [client 158.158.55.117:65029] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "ad-58seG3wSKTO7NWFH7tQAAANY"]
[Thu Apr 16 00:16:51.445507 2026] [:error] [pid 16664:tid 16723] [client 158.158.55.117:45788] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "ad-58zdzt684awDJwRS9KwAAAYQ"]
[Thu Apr 16 00:16:51.938029 2026] [:error] [pid 16664:tid 16735] [client 158.158.55.117:59156] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "ad-58zdzt684awDJwRS9MgAAAZA"]
[Thu Apr 16 00:16:52.525224 2026] [:error] [pid 16664:tid 16733] [client 158.158.55.117:35403] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mk.php"] [unique_id "ad-59Ddzt684awDJwRS9OAAAAY4"]
[Thu Apr 16 01:13:25.792866 2026] [:error] [pid 30956:tid 30977] [client 193.19.109.236:28291] [client 193.19.109.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.236, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "ad_HNUBGUpjaWntNYq26RQAAABE"]
[Thu Apr 16 01:13:25.807485 2026] [proxy_fcgi:error] [pid 30956:tid 30977] [client 193.19.109.236:28291] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 01:58:15.486726 2026] [:error] [pid 792:tid 885] [client 64.236.133.129:61319] [client 64.236.133.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_Rt93PZ8z30TezIkZgpQAAAMw"], referer: https://www.notion.so/
[Thu Apr 16 01:58:36.876113 2026] [:error] [pid 34542:tid 34559] [client 135.232.224.82:54306] [client 135.232.224.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_RzAdF4OGi-asleB6LDQAAAU8"], referer: https://chat.openai.com/
[Thu Apr 16 01:59:09.177246 2026] [:error] [pid 20548:tid 20570] [client 64.236.200.114:60573] [client 64.236.200.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_R7akpqgnqCHq6bJa22AAAAJM"]
[Thu Apr 16 01:59:23.861192 2026] [:error] [pid 34542:tid 34549] [client 40.76.191.164:21212] [client 40.76.191.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_R-wdF4OGi-asleB6LlAAAAUU"]
[Thu Apr 16 01:59:52.473528 2026] [:error] [pid 792:tid 877] [client 52.162.9.246:40586] [client 52.162.9.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_SGN3PZ8z30TezIkZg7QAAAMg"], referer: https://www.reddit.com/
[Thu Apr 16 02:00:48.863957 2026] [:error] [pid 792:tid 876] [client 20.25.153.53:62917] [client 20.25.153.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_SUN3PZ8z30TezIkZhTgAAAMc"], referer: https://www.notion.so/
[Thu Apr 16 02:01:04.904258 2026] [:error] [pid 20548:tid 20562] [client 172.215.217.96:56649] [client 172.215.217.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_SYKkpqgnqCHq6bJa4JQAAAIs"]
[Thu Apr 16 02:03:28.616052 2026] [:error] [pid 20548:tid 20575] [client 172.183.132.67:12608] [client 172.183.132.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_S8KkpqgnqCHq6bJa5kQAAAJg"], referer: https://duckduckgo.com/
[Thu Apr 16 02:04:19.842219 2026] [:error] [pid 34542:tid 34548] [client 172.215.217.194:33990] [client 172.215.217.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_TIwdF4OGi-asleB6PzAAAAUQ"]
[Thu Apr 16 02:04:20.009762 2026] [:error] [pid 54814:tid 54821] [client 57.151.143.184:1093] [client 57.151.143.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_TJDrHu_-tAAe-BOWwHAAAAYE"]
[Thu Apr 16 02:04:20.600701 2026] [:error] [pid 34542:tid 34554] [client 52.161.51.53:47178] [client 52.161.51.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_TJAdF4OGi-asleB6PzQAAAUo"]
[Thu Apr 16 02:11:29.089968 2026] [:error] [pid 20548:tid 20564] [client 20.168.111.85:26880] [client 20.168.111.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ad_U0akpqgnqCHq6bJa9zQAAAI0"], referer: https://outlook.live.com/
[Thu Apr 16 02:43:17.179110 2026] [:error] [pid 20548:tid 20553] [client 91.200.101.138:50102] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/graphql"] [unique_id "ad_cRakpqgnqCHq6bJbKtQAAAII"]
[Thu Apr 16 05:20:38.524129 2026] [:error] [pid 29603:tid 29612] [client 186.204.60.165:4249] [client 186.204.60.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.204.60.165, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeABJlfGOR6fpTWUAzqh7QAAAQc"]
[Thu Apr 16 05:20:38.535807 2026] [proxy_fcgi:error] [pid 29603:tid 29612] [client 186.204.60.165:4249] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:22.449403 2026] [proxy_fcgi:error] [pid 57538:tid 57622] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:22.585911 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:22.723624 2026] [proxy_fcgi:error] [pid 57538:tid 57607] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:22.860265 2026] [proxy_fcgi:error] [pid 57538:tid 57611] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:22.997519 2026] [proxy_fcgi:error] [pid 57538:tid 57615] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:23.134714 2026] [proxy_fcgi:error] [pid 57538:tid 57605] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:23.414334 2026] [proxy_fcgi:error] [pid 57538:tid 57614] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:23.551046 2026] [proxy_fcgi:error] [pid 57538:tid 57609] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:23.687783 2026] [proxy_fcgi:error] [pid 57538:tid 57623] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:23.823852 2026] [proxy_fcgi:error] [pid 57538:tid 57625] [client 20.196.197.230:1231] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 05:46:23.957018 2026] [:error] [pid 57538:tid 57613] [client 20.196.197.230:1231] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeAHL8uMaiEF5SVR2BcrlwAAAIs"]
[Thu Apr 16 05:46:24.516179 2026] [:error] [pid 57639:tid 57648] [client 20.196.197.230:1474] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeAHMKMCQoTw7TsxWunAsAAAAMI"]
[Thu Apr 16 05:46:25.062545 2026] [:error] [pid 29603:tid 29617] [client 20.196.197.230:1098] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeAHMVfGOR6fpTWUAzq2SAAAAQw"]
[Thu Apr 16 05:46:25.607782 2026] [:error] [pid 49094:tid 49108] [client 20.196.197.230:1148] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeAHMTbDwvcXorHR_Mx6VQAAAUw"]
[Thu Apr 16 09:37:18.262155 2026] [:error] [pid 49094:tid 49105] [client 98.93.160.221:51142] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aeA9TjbDwvcXorHR_MzrhAAAAUk"]
[Thu Apr 16 13:43:36.906963 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 20.223.204.92:50956] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:09.111318 2026] [proxy_fcgi:error] [pid 7880:tid 7893] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:09.249094 2026] [proxy_fcgi:error] [pid 7880:tid 7889] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:09.386989 2026] [proxy_fcgi:error] [pid 7880:tid 7897] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:09.670216 2026] [proxy_fcgi:error] [pid 7880:tid 7888] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:09.838667 2026] [proxy_fcgi:error] [pid 7880:tid 7903] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:09.975750 2026] [proxy_fcgi:error] [pid 7880:tid 7905] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:10.114597 2026] [proxy_fcgi:error] [pid 7880:tid 7896] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:10.253548 2026] [proxy_fcgi:error] [pid 7880:tid 7894] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:10.391558 2026] [proxy_fcgi:error] [pid 7880:tid 7890] [client 20.196.197.230:4259] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 14:35:10.663081 2026] [:error] [pid 7880:tid 7891] [client 20.196.197.230:4259] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeCDHqaezm4fSGc0yUI36gAAAYY"]
[Thu Apr 16 14:35:11.225941 2026] [:error] [pid 57639:tid 57647] [client 20.196.197.230:4233] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeCDH6MCQoTw7TsxWuml9AAAAME"]
[Thu Apr 16 14:35:11.763581 2026] [:error] [pid 57538:tid 57622] [client 20.196.197.230:4279] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeCDH8uMaiEF5SVR2BeWjgAAAJQ"]
[Thu Apr 16 14:35:12.303249 2026] [:error] [pid 57538:tid 57610] [client 20.196.197.230:4286] [client 20.196.197.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeCDIMuMaiEF5SVR2BeWkQAAAIg"]
[Thu Apr 16 20:43:57.983347 2026] [:error] [pid 57639:tid 57657] [client 167.99.9.40:63233] [client 167.99.9.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.9.40, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aeDZjaMCQoTw7TsxWumM_AAAAMs"]
[Thu Apr 16 20:43:57.992748 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 167.99.9.40:63233] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:35:49.103050 2026] [:error] [pid 57639:tid 57654] [client 45.130.203.158:54343] [client 45.130.203.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "aeEB1aMCQoTw7TsxWukY9AAAAMg"]
[Thu Apr 16 23:35:49.869504 2026] [:error] [pid 29603:tid 29624] [client 45.130.203.165:21025] [client 45.130.203.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "aeEB1VfGOR6fpTWUAzq80gAAARM"]
[Fri Apr 17 00:39:33.253139 2026] [proxy_fcgi:error] [pid 43387:tid 43472] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:33.515886 2026] [proxy_fcgi:error] [pid 43387:tid 43458] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:33.777422 2026] [proxy_fcgi:error] [pid 43387:tid 43459] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:34.175920 2026] [proxy_fcgi:error] [pid 43387:tid 43454] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:34.439027 2026] [proxy_fcgi:error] [pid 43387:tid 43461] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:34.700572 2026] [proxy_fcgi:error] [pid 43387:tid 43457] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:34.974869 2026] [proxy_fcgi:error] [pid 43387:tid 43467] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:35.237027 2026] [proxy_fcgi:error] [pid 43387:tid 43450] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:35.506306 2026] [proxy_fcgi:error] [pid 43387:tid 43448] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:35.858351 2026] [proxy_fcgi:error] [pid 43387:tid 43475] [client 51.103.127.33:54005] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:39:36.387926 2026] [:error] [pid 43387:tid 43477] [client 51.103.127.33:54005] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEQyCBNsONqHxWTakUuEAAAAJg"]
[Fri Apr 17 00:39:37.629691 2026] [:error] [pid 3245:tid 3273] [client 51.103.127.33:25384] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEQyaESOMTHVLs-uFDAlAAAAQs"]
[Fri Apr 17 00:39:38.508502 2026] [:error] [pid 43386:tid 43442] [client 51.103.127.33:44057] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEQyu91GAVgUfhPVDGyMwAAAFU"]
[Fri Apr 17 00:39:39.306393 2026] [:error] [pid 43386:tid 43421] [client 51.103.127.33:30514] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEQy-91GAVgUfhPVDGyOAAAAEE"]
[Fri Apr 17 00:39:41.368744 2026] [:error] [pid 43387:tid 43454] [client 51.103.127.33:23409] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeEQzSBNsONqHxWTakUuGAAAAIQ"]
[Fri Apr 17 00:39:42.895350 2026] [:error] [pid 3245:tid 3268] [client 51.103.127.33:25344] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeEQzqESOMTHVLs-uFDAmgAAAQY"]
[Fri Apr 17 00:39:43.931174 2026] [:error] [pid 43387:tid 43449] [client 51.103.127.33:53930] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeEQzyBNsONqHxWTakUuHgAAAIE"]
[Fri Apr 17 00:39:45.088687 2026] [:error] [pid 43385:tid 43390] [client 51.103.127.33:33599] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeEQ0cnIxkJaUI8KNs70qwAAAAE"]
[Fri Apr 17 00:39:46.453836 2026] [:error] [pid 43482:tid 43500] [client 51.103.127.33:8208] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEQ0j9SZnuKxlHrct2AMQAAANA"]
[Fri Apr 17 00:39:47.975758 2026] [:error] [pid 43482:tid 43484] [client 51.103.127.33:23437] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEQ0z9SZnuKxlHrct2ANAAAAMA"]
[Fri Apr 17 00:39:50.254261 2026] [:error] [pid 43385:tid 43404] [client 51.103.127.33:47523] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEQ1snIxkJaUI8KNs70vAAAAA8"]
[Fri Apr 17 00:39:52.479383 2026] [:error] [pid 3245:tid 3282] [client 51.103.127.33:25380] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEQ2KESOMTHVLs-uFDAqgAAARQ"]
[Fri Apr 17 00:39:53.381270 2026] [:error] [pid 3245:tid 3275] [client 51.103.127.33:58618] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeEQ2aESOMTHVLs-uFDArgAAAQ0"]
[Fri Apr 17 00:39:55.198888 2026] [:error] [pid 3245:tid 3285] [client 51.103.127.33:25894] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeEQ26ESOMTHVLs-uFDAswAAARc"]
[Fri Apr 17 00:39:56.891497 2026] [:error] [pid 43386:tid 43420] [client 51.103.127.33:53932] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeEQ3O91GAVgUfhPVDGyTwAAAEA"]
[Fri Apr 17 00:39:58.903951 2026] [:error] [pid 3245:tid 3281] [client 51.103.127.33:9205] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeEQ3qESOMTHVLs-uFDAwQAAARM"]
[Fri Apr 17 00:40:00.503305 2026] [:error] [pid 43482:tid 43498] [client 51.103.127.33:25911] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeEQ4D9SZnuKxlHrct2ANQAAAM4"]
[Fri Apr 17 00:40:01.440789 2026] [:error] [pid 43385:tid 43405] [client 51.103.127.33:40762] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeEQ4cnIxkJaUI8KNs709AAAABA"]
[Fri Apr 17 00:40:02.589416 2026] [:error] [pid 43386:tid 43437] [client 51.103.127.33:23453] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeEQ4u91GAVgUfhPVDGyVAAAAFE"]
[Fri Apr 17 00:40:03.736832 2026] [:error] [pid 43385:tid 43394] [client 51.103.127.33:45104] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeEQ48nIxkJaUI8KNs71BQAAAAU"]
[Fri Apr 17 00:40:04.511167 2026] [:error] [pid 43386:tid 43426] [client 51.103.127.33:8338] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEQ5O91GAVgUfhPVDGyWgAAAEY"]
[Fri Apr 17 00:40:05.483651 2026] [:error] [pid 43482:tid 43507] [client 51.103.127.33:8596] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEQ5T9SZnuKxlHrct2AOAAAANc"]
[Fri Apr 17 00:40:07.010327 2026] [:error] [pid 3245:tid 3269] [client 51.103.127.33:8625] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEQ56ESOMTHVLs-uFDA3gAAAQc"]
[Fri Apr 17 00:40:10.582445 2026] [:error] [pid 43386:tid 43429] [client 51.103.127.33:8198] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEQ6u91GAVgUfhPVDGyZQAAAEk"]
[Fri Apr 17 00:40:12.743980 2026] [:error] [pid 43386:tid 43425] [client 51.103.127.33:32757] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEQ7O91GAVgUfhPVDGyagAAAEU"]
[Fri Apr 17 00:40:16.397146 2026] [:error] [pid 43385:tid 43391] [client 51.103.127.33:22626] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEQ8MnIxkJaUI8KNs71KQAAAAI"]
[Fri Apr 17 00:40:17.952529 2026] [:error] [pid 3245:tid 3267] [client 51.103.127.33:32708] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEQ8aESOMTHVLs-uFDA7QAAAQU"]
[Fri Apr 17 00:40:19.326967 2026] [:error] [pid 3245:tid 3266] [client 51.103.127.33:47540] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEQ86ESOMTHVLs-uFDA-AAAAQQ"]
[Fri Apr 17 00:40:20.201950 2026] [:error] [pid 43482:tid 43490] [client 51.103.127.33:8331] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEQ9D9SZnuKxlHrct2ATAAAAMY"]
[Fri Apr 17 00:40:21.677346 2026] [:error] [pid 43482:tid 43506] [client 51.103.127.33:45067] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEQ9T9SZnuKxlHrct2AUAAAANY"]
[Fri Apr 17 00:40:23.103334 2026] [:error] [pid 43482:tid 43485] [client 51.103.127.33:24227] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEQ9z9SZnuKxlHrct2AVgAAAME"]
[Fri Apr 17 00:40:24.189351 2026] [:error] [pid 43386:tid 43437] [client 51.103.127.33:61687] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEQ-O91GAVgUfhPVDGyfwAAAFE"]
[Fri Apr 17 00:40:24.880072 2026] [:error] [pid 43386:tid 43426] [client 51.103.127.33:26780] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeEQ-O91GAVgUfhPVDGygQAAAEY"]
[Fri Apr 17 00:40:25.972448 2026] [:error] [pid 43387:tid 43468] [client 51.103.127.33:8368] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeEQ-SBNsONqHxWTakUucAAAAI8"]
[Fri Apr 17 00:40:26.799350 2026] [:error] [pid 3245:tid 3266] [client 51.103.127.33:24212] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeEQ-qESOMTHVLs-uFDA_wAAAQQ"]
[Fri Apr 17 00:40:27.560338 2026] [:error] [pid 43387:tid 43458] [client 51.103.127.33:8965] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeEQ-yBNsONqHxWTakUudgAAAIc"]
[Fri Apr 17 00:40:28.326906 2026] [:error] [pid 3245:tid 3273] [client 51.103.127.33:40698] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeEQ_KESOMTHVLs-uFDBAgAAAQs"]
[Fri Apr 17 00:40:29.160846 2026] [:error] [pid 43386:tid 43444] [client 51.103.127.33:50383] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeEQ_e91GAVgUfhPVDGylgAAAFc"]
[Fri Apr 17 00:40:30.298495 2026] [:error] [pid 43386:tid 43438] [client 51.103.127.33:44552] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeEQ_u91GAVgUfhPVDGynQAAAFI"]
[Fri Apr 17 00:40:31.550658 2026] [:error] [pid 43386:tid 43423] [client 51.103.127.33:39691] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeEQ_-91GAVgUfhPVDGyogAAAEM"]
[Fri Apr 17 00:40:33.336904 2026] [:error] [pid 43387:tid 43468] [client 51.103.127.33:31014] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blqjs.php"] [unique_id "aeERASBNsONqHxWTakUufgAAAI8"]
[Fri Apr 17 00:40:34.134718 2026] [:error] [pid 43386:tid 43444] [client 51.103.127.33:40703] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blqjs.php"] [unique_id "aeERAu91GAVgUfhPVDGyqAAAAFc"]
[Fri Apr 17 00:40:36.346879 2026] [proxy_fcgi:error] [pid 43387:tid 43471] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:37.088169 2026] [proxy_fcgi:error] [pid 43387:tid 43467] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:37.399067 2026] [proxy_fcgi:error] [pid 43387:tid 43454] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:37.692135 2026] [proxy_fcgi:error] [pid 43387:tid 43473] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:37.984247 2026] [proxy_fcgi:error] [pid 43387:tid 43465] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:38.289109 2026] [proxy_fcgi:error] [pid 43387:tid 43456] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:38.582819 2026] [proxy_fcgi:error] [pid 43387:tid 43449] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:38.890538 2026] [proxy_fcgi:error] [pid 43387:tid 43472] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:39.202999 2026] [proxy_fcgi:error] [pid 43387:tid 43459] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:39.521185 2026] [proxy_fcgi:error] [pid 43387:tid 43460] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:39.835809 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 51.103.127.33:31006] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:40:40.921335 2026] [:error] [pid 43387:tid 43469] [client 51.103.127.33:31006] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeERCCBNsONqHxWTakUukwAAAJA"]
[Fri Apr 17 00:40:44.780690 2026] [:error] [pid 43386:tid 43429] [client 51.103.127.33:31509] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeERDO91GAVgUfhPVDGytgAAAEk"]
[Fri Apr 17 00:40:47.602861 2026] [:error] [pid 43385:tid 43393] [client 51.103.127.33:8678] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeERD8nIxkJaUI8KNs71ZgAAAAQ"]
[Fri Apr 17 00:40:48.441837 2026] [:error] [pid 43386:tid 43430] [client 51.103.127.33:24518] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeEREO91GAVgUfhPVDGywgAAAEo"]
[Fri Apr 17 00:40:49.638268 2026] [:error] [pid 3245:tid 3270] [client 51.103.127.33:39233] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeEREaESOMTHVLs-uFDBEwAAAQg"]
[Fri Apr 17 00:40:51.166124 2026] [:error] [pid 3245:tid 3274] [client 51.103.127.33:45494] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeERE6ESOMTHVLs-uFDBFwAAAQw"]
[Fri Apr 17 00:40:52.375887 2026] [:error] [pid 43386:tid 43441] [client 51.103.127.33:21877] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeERFO91GAVgUfhPVDGyxQAAAFQ"]
[Fri Apr 17 00:40:53.288552 2026] [:error] [pid 43482:tid 43500] [client 51.103.127.33:22935] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeERFT9SZnuKxlHrct2AiAAAANA"]
[Fri Apr 17 00:40:54.245461 2026] [:error] [pid 3245:tid 3276] [client 51.103.127.33:41673] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeERFqESOMTHVLs-uFDBLQAAAQ4"]
[Fri Apr 17 00:40:55.229585 2026] [:error] [pid 43386:tid 43443] [client 51.103.127.33:45482] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeERF-91GAVgUfhPVDGyxwAAAFY"]
[Fri Apr 17 00:40:56.025836 2026] [:error] [pid 43387:tid 43460] [client 51.103.127.33:21882] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeERGCBNsONqHxWTakUunAAAAIk"]
[Fri Apr 17 00:40:56.842786 2026] [:error] [pid 43387:tid 43458] [client 51.103.127.33:24594] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeERGCBNsONqHxWTakUunQAAAIc"]
[Fri Apr 17 00:40:57.583315 2026] [:error] [pid 43387:tid 43466] [client 51.103.127.33:45457] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeERGSBNsONqHxWTakUunwAAAI0"]
[Fri Apr 17 00:40:58.384915 2026] [:error] [pid 43482:tid 43491] [client 51.103.127.33:40178] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeERGj9SZnuKxlHrct2AjwAAAMc"]
[Fri Apr 17 00:40:59.099529 2026] [:error] [pid 43387:tid 43450] [client 51.103.127.33:31462] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeERGyBNsONqHxWTakUuowAAAII"]
[Fri Apr 17 00:40:59.952517 2026] [:error] [pid 43387:tid 43474] [client 51.103.127.33:40184] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeERGyBNsONqHxWTakUupgAAAJU"]
[Fri Apr 17 00:41:00.509518 2026] [:error] [pid 43387:tid 43473] [client 51.103.127.33:8799] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeERHCBNsONqHxWTakUuqAAAAJQ"]
[Fri Apr 17 00:41:01.237884 2026] [:error] [pid 43385:tid 43407] [client 51.103.127.33:28829] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeERHcnIxkJaUI8KNs71agAAABI"]
[Fri Apr 17 00:41:01.869417 2026] [:error] [pid 43482:tid 43484] [client 51.103.127.33:21782] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeERHT9SZnuKxlHrct2AkwAAAMA"]
[Fri Apr 17 00:41:02.477008 2026] [:error] [pid 43387:tid 43458] [client 51.103.127.33:26403] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeERHiBNsONqHxWTakUurgAAAIc"]
[Fri Apr 17 00:41:03.252298 2026] [:error] [pid 3245:tid 3276] [client 51.103.127.33:8900] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeERH6ESOMTHVLs-uFDBQgAAAQ4"]
[Fri Apr 17 00:41:03.899507 2026] [:error] [pid 43386:tid 43443] [client 51.103.127.33:8804] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeERH-91GAVgUfhPVDGy3AAAAFY"]
[Fri Apr 17 00:41:04.863043 2026] [:error] [pid 43482:tid 43489] [client 51.103.127.33:24991] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeERID9SZnuKxlHrct2AnQAAAMU"]
[Fri Apr 17 00:41:05.860614 2026] [:error] [pid 43482:tid 43504] [client 51.103.127.33:26400] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeERIT9SZnuKxlHrct2AoAAAANQ"]
[Fri Apr 17 00:41:06.476349 2026] [:error] [pid 43482:tid 43487] [client 51.103.127.33:25022] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-942.php"] [unique_id "aeERIj9SZnuKxlHrct2AoQAAAMM"]
[Fri Apr 17 00:41:07.481377 2026] [:error] [pid 43386:tid 43436] [client 51.103.127.33:8775] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-942.php"] [unique_id "aeERI-91GAVgUfhPVDGy4QAAAFA"]
[Fri Apr 17 00:41:08.332822 2026] [:error] [pid 43482:tid 43490] [client 51.103.127.33:25005] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-942.php"] [unique_id "aeERJD9SZnuKxlHrct2ApQAAAMY"]
[Fri Apr 17 00:41:10.378189 2026] [:error] [pid 3245:tid 3267] [client 51.103.127.33:40139] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-942.php"] [unique_id "aeERJqESOMTHVLs-uFDBSgAAAQU"]
[Fri Apr 17 00:41:13.800654 2026] [:error] [pid 43386:tid 43441] [client 51.103.127.33:41696] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "aeERKe91GAVgUfhPVDGy5wAAAFQ"]
[Fri Apr 17 00:41:15.013154 2026] [:error] [pid 43386:tid 43431] [client 51.103.127.33:40142] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "aeERK-91GAVgUfhPVDGy6gAAAEs"]
[Fri Apr 17 00:41:17.757931 2026] [:error] [pid 3245:tid 3274] [client 51.103.127.33:31453] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "aeERLaESOMTHVLs-uFDBWgAAAQw"]
[Fri Apr 17 00:41:21.457656 2026] [:error] [pid 43386:tid 43427] [client 51.103.127.33:41679] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sde.php"] [unique_id "aeERMe91GAVgUfhPVDGy9QAAAEc"]
[Fri Apr 17 00:41:27.114078 2026] [:error] [pid 43482:tid 43490] [client 51.103.127.33:31475] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpb.php"] [unique_id "aeERNz9SZnuKxlHrct2AxAAAAMY"]
[Fri Apr 17 00:41:34.285932 2026] [:error] [pid 43386:tid 43424] [client 51.103.127.33:41695] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpb.php"] [unique_id "aeERPu91GAVgUfhPVDGzAQAAAEQ"]
[Fri Apr 17 00:41:40.411489 2026] [proxy_fcgi:error] [pid 43482:tid 43505] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:40.652611 2026] [proxy_fcgi:error] [pid 43482:tid 43502] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:40.914659 2026] [proxy_fcgi:error] [pid 43482:tid 43484] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:41.154920 2026] [proxy_fcgi:error] [pid 43482:tid 43507] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:41.393838 2026] [proxy_fcgi:error] [pid 43482:tid 43498] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:41.633672 2026] [proxy_fcgi:error] [pid 43482:tid 43503] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:41.882483 2026] [proxy_fcgi:error] [pid 43482:tid 43485] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:42.143450 2026] [proxy_fcgi:error] [pid 43482:tid 43489] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:42.394472 2026] [proxy_fcgi:error] [pid 43482:tid 43491] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:42.645680 2026] [proxy_fcgi:error] [pid 43482:tid 43495] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:42.884909 2026] [proxy_fcgi:error] [pid 43482:tid 43502] [client 51.103.127.33:26401] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:41:43.122519 2026] [:error] [pid 43482:tid 43494] [client 51.103.127.33:26401] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeERRz9SZnuKxlHrct2A_wAAAMo"]
[Fri Apr 17 00:41:46.578706 2026] [:error] [pid 43387:tid 43461] [client 51.103.127.33:27742] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeERSiBNsONqHxWTakUuygAAAIo"]
[Fri Apr 17 00:41:51.986468 2026] [:error] [pid 3245:tid 3277] [client 51.103.127.33:41208] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeERT6ESOMTHVLs-uFDBxAAAAQ8"]
[Fri Apr 17 00:41:54.025357 2026] [:error] [pid 43386:tid 43435] [client 51.103.127.33:24252] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeERUu91GAVgUfhPVDGzFgAAAE8"]
[Fri Apr 17 00:41:55.472916 2026] [:error] [pid 43385:tid 43398] [client 51.103.127.33:36337] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeERU8nIxkJaUI8KNs71iQAAAAk"]
[Fri Apr 17 00:41:56.806576 2026] [:error] [pid 3245:tid 3276] [client 51.103.127.33:8239] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeERVKESOMTHVLs-uFDBygAAAQ4"]
[Fri Apr 17 00:41:57.867739 2026] [:error] [pid 43387:tid 43466] [client 51.103.127.33:30510] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeERVSBNsONqHxWTakUu6AAAAI0"]
[Fri Apr 17 00:41:59.590674 2026] [:error] [pid 43385:tid 43390] [client 51.103.127.33:28274] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeERV8nIxkJaUI8KNs71jgAAAAE"]
[Fri Apr 17 00:42:00.857840 2026] [:error] [pid 43386:tid 43424] [client 51.103.127.33:54000] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeERWO91GAVgUfhPVDGzHQAAAEQ"]
[Fri Apr 17 00:42:02.848281 2026] [:error] [pid 3245:tid 3284] [client 51.103.127.33:44093] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeERWqESOMTHVLs-uFDBzwAAARY"]
[Fri Apr 17 00:42:05.429919 2026] [:error] [pid 43482:tid 43485] [client 51.103.127.33:28232] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeERXT9SZnuKxlHrct2BIQAAAME"]
[Fri Apr 17 00:42:06.739347 2026] [:error] [pid 3245:tid 3275] [client 51.103.127.33:59100] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeERXqESOMTHVLs-uFDB0QAAAQ0"]
[Fri Apr 17 00:42:08.665505 2026] [:error] [pid 43387:tid 43468] [client 51.103.127.33:59072] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeERYCBNsONqHxWTakUu9wAAAI8"]
[Fri Apr 17 00:42:10.878675 2026] [:error] [pid 43387:tid 43470] [client 51.103.127.33:24153] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeERYiBNsONqHxWTakUvAAAAAJE"]
[Fri Apr 17 00:42:12.166996 2026] [:error] [pid 43482:tid 43486] [client 51.103.127.33:59073] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeERZD9SZnuKxlHrct2BLgAAAMI"]
[Fri Apr 17 00:42:14.584910 2026] [:error] [pid 43387:tid 43472] [client 51.103.127.33:43483] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeERZiBNsONqHxWTakUvBQAAAJM"]
[Fri Apr 17 00:42:15.491959 2026] [:error] [pid 3245:tid 3263] [client 51.103.127.33:44039] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeERZ6ESOMTHVLs-uFDB9AAAAQE"]
[Fri Apr 17 00:42:16.104215 2026] [:error] [pid 43385:tid 43405] [client 51.103.127.33:43544] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeERaMnIxkJaUI8KNs71qgAAABA"]
[Fri Apr 17 00:42:16.734110 2026] [:error] [pid 43482:tid 43497] [client 51.103.127.33:28258] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeERaD9SZnuKxlHrct2BMQAAAM0"]
[Fri Apr 17 00:42:17.282764 2026] [:error] [pid 43386:tid 43421] [client 51.103.127.33:39309] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeERae91GAVgUfhPVDGzKQAAAEE"]
[Fri Apr 17 00:42:18.359739 2026] [:error] [pid 43385:tid 43389] [client 51.103.127.33:28818] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeERasnIxkJaUI8KNs71rAAAAAA"]
[Fri Apr 17 00:42:19.365269 2026] [:error] [pid 43385:tid 43407] [client 51.103.127.33:44047] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeERa8nIxkJaUI8KNs71rwAAABI"]
[Fri Apr 17 00:42:20.273352 2026] [:error] [pid 43482:tid 43501] [client 51.103.127.33:28254] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeERbD9SZnuKxlHrct2BNgAAANE"]
[Fri Apr 17 00:42:20.892734 2026] [:error] [pid 43386:tid 43432] [client 51.103.127.33:30489] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeERbO91GAVgUfhPVDGzLwAAAEw"]
[Fri Apr 17 00:42:21.544485 2026] [:error] [pid 43385:tid 43400] [client 51.103.127.33:43463] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeERbcnIxkJaUI8KNs71sAAAAAs"]
[Fri Apr 17 00:42:22.427834 2026] [:error] [pid 3245:tid 3274] [client 51.103.127.33:53972] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeERbqESOMTHVLs-uFDCDAAAAQw"]
[Fri Apr 17 00:42:23.037676 2026] [:error] [pid 3245:tid 3271] [client 51.103.127.33:59074] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeERb6ESOMTHVLs-uFDCDQAAAQk"]
[Fri Apr 17 00:42:23.679077 2026] [:error] [pid 43385:tid 43398] [client 51.103.127.33:60325] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeERb8nIxkJaUI8KNs71sQAAAAk"]
[Fri Apr 17 00:42:24.495793 2026] [:error] [pid 43482:tid 43498] [client 51.103.127.33:34542] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeERcD9SZnuKxlHrct2BPwAAAM4"]
[Fri Apr 17 00:42:25.337333 2026] [:error] [pid 43385:tid 43403] [client 51.103.127.33:54010] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeERccnIxkJaUI8KNs71ugAAAA4"]
[Fri Apr 17 00:42:26.214354 2026] [:error] [pid 3245:tid 3268] [client 51.103.127.33:28813] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeERcqESOMTHVLs-uFDCGQAAAQY"]
[Fri Apr 17 00:42:26.879779 2026] [:error] [pid 43482:tid 43497] [client 51.103.127.33:43491] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeERcj9SZnuKxlHrct2BRAAAAM0"]
[Fri Apr 17 00:42:28.031457 2026] [:error] [pid 43387:tid 43461] [client 51.103.127.33:34532] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "aeERdCBNsONqHxWTakUvHwAAAIo"]
[Fri Apr 17 00:42:29.176439 2026] [:error] [pid 3245:tid 3265] [client 51.103.127.33:44044] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "aeERdaESOMTHVLs-uFDCHgAAAQM"]
[Fri Apr 17 00:42:31.568251 2026] [:error] [pid 3245:tid 3267] [client 51.103.127.33:39332] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "aeERd6ESOMTHVLs-uFDCKwAAAQU"]
[Fri Apr 17 00:42:34.441570 2026] [:error] [pid 43482:tid 43492] [client 51.103.127.33:44050] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upll22.php"] [unique_id "aeERej9SZnuKxlHrct2BWAAAAMg"]
[Fri Apr 17 00:42:36.572140 2026] [:error] [pid 43386:tid 43437] [client 51.103.127.33:24168] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeERfO91GAVgUfhPVDGzSgAAAFE"]
[Fri Apr 17 00:42:38.526508 2026] [:error] [pid 43386:tid 43432] [client 51.103.127.33:39359] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeERfu91GAVgUfhPVDGzUgAAAEw"]
[Fri Apr 17 00:42:39.810570 2026] [:error] [pid 3245:tid 3281] [client 51.103.127.33:44076] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeERf6ESOMTHVLs-uFDCQwAAARM"]
[Fri Apr 17 00:42:41.415976 2026] [:error] [pid 43482:tid 43488] [client 51.103.127.33:23761] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeERgT9SZnuKxlHrct2BYQAAAMQ"]
[Fri Apr 17 00:42:42.859024 2026] [proxy_fcgi:error] [pid 43482:tid 43506] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:43.124577 2026] [proxy_fcgi:error] [pid 43482:tid 43487] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:43.392598 2026] [proxy_fcgi:error] [pid 43482:tid 43503] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:43.956032 2026] [proxy_fcgi:error] [pid 43482:tid 43498] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:44.239556 2026] [proxy_fcgi:error] [pid 43482:tid 43495] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:44.508071 2026] [proxy_fcgi:error] [pid 43482:tid 43508] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:44.802898 2026] [proxy_fcgi:error] [pid 43482:tid 43499] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:45.069675 2026] [proxy_fcgi:error] [pid 43482:tid 43496] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:45.344374 2026] [proxy_fcgi:error] [pid 43482:tid 43488] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:45.636777 2026] [proxy_fcgi:error] [pid 43482:tid 43502] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:45.908603 2026] [proxy_fcgi:error] [pid 43482:tid 43492] [client 51.103.127.33:24189] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:42:46.171951 2026] [:error] [pid 43482:tid 43503] [client 51.103.127.33:24189] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeERhj9SZnuKxlHrct2BewAAANM"]
[Fri Apr 17 00:42:47.445145 2026] [:error] [pid 43386:tid 43438] [client 51.103.127.33:26325] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeERh-91GAVgUfhPVDGzYAAAAFI"]
[Fri Apr 17 00:42:48.215969 2026] [:error] [pid 43385:tid 43404] [client 51.103.127.33:34087] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeERiMnIxkJaUI8KNs710AAAAA8"]
[Fri Apr 17 00:42:49.085142 2026] [:error] [pid 43385:tid 43401] [client 51.103.127.33:29999] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeERicnIxkJaUI8KNs711wAAAAw"]
[Fri Apr 17 00:42:49.926680 2026] [:error] [pid 43387:tid 43471] [client 51.103.127.33:52093] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeERiSBNsONqHxWTakUvNQAAAJI"]
[Fri Apr 17 00:42:51.145830 2026] [:error] [pid 43482:tid 43492] [client 51.103.127.33:59029] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeERiz9SZnuKxlHrct2BjAAAAMg"]
[Fri Apr 17 00:42:52.403350 2026] [:error] [pid 3245:tid 3265] [client 51.103.127.33:25792] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeERjKESOMTHVLs-uFDCdwAAAQM"]
[Fri Apr 17 00:42:53.615433 2026] [:error] [pid 43387:tid 43470] [client 51.103.127.33:27257] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeERjSBNsONqHxWTakUvPAAAAJE"]
[Fri Apr 17 00:42:54.586044 2026] [:error] [pid 3245:tid 3268] [client 51.103.127.33:25838] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeERjqESOMTHVLs-uFDCggAAAQY"]
[Fri Apr 17 00:42:55.381832 2026] [:error] [pid 43387:tid 43456] [client 51.103.127.33:25813] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeERjyBNsONqHxWTakUvPgAAAIU"]
[Fri Apr 17 00:42:56.347549 2026] [:error] [pid 43385:tid 43391] [client 51.103.127.33:59026] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeERkMnIxkJaUI8KNs715QAAAAI"]
[Fri Apr 17 00:42:57.586680 2026] [:error] [pid 43482:tid 43504] [client 51.103.127.33:59010] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeERkT9SZnuKxlHrct2BnQAAANQ"]
[Fri Apr 17 00:42:58.397955 2026] [:error] [pid 3245:tid 3274] [client 51.103.127.33:25809] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeERkqESOMTHVLs-uFDCiwAAAQw"]
[Fri Apr 17 00:43:00.144664 2026] [:error] [pid 3245:tid 3280] [client 51.103.127.33:47213] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeERlKESOMTHVLs-uFDCkAAAARI"]
[Fri Apr 17 00:43:02.954726 2026] [:error] [pid 3245:tid 3284] [client 51.103.127.33:49735] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeERlqESOMTHVLs-uFDCnwAAARY"]
[Fri Apr 17 00:43:09.265036 2026] [:error] [pid 43386:tid 43423] [client 51.103.127.33:35273] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeERne91GAVgUfhPVDGzcgAAAEM"]
[Fri Apr 17 00:43:14.895480 2026] [:error] [pid 3245:tid 3279] [client 51.103.127.33:40228] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aeERoqESOMTHVLs-uFDCuwAAARE"]
[Fri Apr 17 00:43:23.958695 2026] [:error] [pid 43387:tid 43453] [client 51.103.127.33:45434] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aeERqyBNsONqHxWTakUvZQAAAIM"]
[Fri Apr 17 00:43:27.269329 2026] [:error] [pid 43385:tid 43393] [client 51.103.127.33:32434] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeERr8nIxkJaUI8KNs72FAAAAAQ"]
[Fri Apr 17 00:43:28.245816 2026] [:error] [pid 43482:tid 43506] [client 51.103.127.33:41262] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeERsD9SZnuKxlHrct2B3wAAANY"]
[Fri Apr 17 00:43:29.272304 2026] [:error] [pid 43482:tid 43492] [client 51.103.127.33:41260] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeERsT9SZnuKxlHrct2B4gAAAMg"]
[Fri Apr 17 00:43:30.405067 2026] [:error] [pid 43482:tid 43503] [client 51.103.127.33:45011] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeERsj9SZnuKxlHrct2B5QAAANM"]
[Fri Apr 17 00:43:31.234646 2026] [:error] [pid 43482:tid 43502] [client 51.103.127.33:41279] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aeERsz9SZnuKxlHrct2B6gAAANI"]
[Fri Apr 17 00:43:32.334918 2026] [:error] [pid 43482:tid 43489] [client 51.103.127.33:50755] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aeERtD9SZnuKxlHrct2B8QAAAMU"]
[Fri Apr 17 00:43:33.300674 2026] [:error] [pid 43387:tid 43462] [client 51.103.127.33:50808] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aeERtSBNsONqHxWTakUvbAAAAIs"]
[Fri Apr 17 00:43:34.417974 2026] [:error] [pid 43387:tid 43471] [client 51.103.127.33:8492] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aeERtiBNsONqHxWTakUvbwAAAJI"]
[Fri Apr 17 00:43:35.745359 2026] [:error] [pid 43387:tid 43458] [client 51.103.127.33:27813] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeERtyBNsONqHxWTakUvcQAAAIc"]
[Fri Apr 17 00:43:36.598623 2026] [:error] [pid 3245:tid 3276] [client 51.103.127.33:21307] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeERuKESOMTHVLs-uFDDHwAAAQ4"]
[Fri Apr 17 00:43:38.024694 2026] [:error] [pid 43482:tid 43494] [client 51.103.127.33:30960] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeERuj9SZnuKxlHrct2CAwAAAMo"]
[Fri Apr 17 00:43:40.861395 2026] [:error] [pid 43385:tid 43403] [client 51.103.127.33:50797] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeERvMnIxkJaUI8KNs72MwAAAA4"]
[Fri Apr 17 00:43:43.597716 2026] [:error] [pid 3245:tid 3283] [client 51.103.127.33:50775] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aeERv6ESOMTHVLs-uFDDLgAAARU"]
[Fri Apr 17 00:43:45.169293 2026] [proxy_fcgi:error] [pid 3245:tid 3270] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:45.430567 2026] [proxy_fcgi:error] [pid 3245:tid 3277] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:45.691442 2026] [proxy_fcgi:error] [pid 3245:tid 3282] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:45.966781 2026] [proxy_fcgi:error] [pid 3245:tid 3263] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:46.273392 2026] [proxy_fcgi:error] [pid 3245:tid 3268] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:46.537114 2026] [proxy_fcgi:error] [pid 3245:tid 3281] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:46.814991 2026] [proxy_fcgi:error] [pid 3245:tid 3284] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:47.075756 2026] [proxy_fcgi:error] [pid 3245:tid 3285] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:47.337149 2026] [proxy_fcgi:error] [pid 3245:tid 3280] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:47.599419 2026] [proxy_fcgi:error] [pid 3245:tid 3270] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:47.862249 2026] [proxy_fcgi:error] [pid 3245:tid 3277] [client 51.103.127.33:52703] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:43:48.119603 2026] [:error] [pid 3245:tid 3279] [client 51.103.127.33:52703] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeERxKESOMTHVLs-uFDDRgAAARE"]
[Fri Apr 17 00:43:49.259644 2026] [:error] [pid 43385:tid 43395] [client 51.103.127.33:52680] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeERxcnIxkJaUI8KNs72VgAAAAY"]
[Fri Apr 17 00:43:50.104684 2026] [:error] [pid 43387:tid 43460] [client 51.103.127.33:34563] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeERxiBNsONqHxWTakUveQAAAIk"]
[Fri Apr 17 00:43:51.005375 2026] [:error] [pid 43387:tid 43474] [client 51.103.127.33:59718] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeERxyBNsONqHxWTakUvegAAAJU"]
[Fri Apr 17 00:43:52.525880 2026] [:error] [pid 3245:tid 3280] [client 51.103.127.33:8457] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeERyKESOMTHVLs-uFDDUgAAARI"]
[Fri Apr 17 00:43:53.918448 2026] [:error] [pid 3245:tid 3272] [client 51.103.127.33:50789] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeERyaESOMTHVLs-uFDDWgAAAQo"]
[Fri Apr 17 00:43:54.985221 2026] [:error] [pid 3245:tid 3286] [client 51.103.127.33:23833] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeERyqESOMTHVLs-uFDDXQAAARg"]
[Fri Apr 17 00:43:57.165841 2026] [:error] [pid 3245:tid 3283] [client 51.103.127.33:34596] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeERzaESOMTHVLs-uFDDZwAAARU"]
[Fri Apr 17 00:43:58.723601 2026] [:error] [pid 43386:tid 43422] [client 51.103.127.33:47273] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeERzu91GAVgUfhPVDGztgAAAEI"]
[Fri Apr 17 00:44:01.608718 2026] [:error] [pid 43386:tid 43425] [client 51.103.127.33:34591] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeER0e91GAVgUfhPVDGztwAAAEU"]
[Fri Apr 17 00:44:03.278349 2026] [:error] [pid 43482:tid 43498] [client 51.103.127.33:59742] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeER0z9SZnuKxlHrct2CGwAAAM4"]
[Fri Apr 17 00:44:04.761624 2026] [:error] [pid 3245:tid 3276] [client 51.103.127.33:60368] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeER1KESOMTHVLs-uFDDhAAAAQ4"]
[Fri Apr 17 00:44:05.953159 2026] [:error] [pid 3245:tid 3283] [client 51.103.127.33:58545] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeER1aESOMTHVLs-uFDDjAAAARU"]
[Fri Apr 17 00:44:06.724879 2026] [:error] [pid 3245:tid 3280] [client 51.103.127.33:58523] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeER1qESOMTHVLs-uFDDkAAAARI"]
[Fri Apr 17 00:44:07.509302 2026] [:error] [pid 3245:tid 3268] [client 51.103.127.33:59721] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeER16ESOMTHVLs-uFDDmAAAAQY"]
[Fri Apr 17 00:44:09.083718 2026] [:error] [pid 3245:tid 3276] [client 51.103.127.33:23871] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeER2aESOMTHVLs-uFDDpwAAAQ4"]
[Fri Apr 17 00:44:10.044606 2026] [:error] [pid 3245:tid 3286] [client 51.103.127.33:23816] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeER2qESOMTHVLs-uFDDrAAAARg"]
[Fri Apr 17 00:44:10.857351 2026] [:error] [pid 3245:tid 3277] [client 51.103.127.33:23836] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeER2qESOMTHVLs-uFDDtAAAAQ8"]
[Fri Apr 17 00:44:11.783128 2026] [:error] [pid 3245:tid 3266] [client 51.103.127.33:58538] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeER26ESOMTHVLs-uFDDuwAAAQQ"]
[Fri Apr 17 00:44:12.613441 2026] [:error] [pid 3245:tid 3277] [client 51.103.127.33:48115] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeER3KESOMTHVLs-uFDDwgAAAQ8"]
[Fri Apr 17 00:44:13.328773 2026] [:error] [pid 3245:tid 3281] [client 51.103.127.33:23811] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeER3aESOMTHVLs-uFDDxwAAARM"]
[Fri Apr 17 00:44:13.984450 2026] [:error] [pid 43387:tid 43458] [client 51.103.127.33:47266] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeER3SBNsONqHxWTakUvgwAAAIc"]
[Fri Apr 17 00:44:14.764417 2026] [:error] [pid 43386:tid 43434] [client 51.103.127.33:23848] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeER3u91GAVgUfhPVDGzuQAAAE4"]
[Fri Apr 17 00:44:15.456977 2026] [:error] [pid 43386:tid 43435] [client 51.103.127.33:35867] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeER3-91GAVgUfhPVDGzugAAAE8"]
[Fri Apr 17 00:44:16.299946 2026] [:error] [pid 43387:tid 43476] [client 51.103.127.33:59768] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aeER4CBNsONqHxWTakUvigAAAJc"]
[Fri Apr 17 00:44:17.301919 2026] [:error] [pid 43482:tid 43484] [client 51.103.127.33:59747] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aeER4T9SZnuKxlHrct2CKgAAAMA"]
[Fri Apr 17 00:44:18.248774 2026] [:error] [pid 43385:tid 43405] [client 51.103.127.33:27304] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aeER4snIxkJaUI8KNs72lQAAABA"]
[Fri Apr 17 00:44:19.014630 2026] [:error] [pid 43386:tid 43424] [client 51.103.127.33:50781] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aeER4-91GAVgUfhPVDGzwgAAAEQ"]
[Fri Apr 17 00:44:19.900312 2026] [:error] [pid 43386:tid 43436] [client 51.103.127.33:23857] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeER4-91GAVgUfhPVDGzxgAAAFA"]
[Fri Apr 17 00:44:20.670343 2026] [:error] [pid 43386:tid 43425] [client 51.103.127.33:48119] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeER5O91GAVgUfhPVDGzxwAAAEU"]
[Fri Apr 17 00:44:21.681864 2026] [:error] [pid 43386:tid 43442] [client 51.103.127.33:58509] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeER5e91GAVgUfhPVDGzyQAAAFU"]
[Fri Apr 17 00:44:22.470745 2026] [:error] [pid 43385:tid 43401] [client 51.103.127.33:52725] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeER5snIxkJaUI8KNs72mgAAAAw"]
[Fri Apr 17 00:44:23.571694 2026] [:error] [pid 43387:tid 43476] [client 51.103.127.33:47249] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeER5yBNsONqHxWTakUvkgAAAJc"]
[Fri Apr 17 00:44:24.652522 2026] [:error] [pid 3245:tid 3275] [client 51.103.127.33:36908] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeER6KESOMTHVLs-uFDD4wAAAQ0"]
[Fri Apr 17 00:44:25.706017 2026] [:error] [pid 43386:tid 43421] [client 51.103.127.33:60396] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeER6e91GAVgUfhPVDGzzwAAAEE"]
[Fri Apr 17 00:44:27.063522 2026] [:error] [pid 43386:tid 43432] [client 51.103.127.33:50764] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeER6-91GAVgUfhPVDGz0gAAAEw"]
[Fri Apr 17 00:44:28.882916 2026] [:error] [pid 43386:tid 43442] [client 51.103.127.33:34920] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeER7O91GAVgUfhPVDGz2AAAAFU"]
[Fri Apr 17 00:44:31.576722 2026] [:error] [pid 43386:tid 43444] [client 51.103.127.33:52692] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeER7-91GAVgUfhPVDGz3QAAAFc"]
[Fri Apr 17 00:44:33.855619 2026] [:error] [pid 3245:tid 3271] [client 51.103.127.33:47154] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeER8aESOMTHVLs-uFDD8gAAAQk"]
[Fri Apr 17 00:44:35.591857 2026] [:error] [pid 43482:tid 43488] [client 51.103.127.33:47283] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeER8z9SZnuKxlHrct2CPwAAAMQ"]
[Fri Apr 17 00:44:38.366448 2026] [:error] [pid 43387:tid 43477] [client 51.103.127.33:58525] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "aeER9iBNsONqHxWTakUvmgAAAJg"]
[Fri Apr 17 00:44:39.987731 2026] [:error] [pid 43386:tid 43443] [client 51.103.127.33:23822] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "aeER9-91GAVgUfhPVDGz7AAAAFY"]
[Fri Apr 17 00:44:41.448810 2026] [:error] [pid 43386:tid 43438] [client 51.103.127.33:24218] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "aeER-e91GAVgUfhPVDGz7wAAAFI"]
[Fri Apr 17 00:44:43.084786 2026] [:error] [pid 43386:tid 43439] [client 51.103.127.33:47123] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "aeER--91GAVgUfhPVDGz8wAAAFM"]
[Fri Apr 17 00:44:44.648889 2026] [:error] [pid 3245:tid 3265] [client 51.103.127.33:52696] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeER_KESOMTHVLs-uFDEAgAAAQM"]
[Fri Apr 17 00:44:48.729465 2026] [proxy_fcgi:error] [pid 43385:tid 43391] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:49.015989 2026] [proxy_fcgi:error] [pid 43385:tid 43397] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:49.630623 2026] [proxy_fcgi:error] [pid 43385:tid 43396] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:49.922424 2026] [proxy_fcgi:error] [pid 43385:tid 43404] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:50.193558 2026] [proxy_fcgi:error] [pid 43385:tid 43403] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:50.469270 2026] [proxy_fcgi:error] [pid 43385:tid 43402] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:50.739328 2026] [proxy_fcgi:error] [pid 43385:tid 43400] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:51.020152 2026] [proxy_fcgi:error] [pid 43385:tid 43389] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:52.662136 2026] [proxy_fcgi:error] [pid 43385:tid 43407] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:52.932226 2026] [proxy_fcgi:error] [pid 43385:tid 43412] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:53.203532 2026] [proxy_fcgi:error] [pid 43385:tid 43408] [client 51.103.127.33:36865] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:44:53.470525 2026] [:error] [pid 43385:tid 43397] [client 51.103.127.33:36865] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeESBcnIxkJaUI8KNs72xgAAAAg"]
[Fri Apr 17 00:44:55.787064 2026] [:error] [pid 43387:tid 43476] [client 51.103.127.33:47253] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeESByBNsONqHxWTakUvoQAAAJc"]
[Fri Apr 17 00:44:58.143942 2026] [:error] [pid 43387:tid 43466] [client 51.103.127.33:25319] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeESCiBNsONqHxWTakUvowAAAI0"]
[Fri Apr 17 00:45:00.640844 2026] [:error] [pid 4086:tid 4090] [client 51.103.127.33:46962] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeESDFlz7gxl_exM0Fo17wAAAUI"]
[Fri Apr 17 00:45:01.662730 2026] [:error] [pid 4086:tid 4093] [client 51.103.127.33:36853] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "aeESDVlz7gxl_exM0Fo18gAAAUU"]
[Fri Apr 17 00:45:03.756577 2026] [:error] [pid 43385:tid 43403] [client 51.103.127.33:44556] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "aeESD8nIxkJaUI8KNs72ygAAAA4"]
[Fri Apr 17 00:45:07.013075 2026] [:error] [pid 43385:tid 43393] [client 51.103.127.33:35860] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "aeESE8nIxkJaUI8KNs72zAAAAAQ"]
[Fri Apr 17 00:45:14.814939 2026] [:error] [pid 43387:tid 43461] [client 51.103.127.33:37399] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jlex.php"] [unique_id "aeESGiBNsONqHxWTakUvrAAAAIo"]
[Fri Apr 17 00:45:18.077877 2026] [:error] [pid 43482:tid 43485] [client 51.103.127.33:50372] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "aeESHj9SZnuKxlHrct2CeQAAAME"]
[Fri Apr 17 00:45:19.922435 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:40679] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "aeESH1lz7gxl_exM0Fo2CQAAAVQ"]
[Fri Apr 17 00:45:21.377734 2026] [:error] [pid 43385:tid 43396] [client 51.103.127.33:50406] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "aeESIcnIxkJaUI8KNs723QAAAAc"]
[Fri Apr 17 00:45:22.833744 2026] [:error] [pid 43386:tid 43425] [client 51.103.127.33:30442] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xsas.php"] [unique_id "aeESIu91GAVgUfhPVDG0EwAAAEU"]
[Fri Apr 17 00:45:23.640507 2026] [:error] [pid 43385:tid 43402] [client 51.103.127.33:50377] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "aeESI8nIxkJaUI8KNs723wAAAA0"]
[Fri Apr 17 00:45:24.767009 2026] [:error] [pid 43386:tid 43443] [client 51.103.127.33:46965] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "aeESJO91GAVgUfhPVDG0FAAAAFY"]
[Fri Apr 17 00:45:25.901825 2026] [:error] [pid 43482:tid 43507] [client 51.103.127.33:50422] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "aeESJT9SZnuKxlHrct2CfgAAANc"]
[Fri Apr 17 00:45:27.275874 2026] [:error] [pid 3245:tid 3286] [client 51.103.127.33:37397] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/jp.php"] [unique_id "aeESJ6ESOMTHVLs-uFDEKgAAARg"]
[Fri Apr 17 00:45:29.744334 2026] [:error] [pid 3245:tid 3281] [client 51.103.127.33:26712] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeESKaESOMTHVLs-uFDENgAAARM"]
[Fri Apr 17 00:45:32.167930 2026] [:error] [pid 43482:tid 43488] [client 51.103.127.33:26707] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeESLD9SZnuKxlHrct2CjQAAAMQ"]
[Fri Apr 17 00:45:33.942109 2026] [:error] [pid 43386:tid 43437] [client 51.103.127.33:24981] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeESLe91GAVgUfhPVDG0KAAAAFE"]
[Fri Apr 17 00:45:35.261982 2026] [:error] [pid 43386:tid 43431] [client 51.103.127.33:31031] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeESL-91GAVgUfhPVDG0KQAAAEs"]
[Fri Apr 17 00:45:36.223886 2026] [:error] [pid 4086:tid 4104] [client 51.103.127.33:26794] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeESMFlz7gxl_exM0Fo2OgAAAVA"]
[Fri Apr 17 00:45:37.836318 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:25284] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeESMVlz7gxl_exM0Fo2PgAAAVY"]
[Fri Apr 17 00:45:39.062479 2026] [:error] [pid 43386:tid 43434] [client 51.103.127.33:26772] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeESM-91GAVgUfhPVDG0KgAAAE4"]
[Fri Apr 17 00:45:40.006760 2026] [:error] [pid 43386:tid 43435] [client 51.103.127.33:46914] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeESNO91GAVgUfhPVDG0LAAAAE8"]
[Fri Apr 17 00:45:41.307381 2026] [:error] [pid 4086:tid 4099] [client 51.103.127.33:40189] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "aeESNVlz7gxl_exM0Fo2RgAAAUs"]
[Fri Apr 17 00:45:42.096091 2026] [:error] [pid 43482:tid 43507] [client 51.103.127.33:32818] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "aeESNj9SZnuKxlHrct2CkAAAANc"]
[Fri Apr 17 00:45:43.293153 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:8367] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "aeESN1lz7gxl_exM0Fo2SwAAAVQ"]
[Fri Apr 17 00:45:44.887428 2026] [:error] [pid 3245:tid 3285] [client 51.103.127.33:61662] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "aeESOKESOMTHVLs-uFDEQQAAARc"]
[Fri Apr 17 00:45:46.127717 2026] [:error] [pid 4086:tid 4094] [client 51.103.127.33:31466] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeESOllz7gxl_exM0Fo2TQAAAUY"]
[Fri Apr 17 00:45:47.311713 2026] [:error] [pid 3245:tid 3281] [client 51.103.127.33:8363] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeESO6ESOMTHVLs-uFDERQAAARM"]
[Fri Apr 17 00:45:48.037188 2026] [:error] [pid 4086:tid 4097] [client 51.103.127.33:26760] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeESPFlz7gxl_exM0Fo2UQAAAUk"]
[Fri Apr 17 00:45:49.357854 2026] [:error] [pid 3245:tid 3272] [client 51.103.127.33:22562] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeESPaESOMTHVLs-uFDESQAAAQo"]
[Fri Apr 17 00:45:50.420504 2026] [:error] [pid 43482:tid 43508] [client 51.103.127.33:37739] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeESPj9SZnuKxlHrct2ClQAAANg"]
[Fri Apr 17 00:45:51.183304 2026] [:error] [pid 43482:tid 43499] [client 51.103.127.33:24580] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeESPz9SZnuKxlHrct2ClgAAAM8"]
[Fri Apr 17 00:45:52.225964 2026] [:error] [pid 43386:tid 43426] [client 51.103.127.33:45794] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeESQO91GAVgUfhPVDG0MAAAAEY"]
[Fri Apr 17 00:45:53.636745 2026] [proxy_fcgi:error] [pid 4086:tid 4092] [client 51.103.127.33:27750] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:45:53.924574 2026] [proxy_fcgi:error] [pid 4086:tid 4109] [client 51.103.127.33:27750] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:20.319027 2026] [proxy_fcgi:error] [pid 43386:tid 43432] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:20.584746 2026] [proxy_fcgi:error] [pid 43386:tid 43431] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:20.849574 2026] [proxy_fcgi:error] [pid 43386:tid 43438] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:21.158504 2026] [proxy_fcgi:error] [pid 43386:tid 43423] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:21.423646 2026] [proxy_fcgi:error] [pid 43386:tid 43433] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:21.688306 2026] [proxy_fcgi:error] [pid 43386:tid 43436] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:21.953601 2026] [proxy_fcgi:error] [pid 43386:tid 43426] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:22.229896 2026] [proxy_fcgi:error] [pid 43386:tid 43428] [client 4.225.163.126:7245] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:22.491741 2026] [:error] [pid 43386:tid 43435] [client 4.225.163.126:7245] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeEUAu91GAVgUfhPVDG10AAAAE8"]
[Fri Apr 17 00:53:23.162666 2026] [proxy_fcgi:error] [pid 43387:tid 43474] [client 4.225.163.126:7273] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:23.454577 2026] [proxy_fcgi:error] [pid 43387:tid 43477] [client 4.225.163.126:7273] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:53:23.733343 2026] [:error] [pid 43387:tid 43460] [client 4.225.163.126:7273] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeEUAyBNsONqHxWTakUx_wAAAIk"]
[Fri Apr 17 00:53:24.519636 2026] [:error] [pid 43385:tid 43403] [client 4.225.163.126:7267] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeEUBMnIxkJaUI8KNs741wAAAA4"]
[Fri Apr 17 00:53:25.453462 2026] [:error] [pid 43387:tid 43471] [client 4.225.163.126:7773] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeEUBSBNsONqHxWTakUyAQAAAJI"]
[Fri Apr 17 00:53:27.070287 2026] [:error] [pid 43386:tid 43445] [client 4.225.163.126:7237] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeEUB-91GAVgUfhPVDG11gAAAFg"]
[Fri Apr 17 00:53:28.089907 2026] [:error] [pid 43387:tid 43466] [client 4.225.163.126:7292] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeEUCCBNsONqHxWTakUyBgAAAI0"]
[Fri Apr 17 00:53:29.139280 2026] [:error] [pid 43386:tid 43420] [client 4.225.163.126:7239] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeEUCe91GAVgUfhPVDG12AAAAEA"]
[Fri Apr 17 00:53:29.999799 2026] [:error] [pid 43385:tid 43395] [client 4.225.163.126:7762] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeEUCcnIxkJaUI8KNs743QAAAAY"]
[Fri Apr 17 00:53:30.842770 2026] [:error] [pid 43386:tid 43436] [client 4.225.163.126:7276] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeEUCu91GAVgUfhPVDG13gAAAFA"]
[Fri Apr 17 00:53:31.825015 2026] [:error] [pid 4086:tid 4088] [client 4.225.163.126:7287] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeEUC1lz7gxl_exM0Fo60QAAAUA"]
[Fri Apr 17 00:53:33.258707 2026] [:error] [pid 4086:tid 4108] [client 4.225.163.126:7258] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeEUDVlz7gxl_exM0Fo61gAAAVQ"]
[Fri Apr 17 00:53:34.378587 2026] [:error] [pid 4086:tid 4098] [client 4.225.163.126:7745] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeEUDllz7gxl_exM0Fo62QAAAUo"]
[Fri Apr 17 00:53:35.147331 2026] [:error] [pid 43385:tid 43415] [client 4.225.163.126:7747] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeEUD8nIxkJaUI8KNs744gAAABg"]
[Fri Apr 17 00:53:35.985197 2026] [:error] [pid 43386:tid 43429] [client 4.225.163.126:7269] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeEUD-91GAVgUfhPVDG14AAAAEk"]
[Fri Apr 17 00:53:36.868255 2026] [:error] [pid 4086:tid 4108] [client 4.225.163.126:7236] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeEUEFlz7gxl_exM0Fo63gAAAVQ"]
[Fri Apr 17 00:53:37.724807 2026] [:error] [pid 4086:tid 4102] [client 4.225.163.126:7286] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeEUEVlz7gxl_exM0Fo64AAAAU4"]
[Fri Apr 17 00:53:38.874785 2026] [:error] [pid 43482:tid 43494] [client 4.225.163.126:7280] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeEUEj9SZnuKxlHrct2E0QAAAMo"]
[Fri Apr 17 00:53:39.974130 2026] [:error] [pid 43482:tid 43487] [client 4.225.163.126:7278] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeEUEz9SZnuKxlHrct2E1QAAAMM"]
[Fri Apr 17 00:53:41.359799 2026] [:error] [pid 43482:tid 43501] [client 4.225.163.126:7290] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeEUFT9SZnuKxlHrct2E2gAAANE"]
[Fri Apr 17 00:53:42.213868 2026] [:error] [pid 3245:tid 3276] [client 4.225.163.126:7765] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeEUFqESOMTHVLs-uFDHIgAAAQ4"]
[Fri Apr 17 00:53:43.733643 2026] [:error] [pid 3245:tid 3267] [client 4.225.163.126:7763] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeEUF6ESOMTHVLs-uFDHJAAAAQU"]
[Fri Apr 17 00:53:45.249538 2026] [:error] [pid 4086:tid 4109] [client 4.225.163.126:7774] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeEUGVlz7gxl_exM0Fo66QAAAVU"]
[Fri Apr 17 00:53:46.748124 2026] [:error] [pid 43387:tid 43456] [client 4.225.163.126:7260] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeEUGiBNsONqHxWTakUyDgAAAIU"]
[Fri Apr 17 00:53:47.677376 2026] [:error] [pid 4086:tid 4106] [client 4.225.163.126:7751] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeEUG1lz7gxl_exM0Fo66gAAAVI"]
[Fri Apr 17 00:53:48.822631 2026] [:error] [pid 43386:tid 43434] [client 4.225.163.126:7759] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeEUHO91GAVgUfhPVDG15wAAAE4"]
[Fri Apr 17 00:53:50.213668 2026] [:error] [pid 3245:tid 3262] [client 4.225.163.126:7754] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "aeEUHqESOMTHVLs-uFDHMAAAAQA"]
[Fri Apr 17 00:53:51.406305 2026] [:error] [pid 4086:tid 4089] [client 4.225.163.126:7266] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "aeEUH1lz7gxl_exM0Fo67QAAAUE"]
[Fri Apr 17 00:53:52.395231 2026] [:error] [pid 4086:tid 4091] [client 4.225.163.126:7256] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "aeEUIFlz7gxl_exM0Fo68AAAAUM"]
[Fri Apr 17 00:53:53.642960 2026] [:error] [pid 43385:tid 43402] [client 4.225.163.126:7281] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "aeEUIcnIxkJaUI8KNs749wAAAA0"]
[Fri Apr 17 00:53:56.045188 2026] [:error] [pid 43482:tid 43500] [client 4.225.163.126:7288] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aeEUJD9SZnuKxlHrct2E4QAAANA"]
[Fri Apr 17 00:53:57.199138 2026] [:error] [pid 4086:tid 4090] [client 4.225.163.126:7293] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aeEUJVlz7gxl_exM0Fo69wAAAUI"]
[Fri Apr 17 00:53:58.351234 2026] [:error] [pid 43385:tid 43413] [client 4.225.163.126:7744] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aeEUJsnIxkJaUI8KNs74_gAAABc"]
[Fri Apr 17 00:53:59.730708 2026] [:error] [pid 43482:tid 43491] [client 4.225.163.126:7249] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "aeEUJz9SZnuKxlHrct2E_wAAAMc"]
[Fri Apr 17 00:54:00.898945 2026] [:error] [pid 43387:tid 43461] [client 4.225.163.126:7232] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeEUKCBNsONqHxWTakUyIAAAAIo"]
[Fri Apr 17 00:54:02.073774 2026] [:error] [pid 43386:tid 43420] [client 4.225.163.126:7283] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeEUKu91GAVgUfhPVDG19AAAAEA"]
[Fri Apr 17 00:54:03.182544 2026] [:error] [pid 43385:tid 43396] [client 4.225.163.126:7238] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeEUK8nIxkJaUI8KNs75HwAAAAc"]
[Fri Apr 17 00:54:05.084595 2026] [:error] [pid 26480:tid 26486] [client 4.225.163.126:7294] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeEULQwLDJKTQNfarA1VyAAAAcQ"]
[Fri Apr 17 00:54:06.352612 2026] [:error] [pid 43385:tid 43412] [client 4.225.163.126:7755] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeEULsnIxkJaUI8KNs75IwAAABY"]
[Fri Apr 17 00:54:07.265176 2026] [:error] [pid 43482:tid 43490] [client 4.225.163.126:7782] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeEULz9SZnuKxlHrct2FFAAAAMY"]
[Fri Apr 17 00:54:08.135515 2026] [:error] [pid 43385:tid 43395] [client 4.225.163.126:7516] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeEUMMnIxkJaUI8KNs75KAAAAAY"]
[Fri Apr 17 00:54:08.907498 2026] [:error] [pid 43385:tid 43402] [client 4.225.163.126:7251] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeEUMMnIxkJaUI8KNs75LQAAAA0"]
[Fri Apr 17 00:54:09.729144 2026] [:error] [pid 43482:tid 43492] [client 4.225.163.126:7265] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeEUMT9SZnuKxlHrct2FGwAAAMg"]
[Fri Apr 17 00:54:10.568361 2026] [:error] [pid 43482:tid 43497] [client 4.225.163.126:7289] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeEUMj9SZnuKxlHrct2FHQAAAM0"]
[Fri Apr 17 00:54:11.421281 2026] [:error] [pid 43482:tid 43502] [client 4.225.163.126:7807] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeEUMz9SZnuKxlHrct2FIQAAANI"]
[Fri Apr 17 00:54:12.138029 2026] [:error] [pid 26480:tid 26493] [client 4.225.163.126:7806] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeEUNAwLDJKTQNfarA1VzgAAAcs"]
[Fri Apr 17 00:54:12.960331 2026] [:error] [pid 43482:tid 43493] [client 4.225.163.126:7277] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeEUND9SZnuKxlHrct2FJAAAAMk"]
[Fri Apr 17 00:54:13.649901 2026] [:error] [pid 26480:tid 26495] [client 4.225.163.126:7764] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeEUNQwLDJKTQNfarA1VzwAAAc0"]
[Fri Apr 17 00:54:14.546585 2026] [:error] [pid 43482:tid 43502] [client 4.225.163.126:7255] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeEUNj9SZnuKxlHrct2FKAAAANI"]
[Fri Apr 17 00:54:15.531364 2026] [:error] [pid 4086:tid 4113] [client 4.225.163.126:7770] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeEUN1lz7gxl_exM0Fo7GgAAAVg"]
[Fri Apr 17 00:54:16.323386 2026] [:error] [pid 26480:tid 26500] [client 4.225.163.126:7503] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeEUOAwLDJKTQNfarA1V0QAAAdI"]
[Fri Apr 17 00:54:17.210744 2026] [:error] [pid 26480:tid 26503] [client 4.225.163.126:7794] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeEUOQwLDJKTQNfarA1V0wAAAdU"]
[Fri Apr 17 00:54:18.149284 2026] [:error] [pid 43385:tid 43397] [client 4.225.163.126:7263] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeEUOsnIxkJaUI8KNs75QQAAAAg"]
[Fri Apr 17 00:54:18.898660 2026] [:error] [pid 43385:tid 43395] [client 4.225.163.126:7279] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeEUOsnIxkJaUI8KNs75RwAAAAY"]
[Fri Apr 17 00:54:19.830489 2026] [:error] [pid 26480:tid 26482] [client 4.225.163.126:7504] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeEUOwwLDJKTQNfarA1V1gAAAcA"]
[Fri Apr 17 00:54:20.956110 2026] [:error] [pid 43385:tid 43395] [client 4.225.163.126:7270] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeEUPMnIxkJaUI8KNs75UQAAAAY"]
[Fri Apr 17 00:54:21.789349 2026] [:error] [pid 3245:tid 3263] [client 4.225.163.126:7514] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeEUPaESOMTHVLs-uFDHTwAAAQE"]
[Fri Apr 17 00:54:22.769528 2026] [:error] [pid 26480:tid 26491] [client 4.225.163.126:7802] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeEUPgwLDJKTQNfarA1V2QAAAck"]
[Fri Apr 17 00:54:23.847262 2026] [:error] [pid 26102:tid 26122] [client 4.225.163.126:7491] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aeEUP_127aFqw6ALdngEcgAAAZE"]
[Fri Apr 17 00:54:25.025170 2026] [proxy_fcgi:error] [pid 3245:tid 3276] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:25.318103 2026] [proxy_fcgi:error] [pid 3245:tid 3262] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:25.616083 2026] [proxy_fcgi:error] [pid 3245:tid 3273] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:25.907387 2026] [proxy_fcgi:error] [pid 3245:tid 3284] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:26.199335 2026] [proxy_fcgi:error] [pid 3245:tid 3285] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:26.491016 2026] [proxy_fcgi:error] [pid 3245:tid 3269] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:26.802418 2026] [proxy_fcgi:error] [pid 3245:tid 3271] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:27.159590 2026] [proxy_fcgi:error] [pid 3245:tid 3278] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:27.450877 2026] [proxy_fcgi:error] [pid 3245:tid 3272] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:27.743327 2026] [proxy_fcgi:error] [pid 3245:tid 3283] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:28.035318 2026] [proxy_fcgi:error] [pid 3245:tid 3267] [client 4.225.163.126:7785] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:54:28.379440 2026] [:error] [pid 3245:tid 3279] [client 4.225.163.126:7785] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeEURKESOMTHVLs-uFDHWwAAARE"]
[Fri Apr 17 00:54:29.316091 2026] [:error] [pid 26480:tid 26502] [client 4.225.163.126:7261] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeEURQwLDJKTQNfarA1V4wAAAdQ"]
[Fri Apr 17 00:54:30.136116 2026] [:error] [pid 3245:tid 3282] [client 4.225.163.126:7275] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeEURqESOMTHVLs-uFDHXAAAARQ"]
[Fri Apr 17 00:54:30.928937 2026] [:error] [pid 3245:tid 3263] [client 4.225.163.126:7767] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeEURqESOMTHVLs-uFDHXQAAAQE"]
[Fri Apr 17 00:54:31.773882 2026] [:error] [pid 43482:tid 43485] [client 4.225.163.126:7247] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeEURz9SZnuKxlHrct2FMwAAAME"]
[Fri Apr 17 00:54:32.497534 2026] [:error] [pid 26102:tid 26114] [client 4.225.163.126:7761] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeEUSP127aFqw6ALdngEeAAAAYk"]
[Fri Apr 17 00:54:33.434635 2026] [:error] [pid 43386:tid 43425] [client 4.225.163.126:7805] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeEUSe91GAVgUfhPVDG1-wAAAEU"]
[Fri Apr 17 00:54:34.650995 2026] [:error] [pid 43386:tid 43420] [client 4.225.163.126:7259] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeEUSu91GAVgUfhPVDG1_AAAAEA"]
[Fri Apr 17 00:54:35.734941 2026] [:error] [pid 43385:tid 43394] [client 4.225.163.126:7760] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeEUS8nIxkJaUI8KNs75WQAAAAU"]
[Fri Apr 17 00:54:36.785290 2026] [:error] [pid 26480:tid 26489] [client 4.225.163.126:7262] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeEUTAwLDJKTQNfarA1V6QAAAcc"]
[Fri Apr 17 00:54:37.840308 2026] [:error] [pid 26480:tid 26500] [client 4.225.163.126:7779] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeEUTQwLDJKTQNfarA1V7AAAAdI"]
[Fri Apr 17 00:54:38.846273 2026] [:error] [pid 43387:tid 43461] [client 4.225.163.126:7498] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeEUTiBNsONqHxWTakUyQgAAAIo"]
[Fri Apr 17 00:54:39.795746 2026] [:error] [pid 26480:tid 26505] [client 4.225.163.126:7780] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeEUTwwLDJKTQNfarA1V8gAAAdc"]
[Fri Apr 17 00:54:41.599271 2026] [:error] [pid 26102:tid 26121] [client 4.225.163.126:7769] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeEUUf127aFqw6ALdngEfAAAAZA"]
[Fri Apr 17 00:54:42.917088 2026] [:error] [pid 43482:tid 43487] [client 4.225.163.126:7752] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeEUUj9SZnuKxlHrct2FOwAAAMM"]
[Fri Apr 17 00:54:44.164631 2026] [:error] [pid 26102:tid 26125] [client 4.225.163.126:7246] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeEUVP127aFqw6ALdngEfgAAAZQ"]
[Fri Apr 17 00:54:45.224517 2026] [:error] [pid 3245:tid 3273] [client 4.225.163.126:7772] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeEUVaESOMTHVLs-uFDHZQAAAQs"]
[Fri Apr 17 00:54:46.241201 2026] [:error] [pid 26480:tid 26494] [client 4.225.163.126:7788] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeEUVgwLDJKTQNfarA1WCwAAAcw"]
[Fri Apr 17 00:54:47.192644 2026] [:error] [pid 26102:tid 26129] [client 4.225.163.126:7800] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeEUV_127aFqw6ALdngEgAAAAZg"]
[Fri Apr 17 00:54:48.014662 2026] [:error] [pid 26480:tid 26483] [client 4.225.163.126:7790] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeEUWAwLDJKTQNfarA1WEQAAAcE"]
[Fri Apr 17 00:54:48.774891 2026] [:error] [pid 26480:tid 26498] [client 4.225.163.126:7496] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "aeEUWAwLDJKTQNfarA1WFQAAAdA"]
[Fri Apr 17 00:54:49.663890 2026] [:error] [pid 26102:tid 26112] [client 4.225.163.126:7750] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "aeEUWf127aFqw6ALdngEgwAAAYc"]
[Fri Apr 17 00:54:50.583103 2026] [:error] [pid 43385:tid 43398] [client 4.225.163.126:7295] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "aeEUWsnIxkJaUI8KNs75bAAAAAk"]
[Fri Apr 17 00:54:51.372757 2026] [:error] [pid 43385:tid 43394] [client 4.225.163.126:7798] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "aeEUW8nIxkJaUI8KNs75bgAAAAU"]
[Fri Apr 17 00:54:52.153386 2026] [:error] [pid 43482:tid 43495] [client 4.225.163.126:7515] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "aeEUXD9SZnuKxlHrct2FUQAAAMs"]
[Fri Apr 17 00:54:53.092314 2026] [:error] [pid 26480:tid 26489] [client 4.225.163.126:7271] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "aeEUXQwLDJKTQNfarA1WHAAAAcc"]
[Fri Apr 17 00:54:53.835110 2026] [:error] [pid 3245:tid 3262] [client 4.225.163.126:7797] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "aeEUXaESOMTHVLs-uFDHggAAAQA"]
[Fri Apr 17 00:54:54.839086 2026] [:error] [pid 43482:tid 43492] [client 4.225.163.126:7493] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws86.php"] [unique_id "aeEUXj9SZnuKxlHrct2FWAAAAMg"]
[Fri Apr 17 00:54:55.801857 2026] [:error] [pid 3245:tid 3275] [client 4.225.163.126:7758] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeEUX6ESOMTHVLs-uFDHiwAAAQ0"]
[Fri Apr 17 00:54:56.579946 2026] [:error] [pid 43385:tid 43398] [client 4.225.163.126:7512] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeEUYMnIxkJaUI8KNs75dgAAAAk"]
[Fri Apr 17 00:54:57.557093 2026] [:error] [pid 26102:tid 26114] [client 4.225.163.126:7784] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeEUYf127aFqw6ALdngEhQAAAYk"]
[Fri Apr 17 00:54:58.541935 2026] [:error] [pid 26480:tid 26488] [client 4.225.163.126:7517] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeEUYgwLDJKTQNfarA1WIAAAAcY"]
[Fri Apr 17 00:54:59.861397 2026] [:error] [pid 43482:tid 43489] [client 4.225.163.126:7234] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEUYz9SZnuKxlHrct2FZgAAAMU"]
[Fri Apr 17 00:55:00.704705 2026] [:error] [pid 43482:tid 43491] [client 4.225.163.126:8137] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEUZD9SZnuKxlHrct2FaQAAAMc"]
[Fri Apr 17 00:55:01.881180 2026] [:error] [pid 43482:tid 43486] [client 4.225.163.126:8178] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEUZT9SZnuKxlHrct2FbwAAAMI"]
[Fri Apr 17 00:55:02.955134 2026] [:error] [pid 43387:tid 43465] [client 4.225.163.126:7801] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEUZiBNsONqHxWTakUyTQAAAIw"]
[Fri Apr 17 00:55:04.023383 2026] [:error] [pid 43386:tid 43426] [client 4.225.163.126:7282] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeEUaO91GAVgUfhPVDG2BAAAAEY"]
[Fri Apr 17 00:55:05.886220 2026] [:error] [pid 26480:tid 26484] [client 4.225.163.126:7284] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeEUaQwLDJKTQNfarA1WMwAAAcI"]
[Fri Apr 17 00:55:07.039519 2026] [:error] [pid 43385:tid 43396] [client 4.225.163.126:7522] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeEUa8nIxkJaUI8KNs75gQAAAAc"]
[Fri Apr 17 00:55:07.700757 2026] [:error] [pid 43386:tid 43443] [client 4.225.163.126:7244] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeEUa-91GAVgUfhPVDG2CAAAAFY"]
[Fri Apr 17 00:55:08.839499 2026] [:error] [pid 43482:tid 43508] [client 4.225.163.126:7291] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeEUbD9SZnuKxlHrct2FggAAANg"]
[Fri Apr 17 00:55:09.964411 2026] [:error] [pid 26102:tid 26108] [client 4.225.163.126:7768] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeEUbf127aFqw6ALdngEkwAAAYM"]
[Fri Apr 17 00:55:11.559783 2026] [:error] [pid 43482:tid 43506] [client 4.225.163.126:7525] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeEUbz9SZnuKxlHrct2FigAAANY"]
[Fri Apr 17 00:55:13.120113 2026] [:error] [pid 43482:tid 43493] [client 4.225.163.126:8158] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeEUcT9SZnuKxlHrct2FlAAAAMk"]
[Fri Apr 17 00:55:15.216979 2026] [:error] [pid 43385:tid 43389] [client 4.225.163.126:7748] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeEUc8nIxkJaUI8KNs75igAAAAA"]
[Fri Apr 17 00:55:16.059751 2026] [:error] [pid 3245:tid 3269] [client 4.225.163.126:8132] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeEUdKESOMTHVLs-uFDHmAAAAQc"]
[Fri Apr 17 00:55:16.820366 2026] [:error] [pid 43482:tid 43498] [client 4.225.163.126:8145] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeEUdD9SZnuKxlHrct2FmwAAAM4"]
[Fri Apr 17 00:55:17.816298 2026] [:error] [pid 4086:tid 4099] [client 4.225.163.126:7494] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeEUdVlz7gxl_exM0Fo7PAAAAUs"]
[Fri Apr 17 00:55:18.632581 2026] [:error] [pid 43387:tid 43448] [client 4.225.163.126:7264] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeEUdiBNsONqHxWTakUyWgAAAIA"]
[Fri Apr 17 00:55:19.260835 2026] [:error] [pid 43385:tid 43400] [client 4.225.163.126:8142] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeEUd8nIxkJaUI8KNs75nQAAAAs"]
[Fri Apr 17 00:55:20.091738 2026] [:error] [pid 43482:tid 43493] [client 4.225.163.126:7501] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeEUeD9SZnuKxlHrct2FpAAAAMk"]
[Fri Apr 17 00:55:20.939965 2026] [:error] [pid 43385:tid 43412] [client 4.225.163.126:7544] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeEUeMnIxkJaUI8KNs75oQAAABY"]
[Fri Apr 17 00:55:21.808492 2026] [:error] [pid 3245:tid 3285] [client 4.225.163.126:7495] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws87.php"] [unique_id "aeEUeaESOMTHVLs-uFDHmQAAARc"]
[Fri Apr 17 00:55:22.415487 2026] [:error] [pid 43386:tid 43443] [client 4.225.163.126:7766] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws87.php"] [unique_id "aeEUeu91GAVgUfhPVDG2EAAAAFY"]
[Fri Apr 17 00:55:23.091828 2026] [:error] [pid 3245:tid 3281] [client 4.225.163.126:7285] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws87.php"] [unique_id "aeEUe6ESOMTHVLs-uFDHmgAAARM"]
[Fri Apr 17 00:55:23.967874 2026] [:error] [pid 3245:tid 3262] [client 4.225.163.126:7749] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws87.php"] [unique_id "aeEUe6ESOMTHVLs-uFDHnwAAAQA"]
[Fri Apr 17 00:55:24.744251 2026] [:error] [pid 43482:tid 43488] [client 4.225.163.126:7771] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "aeEUfD9SZnuKxlHrct2FqAAAAMQ"]
[Fri Apr 17 00:55:25.426658 2026] [:error] [pid 43482:tid 43508] [client 4.225.163.126:7542] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "aeEUfT9SZnuKxlHrct2FrAAAANg"]
[Fri Apr 17 00:55:26.533519 2026] [:error] [pid 43482:tid 43499] [client 4.225.163.126:7509] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "aeEUfj9SZnuKxlHrct2FtgAAAM8"]
[Fri Apr 17 00:55:28.209467 2026] [proxy_fcgi:error] [pid 43482:tid 43503] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:28.527500 2026] [proxy_fcgi:error] [pid 43482:tid 43484] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:28.792332 2026] [proxy_fcgi:error] [pid 43482:tid 43506] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:29.092071 2026] [proxy_fcgi:error] [pid 43482:tid 43494] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:29.497268 2026] [proxy_fcgi:error] [pid 43482:tid 43489] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:29.765353 2026] [proxy_fcgi:error] [pid 43482:tid 43498] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:30.030309 2026] [proxy_fcgi:error] [pid 43482:tid 43507] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:30.309448 2026] [proxy_fcgi:error] [pid 43482:tid 43503] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:30.583984 2026] [proxy_fcgi:error] [pid 43482:tid 43497] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:30.902836 2026] [proxy_fcgi:error] [pid 43482:tid 43505] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:31.169119 2026] [proxy_fcgi:error] [pid 43482:tid 43506] [client 4.225.163.126:7505] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:55:31.465037 2026] [:error] [pid 43482:tid 43490] [client 4.225.163.126:7505] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeEUgz9SZnuKxlHrct2F6gAAAMY"]
[Fri Apr 17 00:55:32.327584 2026] [:error] [pid 43385:tid 43405] [client 4.225.163.126:7781] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeEUhMnIxkJaUI8KNs75qwAAABA"]
[Fri Apr 17 00:55:33.463033 2026] [:error] [pid 26480:tid 26494] [client 4.225.163.126:7171] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeEUhQwLDJKTQNfarA1WUQAAAcw"]
[Fri Apr 17 00:55:34.451762 2026] [:error] [pid 3245:tid 3283] [client 4.225.163.126:7253] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeEUhqESOMTHVLs-uFDHpwAAARU"]
[Fri Apr 17 00:55:35.140460 2026] [:error] [pid 3245:tid 3272] [client 4.225.163.126:7492] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeEUh6ESOMTHVLs-uFDHqAAAAQo"]
[Fri Apr 17 00:55:35.817420 2026] [:error] [pid 3245:tid 3277] [client 4.225.163.126:7548] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeEUh6ESOMTHVLs-uFDHqgAAAQ8"]
[Fri Apr 17 00:55:36.691010 2026] [:error] [pid 3245:tid 3265] [client 4.225.163.126:7775] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeEUiKESOMTHVLs-uFDHrwAAAQM"]
[Fri Apr 17 00:55:37.629982 2026] [:error] [pid 3245:tid 3276] [client 4.225.163.126:7533] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeEUiaESOMTHVLs-uFDHswAAAQ4"]
[Fri Apr 17 00:55:38.799780 2026] [:error] [pid 43386:tid 43434] [client 4.225.163.126:7756] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeEUiu91GAVgUfhPVDG2FwAAAE4"]
[Fri Apr 17 00:55:39.620637 2026] [:error] [pid 26102:tid 26118] [client 4.225.163.126:7536] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeEUi_127aFqw6ALdngEuAAAAY0"]
[Fri Apr 17 00:55:40.388331 2026] [:error] [pid 26480:tid 26494] [client 4.225.163.126:7777] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeEUjAwLDJKTQNfarA1WXAAAAcw"]
[Fri Apr 17 00:55:41.283777 2026] [:error] [pid 43385:tid 43389] [client 4.225.163.126:8139] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeEUjcnIxkJaUI8KNs75tQAAAAA"]
[Fri Apr 17 00:55:42.061104 2026] [:error] [pid 43385:tid 43398] [client 4.225.163.126:8148] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeEUjsnIxkJaUI8KNs75twAAAAk"]
[Fri Apr 17 00:55:42.740200 2026] [:error] [pid 43385:tid 43412] [client 4.225.163.126:7510] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeEUjsnIxkJaUI8KNs75vQAAABY"]
[Fri Apr 17 00:55:43.690326 2026] [:error] [pid 43385:tid 43408] [client 4.225.163.126:8165] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeEUj8nIxkJaUI8KNs75wwAAABM"]
[Fri Apr 17 00:55:44.623863 2026] [:error] [pid 26480:tid 26489] [client 4.225.163.126:7530] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeEUkAwLDJKTQNfarA1WYgAAAcc"]
[Fri Apr 17 00:55:45.823837 2026] [:error] [pid 26480:tid 26486] [client 4.225.163.126:7535] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1100.php"] [unique_id "aeEUkQwLDJKTQNfarA1WZAAAAcQ"]
[Fri Apr 17 00:55:47.107870 2026] [:error] [pid 26480:tid 26493] [client 4.225.163.126:7799] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1100.php"] [unique_id "aeEUkwwLDJKTQNfarA1WaAAAAcs"]
[Fri Apr 17 00:55:48.014822 2026] [:error] [pid 43482:tid 43507] [client 4.225.163.126:7235] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1100.php"] [unique_id "aeEUlD9SZnuKxlHrct2F_AAAANc"]
[Fri Apr 17 00:55:49.051444 2026] [:error] [pid 43482:tid 43495] [client 4.225.163.126:7199] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1100.php"] [unique_id "aeEUlT9SZnuKxlHrct2GBQAAAMs"]
[Fri Apr 17 00:55:49.839274 2026] [:error] [pid 43386:tid 43432] [client 4.225.163.126:7753] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeEUle91GAVgUfhPVDG2HQAAAEw"]
[Fri Apr 17 00:55:50.790248 2026] [:error] [pid 4086:tid 4103] [client 4.225.163.126:7519] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeEUlllz7gxl_exM0Fo7VAAAAU8"]
[Fri Apr 17 00:55:52.379386 2026] [:error] [pid 43482:tid 43485] [client 4.225.163.126:8133] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeEUmD9SZnuKxlHrct2GHQAAAME"]
[Fri Apr 17 00:55:54.084839 2026] [:error] [pid 43482:tid 43508] [client 4.225.163.126:7791] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeEUmj9SZnuKxlHrct2GIgAAANg"]
[Fri Apr 17 00:55:55.317634 2026] [:error] [pid 26480:tid 26484] [client 4.225.163.126:7500] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeEUmwwLDJKTQNfarA1WawAAAcI"]
[Fri Apr 17 00:55:56.852531 2026] [:error] [pid 3245:tid 3262] [client 4.225.163.126:7792] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeEUnKESOMTHVLs-uFDHvAAAAQA"]
[Fri Apr 17 00:55:57.781047 2026] [:error] [pid 26480:tid 26489] [client 4.225.163.126:8164] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeEUnQwLDJKTQNfarA1WbQAAAcc"]
[Fri Apr 17 00:55:58.838682 2026] [:error] [pid 43482:tid 43501] [client 4.225.163.126:7520] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeEUnj9SZnuKxlHrct2GIwAAANE"]
[Fri Apr 17 00:55:59.830467 2026] [:error] [pid 26480:tid 26502] [client 4.225.163.126:7248] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeEUnwwLDJKTQNfarA1WbgAAAdQ"]
[Fri Apr 17 00:56:01.068608 2026] [:error] [pid 3245:tid 3266] [client 4.225.163.126:7547] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeEUoaESOMTHVLs-uFDHvwAAAQQ"]
[Fri Apr 17 00:56:01.797753 2026] [:error] [pid 43385:tid 43405] [client 4.225.163.126:7776] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeEUocnIxkJaUI8KNs757wAAABA"]
[Fri Apr 17 00:56:02.673420 2026] [:error] [pid 43385:tid 43397] [client 4.225.163.126:8189] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeEUosnIxkJaUI8KNs758gAAAAg"]
[Fri Apr 17 00:56:03.274017 2026] [:error] [pid 43385:tid 43394] [client 4.225.163.126:7549] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-lo.php"] [unique_id "aeEUo8nIxkJaUI8KNs758wAAAAU"]
[Fri Apr 17 00:56:04.049294 2026] [:error] [pid 26480:tid 26482] [client 4.225.163.126:7518] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-lo.php"] [unique_id "aeEUpAwLDJKTQNfarA1WeQAAAcA"]
[Fri Apr 17 00:56:04.744636 2026] [:error] [pid 26480:tid 26501] [client 4.225.163.126:7799] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-lo.php"] [unique_id "aeEUpAwLDJKTQNfarA1WfAAAAdM"]
[Fri Apr 17 00:56:05.371594 2026] [:error] [pid 26480:tid 26484] [client 4.225.163.126:7804] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-lo.php"] [unique_id "aeEUpQwLDJKTQNfarA1WfwAAAcI"]
[Fri Apr 17 00:56:06.187898 2026] [:error] [pid 43482:tid 43503] [client 4.225.163.126:7511] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeEUpj9SZnuKxlHrct2GKAAAANM"]
[Fri Apr 17 00:56:06.819347 2026] [:error] [pid 43385:tid 43391] [client 4.225.163.126:7240] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeEUpsnIxkJaUI8KNs75-QAAAAI"]
[Fri Apr 17 00:56:09.199134 2026] [:error] [pid 26480:tid 26503] [client 4.225.163.126:7787] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeEUqQwLDJKTQNfarA1WggAAAdU"]
[Fri Apr 17 00:56:12.825966 2026] [:error] [pid 43385:tid 43397] [client 4.225.163.126:8129] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aeEUrMnIxkJaUI8KNs76AwAAAAg"]
[Fri Apr 17 00:56:15.430498 2026] [:error] [pid 3245:tid 3262] [client 4.225.163.126:8135] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Ipv6.php"] [unique_id "aeEUr6ESOMTHVLs-uFDHyAAAAQA"]
[Fri Apr 17 00:56:17.901135 2026] [:error] [pid 26480:tid 26482] [client 4.225.163.126:7783] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Ipv6.php"] [unique_id "aeEUsQwLDJKTQNfarA1WhQAAAcA"]
[Fri Apr 17 00:56:20.849088 2026] [:error] [pid 26480:tid 26487] [client 4.225.163.126:7502] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Ipv6.php"] [unique_id "aeEUtAwLDJKTQNfarA1WiQAAAcU"]
[Fri Apr 17 00:56:22.600879 2026] [:error] [pid 4086:tid 4096] [client 4.225.163.126:8160] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Ipv6.php"] [unique_id "aeEUtllz7gxl_exM0Fo7XQAAAUg"]
[Fri Apr 17 00:56:24.099532 2026] [:error] [pid 26480:tid 26484] [client 4.225.163.126:7757] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEUuAwLDJKTQNfarA1WiwAAAcI"]
[Fri Apr 17 00:56:24.824199 2026] [:error] [pid 26480:tid 26489] [client 4.225.163.126:7526] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEUuAwLDJKTQNfarA1WjQAAAcc"]
[Fri Apr 17 00:56:26.673122 2026] [:error] [pid 4086:tid 4101] [client 4.225.163.126:8161] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEUullz7gxl_exM0Fo7XwAAAU0"]
[Fri Apr 17 00:56:29.287880 2026] [:error] [pid 4086:tid 4103] [client 4.225.163.126:7538] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEUvVlz7gxl_exM0Fo7YgAAAU8"]
[Fri Apr 17 00:56:32.225203 2026] [proxy_fcgi:error] [pid 26480:tid 26506] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:32.519354 2026] [proxy_fcgi:error] [pid 26480:tid 26499] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:32.809164 2026] [proxy_fcgi:error] [pid 26480:tid 26488] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:33.098851 2026] [proxy_fcgi:error] [pid 26480:tid 26501] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:33.419842 2026] [proxy_fcgi:error] [pid 26480:tid 26487] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:33.718465 2026] [proxy_fcgi:error] [pid 26480:tid 26485] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:34.169992 2026] [proxy_fcgi:error] [pid 26480:tid 26493] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:34.460637 2026] [proxy_fcgi:error] [pid 26480:tid 26484] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:35.022448 2026] [proxy_fcgi:error] [pid 26480:tid 26483] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:35.323505 2026] [proxy_fcgi:error] [pid 26480:tid 26489] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:35.613272 2026] [proxy_fcgi:error] [pid 26480:tid 26495] [client 4.225.163.126:7529] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:56:35.901030 2026] [:error] [pid 26480:tid 26505] [client 4.225.163.126:7529] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeEUwwwLDJKTQNfarA1WowAAAdc"]
[Fri Apr 17 00:56:37.552366 2026] [:error] [pid 26480:tid 26492] [client 4.225.163.126:7497] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeEUxQwLDJKTQNfarA1WpQAAAco"]
[Fri Apr 17 00:56:39.085343 2026] [:error] [pid 4086:tid 4096] [client 4.225.163.126:7803] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeEUx1lz7gxl_exM0Fo7awAAAUg"]
[Fri Apr 17 00:56:40.450133 2026] [:error] [pid 43482:tid 43487] [client 4.225.163.126:7796] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeEUyD9SZnuKxlHrct2GdgAAAMM"]
[Fri Apr 17 00:56:41.335386 2026] [:error] [pid 43482:tid 43491] [client 4.225.163.126:8177] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeEUyT9SZnuKxlHrct2GeQAAAMc"]
[Fri Apr 17 00:56:43.688889 2026] [:error] [pid 43386:tid 43427] [client 4.225.163.126:7789] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeEUy-91GAVgUfhPVDG2QgAAAEc"]
[Fri Apr 17 00:56:46.553316 2026] [:error] [pid 3245:tid 3284] [client 4.225.163.126:8150] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeEUzqESOMTHVLs-uFDH2AAAARY"]
[Fri Apr 17 00:56:48.448263 2026] [:error] [pid 43482:tid 43504] [client 4.225.163.126:7170] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeEU0D9SZnuKxlHrct2GiwAAANQ"]
[Fri Apr 17 00:56:49.438894 2026] [:error] [pid 43482:tid 43505] [client 4.225.163.126:7490] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEU0T9SZnuKxlHrct2GlgAAANU"]
[Fri Apr 17 00:56:50.953305 2026] [:error] [pid 43482:tid 43486] [client 4.225.163.126:7527] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEU0j9SZnuKxlHrct2GnwAAAMI"]
[Fri Apr 17 00:56:51.671117 2026] [:error] [pid 43482:tid 43484] [client 4.225.163.126:7541] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEU0z9SZnuKxlHrct2GogAAAMA"]
[Fri Apr 17 00:56:52.658847 2026] [:error] [pid 26102:tid 26124] [client 4.225.163.126:8144] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEU1P127aFqw6ALdngFCwAAAZM"]
[Fri Apr 17 00:56:53.412587 2026] [:error] [pid 26480:tid 26484] [client 4.225.163.126:7521] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeEU1QwLDJKTQNfarA1WswAAAcI"]
[Fri Apr 17 00:56:54.567407 2026] [:error] [pid 43482:tid 43491] [client 4.225.163.126:8168] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeEU1j9SZnuKxlHrct2GtQAAAMc"]
[Fri Apr 17 00:56:55.977712 2026] [:error] [pid 43482:tid 43503] [client 4.225.163.126:8141] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeEU1z9SZnuKxlHrct2GvQAAANM"]
[Fri Apr 17 00:56:56.787316 2026] [:error] [pid 43482:tid 43491] [client 4.225.163.126:8136] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeEU2D9SZnuKxlHrct2GvwAAAMc"]
[Fri Apr 17 00:56:58.100980 2026] [:error] [pid 26102:tid 26106] [client 4.225.163.126:8176] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeEU2v127aFqw6ALdngFDgAAAYE"]
[Fri Apr 17 00:56:59.760585 2026] [:error] [pid 26102:tid 26116] [client 4.225.163.126:7169] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeEU2_127aFqw6ALdngFFAAAAYs"]
[Fri Apr 17 00:57:01.224447 2026] [:error] [pid 43385:tid 43400] [client 4.225.163.126:8179] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeEU3cnIxkJaUI8KNs76KwAAAAs"]
[Fri Apr 17 00:57:02.157415 2026] [:error] [pid 26480:tid 26491] [client 4.225.163.126:8170] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeEU3gwLDJKTQNfarA1WugAAAck"]
[Fri Apr 17 00:57:03.261852 2026] [:error] [pid 26480:tid 26482] [client 4.225.163.126:7268] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeEU3wwLDJKTQNfarA1WvAAAAcA"]
[Fri Apr 17 00:57:04.616734 2026] [:error] [pid 26102:tid 26129] [client 4.225.163.126:7268] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeEU4P127aFqw6ALdngFNAAAAZg"]
[Fri Apr 17 00:57:05.495064 2026] [:error] [pid 43482:tid 43492] [client 4.225.163.126:7272] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeEU4T9SZnuKxlHrct2GygAAAMg"]
[Fri Apr 17 00:57:06.331838 2026] [:error] [pid 43482:tid 43500] [client 4.225.163.126:7506] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeEU4j9SZnuKxlHrct2G0AAAANA"]
[Fri Apr 17 00:57:07.433040 2026] [:error] [pid 26102:tid 26126] [client 4.225.163.126:7551] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeEU4_127aFqw6ALdngFQwAAAZU"]
[Fri Apr 17 00:57:08.838219 2026] [:error] [pid 26480:tid 26501] [client 4.225.163.126:8166] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeEU5AwLDJKTQNfarA1WvgAAAdM"]
[Fri Apr 17 00:57:10.075480 2026] [:error] [pid 43385:tid 43410] [client 4.225.163.126:8180] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeEU5snIxkJaUI8KNs76MgAAABQ"]
[Fri Apr 17 00:57:11.041938 2026] [:error] [pid 43482:tid 43485] [client 4.225.163.126:8154] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeEU5z9SZnuKxlHrct2G3AAAAME"]
[Fri Apr 17 00:57:11.971827 2026] [:error] [pid 43385:tid 43389] [client 4.225.163.126:7193] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeEU58nIxkJaUI8KNs76NQAAAAA"]
[Fri Apr 17 00:57:13.327527 2026] [:error] [pid 43482:tid 43495] [client 4.225.163.126:7508] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeEU6T9SZnuKxlHrct2G3wAAAMs"]
[Fri Apr 17 00:57:14.752140 2026] [:error] [pid 43385:tid 43399] [client 4.225.163.126:8138] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeEU6snIxkJaUI8KNs76NwAAAAo"]
[Fri Apr 17 00:57:16.361704 2026] [:error] [pid 26480:tid 26499] [client 4.225.163.126:8151] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeEU7AwLDJKTQNfarA1WywAAAdE"]
[Fri Apr 17 00:57:18.694971 2026] [:error] [pid 43482:tid 43494] [client 4.225.163.126:7793] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeEU7j9SZnuKxlHrct2G4wAAAMo"]
[Fri Apr 17 00:57:19.798495 2026] [:error] [pid 43387:tid 43448] [client 4.225.163.126:8130] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeEU7yBNsONqHxWTakUy4QAAAIA"]
[Fri Apr 17 00:57:21.383014 2026] [:error] [pid 43482:tid 43488] [client 4.225.163.126:7540] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeEU8T9SZnuKxlHrct2G6AAAAMQ"]
[Fri Apr 17 00:57:22.769860 2026] [:error] [pid 43482:tid 43487] [client 4.225.163.126:7489] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeEU8j9SZnuKxlHrct2G7AAAAMM"]
[Fri Apr 17 00:57:24.120891 2026] [:error] [pid 43482:tid 43506] [client 4.225.163.126:8155] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeEU9D9SZnuKxlHrct2G8QAAANY"]
[Fri Apr 17 00:57:25.253976 2026] [:error] [pid 43385:tid 43413] [client 4.225.163.126:7528] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeEU9cnIxkJaUI8KNs76RQAAABc"]
[Fri Apr 17 00:57:26.016927 2026] [:error] [pid 43386:tid 43429] [client 4.225.163.126:7172] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeEU9u91GAVgUfhPVDG2RQAAAEk"]
[Fri Apr 17 00:57:27.107538 2026] [:error] [pid 43385:tid 43398] [client 4.225.163.126:7840] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeEU98nIxkJaUI8KNs76SAAAAAk"]
[Fri Apr 17 00:57:28.003737 2026] [:error] [pid 43482:tid 43486] [client 4.225.163.126:8167] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeEU-D9SZnuKxlHrct2G_QAAAMI"]
[Fri Apr 17 00:57:30.396694 2026] [:error] [pid 3245:tid 3270] [client 4.225.163.126:7205] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEU-qESOMTHVLs-uFDH-QAAAQg"]
[Fri Apr 17 00:57:31.184466 2026] [:error] [pid 43482:tid 43504] [client 4.225.163.126:7531] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEU-z9SZnuKxlHrct2HAAAAANQ"]
[Fri Apr 17 00:57:32.035875 2026] [:error] [pid 43387:tid 43459] [client 4.225.163.126:8147] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEU_CBNsONqHxWTakUy5gAAAIg"]
[Fri Apr 17 00:57:33.276813 2026] [:error] [pid 43482:tid 43494] [client 4.225.163.126:7188] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeEU_T9SZnuKxlHrct2HBQAAAMo"]
[Fri Apr 17 00:57:34.203530 2026] [:error] [pid 43482:tid 43493] [client 4.225.163.126:8146] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xynz.php"] [unique_id "aeEU_j9SZnuKxlHrct2HBwAAAMk"]
[Fri Apr 17 00:57:34.969856 2026] [:error] [pid 43482:tid 43503] [client 4.225.163.126:7534] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xynz.php"] [unique_id "aeEU_j9SZnuKxlHrct2HCgAAANM"]
[Fri Apr 17 00:57:35.808197 2026] [proxy_fcgi:error] [pid 43482:tid 43507] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:36.099835 2026] [proxy_fcgi:error] [pid 43482:tid 43500] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:36.389530 2026] [proxy_fcgi:error] [pid 43482:tid 43506] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:36.750002 2026] [proxy_fcgi:error] [pid 43482:tid 43504] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:37.065350 2026] [proxy_fcgi:error] [pid 43482:tid 43501] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:37.429706 2026] [proxy_fcgi:error] [pid 43482:tid 43488] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:37.738042 2026] [proxy_fcgi:error] [pid 43482:tid 43485] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:38.039672 2026] [proxy_fcgi:error] [pid 43482:tid 43503] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:38.347020 2026] [proxy_fcgi:error] [pid 43482:tid 43497] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:38.636685 2026] [proxy_fcgi:error] [pid 43482:tid 43495] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:39.174825 2026] [proxy_fcgi:error] [pid 43482:tid 43502] [client 4.225.163.126:7200] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:57:39.470403 2026] [:error] [pid 43482:tid 43486] [client 4.225.163.126:7200] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeEVAz9SZnuKxlHrct2HKgAAAMI"]
[Fri Apr 17 00:57:42.597069 2026] [:error] [pid 43482:tid 43501] [client 4.225.163.126:7274] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeEVBj9SZnuKxlHrct2HLgAAANE"]
[Fri Apr 17 00:57:45.102182 2026] [:error] [pid 26480:tid 26490] [client 4.225.163.126:7182] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeEVCQwLDJKTQNfarA1W2gAAAcg"]
[Fri Apr 17 00:57:46.445157 2026] [:error] [pid 43482:tid 43495] [client 4.225.163.126:7206] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeEVCj9SZnuKxlHrct2HNQAAAMs"]
[Fri Apr 17 00:57:47.335621 2026] [:error] [pid 26480:tid 26491] [client 4.225.163.126:7523] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeEVCwwLDJKTQNfarA1W3QAAAck"]
[Fri Apr 17 00:57:49.622492 2026] [:error] [pid 26480:tid 26497] [client 4.225.163.126:7746] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeEVDQwLDJKTQNfarA1W3gAAAc8"]
[Fri Apr 17 00:57:50.844715 2026] [:error] [pid 26102:tid 26127] [client 4.225.163.126:7211] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeEVDv127aFqw6ALdngFrwAAAZY"]
[Fri Apr 17 00:57:52.098674 2026] [:error] [pid 43386:tid 43434] [client 4.225.163.126:8172] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeEVEO91GAVgUfhPVDG2SwAAAE4"]
[Fri Apr 17 00:57:53.204219 2026] [:error] [pid 43386:tid 43442] [client 4.225.163.126:7210] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeEVEe91GAVgUfhPVDG2TAAAAFU"]
[Fri Apr 17 00:57:54.173186 2026] [:error] [pid 26480:tid 26488] [client 4.225.163.126:8182] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeEVEgwLDJKTQNfarA1W9QAAAcY"]
[Fri Apr 17 00:57:55.094070 2026] [:error] [pid 43387:tid 43469] [client 4.225.163.126:8163] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeEVEyBNsONqHxWTakUy7QAAAJA"]
[Fri Apr 17 00:57:56.181861 2026] [:error] [pid 43385:tid 43415] [client 4.225.163.126:7212] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeEVFMnIxkJaUI8KNs76aQAAABg"]
[Fri Apr 17 00:57:57.309488 2026] [:error] [pid 43387:tid 43468] [client 4.225.163.126:8162] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeEVFSBNsONqHxWTakUy_AAAAI8"]
[Fri Apr 17 00:57:58.259312 2026] [:error] [pid 4086:tid 4098] [client 4.225.163.126:8191] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeEVFllz7gxl_exM0Fo7eQAAAUo"]
[Fri Apr 17 00:57:59.056652 2026] [:error] [pid 43385:tid 43408] [client 4.225.163.126:7189] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeEVF8nIxkJaUI8KNs76dwAAABM"]
[Fri Apr 17 00:57:59.735009 2026] [:error] [pid 43385:tid 43412] [client 4.225.163.126:7215] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeEVF8nIxkJaUI8KNs76fAAAABY"]
[Fri Apr 17 00:58:00.514684 2026] [:error] [pid 26102:tid 26126] [client 4.225.163.126:7795] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeEVGP127aFqw6ALdngFvQAAAZU"]
[Fri Apr 17 00:58:01.247862 2026] [:error] [pid 43387:tid 43450] [client 4.225.163.126:7543] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeEVGSBNsONqHxWTakUzBgAAAII"]
[Fri Apr 17 00:58:02.034527 2026] [:error] [pid 43385:tid 43398] [client 4.225.163.126:7219] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeEVGsnIxkJaUI8KNs76hAAAAAk"]
[Fri Apr 17 00:58:02.941309 2026] [:error] [pid 43386:tid 43425] [client 4.225.163.126:8171] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeEVGu91GAVgUfhPVDG2VQAAAEU"]
[Fri Apr 17 00:58:03.680435 2026] [:error] [pid 26480:tid 26485] [client 4.225.163.126:8143] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeEVGwwLDJKTQNfarA1XHQAAAcM"]
[Fri Apr 17 00:58:04.647201 2026] [:error] [pid 43385:tid 43415] [client 4.225.163.126:8128] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeEVHMnIxkJaUI8KNs76jwAAABg"]
[Fri Apr 17 00:58:05.749754 2026] [:error] [pid 4086:tid 4088] [client 4.225.163.126:7202] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeEVHVlz7gxl_exM0Fo7fgAAAUA"]
[Fri Apr 17 00:58:06.790786 2026] [:error] [pid 43387:tid 43467] [client 4.225.163.126:7499] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeEVHiBNsONqHxWTakUzDwAAAI4"]
[Fri Apr 17 00:58:07.874151 2026] [:error] [pid 26480:tid 26503] [client 4.225.163.126:8181] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeEVHwwLDJKTQNfarA1XKQAAAdU"]
[Fri Apr 17 00:58:09.201554 2026] [:error] [pid 4086:tid 4092] [client 4.225.163.126:7243] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeEVIVlz7gxl_exM0Fo7jgAAAUQ"]
[Fri Apr 17 00:58:10.697972 2026] [:error] [pid 26480:tid 26501] [client 4.225.163.126:7537] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeEVIgwLDJKTQNfarA1XMgAAAdM"]
[Fri Apr 17 00:58:12.533014 2026] [:error] [pid 26102:tid 26112] [client 4.225.163.126:8152] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeEVJP127aFqw6ALdngFxgAAAYc"]
[Fri Apr 17 04:03:41.285661 2026] [:error] [pid 9152:tid 9205] [client 209.38.89.62:44272] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAnZJYca8I3TNCwIfOCAAAAE8"]
[Fri Apr 17 04:03:41.339979 2026] [:error] [pid 9152:tid 9193] [client 209.38.89.62:44274] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAnZJYca8I3TNCwIfOCQAAAEM"]
[Fri Apr 17 04:03:41.404309 2026] [:error] [pid 9151:tid 9171] [client 209.38.89.62:44280] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAnchTVuRPkua22vRjGwAAAAo"]
[Fri Apr 17 04:03:41.494988 2026] [:error] [pid 9151:tid 9176] [client 209.38.89.62:44288] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAnchTVuRPkua22vRjHgAAAA8"]
[Fri Apr 17 04:03:41.578963 2026] [:error] [pid 9151:tid 9170] [client 209.38.89.62:44300] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAnchTVuRPkua22vRjHwAAAAk"]
[Fri Apr 17 04:03:41.907956 2026] [:error] [pid 9151:tid 9167] [client 209.38.89.62:44306] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAnchTVuRPkua22vRjIgAAAAY"]
[Fri Apr 17 04:03:41.944564 2026] [:error] [pid 9151:tid 9180] [client 209.38.89.62:44316] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAnchTVuRPkua22vRjJQAAABM"]
[Fri Apr 17 04:03:42.002890 2026] [:error] [pid 9151:tid 9166] [client 209.38.89.62:44326] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAnshTVuRPkua22vRjJgAAAAU"]
[Fri Apr 17 04:03:42.050504 2026] [:error] [pid 9151:tid 9173] [client 209.38.89.62:44328] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAnshTVuRPkua22vRjJwAAAAw"]
[Fri Apr 17 04:03:42.108752 2026] [:error] [pid 9152:tid 9209] [client 209.38.89.62:44330] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAnpJYca8I3TNCwIfODAAAAFM"]
[Fri Apr 17 04:03:42.170151 2026] [:error] [pid 9151:tid 9163] [client 209.38.89.62:44344] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAnshTVuRPkua22vRjKAAAAAI"]
[Fri Apr 17 04:03:42.428291 2026] [:error] [pid 9153:tid 9221] [client 209.38.89.62:44346] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAnuMHGxkTZX3c45eusgAAAIM"]
[Fri Apr 17 04:03:42.546553 2026] [:error] [pid 9263:tid 9271] [client 209.38.89.62:44356] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAnhP68VyHNvj1e56OcQAAAMY"]
[Fri Apr 17 04:57:24.244554 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:24.624514 2026] [proxy_fcgi:error] [pid 9152:tid 9203] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:24.890289 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:25.160069 2026] [proxy_fcgi:error] [pid 9152:tid 9194] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:25.433215 2026] [proxy_fcgi:error] [pid 9152:tid 9197] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:25.708281 2026] [proxy_fcgi:error] [pid 9152:tid 9210] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:26.406526 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:26.682874 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 4.225.163.126:28407] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:26.945392 2026] [:error] [pid 9152:tid 9208] [client 4.225.163.126:28407] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeFNNpJYca8I3TNCwIf6hgAAAFI"]
[Fri Apr 17 04:57:33.503006 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 4.225.163.126:13630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:33.767035 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 4.225.163.126:13630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:57:34.029974 2026] [:error] [pid 51878:tid 51901] [client 4.225.163.126:13630] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeFNPknQhUtMbw9EsgY-AQAAARU"]
[Fri Apr 17 04:57:38.823879 2026] [:error] [pid 9263:tid 9271] [client 4.225.163.126:28376] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeFNQhP68VyHNvj1e57ZSwAAAMY"]
[Fri Apr 17 04:57:40.669355 2026] [:error] [pid 9263:tid 9275] [client 4.225.163.126:21749] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeFNRBP68VyHNvj1e57ZVAAAAMo"]
[Fri Apr 17 04:57:43.117746 2026] [:error] [pid 51878:tid 51892] [client 4.225.163.126:13568] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeFNR0nQhUtMbw9EsgY-NgAAAQw"]
[Fri Apr 17 04:57:45.664056 2026] [:error] [pid 51878:tid 51897] [client 4.225.163.126:13604] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeFNSUnQhUtMbw9EsgY-RAAAARE"]
[Fri Apr 17 04:57:48.744643 2026] [:error] [pid 9151:tid 9180] [client 4.225.163.126:13623] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeFNTMhTVuRPkua22vSJAQAAABM"]
[Fri Apr 17 04:57:52.582465 2026] [:error] [pid 9263:tid 9289] [client 4.225.163.126:21738] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeFNUBP68VyHNvj1e57ZhgAAANg"]
[Fri Apr 17 04:57:54.510019 2026] [:error] [pid 51878:tid 51902] [client 4.225.163.126:21212] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeFNUknQhUtMbw9EsgY-dgAAARY"]
[Fri Apr 17 04:57:55.381131 2026] [:error] [pid 51878:tid 51900] [client 4.225.163.126:21211] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeFNU0nQhUtMbw9EsgY-fQAAARQ"]
[Fri Apr 17 04:57:56.988168 2026] [:error] [pid 51878:tid 51903] [client 4.225.163.126:21187] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeFNVEnQhUtMbw9EsgY-hgAAARc"]
[Fri Apr 17 04:57:58.055484 2026] [:error] [pid 51878:tid 51892] [client 4.225.163.126:21185] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeFNVknQhUtMbw9EsgY-jwAAAQw"]
[Fri Apr 17 04:57:59.656752 2026] [:error] [pid 9263:tid 9277] [client 4.225.163.126:13612] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeFNVxP68VyHNvj1e57ZjwAAAMw"]
[Fri Apr 17 04:58:02.244470 2026] [:error] [pid 9151:tid 9184] [client 4.225.163.126:21239] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeFNWshTVuRPkua22vSJCQAAABc"]
[Fri Apr 17 04:58:04.954880 2026] [:error] [pid 9153:tid 9237] [client 4.225.163.126:10462] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeFNXOMHGxkTZX3c45fmrwAAAJM"]
[Fri Apr 17 04:58:06.495452 2026] [:error] [pid 9151:tid 9161] [client 4.225.163.126:21198] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeFNXshTVuRPkua22vSJDAAAAAA"]
[Fri Apr 17 04:58:07.953435 2026] [:error] [pid 9151:tid 9183] [client 4.225.163.126:62914] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeFNX8hTVuRPkua22vSJEQAAABY"]
[Fri Apr 17 04:58:09.098319 2026] [:error] [pid 9263:tid 9283] [client 4.225.163.126:43876] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeFNYRP68VyHNvj1e57ZmwAAANI"]
[Fri Apr 17 04:58:10.550250 2026] [:error] [pid 51878:tid 51884] [client 4.225.163.126:28381] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeFNYknQhUtMbw9EsgY-tgAAAQQ"]
[Fri Apr 17 04:58:13.175484 2026] [:error] [pid 51878:tid 51882] [client 4.225.163.126:21245] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeFNZUnQhUtMbw9EsgY-wgAAAQI"]
[Fri Apr 17 04:58:15.958679 2026] [:error] [pid 9263:tid 9267] [client 4.225.163.126:43872] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeFNZxP68VyHNvj1e57ZowAAAMI"]
[Fri Apr 17 04:58:21.587001 2026] [:error] [pid 9151:tid 9167] [client 4.225.163.126:62953] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeFNbchTVuRPkua22vSJTQAAAAY"]
[Fri Apr 17 04:58:22.686139 2026] [:error] [pid 9263:tid 9268] [client 4.225.163.126:13582] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeFNbhP68VyHNvj1e57ZsQAAAMM"]
[Fri Apr 17 04:58:26.239924 2026] [:error] [pid 51878:tid 51885] [client 4.225.163.126:13621] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeFNcknQhUtMbw9EsgY-8gAAAQU"]
[Fri Apr 17 04:58:28.718432 2026] [:error] [pid 9263:tid 9288] [client 4.225.163.126:21737] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeFNdBP68VyHNvj1e57ZzQAAANc"]
[Fri Apr 17 04:58:29.902549 2026] [:error] [pid 9151:tid 9183] [client 4.225.163.126:21745] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "aeFNdchTVuRPkua22vSJZAAAABY"]
[Fri Apr 17 04:58:31.030829 2026] [:error] [pid 51878:tid 51894] [client 4.225.163.126:10433] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "aeFNd0nQhUtMbw9EsgY-_AAAAQ4"]
[Fri Apr 17 04:58:32.061787 2026] [:error] [pid 9152:tid 9199] [client 4.225.163.126:21243] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "aeFNeJJYca8I3TNCwIf7FwAAAEk"]
[Fri Apr 17 04:58:33.485943 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 4.225.163.126:21740] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:33.769853 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 4.225.163.126:21740] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:34.050408 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 4.225.163.126:21740] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:34.399133 2026] [proxy_fcgi:error] [pid 51878:tid 51884] [client 4.225.163.126:21740] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:35.037880 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 4.225.163.126:21740] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:36.463108 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 4.225.163.126:21740] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:37.069060 2026] [:error] [pid 51878:tid 51885] [client 4.225.163.126:21740] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aeFNfUnQhUtMbw9EsgY_HwAAAQU"]
[Fri Apr 17 04:58:38.142697 2026] [proxy_fcgi:error] [pid 51878:tid 51882] [client 4.225.163.126:13586] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:38.409273 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 4.225.163.126:13586] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:38.688108 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 4.225.163.126:13586] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:58:39.130506 2026] [:error] [pid 51878:tid 51892] [client 4.225.163.126:13586] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeFNf0nQhUtMbw9EsgY_KQAAAQw"]
[Fri Apr 17 04:58:45.438537 2026] [:error] [pid 9151:tid 9162] [client 4.225.163.126:23070] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeFNhchTVuRPkua22vSJeQAAAAE"]
[Fri Apr 17 04:58:47.697367 2026] [:error] [pid 9151:tid 9171] [client 4.225.163.126:21233] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeFNh8hTVuRPkua22vSJfwAAAAo"]
[Fri Apr 17 04:58:50.364394 2026] [:error] [pid 51878:tid 51894] [client 4.225.163.126:13617] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeFNiknQhUtMbw9EsgY_NQAAAQ4"]
[Fri Apr 17 04:58:52.980159 2026] [:error] [pid 9152:tid 9201] [client 4.225.163.126:16347] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/footer.php"] [unique_id "aeFNjJJYca8I3TNCwIf7MgAAAEs"]
[Fri Apr 17 04:58:56.051523 2026] [:error] [pid 51878:tid 51895] [client 4.225.163.126:23085] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/footer.php"] [unique_id "aeFNkEnQhUtMbw9EsgY_RwAAAQ8"]
[Fri Apr 17 04:59:13.061854 2026] [:error] [pid 9152:tid 9207] [client 4.225.163.126:61797] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeFNoZJYca8I3TNCwIf7iQAAAFE"]
[Fri Apr 17 04:59:13.936566 2026] [:error] [pid 51878:tid 51881] [client 4.225.163.126:61776] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeFNoUnQhUtMbw9EsgY_jgAAAQE"]
[Fri Apr 17 04:59:14.717757 2026] [:error] [pid 9153:tid 9218] [client 4.225.163.126:21229] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeFNouMHGxkTZX3c45fm8QAAAIA"]
[Fri Apr 17 04:59:16.183707 2026] [:error] [pid 51878:tid 51902] [client 4.225.163.126:50564] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeFNpEnQhUtMbw9EsgY_nAAAARY"]
[Fri Apr 17 04:59:17.128635 2026] [:error] [pid 9151:tid 9174] [client 4.225.163.126:50605] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeFNpchTVuRPkua22vSJnAAAAA0"]
[Fri Apr 17 04:59:17.957621 2026] [:error] [pid 9153:tid 9226] [client 4.225.163.126:28372] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeFNpeMHGxkTZX3c45fm-AAAAIg"]
[Fri Apr 17 04:59:19.814997 2026] [:error] [pid 51878:tid 51901] [client 4.225.163.126:23067] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeFNp0nQhUtMbw9EsgY_rwAAARU"]
[Fri Apr 17 04:59:20.636779 2026] [:error] [pid 9153:tid 9221] [client 4.225.163.126:61763] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeFNqOMHGxkTZX3c45fm-wAAAIM"]
[Fri Apr 17 04:59:21.920963 2026] [:error] [pid 9153:tid 9235] [client 4.225.163.126:50569] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFNqeMHGxkTZX3c45fm_gAAAJE"]
[Fri Apr 17 04:59:22.723943 2026] [:error] [pid 51878:tid 51889] [client 4.225.163.126:24399] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFNqknQhUtMbw9EsgY_vwAAAQk"]
[Fri Apr 17 04:59:23.810515 2026] [:error] [pid 9152:tid 9206] [client 4.225.163.126:50569] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFNq5JYca8I3TNCwIf7sgAAAFA"]
[Fri Apr 17 04:59:26.775732 2026] [:error] [pid 9152:tid 9207] [client 4.225.163.126:50582] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFNrpJYca8I3TNCwIf7tQAAAFE"]
[Fri Apr 17 04:59:30.102983 2026] [:error] [pid 9153:tid 9235] [client 4.225.163.126:23061] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeFNsuMHGxkTZX3c45fnDgAAAJE"]
[Fri Apr 17 04:59:30.956124 2026] [:error] [pid 51878:tid 51888] [client 4.225.163.126:13576] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeFNsknQhUtMbw9EsgZADgAAAQg"]
[Fri Apr 17 04:59:35.696735 2026] [:error] [pid 9153:tid 9240] [client 4.225.163.126:16362] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeFNt-MHGxkTZX3c45fnEQAAAJY"]
[Fri Apr 17 04:59:50.906462 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:51.300143 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:51.663907 2026] [proxy_fcgi:error] [pid 9263:tid 9279] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:51.927877 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:52.191719 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:52.461432 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:52.757925 2026] [proxy_fcgi:error] [pid 9263:tid 9269] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:53.034025 2026] [proxy_fcgi:error] [pid 9263:tid 9274] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:53.304122 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:54.941862 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:55.207940 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 4.225.163.126:16326] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:59:55.598791 2026] [:error] [pid 9263:tid 9271] [client 4.225.163.126:16326] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFNyxP68VyHNvj1e57akQAAAMY"]
[Fri Apr 17 04:59:58.948760 2026] [:error] [pid 9152:tid 9196] [client 4.225.163.126:50570] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFNzpJYca8I3TNCwIf76QAAAEY"]
[Fri Apr 17 05:00:02.403908 2026] [:error] [pid 51878:tid 51899] [client 4.225.163.126:16366] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFN0knQhUtMbw9EsgZA5QAAARM"]
[Fri Apr 17 05:00:04.756826 2026] [:error] [pid 51878:tid 51904] [client 4.225.163.126:61808] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFN1EnQhUtMbw9EsgZA8AAAARg"]
[Fri Apr 17 05:00:07.502490 2026] [:error] [pid 51878:tid 51889] [client 4.225.163.126:28363] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeFN10nQhUtMbw9EsgZBBgAAAQk"]
[Fri Apr 17 05:00:13.381128 2026] [:error] [pid 51878:tid 51904] [client 4.225.163.126:16361] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeFN3UnQhUtMbw9EsgZBFwAAARg"]
[Fri Apr 17 05:00:16.266307 2026] [:error] [pid 9263:tid 9278] [client 4.225.163.126:50592] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeFN4BP68VyHNvj1e57bBQAAAM0"]
[Fri Apr 17 05:00:21.921157 2026] [:error] [pid 51878:tid 51900] [client 4.225.163.126:21218] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeFN5UnQhUtMbw9EsgZBLAAAARQ"]
[Fri Apr 17 05:00:23.311410 2026] [:error] [pid 9151:tid 9183] [client 4.225.163.126:61785] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeFN58hTVuRPkua22vSKBAAAABY"]
[Fri Apr 17 05:00:25.129182 2026] [:error] [pid 51878:tid 51894] [client 4.225.163.126:50567] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeFN6UnQhUtMbw9EsgZBPwAAAQ4"]
[Fri Apr 17 05:00:27.961807 2026] [:error] [pid 9152:tid 9211] [client 4.225.163.126:16327] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v5.php"] [unique_id "aeFN65JYca8I3TNCwIf8BwAAAFU"]
[Fri Apr 17 05:00:36.916027 2026] [:error] [pid 51878:tid 51896] [client 4.225.163.126:21194] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeFN9EnQhUtMbw9EsgZBXAAAARA"]
[Fri Apr 17 05:00:38.029519 2026] [:error] [pid 51878:tid 51900] [client 4.225.163.126:61792] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeFN9knQhUtMbw9EsgZBXwAAARQ"]
[Fri Apr 17 05:00:40.561578 2026] [:error] [pid 51878:tid 51894] [client 4.225.163.126:13618] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeFN-EnQhUtMbw9EsgZBbAAAAQ4"]
[Fri Apr 17 05:00:41.463459 2026] [:error] [pid 51878:tid 51895] [client 4.225.163.126:61810] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws85.php"] [unique_id "aeFN-UnQhUtMbw9EsgZBcgAAAQ8"]
[Fri Apr 17 05:00:45.527768 2026] [:error] [pid 51878:tid 51889] [client 4.225.163.126:50561] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws87.php"] [unique_id "aeFN_UnQhUtMbw9EsgZBeQAAAQk"]
[Fri Apr 17 05:00:48.365201 2026] [:error] [pid 51878:tid 51882] [client 4.225.163.126:61771] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws87.php"] [unique_id "aeFOAEnQhUtMbw9EsgZBfQAAAQI"]
[Fri Apr 17 05:01:00.956634 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:01.222986 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:01.501888 2026] [proxy_fcgi:error] [pid 9152:tid 9192] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:01.777650 2026] [proxy_fcgi:error] [pid 9152:tid 9208] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:02.051876 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:02.317247 2026] [proxy_fcgi:error] [pid 9152:tid 9201] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:02.582985 2026] [proxy_fcgi:error] [pid 9152:tid 9190] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:02.855272 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:05.929180 2026] [proxy_fcgi:error] [pid 9152:tid 9195] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:06.195057 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:06.462508 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 4.225.163.126:17903] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:01:06.737016 2026] [:error] [pid 9152:tid 9191] [client 4.225.163.126:17903] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeFOEpJYca8I3TNCwIf8UQAAAEE"]
[Fri Apr 17 05:01:08.101935 2026] [:error] [pid 9153:tid 9236] [client 4.225.163.126:23098] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeFOFOMHGxkTZX3c45fnggAAAJI"]
[Fri Apr 17 05:01:09.646459 2026] [:error] [pid 9151:tid 9185] [client 4.225.163.126:50602] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeFOFchTVuRPkua22vSKnwAAABg"]
[Fri Apr 17 05:01:10.581278 2026] [:error] [pid 9152:tid 9201] [client 4.225.163.126:13577] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeFOFpJYca8I3TNCwIf8VQAAAEs"]
[Fri Apr 17 05:01:12.446309 2026] [:error] [pid 9153:tid 9225] [client 4.225.163.126:16368] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFOGOMHGxkTZX3c45fnjQAAAIc"]
[Fri Apr 17 05:01:15.178534 2026] [:error] [pid 9153:tid 9218] [client 4.225.163.126:23073] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFOG-MHGxkTZX3c45fnkwAAAIA"]
[Fri Apr 17 05:01:21.460906 2026] [:error] [pid 9263:tid 9287] [client 4.225.163.126:16320] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFOIRP68VyHNvj1e57b9AAAANY"]
[Fri Apr 17 05:01:23.546525 2026] [:error] [pid 51878:tid 51904] [client 4.225.163.126:13628] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFOI0nQhUtMbw9EsgZB6gAAARg"]
[Fri Apr 17 05:01:26.067696 2026] [:error] [pid 51878:tid 51881] [client 4.225.163.126:13589] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeFOJknQhUtMbw9EsgZCAwAAAQE"]
[Fri Apr 17 05:01:28.981115 2026] [:error] [pid 9152:tid 9206] [client 4.225.163.126:17885] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeFOKJJYca8I3TNCwIf8cQAAAFA"]
[Fri Apr 17 05:01:31.239879 2026] [:error] [pid 9151:tid 9171] [client 4.225.163.126:16325] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeFOK8hTVuRPkua22vSK7AAAAAo"]
[Fri Apr 17 05:01:32.718281 2026] [:error] [pid 9153:tid 9242] [client 4.225.163.126:23091] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ga.php"] [unique_id "aeFOLOMHGxkTZX3c45fnvQAAAJg"]
[Fri Apr 17 05:01:33.808022 2026] [:error] [pid 9152:tid 9192] [client 4.225.163.126:17902] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeFOLZJYca8I3TNCwIf8hAAAAEI"]
[Fri Apr 17 05:01:35.048921 2026] [:error] [pid 9153:tid 9223] [client 4.225.163.126:61784] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeFOL-MHGxkTZX3c45fnxwAAAIU"]
[Fri Apr 17 05:01:37.557536 2026] [:error] [pid 9151:tid 9181] [client 4.225.163.126:50586] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeFOMchTVuRPkua22vSK9gAAABQ"]
[Fri Apr 17 05:01:38.553840 2026] [:error] [pid 51878:tid 51897] [client 4.225.163.126:23093] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeFOMknQhUtMbw9EsgZCaQAAARE"]
[Fri Apr 17 05:01:40.238054 2026] [:error] [pid 9263:tid 9275] [client 4.225.163.126:17905] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1100.php"] [unique_id "aeFONBP68VyHNvj1e57cLQAAAMo"]
[Fri Apr 17 05:01:41.896126 2026] [:error] [pid 51878:tid 51895] [client 4.225.163.126:13569] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1100.php"] [unique_id "aeFONUnQhUtMbw9EsgZCfgAAAQ8"]
[Fri Apr 17 05:01:43.937894 2026] [:error] [pid 51878:tid 51900] [client 4.225.163.126:13602] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1100.php"] [unique_id "aeFON0nQhUtMbw9EsgZCogAAARQ"]
[Fri Apr 17 05:02:08.272400 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:08.540046 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:08.847787 2026] [proxy_fcgi:error] [pid 51878:tid 51892] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:09.229360 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:09.655734 2026] [proxy_fcgi:error] [pid 51878:tid 51894] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:09.921119 2026] [proxy_fcgi:error] [pid 51878:tid 51884] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:10.186640 2026] [proxy_fcgi:error] [pid 51878:tid 51898] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:10.453000 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:10.728099 2026] [proxy_fcgi:error] [pid 51878:tid 51887] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:11.063466 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:11.347083 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 4.225.163.126:13604] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:02:11.627615 2026] [:error] [pid 51878:tid 51892] [client 4.225.163.126:13604] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeFOU0nQhUtMbw9EsgZDKgAAAQw"]
[Fri Apr 17 05:02:13.099138 2026] [:error] [pid 51878:tid 51898] [client 4.225.163.126:21185] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeFOVUnQhUtMbw9EsgZDMQAAARI"]
[Fri Apr 17 05:02:15.593727 2026] [:error] [pid 51878:tid 51901] [client 4.225.163.126:13610] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeFOV0nQhUtMbw9EsgZDPAAAARU"]
[Fri Apr 17 05:02:17.369559 2026] [:error] [pid 9263:tid 9272] [client 4.225.163.126:17919] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeFOWRP68VyHNvj1e57crwAAAMc"]
[Fri Apr 17 05:02:18.439022 2026] [:error] [pid 9263:tid 9277] [client 4.225.163.126:16325] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxpass.php"] [unique_id "aeFOWhP68VyHNvj1e57cswAAAMw"]
[Fri Apr 17 05:02:19.685591 2026] [:error] [pid 9263:tid 9267] [client 4.225.163.126:23079] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxpass.php"] [unique_id "aeFOWxP68VyHNvj1e57cvAAAAMI"]
[Fri Apr 17 05:02:20.662974 2026] [:error] [pid 51878:tid 51885] [client 4.225.163.126:23068] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxpass.php"] [unique_id "aeFOXEnQhUtMbw9EsgZDSQAAAQU"]
[Fri Apr 17 05:02:37.027318 2026] [:error] [pid 51878:tid 51892] [client 4.225.163.126:23044] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/000.php"] [unique_id "aeFObUnQhUtMbw9EsgZDkAAAAQw"]
[Fri Apr 17 05:02:39.745324 2026] [:error] [pid 9152:tid 9191] [client 4.225.163.126:21235] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/000.php"] [unique_id "aeFOb5JYca8I3TNCwIf88QAAAEE"]
[Fri Apr 17 05:02:41.359366 2026] [:error] [pid 9263:tid 9287] [client 4.225.163.126:16378] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/000.php"] [unique_id "aeFOcRP68VyHNvj1e57dKwAAANY"]
[Fri Apr 17 05:02:43.675797 2026] [:error] [pid 9153:tid 9224] [client 4.225.163.126:21646] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/000.php"] [unique_id "aeFOc-MHGxkTZX3c45foYwAAAIY"]
[Fri Apr 17 05:02:45.724444 2026] [:error] [pid 9263:tid 9277] [client 4.225.163.126:50580] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeFOdRP68VyHNvj1e57dOQAAAMw"]
[Fri Apr 17 05:02:52.717761 2026] [:error] [pid 9153:tid 9230] [client 4.225.163.126:61765] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeFOfOMHGxkTZX3c45fodQAAAIw"]
[Fri Apr 17 05:02:54.396509 2026] [:error] [pid 51878:tid 51894] [client 4.225.163.126:21689] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeFOfknQhUtMbw9EsgZEGgAAAQ4"]
[Fri Apr 17 05:02:56.097217 2026] [:error] [pid 9263:tid 9287] [client 4.225.163.126:23097] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aeFOgBP68VyHNvj1e57degAAANY"]
[Fri Apr 17 05:02:59.528109 2026] [:error] [pid 9263:tid 9278] [client 4.225.163.126:13580] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x3x.php"] [unique_id "aeFOgxP68VyHNvj1e57dkwAAAM0"]
[Fri Apr 17 05:03:02.716353 2026] [:error] [pid 9263:tid 9282] [client 4.225.163.126:21673] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x3x.php"] [unique_id "aeFOhhP68VyHNvj1e57dqQAAANE"]
[Fri Apr 17 05:03:04.375394 2026] [:error] [pid 51878:tid 51902] [client 4.225.163.126:17873] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x3x.php"] [unique_id "aeFOiEnQhUtMbw9EsgZEQAAAARY"]
[Fri Apr 17 05:03:06.183147 2026] [:error] [pid 51878:tid 51892] [client 4.225.163.126:17911] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x3x.php"] [unique_id "aeFOiknQhUtMbw9EsgZERwAAAQw"]
[Fri Apr 17 05:03:08.261470 2026] [:error] [pid 9263:tid 9267] [client 4.225.163.126:17915] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "aeFOjBP68VyHNvj1e57d1wAAAMI"]
[Fri Apr 17 05:03:10.360549 2026] [:error] [pid 9152:tid 9205] [client 4.225.163.126:50621] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "aeFOjpJYca8I3TNCwIf9NwAAAE8"]
[Fri Apr 17 05:03:11.760596 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 4.225.163.126:61793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:12.052720 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 4.225.163.126:61793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:12.320280 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 4.225.163.126:61793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:12.601847 2026] [proxy_fcgi:error] [pid 51878:tid 51894] [client 4.225.163.126:61793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:12.867300 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 4.225.163.126:61793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:13.138544 2026] [proxy_fcgi:error] [pid 51878:tid 51884] [client 4.225.163.126:61793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:13.401642 2026] [:error] [pid 51878:tid 51895] [client 4.225.163.126:61793] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeFOkUnQhUtMbw9EsgZEcgAAAQ8"]
[Fri Apr 17 05:03:18.494459 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 4.225.163.126:61764] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:18.769451 2026] [proxy_fcgi:error] [pid 9263:tid 9274] [client 4.225.163.126:61764] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:19.103617 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 4.225.163.126:61764] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:19.510762 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 4.225.163.126:61764] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:19.786348 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 4.225.163.126:61764] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:03:20.048280 2026] [:error] [pid 9263:tid 9278] [client 4.225.163.126:61764] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeFOmBP68VyHNvj1e57eJwAAAM0"]
[Fri Apr 17 05:03:22.065890 2026] [:error] [pid 9151:tid 9174] [client 4.225.163.126:21654] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeFOmshTVuRPkua22vSLyAAAAA0"]
[Fri Apr 17 05:03:23.432647 2026] [:error] [pid 9153:tid 9239] [client 4.225.163.126:13587] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeFOm-MHGxkTZX3c45foogAAAJU"]
[Fri Apr 17 05:03:24.304906 2026] [:error] [pid 9151:tid 9165] [client 4.225.163.126:16356] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeFOnMhTVuRPkua22vSLzgAAAAQ"]
[Fri Apr 17 05:03:24.979843 2026] [:error] [pid 9152:tid 9195] [client 4.225.163.126:23100] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFOnJJYca8I3TNCwIf9WgAAAEU"]
[Fri Apr 17 05:03:26.077770 2026] [:error] [pid 51878:tid 51898] [client 4.225.163.126:17876] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFOnknQhUtMbw9EsgZEogAAARI"]
[Fri Apr 17 05:03:28.314139 2026] [:error] [pid 9151:tid 9176] [client 4.225.163.126:17913] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFOoMhTVuRPkua22vSL0wAAAA8"]
[Fri Apr 17 05:03:30.121830 2026] [:error] [pid 51878:tid 51891] [client 4.225.163.126:21209] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFOoknQhUtMbw9EsgZEuAAAAQs"]
[Fri Apr 17 05:03:38.585845 2026] [:error] [pid 9151:tid 9179] [client 4.225.163.126:23046] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xynz.php"] [unique_id "aeFOqshTVuRPkua22vSL2wAAABI"]
[Fri Apr 17 05:03:43.984533 2026] [:error] [pid 9152:tid 9194] [client 4.225.163.126:13383] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xynz.php"] [unique_id "aeFOr5JYca8I3TNCwIf9fwAAAEQ"]
[Fri Apr 17 05:03:47.145709 2026] [:error] [pid 9152:tid 9206] [client 4.225.163.126:53029] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-01ul.php"] [unique_id "aeFOs5JYca8I3TNCwIf9kQAAAFA"]
[Fri Apr 17 05:03:49.711626 2026] [:error] [pid 9153:tid 9234] [client 4.225.163.126:6590] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-01ul.php"] [unique_id "aeFOteMHGxkTZX3c45fo_gAAAJA"]
[Fri Apr 17 05:03:50.807444 2026] [:error] [pid 9151:tid 9179] [client 4.225.163.126:6710] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-01ul.php"] [unique_id "aeFOtshTVuRPkua22vSL7QAAABI"]
[Fri Apr 17 05:03:56.194940 2026] [:error] [pid 9263:tid 9287] [client 4.225.163.126:6787] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-01ul.php"] [unique_id "aeFOvBP68VyHNvj1e57e_QAAANY"]
[Fri Apr 17 05:03:58.766553 2026] [:error] [pid 9151:tid 9181] [client 4.225.163.126:6801] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/e7.php"] [unique_id "aeFOvshTVuRPkua22vSL-wAAABQ"]
[Fri Apr 17 05:04:01.131397 2026] [:error] [pid 9153:tid 9242] [client 4.225.163.126:57183] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/e7.php"] [unique_id "aeFOweMHGxkTZX3c45fpDgAAAJg"]
[Fri Apr 17 05:04:09.980020 2026] [:error] [pid 9151:tid 9163] [client 4.225.163.126:6641] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/e7.php"] [unique_id "aeFOychTVuRPkua22vSMCAAAAAI"]
[Fri Apr 17 05:04:35.419279 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:35.779961 2026] [proxy_fcgi:error] [pid 51878:tid 51903] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:36.046354 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:36.331281 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:36.605105 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:36.883726 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:37.158521 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:37.427571 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:37.708029 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:37.973752 2026] [proxy_fcgi:error] [pid 51878:tid 51884] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:38.240195 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 4.225.163.126:6248] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:04:38.522405 2026] [:error] [pid 51878:tid 51881] [client 4.225.163.126:6248] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeFO5knQhUtMbw9EsgZGpAAAAQE"]
[Fri Apr 17 05:04:40.668088 2026] [:error] [pid 9263:tid 9266] [client 4.225.163.126:57198] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeFO6BP68VyHNvj1e57ffgAAAME"]
[Fri Apr 17 05:04:51.107656 2026] [:error] [pid 51878:tid 51891] [client 4.225.163.126:57160] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeFO80nQhUtMbw9EsgZHSAAAAQs"]
[Fri Apr 17 05:04:55.126900 2026] [:error] [pid 9153:tid 9235] [client 4.225.163.126:28457] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFO9-MHGxkTZX3c45fp6QAAAJE"]
[Fri Apr 17 05:05:00.345710 2026] [:error] [pid 51878:tid 51900] [client 4.225.163.126:35311] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFO_EnQhUtMbw9EsgZHvgAAARQ"]
[Fri Apr 17 05:05:03.828555 2026] [:error] [pid 9153:tid 9222] [client 4.225.163.126:37882] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFO_-MHGxkTZX3c45fqBQAAAIQ"]
[Fri Apr 17 05:05:06.283651 2026] [:error] [pid 9152:tid 9207] [client 4.225.163.126:35268] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFPApJYca8I3TNCwIf-XAAAAFE"]
[Fri Apr 17 05:05:07.966961 2026] [:error] [pid 9153:tid 9220] [client 4.225.163.126:35307] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFPA-MHGxkTZX3c45fqEgAAAII"]
[Fri Apr 17 05:05:10.648544 2026] [:error] [pid 9263:tid 9284] [client 4.225.163.126:7130] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFPBhP68VyHNvj1e57f_wAAANM"]
[Fri Apr 17 05:05:12.591078 2026] [:error] [pid 9263:tid 9282] [client 4.225.163.126:6923] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFPCBP68VyHNvj1e57gBwAAANE"]
[Fri Apr 17 05:05:14.885825 2026] [:error] [pid 9263:tid 9275] [client 4.225.163.126:53824] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFPChP68VyHNvj1e57gEAAAAMo"]
[Fri Apr 17 05:05:21.296211 2026] [:error] [pid 9263:tid 9271] [client 4.225.163.126:37870] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFPERP68VyHNvj1e57gJgAAAMY"]
[Fri Apr 17 05:05:22.600701 2026] [:error] [pid 9151:tid 9178] [client 4.225.163.126:6465] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFPEshTVuRPkua22vSM1AAAABE"]
[Fri Apr 17 05:05:23.907680 2026] [:error] [pid 9152:tid 9209] [client 4.225.163.126:37854] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFPE5JYca8I3TNCwIf-gwAAAFM"]
[Fri Apr 17 05:05:29.382457 2026] [:error] [pid 51878:tid 51883] [client 4.225.163.126:6501] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFPGUnQhUtMbw9EsgZIjQAAAQM"]
[Fri Apr 17 05:21:47.896354 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:48.181352 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:48.446997 2026] [proxy_fcgi:error] [pid 51878:tid 51892] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:49.911931 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:50.187482 2026] [proxy_fcgi:error] [pid 51878:tid 51897] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:50.452650 2026] [proxy_fcgi:error] [pid 51878:tid 51887] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:50.768971 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:51.060728 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:51.651101 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 20.199.113.127:6701] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:21:51.957413 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:6701] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeFS70nQhUtMbw9EsgZXCgAAAQQ"]
[Fri Apr 17 05:21:52.612363 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:30288] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeFS8OMHGxkTZX3c45fy-QAAAI0"]
[Fri Apr 17 05:21:53.446538 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:52512] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeFS8UnQhUtMbw9EsgZXDQAAAQg"]
[Fri Apr 17 05:21:54.234167 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:48295] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeFS8hP68VyHNvj1e57qxQAAANU"]
[Fri Apr 17 05:21:54.956898 2026] [:error] [pid 9151:tid 9170] [client 20.199.113.127:27698] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeFS8shTVuRPkua22vSTLwAAAAk"]
[Fri Apr 17 05:21:55.705294 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:27706] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeFS80nQhUtMbw9EsgZXFAAAAQo"]
[Fri Apr 17 05:21:56.404433 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:30312] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeFS9EnQhUtMbw9EsgZXFQAAARM"]
[Fri Apr 17 05:21:57.067823 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:22163] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeFS9RP68VyHNvj1e57qywAAAM4"]
[Fri Apr 17 05:21:58.004506 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:21852] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeFS9knQhUtMbw9EsgZXHwAAAQc"]
[Fri Apr 17 05:21:59.802105 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:6377] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeFS90nQhUtMbw9EsgZXJAAAAQ0"]
[Fri Apr 17 05:22:00.767966 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:60114] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeFS-EnQhUtMbw9EsgZXKwAAAQA"]
[Fri Apr 17 05:22:01.585662 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:53867] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeFS-UnQhUtMbw9EsgZXMQAAAQU"]
[Fri Apr 17 05:22:02.245441 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:6692] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeFS-knQhUtMbw9EsgZXOQAAAQs"]
[Fri Apr 17 05:22:03.725259 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:30335] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeFS-0nQhUtMbw9EsgZXRQAAAQs"]
[Fri Apr 17 05:22:05.122720 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:6361] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeFS_RP68VyHNvj1e57q2QAAAMo"]
[Fri Apr 17 05:22:06.077619 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:22186] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeFS_hP68VyHNvj1e57q6AAAANQ"]
[Fri Apr 17 05:22:06.848633 2026] [:error] [pid 9152:tid 9200] [client 20.199.113.127:27665] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeFS_pJYca8I3TNCwIcFnQAAAEo"]
[Fri Apr 17 05:22:07.616086 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:60154] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeFS_0nQhUtMbw9EsgZXWwAAAQA"]
[Fri Apr 17 05:22:08.288715 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:21872] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeFTAEnQhUtMbw9EsgZXZAAAARE"]
[Fri Apr 17 05:22:09.741929 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:30275] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeFTAeMHGxkTZX3c45fzIwAAAJQ"]
[Fri Apr 17 05:22:10.573090 2026] [:error] [pid 9153:tid 9218] [client 20.199.113.127:48290] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeFTAuMHGxkTZX3c45fzKwAAAIA"]
[Fri Apr 17 05:22:11.244456 2026] [:error] [pid 9151:tid 9162] [client 20.199.113.127:60099] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeFTA8hTVuRPkua22vSTOQAAAAE"]
[Fri Apr 17 05:22:11.907338 2026] [:error] [pid 51878:tid 51903] [client 20.199.113.127:21867] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeFTA0nQhUtMbw9EsgZXegAAARc"]
[Fri Apr 17 05:22:13.730508 2026] [:error] [pid 51878:tid 51889] [client 20.199.113.127:52532] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeFTBUnQhUtMbw9EsgZXgQAAAQk"]
[Fri Apr 17 05:22:14.699195 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:48268] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeFTBuMHGxkTZX3c45fzPwAAAJA"]
[Fri Apr 17 05:22:15.552324 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:6384] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeFTB5JYca8I3TNCwIcFvQAAAFI"]
[Fri Apr 17 05:22:16.356574 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:6702] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeFTCMhTVuRPkua22vSTQQAAABc"]
[Fri Apr 17 05:22:17.435069 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:21832] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeFTCZJYca8I3TNCwIcFwgAAAFU"]
[Fri Apr 17 05:22:18.761966 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:30295] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFTChP68VyHNvj1e57rOAAAANM"]
[Fri Apr 17 05:22:19.392019 2026] [:error] [pid 9152:tid 9200] [client 20.199.113.127:60096] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFTC5JYca8I3TNCwIcFxQAAAEo"]
[Fri Apr 17 05:22:20.134464 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:48285] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFTDEnQhUtMbw9EsgZXigAAARE"]
[Fri Apr 17 05:22:21.845128 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:27697] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeFTDRP68VyHNvj1e57rPwAAANQ"]
[Fri Apr 17 05:22:22.906838 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:35781] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeFTDknQhUtMbw9EsgZXlAAAAQM"]
[Fri Apr 17 05:22:23.716403 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:6358] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeFTDxP68VyHNvj1e57rRwAAAMs"]
[Fri Apr 17 05:22:24.495826 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:53843] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeFTEBP68VyHNvj1e57rSwAAANI"]
[Fri Apr 17 05:22:25.433099 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:48261] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeFTERP68VyHNvj1e57rVAAAAMc"]
[Fri Apr 17 05:22:26.008559 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:21882] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeFTEknQhUtMbw9EsgZXmAAAAQQ"]
[Fri Apr 17 05:22:26.810362 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:30293] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeFTEknQhUtMbw9EsgZXngAAAQU"]
[Fri Apr 17 05:22:27.489774 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:6398] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeFTE0nQhUtMbw9EsgZXoAAAAQ0"]
[Fri Apr 17 05:22:28.890358 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:21853] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeFTFBP68VyHNvj1e57rVwAAANU"]
[Fri Apr 17 05:22:29.520049 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:27668] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeFTFRP68VyHNvj1e57rWgAAAMU"]
[Fri Apr 17 05:22:30.173168 2026] [:error] [pid 51878:tid 51895] [client 20.199.113.127:22171] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeFTFknQhUtMbw9EsgZXrAAAAQ8"]
[Fri Apr 17 05:22:30.830588 2026] [:error] [pid 9152:tid 9202] [client 20.199.113.127:60123] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeFTFpJYca8I3TNCwIcF3gAAAEw"]
[Fri Apr 17 05:22:31.638842 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:30313] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeFTFxP68VyHNvj1e57rYwAAANQ"]
[Fri Apr 17 05:22:32.337280 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:7063] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeFTGEnQhUtMbw9EsgZXtAAAARM"]
[Fri Apr 17 05:22:32.987147 2026] [:error] [pid 51878:tid 51904] [client 20.199.113.127:60124] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeFTGEnQhUtMbw9EsgZXuQAAARg"]
[Fri Apr 17 05:22:33.766911 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:60108] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeFTGUnQhUtMbw9EsgZXvQAAAQA"]
[Fri Apr 17 05:22:34.489975 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:35815] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeFTGuMHGxkTZX3c45fzUwAAAJI"]
[Fri Apr 17 05:22:35.225789 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:43736] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeFTG5JYca8I3TNCwIcF4wAAAE0"]
[Fri Apr 17 05:22:35.906453 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:43725] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeFTG-MHGxkTZX3c45fzVwAAAJc"]
[Fri Apr 17 05:22:36.618636 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:6691] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeFTHOMHGxkTZX3c45fzXQAAAIc"]
[Fri Apr 17 05:22:37.241024 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:53834] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeFTHRP68VyHNvj1e57rcQAAANg"]
[Fri Apr 17 05:22:37.892505 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:22157] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeFTHeMHGxkTZX3c45fzYwAAAIY"]
[Fri Apr 17 05:22:38.710825 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:48293] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeFTHpJYca8I3TNCwIcF5gAAAFE"]
[Fri Apr 17 05:22:39.350267 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:52531] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeFTH8hTVuRPkua22vSTXQAAABM"]
[Fri Apr 17 05:22:40.002289 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:30316] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeFTIMhTVuRPkua22vSTYgAAABE"]
[Fri Apr 17 05:22:40.770578 2026] [:error] [pid 9153:tid 9242] [client 20.199.113.127:6369] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeFTIOMHGxkTZX3c45fzbgAAAJg"]
[Fri Apr 17 05:22:41.455214 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:35825] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeFTIRP68VyHNvj1e57rfQAAAMs"]
[Fri Apr 17 05:22:41.977303 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:6688] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeFTIchTVuRPkua22vSTbgAAABA"]
[Fri Apr 17 05:22:42.888358 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:52539] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeFTIhP68VyHNvj1e57rgAAAAMk"]
[Fri Apr 17 05:22:43.643827 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:60115] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeFTI-MHGxkTZX3c45fzeQAAAJc"]
[Fri Apr 17 05:22:44.284576 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:53882] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeFTJMhTVuRPkua22vSTdAAAABE"]
[Fri Apr 17 05:22:45.164418 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:53864] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeFTJchTVuRPkua22vSTdgAAABQ"]
[Fri Apr 17 05:22:45.809733 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:35803] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeFTJUnQhUtMbw9EsgZXywAAAQo"]
[Fri Apr 17 05:22:46.341292 2026] [:error] [pid 51878:tid 51904] [client 20.199.113.127:21887] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFTJknQhUtMbw9EsgZXzQAAARg"]
[Fri Apr 17 05:22:46.971326 2026] [:error] [pid 51878:tid 51903] [client 20.199.113.127:53872] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFTJknQhUtMbw9EsgZX1AAAARc"]
[Fri Apr 17 05:22:47.854170 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:7058] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFTJ8hTVuRPkua22vSTdwAAABY"]
[Fri Apr 17 05:22:48.363900 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:21843] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFTKBP68VyHNvj1e57rmQAAAME"]
[Fri Apr 17 05:22:49.170558 2026] [:error] [pid 51878:tid 51901] [client 20.199.113.127:60103] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeFTKUnQhUtMbw9EsgZX2AAAARU"]
[Fri Apr 17 05:22:49.846308 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:48280] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeFTKeMHGxkTZX3c45fzfgAAAJY"]
[Fri Apr 17 05:22:50.474504 2026] [:error] [pid 9152:tid 9200] [client 20.199.113.127:53881] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeFTKpJYca8I3TNCwIcF9AAAAEo"]
[Fri Apr 17 05:22:51.060460 2026] [proxy_fcgi:error] [pid 9151:tid 9182] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:51.303276 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:51.544505 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:51.797596 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:52.105170 2026] [proxy_fcgi:error] [pid 9151:tid 9169] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:52.346581 2026] [proxy_fcgi:error] [pid 9151:tid 9170] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:52.591296 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:52.849198 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:53.329088 2026] [proxy_fcgi:error] [pid 9151:tid 9179] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:53.568271 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:53.808192 2026] [proxy_fcgi:error] [pid 9151:tid 9163] [client 20.199.113.127:52487] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:22:54.111611 2026] [:error] [pid 9151:tid 9172] [client 20.199.113.127:52487] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeFTLshTVuRPkua22vSTjAAAAAs"]
[Fri Apr 17 05:22:54.808169 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:53863] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeFTLknQhUtMbw9EsgZX6wAAAQI"]
[Fri Apr 17 05:22:55.434035 2026] [:error] [pid 9153:tid 9226] [client 20.199.113.127:7051] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeFTL-MHGxkTZX3c45fzgwAAAIg"]
[Fri Apr 17 05:22:56.298214 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:30291] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeFTMOMHGxkTZX3c45fzhwAAAIU"]
[Fri Apr 17 05:22:56.957705 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:30294] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeFTMBP68VyHNvj1e57rpAAAAMo"]
[Fri Apr 17 05:22:57.649836 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:45293] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeFTMUnQhUtMbw9EsgZX_QAAAQo"]
[Fri Apr 17 05:22:58.402835 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:48302] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeFTMknQhUtMbw9EsgZYBAAAAQg"]
[Fri Apr 17 05:22:59.270860 2026] [:error] [pid 9152:tid 9201] [client 20.199.113.127:30274] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeFTM5JYca8I3TNCwIcGBQAAAEs"]
[Fri Apr 17 05:22:59.833589 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:35819] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeFTM0nQhUtMbw9EsgZYDQAAARM"]
[Fri Apr 17 05:23:01.023522 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:48301] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeFTNRP68VyHNvj1e57rqAAAAM0"]
[Fri Apr 17 05:23:01.735858 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:7087] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeFTNUnQhUtMbw9EsgZYEQAAAQo"]
[Fri Apr 17 05:23:02.346403 2026] [:error] [pid 9152:tid 9199] [client 20.199.113.127:35807] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeFTNpJYca8I3TNCwIcGCgAAAEk"]
[Fri Apr 17 05:23:03.098705 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:6694] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeFTNxP68VyHNvj1e57rsQAAAM8"]
[Fri Apr 17 05:23:03.873597 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:21876] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeFTN-MHGxkTZX3c45fzjgAAAIM"]
[Fri Apr 17 05:23:04.447688 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:22179] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeFTOEnQhUtMbw9EsgZYHgAAAQc"]
[Fri Apr 17 05:23:05.354486 2026] [:error] [pid 51878:tid 51900] [client 20.199.113.127:52500] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeFTOUnQhUtMbw9EsgZYKAAAARQ"]
[Fri Apr 17 05:23:06.071562 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:21854] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeFTOknQhUtMbw9EsgZYLwAAAQA"]
[Fri Apr 17 05:23:06.749283 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:21865] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeFTOknQhUtMbw9EsgZYNwAAAQc"]
[Fri Apr 17 05:23:07.518672 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:7046] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeFTO0nQhUtMbw9EsgZYPwAAAQs"]
[Fri Apr 17 05:23:08.431382 2026] [:error] [pid 51878:tid 51904] [client 20.199.113.127:52542] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeFTPEnQhUtMbw9EsgZYRQAAARg"]
[Fri Apr 17 05:23:09.216637 2026] [:error] [pid 51878:tid 51896] [client 20.199.113.127:48264] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeFTPUnQhUtMbw9EsgZYSwAAARA"]
[Fri Apr 17 05:23:10.072905 2026] [:error] [pid 9152:tid 9206] [client 20.199.113.127:22189] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeFTPpJYca8I3TNCwIcGCwAAAFA"]
[Fri Apr 17 05:23:10.644894 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:6657] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeFTPpJYca8I3TNCwIcGDAAAAFY"]
[Fri Apr 17 05:23:11.284306 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:6346] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeFTPxP68VyHNvj1e57rwgAAAMw"]
[Fri Apr 17 05:23:12.211199 2026] [:error] [pid 9153:tid 9219] [client 20.199.113.127:43762] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeFTQOMHGxkTZX3c45fznwAAAIE"]
[Fri Apr 17 05:23:12.959713 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:35779] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeFTQOMHGxkTZX3c45fzowAAAJQ"]
[Fri Apr 17 05:23:13.670735 2026] [:error] [pid 9153:tid 9222] [client 20.199.113.127:27680] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeFTQeMHGxkTZX3c45fzpgAAAIQ"]
[Fri Apr 17 05:23:14.410029 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:27656] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeFTQhP68VyHNvj1e57rywAAAMw"]
[Fri Apr 17 05:23:15.046249 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:48259] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeFTQxP68VyHNvj1e57r0AAAANE"]
[Fri Apr 17 05:23:15.756325 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:40845] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeFTQxP68VyHNvj1e57r2QAAANM"]
[Fri Apr 17 05:23:16.817794 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:6669] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeFTRMhTVuRPkua22vSTpAAAABI"]
[Fri Apr 17 05:23:18.173183 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:30280] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeFTRknQhUtMbw9EsgZYYAAAAQg"]
[Fri Apr 17 05:23:18.875724 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:52494] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFTRknQhUtMbw9EsgZYZQAAAQ0"]
[Fri Apr 17 05:23:19.601076 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:60117] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFTR0nQhUtMbw9EsgZYawAAAQo"]
[Fri Apr 17 05:23:20.572898 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:21831] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFTSEnQhUtMbw9EsgZYdQAAAQ0"]
[Fri Apr 17 05:23:21.318248 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:6389] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFTSUnQhUtMbw9EsgZYfwAAAQQ"]
[Fri Apr 17 05:23:21.956166 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:60133] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeFTSRP68VyHNvj1e57sAQAAAMM"]
[Fri Apr 17 05:23:22.665668 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:48314] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeFTShP68VyHNvj1e57sBAAAAMY"]
[Fri Apr 17 05:23:23.362089 2026] [:error] [pid 51878:tid 51896] [client 20.199.113.127:52528] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeFTS0nQhUtMbw9EsgZYkAAAARA"]
[Fri Apr 17 05:23:24.276770 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:52511] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeFTTEnQhUtMbw9EsgZYmAAAARE"]
[Fri Apr 17 05:23:25.384117 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:48308] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeFTTeMHGxkTZX3c45fzuwAAAIs"]
[Fri Apr 17 05:23:26.059451 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:30304] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeFTTshTVuRPkua22vSTvAAAAAo"]
[Fri Apr 17 05:23:26.673111 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:45294] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeFTTknQhUtMbw9EsgZYowAAAQQ"]
[Fri Apr 17 05:23:27.659357 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:53847] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeFTT0nQhUtMbw9EsgZYqgAAAQo"]
[Fri Apr 17 05:23:28.330157 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:6662] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeFTUOMHGxkTZX3c45fzwQAAAJQ"]
[Fri Apr 17 05:23:29.038222 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:19821] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeFTUchTVuRPkua22vSTzgAAAAY"]
[Fri Apr 17 05:23:29.629590 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:27691] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeFTUUnQhUtMbw9EsgZYrQAAAQM"]
[Fri Apr 17 05:23:30.492908 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:21856] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeFTUpJYca8I3TNCwIcGQQAAAE0"]
[Fri Apr 17 05:23:31.387765 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:53835] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeFTU0nQhUtMbw9EsgZYuQAAARI"]
[Fri Apr 17 05:23:32.039647 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:22175] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeFTVEnQhUtMbw9EsgZYvAAAAQU"]
[Fri Apr 17 05:23:32.674126 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:36942] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeFTVJJYca8I3TNCwIcGSgAAAFE"]
[Fri Apr 17 05:23:33.661327 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:21840] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeFTVZJYca8I3TNCwIcGUwAAAFU"]
[Fri Apr 17 05:23:37.009362 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:54195] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeFTWchTVuRPkua22vST3wAAABY"]
[Fri Apr 17 05:23:37.689974 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:21883] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeFTWUnQhUtMbw9EsgZYzQAAAQ0"]
[Fri Apr 17 05:23:38.332007 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:21878] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeFTWuMHGxkTZX3c45fz2AAAAJE"]
[Fri Apr 17 05:23:39.363262 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:30325] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeFTW0nQhUtMbw9EsgZY1AAAAQQ"]
[Fri Apr 17 05:23:40.198211 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:30303] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeFTXEnQhUtMbw9EsgZY2gAAARI"]
[Fri Apr 17 05:23:41.112772 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:21864] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeFTXRP68VyHNvj1e57sJgAAAME"]
[Fri Apr 17 05:23:41.860463 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:30309] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeFTXUnQhUtMbw9EsgZY3gAAAQY"]
[Fri Apr 17 05:23:42.819682 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:35830] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeFTXknQhUtMbw9EsgZY4QAAARE"]
[Fri Apr 17 05:23:43.969613 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:30334] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeFTX8hTVuRPkua22vST4wAAAAg"]
[Fri Apr 17 05:23:48.161282 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:48315] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeFTZEnQhUtMbw9EsgZY6gAAAQs"]
[Fri Apr 17 05:23:50.580348 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:30321] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeFTZshTVuRPkua22vST_gAAAAo"]
[Fri Apr 17 05:23:53.181626 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:53.420433 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:53.700884 2026] [proxy_fcgi:error] [pid 51878:tid 51880] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:53.956734 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:54.413948 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:54.671180 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:54.933857 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:55.247501 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:55.501640 2026] [proxy_fcgi:error] [pid 51878:tid 51880] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:55.744478 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:55.983144 2026] [proxy_fcgi:error] [pid 51878:tid 51892] [client 20.199.113.127:22188] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:23:56.237036 2026] [:error] [pid 51878:tid 51894] [client 20.199.113.127:22188] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeFTbEnQhUtMbw9EsgZZFwAAAQ4"]
[Fri Apr 17 05:23:56.901858 2026] [:error] [pid 51878:tid 51901] [client 20.199.113.127:53871] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeFTbEnQhUtMbw9EsgZZHAAAARU"]
[Fri Apr 17 05:23:57.903374 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:22195] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeFTbZJYca8I3TNCwIcGkgAAAEg"]
[Fri Apr 17 05:23:58.710585 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:30306] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeFTbshTVuRPkua22vSUAgAAABg"]
[Fri Apr 17 05:23:59.997558 2026] [:error] [pid 9151:tid 9172] [client 20.199.113.127:30329] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeFTb8hTVuRPkua22vSUBAAAAAs"]
[Fri Apr 17 05:24:00.678341 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:27651] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeFTcBP68VyHNvj1e57sPgAAAME"]
[Fri Apr 17 05:24:01.361165 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:6675] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeFTcUnQhUtMbw9EsgZZMQAAAQg"]
[Fri Apr 17 05:24:02.758504 2026] [:error] [pid 9152:tid 9204] [client 20.199.113.127:19787] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeFTcpJYca8I3TNCwIcGmAAAAE4"]
[Fri Apr 17 05:24:03.709087 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:48303] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeFTc0nQhUtMbw9EsgZZQAAAAQw"]
[Fri Apr 17 05:24:04.598839 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:30301] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeFTdJJYca8I3TNCwIcGnQAAAEQ"]
[Fri Apr 17 05:24:05.344912 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:6680] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeFTdeMHGxkTZX3c45fz_gAAAJY"]
[Fri Apr 17 05:24:06.012454 2026] [:error] [pid 9151:tid 9175] [client 20.199.113.127:30283] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeFTdshTVuRPkua22vSUBwAAAA4"]
[Fri Apr 17 05:24:06.895899 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:21868] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFTduMHGxkTZX3c45f0AAAAAII"]
[Fri Apr 17 05:24:08.129046 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:30327] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFTeJJYca8I3TNCwIcGqAAAAEc"]
[Fri Apr 17 05:24:09.309417 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:6379] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFTeRP68VyHNvj1e57sRQAAANM"]
[Fri Apr 17 05:24:10.075808 2026] [:error] [pid 9151:tid 9162] [client 20.199.113.127:27655] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFTeshTVuRPkua22vSUCQAAAAE"]
[Fri Apr 17 05:24:11.441958 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:22150] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeFTexP68VyHNvj1e57sTAAAANU"]
[Fri Apr 17 05:24:13.678034 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:22145] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeFTfchTVuRPkua22vSUFgAAAAc"]
[Fri Apr 17 05:24:15.362222 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:30286] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeFTf0nQhUtMbw9EsgZZSwAAARM"]
[Fri Apr 17 05:24:16.287383 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:30287] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeFTgMhTVuRPkua22vSUHQAAABQ"]
[Fri Apr 17 05:24:18.452145 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:27692] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeFTguMHGxkTZX3c45f0GAAAAJM"]
[Fri Apr 17 05:24:19.840373 2026] [:error] [pid 9151:tid 9175] [client 20.199.113.127:46296] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeFTg8hTVuRPkua22vSUIwAAAA4"]
[Fri Apr 17 05:24:20.767297 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:53860] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeFThEnQhUtMbw9EsgZZVgAAAQs"]
[Fri Apr 17 05:24:21.577374 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:6360] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeFThRP68VyHNvj1e57sXQAAAME"]
[Fri Apr 17 05:24:22.409393 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:22170] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeFThhP68VyHNvj1e57sYQAAAM0"]
[Fri Apr 17 05:24:24.112542 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:22156] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeFTiEnQhUtMbw9EsgZZXQAAAQU"]
[Fri Apr 17 05:24:24.816538 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:22203] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeFTiBP68VyHNvj1e57saQAAANI"]
[Fri Apr 17 05:24:25.599339 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:46279] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeFTiRP68VyHNvj1e57sbQAAAMs"]
[Fri Apr 17 05:24:26.312554 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:22144] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeFTihP68VyHNvj1e57scAAAAME"]
[Fri Apr 17 05:24:26.986314 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:48270] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeFTihP68VyHNvj1e57scwAAAMM"]
[Fri Apr 17 05:24:29.580048 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:27679] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeFTjRP68VyHNvj1e57sfAAAAM8"]
[Fri Apr 17 05:24:30.412775 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:35828] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeFTjuMHGxkTZX3c45f0KgAAAIM"]
[Fri Apr 17 05:24:31.153943 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:35824] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFTjxP68VyHNvj1e57sgQAAAM0"]
[Fri Apr 17 05:24:31.912169 2026] [:error] [pid 51878:tid 51904] [client 20.199.113.127:40853] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFTj0nQhUtMbw9EsgZZXgAAARg"]
[Fri Apr 17 05:24:32.647999 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:45283] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFTkBP68VyHNvj1e57shgAAAMg"]
[Fri Apr 17 05:24:33.536200 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:6390] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeFTkRP68VyHNvj1e57sigAAAMc"]
[Fri Apr 17 05:24:34.314287 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:35813] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeFTkhP68VyHNvj1e57sjgAAAMY"]
[Fri Apr 17 05:24:34.993331 2026] [:error] [pid 9152:tid 9210] [client 20.199.113.127:21829] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeFTkpJYca8I3TNCwIcGwQAAAFQ"]
[Fri Apr 17 05:24:36.062339 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:22192] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeFTlMhTVuRPkua22vSULgAAAAY"]
[Fri Apr 17 05:24:37.107139 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:53865] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeFTlZJYca8I3TNCwIcGxAAAAFU"]
[Fri Apr 17 05:24:37.733329 2026] [:error] [pid 9152:tid 9205] [client 20.199.113.127:22185] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFTlZJYca8I3TNCwIcGyQAAAE8"]
[Fri Apr 17 05:24:38.871381 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:60111] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFTlknQhUtMbw9EsgZZYgAAARE"]
[Fri Apr 17 05:24:40.021659 2026] [:error] [pid 51878:tid 51901] [client 20.199.113.127:35744] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFTmEnQhUtMbw9EsgZZZwAAARU"]
[Fri Apr 17 05:24:41.052909 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:36933] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFTmRP68VyHNvj1e57spwAAAMc"]
[Fri Apr 17 05:24:43.318326 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:6393] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aeFTm5JYca8I3TNCwIcGzwAAAEI"]
[Fri Apr 17 05:24:44.462405 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:6673] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aeFTnOMHGxkTZX3c45f0SgAAAJY"]
[Fri Apr 17 05:24:45.413897 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:46295] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aeFTnZJYca8I3TNCwIcG0wAAAEg"]
[Fri Apr 17 05:24:46.176866 2026] [:error] [pid 9152:tid 9205] [client 20.199.113.127:60134] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aeFTnpJYca8I3TNCwIcG2AAAAE8"]
[Fri Apr 17 05:24:47.134600 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:7101] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeFTn5JYca8I3TNCwIcG2wAAAFE"]
[Fri Apr 17 05:24:49.918009 2026] [:error] [pid 51878:tid 51894] [client 20.199.113.127:52502] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeFToUnQhUtMbw9EsgZZbAAAAQ4"]
[Fri Apr 17 05:24:51.898535 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:21838] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeFTo5JYca8I3TNCwIcG5wAAAFg"]
[Fri Apr 17 05:24:52.667285 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:30279] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeFTpBP68VyHNvj1e57stAAAAM4"]
[Fri Apr 17 05:24:53.428931 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:21861] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeFTpchTVuRPkua22vSUSwAAABQ"]
[Fri Apr 17 05:24:54.732777 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:48294] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeFTphP68VyHNvj1e57svQAAAMY"]
[Fri Apr 17 05:24:55.818066 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:56.059416 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:56.312564 2026] [proxy_fcgi:error] [pid 51878:tid 51880] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:56.551932 2026] [proxy_fcgi:error] [pid 51878:tid 51897] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:57.030396 2026] [proxy_fcgi:error] [pid 51878:tid 51901] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:57.270604 2026] [proxy_fcgi:error] [pid 51878:tid 51903] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:57.564042 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:57.803094 2026] [proxy_fcgi:error] [pid 51878:tid 51896] [client 20.199.113.127:35787] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:24:58.800367 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:35787] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTqknQhUtMbw9EsgZZiwAAAQU"]
[Fri Apr 17 05:25:00.831333 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:35726] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTrJJYca8I3TNCwIcG9QAAAEM"]
[Fri Apr 17 05:25:02.097227 2026] [:error] [pid 51878:tid 51900] [client 20.199.113.127:19831] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTrknQhUtMbw9EsgZZjAAAARQ"]
[Fri Apr 17 05:25:03.058938 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:7044] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTrxP68VyHNvj1e57syAAAAM0"]
[Fri Apr 17 05:25:04.168370 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:19797] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTsOMHGxkTZX3c45f0hgAAAIc"]
[Fri Apr 17 05:25:05.417268 2026] [:error] [pid 9151:tid 9166] [client 20.199.113.127:48300] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTschTVuRPkua22vSUawAAAAU"]
[Fri Apr 17 05:25:06.600736 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:35821] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTspJYca8I3TNCwIcHBQAAAFg"]
[Fri Apr 17 05:25:07.378851 2026] [:error] [pid 9151:tid 9164] [client 20.199.113.127:22197] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTs8hTVuRPkua22vSUcwAAAAM"]
[Fri Apr 17 05:25:08.024283 2026] [:error] [pid 9153:tid 9233] [client 20.199.113.127:7097] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeFTtOMHGxkTZX3c45f0kAAAAI8"]
[Fri Apr 17 05:25:08.643360 2026] [:error] [pid 9151:tid 9162] [client 20.199.113.127:6347] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeFTtMhTVuRPkua22vSUeAAAAAE"]
[Fri Apr 17 05:25:09.533065 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:7077] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeFTtUnQhUtMbw9EsgZZlwAAAQo"]
[Fri Apr 17 05:25:10.107673 2026] [:error] [pid 51878:tid 51895] [client 20.199.113.127:52522] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeFTtknQhUtMbw9EsgZZnAAAAQ8"]
[Fri Apr 17 05:25:10.749013 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:48291] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTtuMHGxkTZX3c45f0lAAAAIU"]
[Fri Apr 17 05:25:11.315221 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:6383] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTt0nQhUtMbw9EsgZZogAAAQs"]
[Fri Apr 17 05:25:12.164538 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:21863] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTuJJYca8I3TNCwIcHDwAAAFY"]
[Fri Apr 17 05:25:12.826654 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:52490] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeFTuJJYca8I3TNCwIcHEQAAAEU"]
[Fri Apr 17 05:25:14.848282 2026] [:error] [pid 9151:tid 9163] [client 20.199.113.127:21844] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeFTushTVuRPkua22vSUhgAAAAI"]
[Fri Apr 17 05:25:15.715916 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:22158] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeFTu0nQhUtMbw9EsgZZrAAAAQM"]
[Fri Apr 17 05:25:16.836259 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:21870] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeFTvOMHGxkTZX3c45f0nwAAAIs"]
[Fri Apr 17 05:25:17.452294 2026] [:error] [pid 51878:tid 51895] [client 20.199.113.127:52525] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeFTvUnQhUtMbw9EsgZZtgAAAQ8"]
[Fri Apr 17 05:25:18.169815 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:52481] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFTvknQhUtMbw9EsgZZuQAAAQY"]
[Fri Apr 17 05:25:19.634402 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:6396] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFTvxP68VyHNvj1e57s5wAAANg"]
[Fri Apr 17 05:25:21.413621 2026] [:error] [pid 9151:tid 9172] [client 20.199.113.127:6394] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFTwchTVuRPkua22vSUkAAAAAs"]
[Fri Apr 17 05:25:23.694559 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:30332] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeFTwxP68VyHNvj1e57s8gAAANg"]
[Fri Apr 17 05:25:26.258704 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:21884] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeFTxhP68VyHNvj1e57s_wAAANg"]
[Fri Apr 17 05:25:29.400700 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:7092] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeFTyUnQhUtMbw9EsgZZ2AAAARI"]
[Fri Apr 17 05:25:30.460301 2026] [:error] [pid 9152:tid 9210] [client 20.199.113.127:45295] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeFTypJYca8I3TNCwIcHNAAAAFQ"]
[Fri Apr 17 05:25:31.321905 2026] [:error] [pid 9152:tid 9204] [client 20.199.113.127:22202] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeFTy5JYca8I3TNCwIcHNwAAAE4"]
[Fri Apr 17 05:25:32.172270 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:35802] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeFTzEnQhUtMbw9EsgZZ2wAAAQ0"]
[Fri Apr 17 05:25:33.142579 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:21828] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeFTzchTVuRPkua22vSUlwAAABA"]
[Fri Apr 17 05:25:33.837212 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:46284] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeFTzUnQhUtMbw9EsgZZ4wAAAQg"]
[Fri Apr 17 05:25:34.471715 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:31803] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeFTzknQhUtMbw9EsgZZ6AAAAQw"]
[Fri Apr 17 05:25:35.781196 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:21827] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeFTz0nQhUtMbw9EsgZZ7AAAAQM"]
[Fri Apr 17 05:25:36.529792 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:6364] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeFT0EnQhUtMbw9EsgZZ7QAAAQQ"]
[Fri Apr 17 05:25:37.741108 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:35837] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeFT0UnQhUtMbw9EsgZZ9QAAAQ0"]
[Fri Apr 17 05:25:38.409960 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:22159] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeFT0hP68VyHNvj1e57tCwAAANM"]
[Fri Apr 17 05:25:39.065044 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:27676] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeFT0xP68VyHNvj1e57tDgAAAMs"]
[Fri Apr 17 05:25:40.123317 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:30302] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeFT1OMHGxkTZX3c45f00QAAAIU"]
[Fri Apr 17 05:25:41.069507 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:35829] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeFT1UnQhUtMbw9EsgZZ_wAAAQ0"]
[Fri Apr 17 05:25:41.973057 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:22165] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeFT1eMHGxkTZX3c45f01AAAAI0"]
[Fri Apr 17 05:25:42.849593 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:22183] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeFT1knQhUtMbw9EsgZaCQAAARI"]
[Fri Apr 17 05:25:43.572275 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:35788] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeFT15JYca8I3TNCwIcHTwAAAEM"]
[Fri Apr 17 05:25:44.607297 2026] [:error] [pid 9153:tid 9230] [client 20.199.113.127:45277] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeFT2OMHGxkTZX3c45f02QAAAIw"]
[Fri Apr 17 05:25:45.240283 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:53824] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeFT2eMHGxkTZX3c45f03AAAAJQ"]
[Fri Apr 17 05:25:45.845029 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:6393] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeFT2UnQhUtMbw9EsgZaFAAAAQQ"]
[Fri Apr 17 05:25:46.542374 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:48283] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeFT2knQhUtMbw9EsgZaFwAAARI"]
[Fri Apr 17 05:25:47.387109 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:52495] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeFT2-MHGxkTZX3c45f04QAAAIM"]
[Fri Apr 17 05:25:48.220830 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:45263] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeFT3EnQhUtMbw9EsgZaHQAAAQM"]
[Fri Apr 17 05:25:49.219157 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:48280] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeFT3RP68VyHNvj1e57tFAAAAMM"]
[Fri Apr 17 05:25:50.232304 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:60119] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeFT3hP68VyHNvj1e57tGAAAANU"]
[Fri Apr 17 05:25:50.923110 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:46324] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeFT3knQhUtMbw9EsgZaJgAAAQo"]
[Fri Apr 17 05:25:51.871811 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:30315] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeFT38hTVuRPkua22vSUnwAAABM"]
[Fri Apr 17 05:25:52.762759 2026] [:error] [pid 9152:tid 9202] [client 20.199.113.127:43729] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeFT4JJYca8I3TNCwIcHXwAAAEw"]
[Fri Apr 17 05:25:53.524580 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:45295] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeFT4eMHGxkTZX3c45f06wAAAIc"]
[Fri Apr 17 05:25:54.233375 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:31778] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeFT4shTVuRPkua22vSUpQAAABY"]
[Fri Apr 17 05:25:54.861086 2026] [:error] [pid 9151:tid 9182] [client 20.199.113.127:21858] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeFT4shTVuRPkua22vSUqQAAABU"]
[Fri Apr 17 05:25:58.725061 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:25:59.357385 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:25:59.629801 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:26:00.367332 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:26:02.284450 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:26:02.574772 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:26:02.849661 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:26:03.146803 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 20.199.113.127:48316] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:26:03.416453 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:48316] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeFT60nQhUtMbw9EsgZaZQAAARI"]
[Fri Apr 17 05:26:04.075940 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:60144] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeFT7MhTVuRPkua22vSUsgAAAAY"]
[Fri Apr 17 05:26:04.771288 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:53870] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeFT7BP68VyHNvj1e57tIgAAAMY"]
[Fri Apr 17 05:26:05.400555 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:21847] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeFT7RP68VyHNvj1e57tJAAAANM"]
[Fri Apr 17 05:26:06.026539 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:35839] [client 20.199.113.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeFT7knQhUtMbw9EsgZacgAAAQw"]
[Fri Apr 17 05:26:07.030345 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:60101] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeFT7xP68VyHNvj1e57tKQAAAM4"]
[Fri Apr 17 05:26:07.604173 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:35796] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeFT78hTVuRPkua22vSUuAAAABg"]
[Fri Apr 17 05:26:08.524791 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:60127] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeFT8MhTVuRPkua22vSUuwAAAA0"]
[Fri Apr 17 05:26:09.152089 2026] [:error] [pid 9151:tid 9170] [client 20.199.113.127:35798] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeFT8chTVuRPkua22vSUvwAAAAk"]
[Fri Apr 17 05:26:09.708348 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:48284] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeFT8RP68VyHNvj1e57tLQAAAMg"]
[Fri Apr 17 05:26:10.344490 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:36972] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeFT8hP68VyHNvj1e57tLwAAAMw"]
[Fri Apr 17 05:26:11.217035 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:7064] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeFT80nQhUtMbw9EsgZagwAAARI"]
[Fri Apr 17 05:26:12.331867 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:30326] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeFT9BP68VyHNvj1e57tOAAAAMA"]
[Fri Apr 17 05:26:12.941573 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:6340] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFT9EnQhUtMbw9EsgZaiwAAAQo"]
[Fri Apr 17 05:26:13.598698 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:45303] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFT9UnQhUtMbw9EsgZajwAAARI"]
[Fri Apr 17 05:26:14.399221 2026] [:error] [pid 51878:tid 51903] [client 20.199.113.127:30320] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFT9knQhUtMbw9EsgZalgAAARc"]
[Fri Apr 17 05:26:15.100528 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:27686] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFT98hTVuRPkua22vSUygAAABE"]
[Fri Apr 17 05:26:16.131592 2026] [:error] [pid 9152:tid 9196] [client 20.199.113.127:7062] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFT-JJYca8I3TNCwIcHfwAAAEY"]
[Fri Apr 17 05:26:17.241991 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:43772] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFT-UnQhUtMbw9EsgZanQAAAQA"]
[Fri Apr 17 05:26:18.617143 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:6711] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFT-knQhUtMbw9EsgZapQAAARY"]
[Fri Apr 17 05:26:19.710345 2026] [:error] [pid 9153:tid 9232] [client 20.199.113.127:53879] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFT--MHGxkTZX3c45f1EgAAAI4"]
[Fri Apr 17 05:26:21.009081 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:22193] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeFT_RP68VyHNvj1e57tTQAAAMs"]
[Fri Apr 17 05:26:21.993725 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:35799] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeFT_chTVuRPkua22vSU0QAAAA8"]
[Fri Apr 17 05:26:23.851075 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:48278] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeFT_xP68VyHNvj1e57tYQAAAM8"]
[Fri Apr 17 05:26:26.127156 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:52484] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeFUAshTVuRPkua22vSU2wAAAAY"]
[Fri Apr 17 05:26:29.387001 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:48279] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeFUBeMHGxkTZX3c45f1JAAAAJE"]
[Fri Apr 17 05:26:30.438781 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:7072] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeFUBshTVuRPkua22vSU5gAAAAo"]
[Fri Apr 17 05:26:31.161590 2026] [:error] [pid 9153:tid 9228] [client 20.199.113.127:40859] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeFUB-MHGxkTZX3c45f1JQAAAIo"]
[Fri Apr 17 05:26:32.000942 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:22200] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeFUB0nQhUtMbw9EsgZasgAAAQE"]
[Fri Apr 17 05:26:32.770728 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:31789] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeFUCBP68VyHNvj1e57tcwAAAM8"]
[Fri Apr 17 05:26:33.735464 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:53826] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeFUCRP68VyHNvj1e57tegAAAMo"]
[Fri Apr 17 05:26:34.658642 2026] [:error] [pid 9152:tid 9196] [client 20.199.113.127:54192] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeFUCpJYca8I3TNCwIcHkAAAAEY"]
[Fri Apr 17 05:26:35.743802 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:21849] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeFUC5JYca8I3TNCwIcHlQAAAEM"]
[Fri Apr 17 05:26:36.703086 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:60099] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeFUDEnQhUtMbw9EsgZauAAAARY"]
[Fri Apr 17 05:26:37.331905 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:46319] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeFUDeMHGxkTZX3c45f1KQAAAI0"]
[Fri Apr 17 05:26:38.049446 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:31755] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeFUDknQhUtMbw9EsgZauwAAARM"]
[Fri Apr 17 05:26:38.588065 2026] [:error] [pid 9153:tid 9230] [client 20.199.113.127:27649] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeFUDuMHGxkTZX3c45f1LQAAAIw"]
[Fri Apr 17 05:26:39.266444 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:48317] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeFUD5JYca8I3TNCwIcHmQAAAFE"]
[Fri Apr 17 05:26:39.874207 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:27699] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeFUD0nQhUtMbw9EsgZavgAAAQM"]
[Fri Apr 17 05:26:40.725770 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:31771] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeFUEBP68VyHNvj1e57tgwAAANE"]
[Fri Apr 17 05:26:41.796000 2026] [:error] [pid 9152:tid 9196] [client 20.199.113.127:7066] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeFUEZJYca8I3TNCwIcHnAAAAEY"]
[Fri Apr 17 05:26:42.539855 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:6349] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeFUEknQhUtMbw9EsgZayAAAARY"]
[Fri Apr 17 05:26:43.284722 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:31795] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeFUE0nQhUtMbw9EsgZaywAAAQc"]
[Fri Apr 17 05:26:44.078107 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:48272] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeFUFOMHGxkTZX3c45f1NAAAAJc"]
[Fri Apr 17 05:26:45.657150 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:30290] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeFUFeMHGxkTZX3c45f1OQAAAJE"]
[Fri Apr 17 05:26:46.770041 2026] [:error] [pid 9152:tid 9200] [client 20.199.113.127:28583] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeFUFpJYca8I3TNCwIcHngAAAEo"]
[Fri Apr 17 05:26:47.836061 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:35760] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeFUF8hTVuRPkua22vSVCwAAABc"]
[Fri Apr 17 05:26:48.754456 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:53828] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeFUGEnQhUtMbw9EsgZa2QAAAQU"]
[Fri Apr 17 05:26:49.487393 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:52507] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeFUGeMHGxkTZX3c45f1PwAAAIs"]
[Fri Apr 17 05:26:50.351665 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:22163] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeFUGuMHGxkTZX3c45f1RwAAAJE"]
[Fri Apr 17 05:26:51.709815 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:6357] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeFUG0nQhUtMbw9EsgZa6AAAARY"]
[Fri Apr 17 05:26:53.096324 2026] [:error] [pid 9152:tid 9205] [client 20.199.113.127:53861] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeFUHZJYca8I3TNCwIcHoAAAAE8"]
[Fri Apr 17 05:26:54.044769 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:31757] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeFUHknQhUtMbw9EsgZa8gAAAQw"]
[Fri Apr 17 05:26:54.731040 2026] [:error] [pid 51878:tid 51900] [client 20.199.113.127:21845] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeFUHknQhUtMbw9EsgZa9gAAARQ"]
[Fri Apr 17 05:26:55.733898 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:22207] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeFUH-MHGxkTZX3c45f1UQAAAIY"]
[Fri Apr 17 05:26:56.857546 2026] [:error] [pid 9153:tid 9242] [client 20.199.113.127:60148] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeFUIOMHGxkTZX3c45f1UwAAAJg"]
[Fri Apr 17 05:26:57.619204 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:22146] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeFUIRP68VyHNvj1e57tlAAAAMs"]
[Fri Apr 17 05:26:58.532704 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:7079] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeFUIpJYca8I3TNCwIcHpAAAAFE"]
[Fri Apr 17 05:26:59.361247 2026] [:error] [pid 9153:tid 9228] [client 20.199.113.127:60140] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeFUI-MHGxkTZX3c45f1VAAAAIo"]
[Fri Apr 17 05:27:00.235285 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:60110] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeFUJJJYca8I3TNCwIcHqAAAAFU"]
[Fri Apr 17 05:27:01.302897 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:6388] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeFUJRP68VyHNvj1e57tpwAAANg"]
[Fri Apr 17 05:27:02.055579 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:27683] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeFUJknQhUtMbw9EsgZbCwAAAQU"]
[Fri Apr 17 05:27:02.865067 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:19806] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeFUJknQhUtMbw9EsgZbDgAAARI"]
[Fri Apr 17 05:27:03.760487 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:04.009944 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:04.260824 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:04.499437 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:04.739077 2026] [proxy_fcgi:error] [pid 9263:tid 9274] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:05.364272 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:05.709615 2026] [proxy_fcgi:error] [pid 9263:tid 9286] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:05.949610 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:06.189133 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:06.428868 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.199.113.127:48261] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:27:06.679945 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:48261] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "aeFUKhP68VyHNvj1e57t4QAAANE"]
[Fri Apr 17 05:27:07.420348 2026] [:error] [pid 9151:tid 9182] [client 20.199.113.127:6381] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "aeFUK8hTVuRPkua22vSVHAAAABU"]
[Fri Apr 17 05:27:08.262963 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:19777] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "aeFULMhTVuRPkua22vSVIQAAABA"]
[Fri Apr 17 05:27:08.875097 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:36962] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vee.php"] [unique_id "aeFULEnQhUtMbw9EsgZbKAAAAQw"]
[Fri Apr 17 05:27:09.627974 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:54167] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aeFULUnQhUtMbw9EsgZbLgAAARI"]
[Fri Apr 17 05:27:10.377838 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:31746] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aeFULhP68VyHNvj1e57t7AAAANU"]
[Fri Apr 17 05:27:11.402567 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:7067] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aeFUL8hTVuRPkua22vSVLQAAABg"]
[Fri Apr 17 05:27:12.150633 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:27660] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aeFUMBP68VyHNvj1e57t9QAAAMw"]
[Fri Apr 17 05:27:12.847617 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:27695] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFUMOMHGxkTZX3c45f1WgAAAIs"]
[Fri Apr 17 05:27:13.539249 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:6353] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFUMchTVuRPkua22vSVNAAAAAg"]
[Fri Apr 17 05:27:14.299369 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:43774] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFUMshTVuRPkua22vSVOAAAABI"]
[Fri Apr 17 05:27:15.218489 2026] [:error] [pid 9151:tid 9175] [client 20.199.113.127:53858] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFUM8hTVuRPkua22vSVOwAAAA4"]
[Fri Apr 17 05:27:15.866395 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:22191] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeFUMxP68VyHNvj1e57uBwAAANA"]
[Fri Apr 17 05:27:16.498159 2026] [:error] [pid 9153:tid 9218] [client 20.199.113.127:53876] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeFUNOMHGxkTZX3c45f1YAAAAIA"]
[Fri Apr 17 05:27:17.033878 2026] [:error] [pid 9153:tid 9219] [client 20.199.113.127:52493] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeFUNeMHGxkTZX3c45f1ZAAAAIE"]
[Fri Apr 17 05:27:17.742952 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:7081] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeFUNUnQhUtMbw9EsgZbUgAAARE"]
[Fri Apr 17 05:27:18.335688 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:40871] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeFUNknQhUtMbw9EsgZbVQAAAQw"]
[Fri Apr 17 05:27:19.016456 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:53832] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeFUN0nQhUtMbw9EsgZbXQAAAQY"]
[Fri Apr 17 05:27:19.641124 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:46277] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeFUN5JYca8I3TNCwIcHyAAAAFY"]
[Fri Apr 17 05:27:20.697139 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:21839] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeFUOBP68VyHNvj1e57uLQAAAMk"]
[Fri Apr 17 05:27:21.437715 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:35812] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeFUORP68VyHNvj1e57uMAAAANQ"]
[Fri Apr 17 05:27:22.547323 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:53849] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeFUOshTVuRPkua22vSVWwAAABM"]
[Fri Apr 17 05:27:23.331364 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:60124] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeFUOxP68VyHNvj1e57uOgAAAMg"]
[Fri Apr 17 05:27:24.324354 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:27666] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeFUPBP68VyHNvj1e57uRAAAANc"]
[Fri Apr 17 06:43:29.254504 2026] [proxy_fcgi:error] [pid 9151:tid 9172] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:29.586260 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:29.858361 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:30.129430 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:30.499346 2026] [proxy_fcgi:error] [pid 9151:tid 9170] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:30.770187 2026] [proxy_fcgi:error] [pid 9151:tid 9185] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:31.042473 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:31.365353 2026] [proxy_fcgi:error] [pid 9151:tid 9165] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:31.636833 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:31.918909 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 20.166.7.149:3793] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:43:32.488634 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:3793] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFmFMhTVuRPkua22vS4ZwAAAAM"]
[Fri Apr 17 06:43:33.352531 2026] [:error] [pid 9151:tid 9177] [client 20.166.7.149:16713] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFmFchTVuRPkua22vS4bgAAABA"]
[Fri Apr 17 06:43:34.212185 2026] [:error] [pid 9151:tid 9162] [client 20.166.7.149:28247] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFmFshTVuRPkua22vS4cAAAAAE"]
[Fri Apr 17 06:43:35.149006 2026] [:error] [pid 9263:tid 9265] [client 20.166.7.149:20293] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFmFxP68VyHNvj1e54rHgAAAMA"]
[Fri Apr 17 06:43:36.056974 2026] [:error] [pid 51878:tid 51888] [client 20.166.7.149:22650] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeFmGEnQhUtMbw9EsgawEAAAAQg"]
[Fri Apr 17 06:43:36.834019 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:3839] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeFmGJJYca8I3TNCwIcwVgAAAEg"]
[Fri Apr 17 06:43:37.527590 2026] [:error] [pid 9151:tid 9175] [client 20.166.7.149:16742] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeFmGchTVuRPkua22vS4dwAAAA4"]
[Fri Apr 17 06:43:38.494673 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:40058] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cdn3.php"] [unique_id "aeFmGhP68VyHNvj1e54rOwAAAMw"]
[Fri Apr 17 06:43:39.044093 2026] [:error] [pid 51878:tid 51892] [client 20.166.7.149:40022] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFmG0nQhUtMbw9EsgawGwAAAQw"]
[Fri Apr 17 06:43:39.725292 2026] [:error] [pid 51878:tid 51897] [client 20.166.7.149:24939] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFmG0nQhUtMbw9EsgawHQAAARE"]
[Fri Apr 17 06:43:40.394157 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:20317] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFmHBP68VyHNvj1e54rRQAAAMQ"]
[Fri Apr 17 06:43:41.276352 2026] [:error] [pid 9152:tid 9203] [client 20.166.7.149:22618] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFmHZJYca8I3TNCwIcwZgAAAE0"]
[Fri Apr 17 06:43:41.974344 2026] [:error] [pid 51878:tid 51881] [client 20.166.7.149:20317] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeFmHUnQhUtMbw9EsgawNQAAAQE"]
[Fri Apr 17 06:43:42.755623 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:21600] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeFmHuMHGxkTZX3c45cvOwAAAII"]
[Fri Apr 17 06:43:43.678776 2026] [:error] [pid 9152:tid 9192] [client 20.166.7.149:20330] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeFmH5JYca8I3TNCwIcwbQAAAEI"]
[Fri Apr 17 06:43:44.709251 2026] [:error] [pid 9263:tid 9280] [client 20.166.7.149:19756] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/beerd.php"] [unique_id "aeFmIBP68VyHNvj1e54rSAAAAM8"]
[Fri Apr 17 06:43:45.570681 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:24924] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeFmIRP68VyHNvj1e54rTgAAANE"]
[Fri Apr 17 06:43:46.846736 2026] [:error] [pid 9151:tid 9172] [client 20.166.7.149:3538] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeFmIshTVuRPkua22vS4kgAAAAs"]
[Fri Apr 17 06:43:48.471682 2026] [:error] [pid 51878:tid 51894] [client 20.166.7.149:3896] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeFmJEnQhUtMbw9EsgawfQAAAQ4"]
[Fri Apr 17 06:43:49.310197 2026] [:error] [pid 51878:tid 51902] [client 20.166.7.149:3604] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hhxc.php"] [unique_id "aeFmJUnQhUtMbw9EsgawhwAAARY"]
[Fri Apr 17 06:43:52.464140 2026] [:error] [pid 51878:tid 51889] [client 20.166.7.149:24479] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFmKEnQhUtMbw9EsgawsAAAAQk"]
[Fri Apr 17 06:43:54.062113 2026] [:error] [pid 9152:tid 9193] [client 20.166.7.149:20344] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFmKpJYca8I3TNCwIcwkAAAAEM"]
[Fri Apr 17 06:44:09.973680 2026] [:error] [pid 9151:tid 9176] [client 20.166.7.149:42332] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFmOchTVuRPkua22vS45gAAAA8"]
[Fri Apr 17 06:44:14.843457 2026] [:error] [pid 9152:tid 9213] [client 20.166.7.149:47627] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFmPpJYca8I3TNCwIcxBQAAAFc"]
[Fri Apr 17 06:44:17.322794 2026] [:error] [pid 9152:tid 9202] [client 20.166.7.149:27009] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFmQZJYca8I3TNCwIcxCgAAAEw"]
[Fri Apr 17 06:44:18.149783 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:47584] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeFmQshTVuRPkua22vS48AAAAAY"]
[Fri Apr 17 06:44:18.937855 2026] [:error] [pid 51878:tid 51897] [client 20.166.7.149:54851] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFmQknQhUtMbw9EsgaxIwAAARE"]
[Fri Apr 17 06:44:20.713557 2026] [:error] [pid 9152:tid 9199] [client 20.166.7.149:20833] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFmRJJYca8I3TNCwIcxFwAAAEk"]
[Fri Apr 17 06:44:22.303391 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:20862] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFmRuMHGxkTZX3c45cvvwAAAIU"]
[Fri Apr 17 06:44:23.174615 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:36116] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFmRxP68VyHNvj1e54sJAAAAME"]
[Fri Apr 17 06:44:23.836424 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:29028] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeFmRxP68VyHNvj1e54sLgAAANE"]
[Fri Apr 17 06:44:24.529244 2026] [:error] [pid 9151:tid 9163] [client 20.166.7.149:20819] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeFmSMhTVuRPkua22vS4-wAAAAI"]
[Fri Apr 17 06:44:25.625651 2026] [:error] [pid 9152:tid 9195] [client 20.166.7.149:52278] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeFmSZJYca8I3TNCwIcxJQAAAEU"]
[Fri Apr 17 06:44:26.861119 2026] [:error] [pid 9153:tid 9227] [client 20.166.7.149:24534] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/RIP.php"] [unique_id "aeFmSuMHGxkTZX3c45cv4gAAAIk"]
[Fri Apr 17 06:44:27.740039 2026] [:error] [pid 51878:tid 51887] [client 20.166.7.149:26469] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeFmS0nQhUtMbw9EsgaxRQAAAQc"]
[Fri Apr 17 06:44:29.008457 2026] [:error] [pid 51878:tid 51881] [client 20.166.7.149:54709] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeFmTUnQhUtMbw9EsgaxSgAAAQE"]
[Fri Apr 17 06:44:30.751411 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:52210] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeFmTuMHGxkTZX3c45cwAwAAAII"]
[Fri Apr 17 06:44:32.251018 2026] [proxy_fcgi:error] [pid 51878:tid 51880] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:32.545508 2026] [proxy_fcgi:error] [pid 51878:tid 51892] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:33.304725 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:33.576199 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:33.848146 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:34.133715 2026] [proxy_fcgi:error] [pid 51878:tid 51892] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:34.406364 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:34.678657 2026] [proxy_fcgi:error] [pid 51878:tid 51902] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:34.951389 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:35.222082 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:35.499533 2026] [proxy_fcgi:error] [pid 51878:tid 51901] [client 20.166.7.149:28779] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:44:35.771120 2026] [:error] [pid 51878:tid 51899] [client 20.166.7.149:28779] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFmU0nQhUtMbw9EsgaxhAAAARM"]
[Fri Apr 17 06:44:38.037442 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:14111] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFmVuMHGxkTZX3c45cwQQAAAIE"]
[Fri Apr 17 06:44:40.814549 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:41452] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFmWBP68VyHNvj1e54sYAAAAMQ"]
[Fri Apr 17 06:44:42.678488 2026] [:error] [pid 9263:tid 9278] [client 20.166.7.149:19981] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFmWhP68VyHNvj1e54sagAAAM0"]
[Fri Apr 17 06:44:45.700899 2026] [:error] [pid 9151:tid 9166] [client 20.166.7.149:14945] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeFmXchTVuRPkua22vS5QgAAAAU"]
[Fri Apr 17 06:44:47.441343 2026] [:error] [pid 51878:tid 51886] [client 20.166.7.149:41432] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeFmX0nQhUtMbw9EsgaxrAAAAQY"]
[Fri Apr 17 06:44:48.484129 2026] [:error] [pid 9153:tid 9232] [client 20.166.7.149:24011] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeFmYOMHGxkTZX3c45cwcAAAAI4"]
[Fri Apr 17 06:44:49.975533 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:15113] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aeFmYchTVuRPkua22vS5UQAAAAM"]
[Fri Apr 17 06:44:51.847475 2026] [:error] [pid 9153:tid 9235] [client 20.166.7.149:16938] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeFmY-MHGxkTZX3c45cwiwAAAJE"]
[Fri Apr 17 06:44:53.806083 2026] [:error] [pid 9153:tid 9241] [client 20.166.7.149:29288] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeFmZeMHGxkTZX3c45cwtAAAAJc"]
[Fri Apr 17 06:44:56.059665 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:54434] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeFmaBP68VyHNvj1e54sqgAAANQ"]
[Fri Apr 17 06:44:58.832653 2026] [:error] [pid 51878:tid 51896] [client 20.166.7.149:24061] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aeFmaknQhUtMbw9Esgax3wAAARA"]
[Fri Apr 17 06:45:01.975046 2026] [:error] [pid 51878:tid 51880] [client 20.166.7.149:14658] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeFmbUnQhUtMbw9Esgax6gAAAQA"]
[Fri Apr 17 06:45:03.968532 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:28779] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeFmb8hTVuRPkua22vS5ZwAAABI"]
[Fri Apr 17 06:45:04.942112 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:18280] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeFmcOMHGxkTZX3c45cxOQAAAII"]
[Fri Apr 17 06:45:07.843835 2026] [:error] [pid 51878:tid 51893] [client 20.166.7.149:13063] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wxeyc.php"] [unique_id "aeFmc0nQhUtMbw9Esgax9AAAAQ0"]
[Fri Apr 17 06:45:11.270560 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:13093] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeFmdxP68VyHNvj1e54s5wAAANE"]
[Fri Apr 17 06:45:13.933446 2026] [:error] [pid 51878:tid 51884] [client 20.166.7.149:13091] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeFmeUnQhUtMbw9EsgayEgAAAQQ"]
[Fri Apr 17 06:45:15.859898 2026] [:error] [pid 51878:tid 51903] [client 20.166.7.149:22940] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeFme0nQhUtMbw9EsgayGAAAARc"]
[Fri Apr 17 06:45:19.027152 2026] [:error] [pid 9153:tid 9232] [client 20.166.7.149:22323] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeFmf-MHGxkTZX3c45cx8gAAAI4"]
[Fri Apr 17 06:45:22.542675 2026] [:error] [pid 9151:tid 9170] [client 20.166.7.149:53553] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFmgshTVuRPkua22vS5fgAAAAk"]
[Fri Apr 17 06:45:25.562768 2026] [:error] [pid 9151:tid 9168] [client 20.166.7.149:22288] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFmhchTVuRPkua22vS5kwAAAAc"]
[Fri Apr 17 06:45:26.715497 2026] [:error] [pid 9153:tid 9225] [client 20.166.7.149:27570] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFmhuMHGxkTZX3c45cyLAAAAIc"]
[Fri Apr 17 06:45:28.488658 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:54597] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeFmiBP68VyHNvj1e54tKQAAAMc"]
[Fri Apr 17 06:45:29.399092 2026] [:error] [pid 9263:tid 9275] [client 20.166.7.149:3408] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeFmiRP68VyHNvj1e54tMgAAAMo"]
[Fri Apr 17 06:45:30.566745 2026] [:error] [pid 51878:tid 51889] [client 20.166.7.149:14120] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeFmiknQhUtMbw9EsgayTQAAAQk"]
[Fri Apr 17 06:45:32.093933 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:14613] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeFmjJJYca8I3TNCwIcx6AAAAEg"]
[Fri Apr 17 06:45:33.026699 2026] [:error] [pid 51878:tid 51889] [client 20.166.7.149:15126] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fyflv.php"] [unique_id "aeFmjUnQhUtMbw9EsgayYgAAAQk"]
[Fri Apr 17 06:45:33.917208 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:22282] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zc-942.php"] [unique_id "aeFmjeMHGxkTZX3c45cycwAAAJY"]
[Fri Apr 17 06:45:35.745007 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:36.305306 2026] [proxy_fcgi:error] [pid 9263:tid 9267] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:36.876490 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:37.158908 2026] [proxy_fcgi:error] [pid 9263:tid 9271] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:37.435389 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:37.688764 2026] [proxy_fcgi:error] [pid 9263:tid 9279] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:37.943142 2026] [proxy_fcgi:error] [pid 9263:tid 9268] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:38.196796 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:38.453769 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:39.970229 2026] [proxy_fcgi:error] [pid 9263:tid 9275] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:40.222725 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.166.7.149:13064] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:45:40.499109 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:13064] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFmlBP68VyHNvj1e54tewAAAMc"]
[Fri Apr 17 06:45:42.241625 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:14926] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFmlpJYca8I3TNCwIcyOQAAAEQ"]
[Fri Apr 17 06:45:43.916794 2026] [:error] [pid 9153:tid 9231] [client 20.166.7.149:3923] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFml-MHGxkTZX3c45cyxQAAAI0"]
[Fri Apr 17 06:45:47.443057 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:18798] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFmmxP68VyHNvj1e54tpwAAAMQ"]
[Fri Apr 17 06:45:49.289911 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:3689] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iindv.php"] [unique_id "aeFmneMHGxkTZX3c45cy7AAAAIo"]
[Fri Apr 17 06:45:51.111885 2026] [:error] [pid 9153:tid 9218] [client 20.166.7.149:41026] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iindv.php"] [unique_id "aeFmn-MHGxkTZX3c45czBAAAAIA"]
[Fri Apr 17 06:45:54.579734 2026] [:error] [pid 9151:tid 9168] [client 20.166.7.149:41066] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iindv.php"] [unique_id "aeFmoshTVuRPkua22vS5vwAAAAc"]
[Fri Apr 17 06:45:58.194323 2026] [:error] [pid 9151:tid 9174] [client 20.166.7.149:54703] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iindv.php"] [unique_id "aeFmpshTVuRPkua22vS5ygAAAA0"]
[Fri Apr 17 06:45:59.392764 2026] [:error] [pid 51878:tid 51900] [client 20.166.7.149:3939] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/maintura.php"] [unique_id "aeFmp0nQhUtMbw9EsgayxwAAARQ"]
[Fri Apr 17 06:46:01.263557 2026] [:error] [pid 9263:tid 9274] [client 20.166.7.149:53699] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/maintura.php"] [unique_id "aeFmqRP68VyHNvj1e54t4wAAAMk"]
[Fri Apr 17 06:46:02.441084 2026] [:error] [pid 9152:tid 9214] [client 20.166.7.149:41410] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/maintura.php"] [unique_id "aeFmqpJYca8I3TNCwIcycwAAAFg"]
[Fri Apr 17 06:46:03.045708 2026] [:error] [pid 9153:tid 9218] [client 20.166.7.149:28697] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/maintura.php"] [unique_id "aeFmq-MHGxkTZX3c45czYQAAAIA"]
[Fri Apr 17 06:46:03.864362 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:17199] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFmqxP68VyHNvj1e54t8QAAAMI"]
[Fri Apr 17 06:46:04.784844 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:28899] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFmrBP68VyHNvj1e54t-wAAAMw"]
[Fri Apr 17 06:46:05.730517 2026] [:error] [pid 9151:tid 9170] [client 20.166.7.149:41470] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFmrchTVuRPkua22vS52QAAAAk"]
[Fri Apr 17 06:46:07.223295 2026] [:error] [pid 51878:tid 51881] [client 20.166.7.149:17468] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFmr0nQhUtMbw9Esgay-QAAAQE"]
[Fri Apr 17 06:46:09.225476 2026] [:error] [pid 9153:tid 9235] [client 20.166.7.149:28690] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFmseMHGxkTZX3c45cziAAAAJE"]
[Fri Apr 17 06:46:19.468251 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:41425] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFmuxP68VyHNvj1e54uNQAAANA"]
[Fri Apr 17 06:46:20.136182 2026] [:error] [pid 51878:tid 51889] [client 20.166.7.149:19556] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFmvEnQhUtMbw9EsgazMwAAAQk"]
[Fri Apr 17 06:46:24.567374 2026] [:error] [pid 51878:tid 51896] [client 20.166.7.149:28754] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeFmwEnQhUtMbw9EsgazRAAAARA"]
[Fri Apr 17 06:46:28.114296 2026] [:error] [pid 51878:tid 51903] [client 20.166.7.149:52236] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeFmxEnQhUtMbw9EsgazVAAAARc"]
[Fri Apr 17 06:46:30.556341 2026] [:error] [pid 9153:tid 9242] [client 20.166.7.149:54684] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeFmxuMHGxkTZX3c45c0DgAAAJg"]
[Fri Apr 17 06:46:33.434734 2026] [:error] [pid 9151:tid 9181] [client 20.166.7.149:17415] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zc-220.php"] [unique_id "aeFmychTVuRPkua22vS6CQAAABQ"]
[Fri Apr 17 06:46:35.872761 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:28721] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFmyxP68VyHNvj1e54uawAAAMU"]
[Fri Apr 17 06:46:38.382948 2026] [:error] [pid 9152:tid 9209] [client 20.166.7.149:26441] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFmzpJYca8I3TNCwIczHgAAAFM"]
[Fri Apr 17 06:46:39.500738 2026] [:error] [pid 9153:tid 9242] [client 20.166.7.149:3734] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFmz-MHGxkTZX3c45c0RwAAAJg"]
[Fri Apr 17 06:46:41.355919 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:41.610744 2026] [proxy_fcgi:error] [pid 9152:tid 9199] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:41.864664 2026] [proxy_fcgi:error] [pid 9152:tid 9208] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:42.123006 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:42.386080 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:42.658639 2026] [proxy_fcgi:error] [pid 9152:tid 9195] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:42.918496 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:43.413574 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:43.676295 2026] [proxy_fcgi:error] [pid 9152:tid 9191] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:44.198127 2026] [proxy_fcgi:error] [pid 9152:tid 9197] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:44.474925 2026] [proxy_fcgi:error] [pid 9152:tid 9198] [client 20.166.7.149:28692] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:46:44.725595 2026] [:error] [pid 9152:tid 9203] [client 20.166.7.149:28692] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeFm1JJYca8I3TNCwIczQAAAAE0"]
[Fri Apr 17 06:46:45.791143 2026] [:error] [pid 51878:tid 51890] [client 20.166.7.149:24924] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeFm1UnQhUtMbw9EsgazsQAAAQo"]
[Fri Apr 17 06:46:47.504251 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:22385] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeFm15JYca8I3TNCwIczSwAAAEg"]
[Fri Apr 17 06:46:49.823922 2026] [:error] [pid 51878:tid 51887] [client 20.166.7.149:28709] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeFm2UnQhUtMbw9EsgazwAAAAQc"]
[Fri Apr 17 06:46:50.951955 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:22380] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeFm2hP68VyHNvj1e54uxQAAANE"]
[Fri Apr 17 06:46:51.779830 2026] [:error] [pid 51878:tid 51890] [client 20.166.7.149:17203] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeFm20nQhUtMbw9Esgaz2wAAAQo"]
[Fri Apr 17 06:46:52.835388 2026] [:error] [pid 9151:tid 9180] [client 20.166.7.149:3745] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeFm3MhTVuRPkua22vS6VwAAABM"]
[Fri Apr 17 06:46:53.740076 2026] [:error] [pid 9153:tid 9225] [client 20.166.7.149:22535] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeFm3eMHGxkTZX3c45c0yAAAAIc"]
[Fri Apr 17 06:46:54.427378 2026] [:error] [pid 51878:tid 51904] [client 20.166.7.149:29337] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFm3knQhUtMbw9Esgaz-AAAARg"]
[Fri Apr 17 06:46:55.227521 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:26851] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFm3-MHGxkTZX3c45c04gAAAIU"]
[Fri Apr 17 06:46:56.009726 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:22560] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFm4OMHGxkTZX3c45c09QAAAIE"]
[Fri Apr 17 06:46:56.734314 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:18792] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeFm4BP68VyHNvj1e54u1gAAAMc"]
[Fri Apr 17 06:46:57.674429 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:22540] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeFm4eMHGxkTZX3c45c1CwAAAIo"]
[Fri Apr 17 06:46:58.268693 2026] [:error] [pid 51878:tid 51884] [client 20.166.7.149:18797] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeFm4knQhUtMbw9Esga0HgAAAQQ"]
[Fri Apr 17 06:46:59.244447 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:45526] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeFm4xP68VyHNvj1e54u4QAAANA"]
[Fri Apr 17 06:47:00.066667 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:18779] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeFm5BP68VyHNvj1e54u8AAAANA"]
[Fri Apr 17 06:47:00.672480 2026] [:error] [pid 51878:tid 51886] [client 20.166.7.149:22568] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFm5EnQhUtMbw9Esga0LwAAAQY"]
[Fri Apr 17 06:47:02.217109 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:29348] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFm5uMHGxkTZX3c45c1KQAAAIE"]
[Fri Apr 17 06:47:03.320006 2026] [:error] [pid 9152:tid 9202] [client 20.166.7.149:28724] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFm55JYca8I3TNCwIczhAAAAEw"]
[Fri Apr 17 06:47:04.383859 2026] [:error] [pid 51878:tid 51886] [client 20.166.7.149:29143] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeFm6EnQhUtMbw9Esga0RAAAAQY"]
[Fri Apr 17 06:47:07.036370 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:18453] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeFm6-MHGxkTZX3c45c1YgAAAIg"]
[Fri Apr 17 06:47:08.582864 2026] [:error] [pid 51878:tid 51883] [client 20.166.7.149:26854] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeFm7EnQhUtMbw9Esga0VQAAAQM"]
[Fri Apr 17 06:47:09.986586 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:18487] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeFm7eMHGxkTZX3c45c1igAAAIg"]
[Fri Apr 17 06:47:11.562400 2026] [:error] [pid 51878:tid 51885] [client 20.166.7.149:45566] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aeFm70nQhUtMbw9Esga0YgAAAQU"]
[Fri Apr 17 06:47:12.538447 2026] [:error] [pid 9152:tid 9196] [client 20.166.7.149:22796] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeFm8JJYca8I3TNCwIczoQAAAEY"]
[Fri Apr 17 06:47:13.864046 2026] [:error] [pid 51878:tid 51895] [client 20.166.7.149:23435] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeFm8UnQhUtMbw9Esga0ZgAAAQ8"]
[Fri Apr 17 06:47:14.863468 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:26825] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeFm8hP68VyHNvj1e54vSQAAANQ"]
[Fri Apr 17 06:47:15.833905 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:25371] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeFm8xP68VyHNvj1e54vTgAAAMw"]
[Fri Apr 17 06:47:16.625917 2026] [:error] [pid 9152:tid 9196] [client 20.166.7.149:40106] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeFm9JJYca8I3TNCwIcztAAAAEY"]
[Fri Apr 17 06:47:17.756304 2026] [:error] [pid 9152:tid 9195] [client 20.166.7.149:28675] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeFm9ZJYca8I3TNCwIczwAAAAEU"]
[Fri Apr 17 06:47:18.977804 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:29374] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeFm9shTVuRPkua22vS6qgAAAAM"]
[Fri Apr 17 06:47:20.924181 2026] [:error] [pid 9153:tid 9231] [client 20.166.7.149:29345] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeFm-OMHGxkTZX3c45c10AAAAI0"]
[Fri Apr 17 06:47:21.919476 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:29179] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeFm-ZJYca8I3TNCwIcz8QAAAFA"]
[Fri Apr 17 06:47:22.556580 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:29335] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeFm-hP68VyHNvj1e54vcgAAAMI"]
[Fri Apr 17 06:47:23.552174 2026] [:error] [pid 9153:tid 9224] [client 20.166.7.149:26873] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeFm--MHGxkTZX3c45c12AAAAIY"]
[Fri Apr 17 06:47:26.015687 2026] [:error] [pid 9152:tid 9202] [client 20.166.7.149:28334] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wtiiy.php"] [unique_id "aeFm_pJYca8I3TNCwIcz-wAAAEw"]
[Fri Apr 17 06:47:27.313225 2026] [:error] [pid 9151:tid 9173] [client 20.166.7.149:26838] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFm_8hTVuRPkua22vS6vwAAAAw"]
[Fri Apr 17 06:47:29.344096 2026] [:error] [pid 9151:tid 9162] [client 20.166.7.149:22529] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFnAchTVuRPkua22vS60QAAAAE"]
[Fri Apr 17 06:47:30.686594 2026] [:error] [pid 9153:tid 9224] [client 20.166.7.149:17740] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFnAuMHGxkTZX3c45c2CgAAAIY"]
[Fri Apr 17 06:47:31.707089 2026] [:error] [pid 9151:tid 9161] [client 20.166.7.149:17784] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFnA8hTVuRPkua22vS61gAAAAA"]
[Fri Apr 17 06:47:33.058228 2026] [:error] [pid 51878:tid 51904] [client 20.166.7.149:22343] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeFnBUnQhUtMbw9Esga0sQAAARg"]
[Fri Apr 17 06:47:34.530964 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:29147] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeFnBpJYca8I3TNCwIc0DwAAAEg"]
[Fri Apr 17 06:47:35.374789 2026] [:error] [pid 9153:tid 9242] [client 20.166.7.149:22790] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeFnB-MHGxkTZX3c45c2MgAAAJg"]
[Fri Apr 17 06:47:36.188216 2026] [:error] [pid 9153:tid 9224] [client 20.166.7.149:28307] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeFnCOMHGxkTZX3c45c2PAAAAIY"]
[Fri Apr 17 06:47:37.256356 2026] [:error] [pid 9152:tid 9214] [client 20.166.7.149:16449] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aeFnCZJYca8I3TNCwIc0IgAAAFg"]
[Fri Apr 17 06:47:37.973411 2026] [:error] [pid 9151:tid 9183] [client 20.166.7.149:26855] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aeFnCchTVuRPkua22vS68AAAABY"]
[Fri Apr 17 06:47:39.135451 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:25396] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aeFnCxP68VyHNvj1e54vngAAANg"]
[Fri Apr 17 06:47:40.190052 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:22553] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aeFnDBP68VyHNvj1e54vpAAAANQ"]
[Fri Apr 17 06:47:40.907461 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:45550] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFnDJJYca8I3TNCwIc0LQAAAEg"]
[Fri Apr 17 06:47:42.027301 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:29341] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFnDshTVuRPkua22vS6-wAAAAM"]
[Fri Apr 17 06:47:42.898534 2026] [:error] [pid 51878:tid 51886] [client 20.166.7.149:25344] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFnDknQhUtMbw9Esga02wAAAQY"]
[Fri Apr 17 06:47:44.571165 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:44.825818 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:45.081814 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:45.760066 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:46.029893 2026] [proxy_fcgi:error] [pid 9151:tid 9182] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:46.285593 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:46.543833 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:46.796460 2026] [proxy_fcgi:error] [pid 9151:tid 9185] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:47.264824 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:47.522198 2026] [proxy_fcgi:error] [pid 9151:tid 9170] [client 20.166.7.149:45555] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:47:47.772251 2026] [:error] [pid 9151:tid 9171] [client 20.166.7.149:45555] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "aeFnE8hTVuRPkua22vS7LAAAAAo"]
[Fri Apr 17 06:47:48.809671 2026] [:error] [pid 9152:tid 9213] [client 20.166.7.149:45559] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "aeFnFJJYca8I3TNCwIc0SgAAAFc"]
[Fri Apr 17 06:47:50.004187 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:22590] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "aeFnFuMHGxkTZX3c45c2nAAAAJY"]
[Fri Apr 17 06:47:51.094602 2026] [:error] [pid 9151:tid 9175] [client 20.166.7.149:25345] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "aeFnF8hTVuRPkua22vS7MQAAAA4"]
[Fri Apr 17 06:47:52.987433 2026] [:error] [pid 51878:tid 51902] [client 20.166.7.149:16507] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFnGEnQhUtMbw9Esga1GAAAARY"]
[Fri Apr 17 06:47:54.045230 2026] [:error] [pid 51878:tid 51900] [client 20.166.7.149:22339] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFnGknQhUtMbw9Esga1HgAAARQ"]
[Fri Apr 17 06:47:54.963903 2026] [:error] [pid 51878:tid 51890] [client 20.166.7.149:40111] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFnGknQhUtMbw9Esga1LAAAAQo"]
[Fri Apr 17 06:47:56.044331 2026] [:error] [pid 51878:tid 51885] [client 20.166.7.149:29323] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeFnHEnQhUtMbw9Esga1NQAAAQU"]
[Fri Apr 17 06:47:56.999416 2026] [:error] [pid 51878:tid 51884] [client 20.166.7.149:22784] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeFnHEnQhUtMbw9Esga1PwAAAQQ"]
[Fri Apr 17 06:47:58.996514 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:29182] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeFnHhP68VyHNvj1e54wAAAAAMs"]
[Fri Apr 17 06:48:00.339914 2026] [:error] [pid 9153:tid 9230] [client 20.166.7.149:29314] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeFnIOMHGxkTZX3c45c20gAAAIw"]
[Fri Apr 17 06:48:01.516600 2026] [:error] [pid 9152:tid 9193] [client 20.166.7.149:29173] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeFnIZJYca8I3TNCwIc0bwAAAEM"]
[Fri Apr 17 06:48:02.682654 2026] [:error] [pid 51878:tid 51881] [client 20.166.7.149:17788] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeFnIknQhUtMbw9Esga1ZgAAAQE"]
[Fri Apr 17 06:48:03.385285 2026] [:error] [pid 9153:tid 9236] [client 20.166.7.149:22551] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeFnI-MHGxkTZX3c45c25AAAAJI"]
[Fri Apr 17 06:48:05.109288 2026] [:error] [pid 51878:tid 51881] [client 20.166.7.149:22576] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeFnJUnQhUtMbw9Esga1dgAAAQE"]
[Fri Apr 17 06:48:06.410902 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:25374] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeFnJuMHGxkTZX3c45c28QAAAIo"]
[Fri Apr 17 06:48:07.461428 2026] [:error] [pid 51878:tid 51892] [client 20.166.7.149:23436] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeFnJ0nQhUtMbw9Esga1jgAAAQw"]
[Fri Apr 17 06:48:08.847871 2026] [:error] [pid 51878:tid 51895] [client 20.166.7.149:28288] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeFnKEnQhUtMbw9Esga1lQAAAQ8"]
[Fri Apr 17 06:48:09.697468 2026] [:error] [pid 9263:tid 9268] [client 20.166.7.149:40067] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeFnKRP68VyHNvj1e54wMQAAAMM"]
[Fri Apr 17 06:48:10.604703 2026] [:error] [pid 9153:tid 9233] [client 20.166.7.149:18482] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aeFnKuMHGxkTZX3c45c29wAAAI8"]
[Fri Apr 17 06:48:11.405732 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:17780] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeFnKxP68VyHNvj1e54wPQAAANg"]
[Fri Apr 17 06:48:12.592468 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:16489] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeFnLJJYca8I3TNCwIc0nAAAAFA"]
[Fri Apr 17 06:48:16.344685 2026] [:error] [pid 9153:tid 9230] [client 20.166.7.149:18450] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeFnMOMHGxkTZX3c45c3JAAAAIw"]
[Fri Apr 17 06:48:20.727166 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:40112] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeFnNOMHGxkTZX3c45c3PQAAAIg"]
[Fri Apr 17 06:48:23.853845 2026] [:error] [pid 9152:tid 9196] [client 20.166.7.149:40074] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeFnN5JYca8I3TNCwIc04gAAAEY"]
[Fri Apr 17 06:48:30.189642 2026] [:error] [pid 9152:tid 9201] [client 20.166.7.149:22826] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeFnPpJYca8I3TNCwIc07gAAAEs"]
[Fri Apr 17 06:48:32.756956 2026] [:error] [pid 9153:tid 9231] [client 20.166.7.149:23478] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeFnQOMHGxkTZX3c45c3SwAAAI0"]
[Fri Apr 17 06:48:35.954764 2026] [:error] [pid 9153:tid 9230] [client 20.166.7.149:17742] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aeFnQ-MHGxkTZX3c45c3bwAAAIw"]
[Fri Apr 17 06:48:40.126277 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:22813] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeFnSMhTVuRPkua22vS76AAAAAM"]
[Fri Apr 17 06:48:40.847842 2026] [:error] [pid 51878:tid 51884] [client 20.166.7.149:22387] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeFnSEnQhUtMbw9Esga2bAAAAQQ"]
[Fri Apr 17 06:48:45.769798 2026] [:error] [pid 51878:tid 51890] [client 20.166.7.149:29139] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file61.php"] [unique_id "aeFnTUnQhUtMbw9Esga2gAAAAQo"]
[Fri Apr 17 06:49:02.304709 2026] [proxy_fcgi:error] [pid 9153:tid 9223] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:04.567116 2026] [proxy_fcgi:error] [pid 9153:tid 9224] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:04.839723 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:05.111715 2026] [proxy_fcgi:error] [pid 9153:tid 9221] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:05.383192 2026] [proxy_fcgi:error] [pid 9153:tid 9241] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:07.065993 2026] [proxy_fcgi:error] [pid 9153:tid 9227] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:07.351371 2026] [proxy_fcgi:error] [pid 9153:tid 9233] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:09.001121 2026] [proxy_fcgi:error] [pid 9153:tid 9228] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:09.280295 2026] [proxy_fcgi:error] [pid 9153:tid 9230] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:09.576857 2026] [proxy_fcgi:error] [pid 9153:tid 9225] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:09.847814 2026] [proxy_fcgi:error] [pid 9153:tid 9218] [client 20.166.7.149:52379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:49:10.115349 2026] [:error] [pid 9153:tid 9236] [client 20.166.7.149:52379] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeFnZuMHGxkTZX3c45c4XQAAAJI"]
[Fri Apr 17 06:49:11.424674 2026] [:error] [pid 51878:tid 51899] [client 20.166.7.149:16462] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeFnZ0nQhUtMbw9Esga3XgAAARM"]
[Fri Apr 17 06:49:13.583657 2026] [:error] [pid 9151:tid 9171] [client 20.166.7.149:28318] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeFnachTVuRPkua22vS8YgAAAAo"]
[Fri Apr 17 06:49:17.615482 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:3720] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeFnbZJYca8I3TNCwIc1qwAAAE4"]
[Fri Apr 17 06:49:22.221508 2026] [:error] [pid 9153:tid 9221] [client 20.166.7.149:52408] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeFncuMHGxkTZX3c45c4sQAAAIM"]
[Fri Apr 17 06:49:26.447679 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:29133] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeFndpJYca8I3TNCwIc10AAAAFI"]
[Fri Apr 17 06:49:28.320048 2026] [:error] [pid 9151:tid 9166] [client 20.166.7.149:22788] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeFneMhTVuRPkua22vS8kAAAAAU"]
[Fri Apr 17 06:49:31.598758 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:19582] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aeFnexP68VyHNvj1e54xnwAAAMs"]
[Fri Apr 17 06:49:33.092543 2026] [:error] [pid 9263:tid 9280] [client 20.166.7.149:22914] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new3.php"] [unique_id "aeFnfRP68VyHNvj1e54xqgAAAM8"]
[Fri Apr 17 06:49:34.825357 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:19546] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new3.php"] [unique_id "aeFnfhP68VyHNvj1e54xuAAAANg"]
[Fri Apr 17 06:49:39.130147 2026] [:error] [pid 9151:tid 9178] [client 20.166.7.149:4028] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new3.php"] [unique_id "aeFng8hTVuRPkua22vS8tgAAABE"]
[Fri Apr 17 06:49:41.763286 2026] [:error] [pid 51878:tid 51885] [client 20.166.7.149:17220] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new3.php"] [unique_id "aeFnhUnQhUtMbw9Esga4LAAAAQU"]
[Fri Apr 17 06:49:43.511166 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:54578] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nw.php"] [unique_id "aeFnh-MHGxkTZX3c45c4-AAAAIE"]
[Fri Apr 17 06:49:45.101026 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:23500] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nw.php"] [unique_id "aeFniRP68VyHNvj1e54yAQAAAME"]
[Fri Apr 17 06:49:47.199969 2026] [:error] [pid 51878:tid 51898] [client 20.166.7.149:19520] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nw.php"] [unique_id "aeFni0nQhUtMbw9Esga4QgAAARI"]
[Fri Apr 17 06:49:49.143815 2026] [:error] [pid 9153:tid 9231] [client 20.166.7.149:27545] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nw.php"] [unique_id "aeFnjeMHGxkTZX3c45c5EAAAAI0"]
[Fri Apr 17 06:49:51.491970 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:23541] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aeFnjxP68VyHNvj1e54yNwAAAMU"]
[Fri Apr 17 06:49:53.153046 2026] [:error] [pid 51878:tid 51890] [client 20.166.7.149:22805] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aeFnkUnQhUtMbw9Esga4bQAAAQo"]
[Fri Apr 17 06:49:54.555626 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:4022] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aeFnkhP68VyHNvj1e54ySgAAAMc"]
[Fri Apr 17 06:49:56.194969 2026] [:error] [pid 9153:tid 9225] [client 20.166.7.149:16478] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aeFnlOMHGxkTZX3c45c5QQAAAIc"]
[Fri Apr 17 06:49:57.177749 2026] [:error] [pid 9153:tid 9232] [client 20.166.7.149:45542] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "aeFnleMHGxkTZX3c45c5UgAAAI4"]
[Fri Apr 17 06:49:59.996633 2026] [:error] [pid 51878:tid 51887] [client 20.166.7.149:23452] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "aeFnl0nQhUtMbw9Esga4jgAAAQc"]
[Fri Apr 17 06:50:01.098385 2026] [:error] [pid 51878:tid 51902] [client 20.166.7.149:26871] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "aeFnmUnQhUtMbw9Esga4lgAAARY"]
[Fri Apr 17 06:50:02.490097 2026] [:error] [pid 51878:tid 51891] [client 20.166.7.149:28662] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rithin.php"] [unique_id "aeFnmknQhUtMbw9Esga4qAAAAQs"]
[Fri Apr 17 06:50:03.822727 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:17437] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeFnm8hTVuRPkua22vS9CgAAAAY"]
[Fri Apr 17 06:50:05.457262 2026] [:error] [pid 51878:tid 51884] [client 20.166.7.149:24527] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeFnnUnQhUtMbw9Esga4ygAAAQQ"]
[Fri Apr 17 06:50:07.346062 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:54907] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeFnn5JYca8I3TNCwIc2QAAAAFI"]
[Fri Apr 17 06:50:09.529163 2026] [proxy_fcgi:error] [pid 9153:tid 9229] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:09.795810 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:10.081641 2026] [proxy_fcgi:error] [pid 9153:tid 9219] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:10.604554 2026] [proxy_fcgi:error] [pid 9153:tid 9239] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:10.867976 2026] [proxy_fcgi:error] [pid 9153:tid 9224] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:11.134364 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:12.742915 2026] [proxy_fcgi:error] [pid 9153:tid 9232] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:13.019483 2026] [proxy_fcgi:error] [pid 9153:tid 9237] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:50:13.297715 2026] [proxy_fcgi:error] [pid 9153:tid 9228] [client 20.166.7.149:19229] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 10:51:56.235456 2026] [:error] [pid 9152:tid 9202] [client 172.70.243.66:10829] [client 172.70.243.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "aeGgTJJYca8I3TNCwIe4jAAAAEw"]
[Fri Apr 17 15:46:47.271361 2026] [:error] [pid 9263:tid 9277] [client 122.161.52.82:5542] [client 122.161.52.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.52.82, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHlZxP68VyHNvj1e57GLAAAAMw"]
[Fri Apr 17 15:46:47.284142 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 122.161.52.82:5542] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:15.663054 2026] [proxy_fcgi:error] [pid 61523:tid 61558] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:15.926375 2026] [proxy_fcgi:error] [pid 61523:tid 61563] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:16.193755 2026] [proxy_fcgi:error] [pid 61523:tid 61555] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:16.458599 2026] [proxy_fcgi:error] [pid 61523:tid 61546] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:16.721091 2026] [proxy_fcgi:error] [pid 61523:tid 61547] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:16.986200 2026] [proxy_fcgi:error] [pid 61523:tid 61559] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:17.247151 2026] [proxy_fcgi:error] [pid 61523:tid 61549] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:17.513336 2026] [proxy_fcgi:error] [pid 61523:tid 61553] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:17.776322 2026] [proxy_fcgi:error] [pid 61523:tid 61550] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:18.039090 2026] [proxy_fcgi:error] [pid 61523:tid 61561] [client 4.235.97.140:54199] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:26:18.302204 2026] [:error] [pid 61523:tid 61543] [client 4.235.97.140:54199] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "aeI0-sOaH-Pgc7WEf4PbXQAAAcE"]
[Fri Apr 17 21:26:18.837946 2026] [:error] [pid 9152:tid 9190] [client 4.235.97.140:32732] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "aeI0-pJYca8I3TNCwIdpEAAAAEA"]
[Fri Apr 17 21:26:19.375913 2026] [:error] [pid 9152:tid 9197] [client 4.235.97.140:35639] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "aeI0-5JYca8I3TNCwIdpEQAAAEc"]
[Fri Apr 17 21:26:19.918172 2026] [:error] [pid 61523:tid 61541] [client 4.235.97.140:63658] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "aeI0-8OaH-Pgc7WEf4PbYwAAAcA"]
[Fri Apr 17 21:26:20.448213 2026] [:error] [pid 61523:tid 61557] [client 4.235.97.140:32131] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/C1.php"] [unique_id "aeI0_MOaH-Pgc7WEf4PbaAAAAc8"]
[Fri Apr 17 21:26:20.975985 2026] [:error] [pid 9152:tid 9204] [client 4.235.97.140:50527] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/C1.php"] [unique_id "aeI0_JJYca8I3TNCwIdpFAAAAE4"]
[Fri Apr 17 21:26:21.501369 2026] [:error] [pid 34273:tid 34282] [client 4.235.97.140:54202] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/C1.php"] [unique_id "aeI0_WuQDW686mK3dgEOcwAAAYc"]
[Fri Apr 17 21:26:22.023892 2026] [:error] [pid 9263:tid 9274] [client 4.235.97.140:51201] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/C1.php"] [unique_id "aeI0_hP68VyHNvj1e55OwgAAAMk"]
[Fri Apr 17 21:26:22.541513 2026] [:error] [pid 9263:tid 9285] [client 4.235.97.140:2762] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b35.php"] [unique_id "aeI0_hP68VyHNvj1e55OxQAAANQ"]
[Fri Apr 17 21:26:23.062379 2026] [:error] [pid 34273:tid 34299] [client 4.235.97.140:36239] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b35.php"] [unique_id "aeI0_2uQDW686mK3dgEOeQAAAZg"]
[Fri Apr 17 21:26:23.589671 2026] [:error] [pid 51878:tid 51891] [client 4.235.97.140:64162] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b35.php"] [unique_id "aeI0_0nQhUtMbw9EsgamBwAAAQs"]
[Fri Apr 17 21:26:24.118091 2026] [:error] [pid 61523:tid 61552] [client 4.235.97.140:35595] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b35.php"] [unique_id "aeI1AMOaH-Pgc7WEf4PbbwAAAco"]
[Fri Apr 17 21:26:24.644635 2026] [:error] [pid 34273:tid 34297] [client 4.235.97.140:2794] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeI1AGuQDW686mK3dgEOfQAAAZY"]
[Fri Apr 17 21:26:25.172015 2026] [:error] [pid 34273:tid 34278] [client 4.235.97.140:63621] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeI1AWuQDW686mK3dgEOgAAAAYM"]
[Fri Apr 17 21:26:25.703013 2026] [:error] [pid 9153:tid 9219] [client 4.235.97.140:35644] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeI1AeMHGxkTZX3c45cQ0QAAAIE"]
[Fri Apr 17 21:26:26.249625 2026] [:error] [pid 9152:tid 9204] [client 4.235.97.140:63675] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeI1ApJYca8I3TNCwIdpJAAAAE4"]
[Fri Apr 17 21:26:26.783727 2026] [:error] [pid 9153:tid 9239] [client 4.235.97.140:51204] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-un.php"] [unique_id "aeI1AuMHGxkTZX3c45cQ1gAAAJU"]
[Fri Apr 17 21:26:27.347370 2026] [:error] [pid 61523:tid 61546] [client 4.235.97.140:32719] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-un.php"] [unique_id "aeI1A8OaH-Pgc7WEf4PbcgAAAcQ"]
[Fri Apr 17 21:26:27.879447 2026] [:error] [pid 25010:tid 25034] [client 4.235.97.140:32830] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-un.php"] [unique_id "aeI1A4-7kkf42RarqQ19mgAAAVU"]
[Fri Apr 17 21:26:28.408118 2026] [:error] [pid 9263:tid 9282] [client 4.235.97.140:63640] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-un.php"] [unique_id "aeI1BBP68VyHNvj1e55O5AAAANE"]
[Fri Apr 17 21:26:28.961338 2026] [:error] [pid 61523:tid 61559] [client 4.235.97.140:62379] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xroot.php"] [unique_id "aeI1BMOaH-Pgc7WEf4PbdgAAAdE"]
[Fri Apr 17 21:26:29.489064 2026] [:error] [pid 61523:tid 61550] [client 4.235.97.140:36238] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xroot.php"] [unique_id "aeI1BcOaH-Pgc7WEf4PbewAAAcg"]
[Fri Apr 17 21:26:30.014270 2026] [:error] [pid 61523:tid 61560] [client 4.235.97.140:2791] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xroot.php"] [unique_id "aeI1BsOaH-Pgc7WEf4PbfgAAAdI"]
[Fri Apr 17 21:26:30.551089 2026] [:error] [pid 9151:tid 9182] [client 4.235.97.140:32722] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xroot.php"] [unique_id "aeI1BshTVuRPkua22vRDVgAAABU"]
[Fri Apr 17 21:26:31.123184 2026] [:error] [pid 9153:tid 9237] [client 4.235.97.140:35626] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeI1B-MHGxkTZX3c45cQ5QAAAJM"]
[Fri Apr 17 21:26:31.672426 2026] [:error] [pid 25010:tid 25027] [client 4.235.97.140:63668] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeI1B4-7kkf42RarqQ19nQAAAU4"]
[Fri Apr 17 21:26:32.198855 2026] [:error] [pid 25010:tid 25017] [client 4.235.97.140:2789] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeI1CI-7kkf42RarqQ19nwAAAUQ"]
[Fri Apr 17 21:26:32.720457 2026] [:error] [pid 61523:tid 61558] [client 4.235.97.140:63646] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeI1CMOaH-Pgc7WEf4PbhAAAAdA"]
[Fri Apr 17 21:26:33.270636 2026] [:error] [pid 9153:tid 9235] [client 4.235.97.140:31635] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeI1CeMHGxkTZX3c45cQ7QAAAJE"]
[Fri Apr 17 21:26:33.811829 2026] [:error] [pid 61523:tid 61557] [client 4.235.97.140:35601] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeI1CcOaH-Pgc7WEf4PbhgAAAc8"]
[Fri Apr 17 21:26:34.331486 2026] [:error] [pid 51878:tid 51897] [client 4.235.97.140:50540] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeI1CknQhUtMbw9EsgamFAAAARE"]
[Fri Apr 17 21:26:34.874879 2026] [:error] [pid 61523:tid 61554] [client 4.235.97.140:29855] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeI1CsOaH-Pgc7WEf4PbigAAAcw"]
[Fri Apr 17 21:26:35.420800 2026] [:error] [pid 34273:tid 34280] [client 4.235.97.140:50531] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeI1C2uQDW686mK3dgEOmQAAAYU"]
[Fri Apr 17 21:26:35.971537 2026] [:error] [pid 61523:tid 61564] [client 4.235.97.140:63639] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeI1C8OaH-Pgc7WEf4PbjQAAAdY"]
[Fri Apr 17 21:26:36.498805 2026] [:error] [pid 61523:tid 61543] [client 4.235.97.140:36233] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeI1DMOaH-Pgc7WEf4PbjwAAAcE"]
[Fri Apr 17 21:26:37.044553 2026] [:error] [pid 61523:tid 61561] [client 4.235.97.140:54203] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeI1DcOaH-Pgc7WEf4PbkwAAAdM"]
[Fri Apr 17 21:26:37.571792 2026] [:error] [pid 61523:tid 61558] [client 4.235.97.140:36737] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI1DcOaH-Pgc7WEf4PbmAAAAdA"]
[Fri Apr 17 21:26:38.143717 2026] [:error] [pid 25010:tid 25029] [client 4.235.97.140:36783] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI1Do-7kkf42RarqQ19pAAAAVA"]
[Fri Apr 17 21:26:38.694623 2026] [:error] [pid 9153:tid 9237] [client 4.235.97.140:29882] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI1DuMHGxkTZX3c45cQ_gAAAJM"]
[Fri Apr 17 21:26:39.226625 2026] [:error] [pid 9152:tid 9194] [client 4.235.97.140:35628] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI1D5JYca8I3TNCwIdpNQAAAEQ"]
[Fri Apr 17 21:26:39.757195 2026] [:error] [pid 9151:tid 9172] [client 4.235.97.140:32140] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI1D8hTVuRPkua22vRDXwAAAAs"]
[Fri Apr 17 21:26:40.309441 2026] [:error] [pid 9151:tid 9164] [client 4.235.97.140:36748] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI1EMhTVuRPkua22vRDYQAAAAM"]
[Fri Apr 17 21:26:40.849026 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:36781] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI1EEnQhUtMbw9EsgamHwAAAQY"]
[Fri Apr 17 21:26:41.376352 2026] [:error] [pid 9153:tid 9221] [client 4.235.97.140:32737] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI1EeMHGxkTZX3c45cRAgAAAIM"]
[Fri Apr 17 21:26:41.937358 2026] [:error] [pid 9263:tid 9280] [client 4.235.97.140:29850] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1ERP68VyHNvj1e55PEAAAAM8"]
[Fri Apr 17 21:26:42.481720 2026] [:error] [pid 61523:tid 61563] [client 4.235.97.140:32143] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1EsOaH-Pgc7WEf4PbpgAAAdU"]
[Fri Apr 17 21:26:43.027989 2026] [:error] [pid 9153:tid 9225] [client 4.235.97.140:63672] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1E-MHGxkTZX3c45cRAwAAAIc"]
[Fri Apr 17 21:26:43.605241 2026] [:error] [pid 34273:tid 34281] [client 4.235.97.140:2800] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1E2uQDW686mK3dgEOsgAAAYY"]
[Fri Apr 17 21:26:44.153690 2026] [:error] [pid 34273:tid 34280] [client 4.235.97.140:29842] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeI1FGuQDW686mK3dgEOuQAAAYU"]
[Fri Apr 17 21:26:44.674325 2026] [:error] [pid 51878:tid 51900] [client 4.235.97.140:32800] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeI1FEnQhUtMbw9EsgamJAAAARQ"]
[Fri Apr 17 21:26:45.225781 2026] [:error] [pid 9151:tid 9165] [client 4.235.97.140:50530] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeI1FchTVuRPkua22vRDZQAAAAQ"]
[Fri Apr 17 21:26:45.744830 2026] [:error] [pid 9152:tid 9197] [client 4.235.97.140:35604] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeI1FZJYca8I3TNCwIdpOgAAAEc"]
[Fri Apr 17 21:26:46.299889 2026] [:error] [pid 34273:tid 34291] [client 4.235.97.140:63637] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeI1FmuQDW686mK3dgEOvwAAAZA"]
[Fri Apr 17 21:26:46.930887 2026] [:error] [pid 34273:tid 34278] [client 4.235.97.140:2809] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeI1FmuQDW686mK3dgEOwgAAAYM"]
[Fri Apr 17 21:26:47.509568 2026] [:error] [pid 34273:tid 34290] [client 4.235.97.140:63625] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeI1F2uQDW686mK3dgEOxwAAAY8"]
[Fri Apr 17 21:26:48.038344 2026] [:error] [pid 51878:tid 51902] [client 4.235.97.140:36744] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeI1GEnQhUtMbw9EsgamKQAAARY"]
[Fri Apr 17 21:26:48.602791 2026] [:error] [pid 51878:tid 51893] [client 4.235.97.140:63654] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeI1GEnQhUtMbw9EsgamLAAAAQ0"]
[Fri Apr 17 21:26:49.153719 2026] [:error] [pid 9153:tid 9231] [client 4.235.97.140:32727] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeI1GeMHGxkTZX3c45cRCwAAAI0"]
[Fri Apr 17 21:26:49.690321 2026] [:error] [pid 9153:tid 9226] [client 4.235.97.140:29869] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeI1GeMHGxkTZX3c45cRDgAAAIg"]
[Fri Apr 17 21:26:50.256824 2026] [:error] [pid 51878:tid 51899] [client 4.235.97.140:58934] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeI1GknQhUtMbw9EsgamNQAAARM"]
[Fri Apr 17 21:26:50.798951 2026] [:error] [pid 9151:tid 9178] [client 4.235.97.140:2306] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeI1GshTVuRPkua22vRDawAAABE"]
[Fri Apr 17 21:26:51.343402 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:32771] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeI1GxP68VyHNvj1e55PGgAAAME"]
[Fri Apr 17 21:26:51.904573 2026] [:error] [pid 25010:tid 25018] [client 4.235.97.140:32785] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeI1G4-7kkf42RarqQ19sQAAAUU"]
[Fri Apr 17 21:26:52.542271 2026] [:error] [pid 9151:tid 9161] [client 4.235.97.140:2677] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeI1HMhTVuRPkua22vRDdgAAAAA"]
[Fri Apr 17 21:26:53.196377 2026] [:error] [pid 51878:tid 51891] [client 4.235.97.140:50593] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeI1HUnQhUtMbw9EsgamPQAAAQs"]
[Fri Apr 17 21:26:53.719063 2026] [:error] [pid 51878:tid 51904] [client 4.235.97.140:60223] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeI1HUnQhUtMbw9EsgamQAAAARg"]
[Fri Apr 17 21:26:54.313547 2026] [:error] [pid 9151:tid 9162] [client 4.235.97.140:34056] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeI1HshTVuRPkua22vRDggAAAAE"]
[Fri Apr 17 21:26:54.925801 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:40470] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeI1HknQhUtMbw9EsgamSAAAAQY"]
[Fri Apr 17 21:26:55.462215 2026] [:error] [pid 61523:tid 61563] [client 4.235.97.140:50606] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeI1H8OaH-Pgc7WEf4PbvAAAAdU"]
[Fri Apr 17 21:26:56.006759 2026] [:error] [pid 34273:tid 34293] [client 4.235.97.140:41766] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeI1IGuQDW686mK3dgEO3wAAAZI"]
[Fri Apr 17 21:26:56.530393 2026] [:error] [pid 9263:tid 9268] [client 4.235.97.140:39744] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeI1IBP68VyHNvj1e55PIAAAAMM"]
[Fri Apr 17 21:26:57.121483 2026] [:error] [pid 9263:tid 9285] [client 4.235.97.140:30411] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeI1IRP68VyHNvj1e55PIwAAANQ"]
[Fri Apr 17 21:26:57.658918 2026] [:error] [pid 61523:tid 61541] [client 4.235.97.140:3039] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeI1IcOaH-Pgc7WEf4PbwwAAAcA"]
[Fri Apr 17 21:26:58.208765 2026] [:error] [pid 51878:tid 51889] [client 4.235.97.140:60177] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeI1IknQhUtMbw9EsgamUgAAAQk"]
[Fri Apr 17 21:26:58.751777 2026] [:error] [pid 9152:tid 9200] [client 4.235.97.140:52808] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeI1IpJYca8I3TNCwIdpfwAAAEo"]
[Fri Apr 17 21:26:59.298889 2026] [:error] [pid 51878:tid 51881] [client 4.235.97.140:40979] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeI1I0nQhUtMbw9EsgamUwAAAQE"]
[Fri Apr 17 21:26:59.847594 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:24268] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1IxP68VyHNvj1e55PLQAAAME"]
[Fri Apr 17 21:27:00.423504 2026] [:error] [pid 51878:tid 51900] [client 4.235.97.140:54796] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1JEnQhUtMbw9EsgamWAAAARQ"]
[Fri Apr 17 21:27:01.032290 2026] [:error] [pid 51878:tid 51894] [client 4.235.97.140:27572] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1JUnQhUtMbw9EsgamWgAAAQ4"]
[Fri Apr 17 21:27:01.822543 2026] [:error] [pid 9153:tid 9228] [client 4.235.97.140:24274] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeI1JeMHGxkTZX3c45cRHAAAAIo"]
[Fri Apr 17 21:27:02.605760 2026] [:error] [pid 51878:tid 51889] [client 4.235.97.140:59607] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeI1JknQhUtMbw9EsgamYAAAAQk"]
[Fri Apr 17 21:27:03.259309 2026] [:error] [pid 25010:tid 25033] [client 4.235.97.140:24272] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeI1J4-7kkf42RarqQ19tgAAAVQ"]
[Fri Apr 17 21:27:04.017178 2026] [:error] [pid 25010:tid 25014] [client 4.235.97.140:34641] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeI1KI-7kkf42RarqQ19uAAAAUE"]
[Fri Apr 17 21:27:04.644365 2026] [:error] [pid 34273:tid 34277] [client 4.235.97.140:59585] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeI1KGuQDW686mK3dgEO6wAAAYI"]
[Fri Apr 17 21:27:05.749173 2026] [:error] [pid 9152:tid 9208] [client 4.235.97.140:2256] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeI1KZJYca8I3TNCwIdpngAAAFI"]
[Fri Apr 17 21:27:06.775786 2026] [:error] [pid 25010:tid 25023] [client 4.235.97.140:47307] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeI1Ko-7kkf42RarqQ19vQAAAUo"]
[Fri Apr 17 21:27:07.588245 2026] [:error] [pid 51878:tid 51898] [client 4.235.97.140:56671] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeI1K0nQhUtMbw9EsgamawAAARI"]
[Fri Apr 17 21:27:08.861650 2026] [:error] [pid 9263:tid 9288] [client 4.235.97.140:24925] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeI1LBP68VyHNvj1e55PUAAAANc"]
[Fri Apr 17 21:27:09.492855 2026] [:error] [pid 9153:tid 9240] [client 4.235.97.140:2416] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeI1LeMHGxkTZX3c45cRKQAAAJY"]
[Fri Apr 17 21:27:10.124191 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:34038] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeI1LhP68VyHNvj1e55PWgAAAME"]
[Fri Apr 17 21:27:10.758638 2026] [:error] [pid 9263:tid 9274] [client 4.235.97.140:24250] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeI1LhP68VyHNvj1e55PYAAAAMk"]
[Fri Apr 17 21:27:11.504381 2026] [:error] [pid 25010:tid 25018] [client 4.235.97.140:41701] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeI1L4-7kkf42RarqQ19wQAAAUU"]
[Fri Apr 17 21:27:12.175150 2026] [:error] [pid 9153:tid 9231] [client 4.235.97.140:41702] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeI1MOMHGxkTZX3c45cRKgAAAI0"]
[Fri Apr 17 21:27:12.939164 2026] [:error] [pid 9263:tid 9268] [client 4.235.97.140:2844] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeI1MBP68VyHNvj1e55PaQAAAMM"]
[Fri Apr 17 21:27:13.727179 2026] [:error] [pid 9152:tid 9192] [client 4.235.97.140:41679] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeI1MZJYca8I3TNCwIdpvgAAAEI"]
[Fri Apr 17 21:27:14.331746 2026] [:error] [pid 9263:tid 9280] [client 4.235.97.140:2971] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeI1MhP68VyHNvj1e55PeQAAAM8"]
[Fri Apr 17 21:27:14.968123 2026] [:error] [pid 34273:tid 34280] [client 4.235.97.140:47414] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeI1MmuQDW686mK3dgEO_QAAAYU"]
[Fri Apr 17 21:27:15.546463 2026] [:error] [pid 34273:tid 34282] [client 4.235.97.140:2853] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeI1M2uQDW686mK3dgEPAQAAAYc"]
[Fri Apr 17 21:27:16.310131 2026] [:error] [pid 25010:tid 25034] [client 4.235.97.140:34032] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeI1NI-7kkf42RarqQ19xgAAAVU"]
[Fri Apr 17 21:27:17.037740 2026] [:error] [pid 51878:tid 51881] [client 4.235.97.140:64226] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeI1NUnQhUtMbw9EsgamfwAAAQE"]
[Fri Apr 17 21:27:17.646331 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:46037] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeI1NUnQhUtMbw9EsgamggAAAQY"]
[Fri Apr 17 21:27:18.222763 2026] [proxy_fcgi:error] [pid 61523:tid 61559] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:18.484664 2026] [proxy_fcgi:error] [pid 61523:tid 61550] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:19.020313 2026] [proxy_fcgi:error] [pid 61523:tid 61548] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:19.282092 2026] [proxy_fcgi:error] [pid 61523:tid 61553] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:19.569132 2026] [proxy_fcgi:error] [pid 61523:tid 61554] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:19.832397 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:20.094455 2026] [proxy_fcgi:error] [pid 61523:tid 61566] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:20.356780 2026] [proxy_fcgi:error] [pid 61523:tid 61561] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:20.624490 2026] [proxy_fcgi:error] [pid 61523:tid 61552] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:20.886496 2026] [proxy_fcgi:error] [pid 61523:tid 61544] [client 4.235.97.140:22456] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:27:21.150435 2026] [:error] [pid 61523:tid 61562] [client 4.235.97.140:22456] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeI1OcOaH-Pgc7WEf4Pb9AAAAdQ"]
[Fri Apr 17 21:27:21.707508 2026] [:error] [pid 9151:tid 9166] [client 4.235.97.140:22455] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeI1OchTVuRPkua22vRD3AAAAAU"]
[Fri Apr 17 21:27:22.282305 2026] [:error] [pid 61523:tid 61547] [client 4.235.97.140:53562] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeI1OsOaH-Pgc7WEf4Pb-AAAAcU"]
[Fri Apr 17 21:27:22.805547 2026] [:error] [pid 61523:tid 61553] [client 4.235.97.140:53519] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeI1OsOaH-Pgc7WEf4Pb_AAAAcs"]
[Fri Apr 17 21:27:23.351233 2026] [:error] [pid 51878:tid 51902] [client 4.235.97.140:58929] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeI1O0nQhUtMbw9EsgamkwAAARY"]
[Fri Apr 17 21:27:23.968248 2026] [:error] [pid 51878:tid 51887] [client 4.235.97.140:60728] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeI1O0nQhUtMbw9EsgamlwAAAQc"]
[Fri Apr 17 21:27:24.684474 2026] [:error] [pid 9153:tid 9241] [client 4.235.97.140:49318] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeI1POMHGxkTZX3c45cRMgAAAJc"]
[Fri Apr 17 21:27:25.240854 2026] [:error] [pid 51878:tid 51888] [client 4.235.97.140:44280] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeI1PUnQhUtMbw9EsgamnAAAAQg"]
[Fri Apr 17 21:27:25.798794 2026] [:error] [pid 9153:tid 9239] [client 4.235.97.140:56713] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeI1PeMHGxkTZX3c45cRNAAAAJU"]
[Fri Apr 17 21:27:26.429637 2026] [:error] [pid 61523:tid 61559] [client 4.235.97.140:34734] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeI1PsOaH-Pgc7WEf4PcAQAAAdE"]
[Fri Apr 17 21:27:26.985278 2026] [:error] [pid 9263:tid 9288] [client 4.235.97.140:58917] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeI1PhP68VyHNvj1e55PkwAAANc"]
[Fri Apr 17 21:27:27.631326 2026] [:error] [pid 61523:tid 61554] [client 4.235.97.140:53553] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeI1P8OaH-Pgc7WEf4PcCwAAAcw"]
[Fri Apr 17 21:27:28.173755 2026] [:error] [pid 9151:tid 9172] [client 4.235.97.140:33363] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeI1QMhTVuRPkua22vRD4gAAAAs"]
[Fri Apr 17 21:27:28.831895 2026] [:error] [pid 61523:tid 61559] [client 4.235.97.140:33351] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeI1QMOaH-Pgc7WEf4PcEQAAAdE"]
[Fri Apr 17 21:27:29.459323 2026] [:error] [pid 51878:tid 51892] [client 4.235.97.140:25512] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeI1QUnQhUtMbw9EsgampwAAAQw"]
[Fri Apr 17 21:27:30.061387 2026] [:error] [pid 61523:tid 61557] [client 4.235.97.140:56764] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeI1QsOaH-Pgc7WEf4PcEwAAAc8"]
[Fri Apr 17 21:27:30.671792 2026] [:error] [pid 9263:tid 9271] [client 4.235.97.140:24878] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeI1QhP68VyHNvj1e55PmAAAAMY"]
[Fri Apr 17 21:27:31.240710 2026] [:error] [pid 34273:tid 34296] [client 4.235.97.140:24869] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeI1Q2uQDW686mK3dgEPMgAAAZU"]
[Fri Apr 17 21:27:31.942418 2026] [:error] [pid 51878:tid 51885] [client 4.235.97.140:38743] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeI1Q0nQhUtMbw9EsgamsgAAAQU"]
[Fri Apr 17 21:27:32.522393 2026] [:error] [pid 25010:tid 25022] [client 4.235.97.140:2528] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeI1RI-7kkf42RarqQ191AAAAUk"]
[Fri Apr 17 21:27:33.147316 2026] [:error] [pid 61523:tid 61543] [client 4.235.97.140:25552] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeI1RcOaH-Pgc7WEf4PcGgAAAcE"]
[Fri Apr 17 21:27:33.891990 2026] [:error] [pid 51878:tid 51899] [client 4.235.97.140:2367] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeI1RUnQhUtMbw9EsgamwAAAARM"]
[Fri Apr 17 21:27:34.666378 2026] [:error] [pid 51878:tid 51901] [client 4.235.97.140:36209] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeI1RknQhUtMbw9EsgamxgAAARU"]
[Fri Apr 17 21:27:35.258322 2026] [:error] [pid 51878:tid 51894] [client 4.235.97.140:48007] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeI1R0nQhUtMbw9EsgamygAAAQ4"]
[Fri Apr 17 21:27:35.854489 2026] [:error] [pid 9263:tid 9285] [client 4.235.97.140:2102] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeI1RxP68VyHNvj1e55PngAAANQ"]
[Fri Apr 17 21:27:36.438098 2026] [:error] [pid 34273:tid 34278] [client 4.235.97.140:2551] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeI1SGuQDW686mK3dgEPOAAAAYM"]
[Fri Apr 17 21:27:37.031838 2026] [:error] [pid 9152:tid 9210] [client 4.235.97.140:2311] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeI1SZJYca8I3TNCwIdpxAAAAFQ"]
[Fri Apr 17 21:27:37.608499 2026] [:error] [pid 9263:tid 9275] [client 4.235.97.140:2048] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeI1SRP68VyHNvj1e55PrQAAAMo"]
[Fri Apr 17 21:27:38.185642 2026] [:error] [pid 9152:tid 9190] [client 4.235.97.140:26245] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeI1SpJYca8I3TNCwIdpxgAAAEA"]
[Fri Apr 17 21:27:38.822088 2026] [:error] [pid 9153:tid 9229] [client 4.235.97.140:2940] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeI1SuMHGxkTZX3c45cRRwAAAIs"]
[Fri Apr 17 21:27:39.394365 2026] [:error] [pid 9153:tid 9220] [client 4.235.97.140:2964] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeI1S-MHGxkTZX3c45cRTQAAAII"]
[Fri Apr 17 21:27:39.951156 2026] [:error] [pid 9153:tid 9223] [client 4.235.97.140:52122] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeI1S-MHGxkTZX3c45cRUAAAAIU"]
[Fri Apr 17 21:27:40.530070 2026] [:error] [pid 9263:tid 9272] [client 4.235.97.140:36198] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeI1TBP68VyHNvj1e55PtwAAAMc"]
[Fri Apr 17 21:27:41.105462 2026] [:error] [pid 9263:tid 9268] [client 4.235.97.140:59588] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeI1TRP68VyHNvj1e55PuQAAAMM"]
[Fri Apr 17 21:27:41.660631 2026] [:error] [pid 9263:tid 9287] [client 4.235.97.140:59637] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeI1TRP68VyHNvj1e55PvwAAANY"]
[Fri Apr 17 21:27:42.268202 2026] [:error] [pid 25010:tid 25020] [client 4.235.97.140:33422] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeI1To-7kkf42RarqQ193AAAAUc"]
[Fri Apr 17 21:27:42.928334 2026] [:error] [pid 9152:tid 9208] [client 4.235.97.140:59635] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeI1TpJYca8I3TNCwIdpxwAAAFI"]
[Fri Apr 17 21:27:43.512887 2026] [:error] [pid 61523:tid 61566] [client 4.235.97.140:56683] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeI1T8OaH-Pgc7WEf4PcIAAAAdg"]
[Fri Apr 17 21:27:44.061819 2026] [:error] [pid 34273:tid 34295] [client 4.235.97.140:43041] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeI1UGuQDW686mK3dgEPQQAAAZQ"]
[Fri Apr 17 21:27:44.586450 2026] [:error] [pid 9153:tid 9231] [client 4.235.97.140:36180] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeI1UOMHGxkTZX3c45cRVAAAAI0"]
[Fri Apr 17 21:27:45.211756 2026] [:error] [pid 9263:tid 9278] [client 4.235.97.140:36208] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeI1URP68VyHNvj1e55PygAAAM0"]
[Fri Apr 17 21:27:45.788323 2026] [:error] [pid 9263:tid 9267] [client 4.235.97.140:33439] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeI1URP68VyHNvj1e55PzwAAAMI"]
[Fri Apr 17 21:27:46.345202 2026] [:error] [pid 9263:tid 9270] [client 4.235.97.140:33453] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeI1UhP68VyHNvj1e55P1wAAAMU"]
[Fri Apr 17 21:27:46.886047 2026] [:error] [pid 9263:tid 9280] [client 4.235.97.140:59624] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeI1UhP68VyHNvj1e55P3AAAAM8"]
[Fri Apr 17 21:27:47.466067 2026] [:error] [pid 51878:tid 51884] [client 4.235.97.140:56695] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeI1U0nQhUtMbw9Esgam2QAAAQQ"]
[Fri Apr 17 21:27:48.069111 2026] [:error] [pid 51878:tid 51904] [client 4.235.97.140:58285] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeI1VEnQhUtMbw9Esgam3QAAARg"]
[Fri Apr 17 21:27:48.613482 2026] [:error] [pid 51878:tid 51900] [client 4.235.97.140:59594] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeI1VEnQhUtMbw9Esgam4QAAARQ"]
[Fri Apr 17 21:27:49.163461 2026] [:error] [pid 51878:tid 51880] [client 4.235.97.140:28160] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeI1VUnQhUtMbw9Esgam6AAAAQA"]
[Fri Apr 17 21:27:49.844320 2026] [:error] [pid 9151:tid 9184] [client 4.235.97.140:59623] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeI1VchTVuRPkua22vRD6gAAABc"]
[Fri Apr 17 21:27:50.433894 2026] [:error] [pid 9153:tid 9226] [client 4.235.97.140:43591] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeI1VuMHGxkTZX3c45cRWAAAAIg"]
[Fri Apr 17 21:27:51.052145 2026] [:error] [pid 61523:tid 61551] [client 4.235.97.140:28196] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeI1V8OaH-Pgc7WEf4PcJgAAAck"]
[Fri Apr 17 21:27:51.743151 2026] [:error] [pid 9153:tid 9241] [client 4.235.97.140:43066] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeI1V-MHGxkTZX3c45cRXAAAAJc"]
[Fri Apr 17 21:27:52.463022 2026] [:error] [pid 9151:tid 9174] [client 4.235.97.140:28701] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeI1WMhTVuRPkua22vRD8wAAAA0"]
[Fri Apr 17 21:27:53.067783 2026] [:error] [pid 9153:tid 9222] [client 4.235.97.140:56650] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeI1WeMHGxkTZX3c45cRZAAAAIQ"]
[Fri Apr 17 21:27:53.711290 2026] [:error] [pid 61523:tid 61557] [client 4.235.97.140:28206] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeI1WcOaH-Pgc7WEf4PcKQAAAc8"]
[Fri Apr 17 21:27:54.419839 2026] [:error] [pid 61523:tid 61546] [client 4.235.97.140:43631] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeI1WsOaH-Pgc7WEf4PcLgAAAcQ"]
[Fri Apr 17 21:27:55.032923 2026] [:error] [pid 9263:tid 9281] [client 4.235.97.140:33446] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeI1WxP68VyHNvj1e55P4gAAANA"]
[Fri Apr 17 21:27:55.720706 2026] [:error] [pid 9263:tid 9275] [client 4.235.97.140:59625] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeI1WxP68VyHNvj1e55P6AAAAMo"]
[Fri Apr 17 21:27:56.450951 2026] [:error] [pid 9263:tid 9267] [client 4.235.97.140:60761] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeI1XBP68VyHNvj1e55P7gAAAMI"]
[Fri Apr 17 21:27:57.162935 2026] [:error] [pid 9263:tid 9282] [client 4.235.97.140:30974] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeI1XRP68VyHNvj1e55P9AAAANE"]
[Fri Apr 17 21:27:57.750599 2026] [:error] [pid 9153:tid 9223] [client 4.235.97.140:43640] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeI1XeMHGxkTZX3c45cRaAAAAIU"]
[Fri Apr 17 21:27:58.422146 2026] [:error] [pid 9153:tid 9242] [client 4.235.97.140:43639] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeI1XuMHGxkTZX3c45cRagAAAJg"]
[Fri Apr 17 21:27:59.085495 2026] [:error] [pid 9153:tid 9235] [client 4.235.97.140:42391] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeI1X-MHGxkTZX3c45cRbgAAAJE"]
[Fri Apr 17 21:27:59.659099 2026] [:error] [pid 9153:tid 9231] [client 4.235.97.140:62425] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeI1X-MHGxkTZX3c45cRcQAAAI0"]
[Fri Apr 17 21:28:00.236319 2026] [:error] [pid 61523:tid 61552] [client 4.235.97.140:44973] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeI1YMOaH-Pgc7WEf4PcOwAAAco"]
[Fri Apr 17 21:28:00.814077 2026] [:error] [pid 9152:tid 9211] [client 4.235.97.140:28710] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeI1YJJYca8I3TNCwIdp1QAAAFU"]
[Fri Apr 17 21:28:01.370731 2026] [:error] [pid 9263:tid 9288] [client 4.235.97.140:60227] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeI1YRP68VyHNvj1e55QCAAAANc"]
[Fri Apr 17 21:28:02.004348 2026] [:error] [pid 61523:tid 61565] [client 4.235.97.140:33423] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeI1YsOaH-Pgc7WEf4PcQQAAAdc"]
[Fri Apr 17 21:28:02.631531 2026] [:error] [pid 9263:tid 9284] [client 4.235.97.140:60772] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeI1YhP68VyHNvj1e55QCwAAANM"]
[Fri Apr 17 21:28:03.203997 2026] [:error] [pid 25010:tid 25029] [client 4.235.97.140:39844] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeI1Y4-7kkf42RarqQ195gAAAVA"]
[Fri Apr 17 21:28:03.796422 2026] [:error] [pid 9263:tid 9272] [client 4.235.97.140:62437] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeI1YxP68VyHNvj1e55QDwAAAMc"]
[Fri Apr 17 21:28:04.336858 2026] [:error] [pid 9151:tid 9177] [client 4.235.97.140:62416] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeI1ZMhTVuRPkua22vRD_AAAABA"]
[Fri Apr 17 21:28:04.961665 2026] [:error] [pid 9263:tid 9271] [client 4.235.97.140:27587] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeI1ZBP68VyHNvj1e55QFgAAAMY"]
[Fri Apr 17 21:28:05.579174 2026] [:error] [pid 9152:tid 9201] [client 4.235.97.140:62456] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeI1ZZJYca8I3TNCwIdp3QAAAEs"]
[Fri Apr 17 21:28:06.145010 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:60739] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeI1ZhP68VyHNvj1e55QGgAAAME"]
[Fri Apr 17 21:28:06.734832 2026] [:error] [pid 61523:tid 61555] [client 4.235.97.140:62436] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeI1ZsOaH-Pgc7WEf4PcTQAAAc0"]
[Fri Apr 17 21:28:07.325875 2026] [:error] [pid 9263:tid 9267] [client 4.235.97.140:43008] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeI1ZxP68VyHNvj1e55QIAAAAMI"]
[Fri Apr 17 21:28:07.956322 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:37543] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeI1ZxP68VyHNvj1e55QJgAAAME"]
[Fri Apr 17 21:28:08.528696 2026] [:error] [pid 9263:tid 9279] [client 4.235.97.140:39849] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeI1aBP68VyHNvj1e55QKwAAAM4"]
[Fri Apr 17 21:28:09.069068 2026] [:error] [pid 61523:tid 61551] [client 4.235.97.140:39848] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeI1acOaH-Pgc7WEf4PcUwAAAck"]
[Fri Apr 17 21:28:09.608774 2026] [:error] [pid 9263:tid 9280] [client 4.235.97.140:62403] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeI1aRP68VyHNvj1e55QMAAAAM8"]
[Fri Apr 17 21:28:10.179049 2026] [:error] [pid 9263:tid 9281] [client 4.235.97.140:60251] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeI1ahP68VyHNvj1e55QNQAAANA"]
[Fri Apr 17 21:28:10.718913 2026] [:error] [pid 25010:tid 25019] [client 4.235.97.140:27584] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeI1ao-7kkf42RarqQ197AAAAUY"]
[Fri Apr 17 21:28:11.284485 2026] [:error] [pid 9263:tid 9271] [client 4.235.97.140:30954] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeI1axP68VyHNvj1e55QOQAAAMY"]
[Fri Apr 17 21:28:11.812492 2026] [:error] [pid 25010:tid 25017] [client 4.235.97.140:42429] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeI1a4-7kkf42RarqQ197QAAAUQ"]
[Fri Apr 17 21:28:12.356252 2026] [:error] [pid 25010:tid 25028] [client 4.235.97.140:37545] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeI1bI-7kkf42RarqQ197wAAAU8"]
[Fri Apr 17 21:28:12.906554 2026] [:error] [pid 61523:tid 61563] [client 4.235.97.140:28689] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeI1bMOaH-Pgc7WEf4PcWQAAAdU"]
[Fri Apr 17 21:28:13.439856 2026] [:error] [pid 9263:tid 9269] [client 4.235.97.140:28672] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeI1bRP68VyHNvj1e55QPgAAAMQ"]
[Fri Apr 17 21:28:13.970284 2026] [:error] [pid 9263:tid 9271] [client 4.235.97.140:23618] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeI1bRP68VyHNvj1e55QQwAAAMY"]
[Fri Apr 17 21:28:14.507773 2026] [:error] [pid 34273:tid 34281] [client 4.235.97.140:54788] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeI1bmuQDW686mK3dgEPWwAAAYY"]
[Fri Apr 17 21:28:15.026408 2026] [:error] [pid 9263:tid 9288] [client 4.235.97.140:22912] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeI1bxP68VyHNvj1e55QRwAAANc"]
[Fri Apr 17 21:28:15.569601 2026] [:error] [pid 51878:tid 51895] [client 4.235.97.140:60232] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeI1b0nQhUtMbw9EsganDAAAAQ8"]
[Fri Apr 17 21:28:16.119502 2026] [:error] [pid 9153:tid 9241] [client 4.235.97.140:56695] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeI1cOMHGxkTZX3c45cRdQAAAJc"]
[Fri Apr 17 21:28:16.648287 2026] [:error] [pid 9263:tid 9277] [client 4.235.97.140:42387] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeI1cBP68VyHNvj1e55QTgAAAMw"]
[Fri Apr 17 21:28:17.202307 2026] [:error] [pid 9151:tid 9176] [client 4.235.97.140:30926] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeI1cchTVuRPkua22vRD_gAAAA8"]
[Fri Apr 17 21:28:17.728868 2026] [:error] [pid 61523:tid 61554] [client 4.235.97.140:37530] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeI1ccOaH-Pgc7WEf4PcXgAAAcw"]
[Fri Apr 17 21:28:18.316154 2026] [:error] [pid 9151:tid 9175] [client 4.235.97.140:39828] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeI1cshTVuRPkua22vREAgAAAA4"]
[Fri Apr 17 21:28:18.886507 2026] [:error] [pid 9263:tid 9281] [client 4.235.97.140:44984] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeI1chP68VyHNvj1e55QVAAAANA"]
[Fri Apr 17 21:28:19.428434 2026] [:error] [pid 61523:tid 61557] [client 4.235.97.140:62434] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeI1c8OaH-Pgc7WEf4PcYgAAAc8"]
[Fri Apr 17 21:28:19.956002 2026] [:error] [pid 9152:tid 9204] [client 4.235.97.140:42415] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeI1c5JYca8I3TNCwIdp5wAAAE4"]
[Fri Apr 17 21:28:20.498083 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:20.764344 2026] [proxy_fcgi:error] [pid 61523:tid 61546] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:21.028468 2026] [proxy_fcgi:error] [pid 61523:tid 61561] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:21.291636 2026] [proxy_fcgi:error] [pid 61523:tid 61545] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:21.556025 2026] [proxy_fcgi:error] [pid 61523:tid 61550] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:21.820736 2026] [proxy_fcgi:error] [pid 61523:tid 61552] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:22.354724 2026] [proxy_fcgi:error] [pid 61523:tid 61547] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:22.618737 2026] [proxy_fcgi:error] [pid 61523:tid 61566] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:22.885590 2026] [proxy_fcgi:error] [pid 61523:tid 61555] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:23.158317 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 4.235.97.140:39829] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:28:23.424042 2026] [:error] [pid 61523:tid 61548] [client 4.235.97.140:39829] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeI1d8OaH-Pgc7WEf4PcfwAAAcY"]
[Fri Apr 17 21:28:24.020941 2026] [:error] [pid 9263:tid 9278] [client 4.235.97.140:42379] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeI1eBP68VyHNvj1e55QfwAAAM0"]
[Fri Apr 17 21:28:24.575343 2026] [:error] [pid 9263:tid 9280] [client 4.235.97.140:27629] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeI1eBP68VyHNvj1e55QhQAAAM8"]
[Fri Apr 17 21:28:25.109953 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:52154] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeI1eUnQhUtMbw9EsganIAAAAQY"]
[Fri Apr 17 21:28:25.662336 2026] [:error] [pid 9152:tid 9196] [client 4.235.97.140:54839] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeI1eZJYca8I3TNCwIdp6QAAAEY"]
[Fri Apr 17 21:28:26.182603 2026] [:error] [pid 9152:tid 9191] [client 4.235.97.140:44982] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeI1epJYca8I3TNCwIdp6wAAAEE"]
[Fri Apr 17 21:28:26.715047 2026] [:error] [pid 9263:tid 9273] [client 4.235.97.140:40485] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeI1ehP68VyHNvj1e55QigAAAMg"]
[Fri Apr 17 21:28:27.257551 2026] [:error] [pid 25010:tid 25019] [client 4.235.97.140:23617] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeI1e4-7kkf42RarqQ19-QAAAUY"]
[Fri Apr 17 21:28:27.776789 2026] [:error] [pid 51878:tid 51883] [client 4.235.97.140:43617] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeI1e0nQhUtMbw9EsganJwAAAQM"]
[Fri Apr 17 21:28:28.293775 2026] [:error] [pid 9152:tid 9192] [client 4.235.97.140:60270] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeI1fJJYca8I3TNCwIdp7gAAAEI"]
[Fri Apr 17 21:28:28.815002 2026] [:error] [pid 9263:tid 9277] [client 4.235.97.140:23652] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeI1fBP68VyHNvj1e55QjQAAAMw"]
[Fri Apr 17 21:28:29.339825 2026] [:error] [pid 9263:tid 9268] [client 4.235.97.140:38766] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeI1fRP68VyHNvj1e55QkQAAAMM"]
[Fri Apr 17 21:28:29.858890 2026] [:error] [pid 34273:tid 34281] [client 4.235.97.140:60236] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1fWuQDW686mK3dgEPawAAAYY"]
[Fri Apr 17 21:28:30.380687 2026] [:error] [pid 61523:tid 61562] [client 4.235.97.140:44949] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1fsOaH-Pgc7WEf4PciwAAAdQ"]
[Fri Apr 17 21:28:30.916684 2026] [:error] [pid 51878:tid 51893] [client 4.235.97.140:42418] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1fknQhUtMbw9EsganMAAAAQ0"]
[Fri Apr 17 21:28:31.491765 2026] [:error] [pid 61523:tid 61560] [client 4.235.97.140:42388] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1f8OaH-Pgc7WEf4PcjAAAAdI"]
[Fri Apr 17 21:28:32.067776 2026] [:error] [pid 9263:tid 9277] [client 4.235.97.140:57490] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeI1gBP68VyHNvj1e55QmQAAAMw"]
[Fri Apr 17 21:28:32.619323 2026] [:error] [pid 34273:tid 34275] [client 4.235.97.140:42380] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeI1gGuQDW686mK3dgEPbwAAAYA"]
[Fri Apr 17 21:28:33.165787 2026] [:error] [pid 9152:tid 9199] [client 4.235.97.140:42410] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeI1gZJYca8I3TNCwIdp9gAAAEk"]
[Fri Apr 17 21:28:33.759110 2026] [:error] [pid 9263:tid 9289] [client 4.235.97.140:22937] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeI1gRP68VyHNvj1e55QnAAAANg"]
[Fri Apr 17 21:28:34.431434 2026] [:error] [pid 9263:tid 9287] [client 4.235.97.140:54806] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeI1ghP68VyHNvj1e55QnwAAANY"]
[Fri Apr 17 21:28:34.991933 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:60225] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeI1gknQhUtMbw9EsganOAAAAQY"]
[Fri Apr 17 21:28:35.767835 2026] [:error] [pid 61523:tid 61552] [client 4.235.97.140:62417] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeI1g8OaH-Pgc7WEf4PcjwAAAco"]
[Fri Apr 17 21:28:36.366521 2026] [:error] [pid 9263:tid 9281] [client 4.235.97.140:23619] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeI1hBP68VyHNvj1e55QpwAAANA"]
[Fri Apr 17 21:28:36.945916 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:23630] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeI1hBP68VyHNvj1e55QrAAAAME"]
[Fri Apr 17 21:28:37.477969 2026] [:error] [pid 25010:tid 25022] [client 4.235.97.140:21763] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeI1hY-7kkf42RarqQ19_gAAAUk"]
[Fri Apr 17 21:28:38.063726 2026] [:error] [pid 61523:tid 61543] [client 4.235.97.140:22978] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeI1hsOaH-Pgc7WEf4PcmAAAAcE"]
[Fri Apr 17 21:28:38.613669 2026] [:error] [pid 34273:tid 34283] [client 4.235.97.140:60235] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeI1hmuQDW686mK3dgEPcQAAAYg"]
[Fri Apr 17 21:28:39.266022 2026] [:error] [pid 9153:tid 9232] [client 4.235.97.140:21771] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeI1h-MHGxkTZX3c45cRhAAAAI4"]
[Fri Apr 17 21:28:39.950940 2026] [:error] [pid 25010:tid 25013] [client 4.235.97.140:38756] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeI1h4-7kkf42RarqQ1-AQAAAUA"]
[Fri Apr 17 21:28:40.528125 2026] [:error] [pid 9263:tid 9285] [client 4.235.97.140:39303] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeI1iBP68VyHNvj1e55QtQAAANQ"]
[Fri Apr 17 21:28:41.210819 2026] [:error] [pid 9263:tid 9284] [client 4.235.97.140:29386] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeI1iRP68VyHNvj1e55QuQAAANM"]
[Fri Apr 17 21:28:41.815164 2026] [:error] [pid 61523:tid 61563] [client 4.235.97.140:31577] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeI1icOaH-Pgc7WEf4PcngAAAdU"]
[Fri Apr 17 21:28:42.346358 2026] [:error] [pid 9153:tid 9228] [client 4.235.97.140:55473] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeI1iuMHGxkTZX3c45cRhQAAAIo"]
[Fri Apr 17 21:28:42.899204 2026] [:error] [pid 61523:tid 61547] [client 4.235.97.140:31574] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeI1isOaH-Pgc7WEf4PcogAAAcU"]
[Fri Apr 17 21:28:43.494409 2026] [:error] [pid 9153:tid 9229] [client 4.235.97.140:57493] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeI1i-MHGxkTZX3c45cRhwAAAIs"]
[Fri Apr 17 21:28:44.167267 2026] [:error] [pid 34273:tid 34282] [client 4.235.97.140:56021] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI1jGuQDW686mK3dgEPgQAAAYc"]
[Fri Apr 17 21:28:44.756259 2026] [:error] [pid 51878:tid 51903] [client 4.235.97.140:40489] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI1jEnQhUtMbw9EsganRQAAARc"]
[Fri Apr 17 21:28:45.312816 2026] [:error] [pid 9263:tid 9278] [client 4.235.97.140:29416] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI1jRP68VyHNvj1e55QwQAAAM0"]
[Fri Apr 17 21:28:45.897446 2026] [:error] [pid 51878:tid 51892] [client 4.235.97.140:47350] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI1jUnQhUtMbw9EsganRgAAAQw"]
[Fri Apr 17 21:28:46.521677 2026] [:error] [pid 9263:tid 9267] [client 4.235.97.140:2204] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI1jhP68VyHNvj1e55QxAAAAMI"]
[Fri Apr 17 21:28:47.121633 2026] [:error] [pid 51878:tid 51881] [client 4.235.97.140:29420] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI1j0nQhUtMbw9EsganSQAAAQE"]
[Fri Apr 17 21:28:47.679526 2026] [:error] [pid 9263:tid 9268] [client 4.235.97.140:21803] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI1jxP68VyHNvj1e55QxgAAAMM"]
[Fri Apr 17 21:28:48.258055 2026] [:error] [pid 51878:tid 51890] [client 4.235.97.140:35555] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI1kEnQhUtMbw9EsganTgAAAQo"]
[Fri Apr 17 21:28:48.824901 2026] [:error] [pid 51878:tid 51883] [client 4.235.97.140:35528] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI1kEnQhUtMbw9EsganUwAAAQM"]
[Fri Apr 17 21:28:49.373597 2026] [:error] [pid 9263:tid 9286] [client 4.235.97.140:21769] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI1kRP68VyHNvj1e55QzAAAANU"]
[Fri Apr 17 21:28:49.895034 2026] [:error] [pid 9263:tid 9287] [client 4.235.97.140:23018] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI1kRP68VyHNvj1e55QzwAAANY"]
[Fri Apr 17 21:28:50.424996 2026] [:error] [pid 34273:tid 34295] [client 4.235.97.140:21780] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI1kmuQDW686mK3dgEPhQAAAZQ"]
[Fri Apr 17 21:28:50.949790 2026] [:error] [pid 34273:tid 34291] [client 4.235.97.140:39301] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeI1kmuQDW686mK3dgEPhwAAAZA"]
[Fri Apr 17 21:28:51.470338 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:59567] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeI1k0nQhUtMbw9EsganVQAAAQY"]
[Fri Apr 17 21:28:51.988213 2026] [:error] [pid 9153:tid 9230] [client 4.235.97.140:56038] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeI1k-MHGxkTZX3c45cRkQAAAIw"]
[Fri Apr 17 21:28:52.548929 2026] [:error] [pid 9263:tid 9275] [client 4.235.97.140:56029] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeI1lBP68VyHNvj1e55Q1AAAAMo"]
[Fri Apr 17 21:28:53.084769 2026] [:error] [pid 51878:tid 51894] [client 4.235.97.140:58980] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeI1lUnQhUtMbw9EsganWAAAAQ4"]
[Fri Apr 17 21:28:53.635225 2026] [:error] [pid 34273:tid 34289] [client 4.235.97.140:2225] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeI1lWuQDW686mK3dgEPiwAAAY4"]
[Fri Apr 17 21:28:54.180034 2026] [:error] [pid 34273:tid 34280] [client 4.235.97.140:40440] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeI1lmuQDW686mK3dgEPjAAAAYU"]
[Fri Apr 17 21:28:54.763840 2026] [:error] [pid 61523:tid 61550] [client 4.235.97.140:58956] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeI1lsOaH-Pgc7WEf4PcrAAAAcg"]
[Fri Apr 17 21:28:55.328813 2026] [:error] [pid 61523:tid 61547] [client 4.235.97.140:58979] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeI1l8OaH-Pgc7WEf4PcrgAAAcU"]
[Fri Apr 17 21:28:55.867915 2026] [:error] [pid 61523:tid 61541] [client 4.235.97.140:55453] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeI1l8OaH-Pgc7WEf4PcsQAAAcA"]
[Fri Apr 17 21:28:56.442591 2026] [:error] [pid 9263:tid 9276] [client 4.235.97.140:55427] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeI1mBP68VyHNvj1e55Q2wAAAMs"]
[Fri Apr 17 21:28:57.023123 2026] [:error] [pid 9263:tid 9273] [client 4.235.97.140:49271] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeI1mRP68VyHNvj1e55Q3gAAAMg"]
[Fri Apr 17 21:28:57.564224 2026] [:error] [pid 61523:tid 61565] [client 4.235.97.140:56049] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI1mcOaH-Pgc7WEf4PcswAAAdc"]
[Fri Apr 17 21:28:58.086658 2026] [:error] [pid 51878:tid 51889] [client 4.235.97.140:39318] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI1mknQhUtMbw9EsganXgAAAQk"]
[Fri Apr 17 21:28:58.639852 2026] [:error] [pid 9263:tid 9277] [client 4.235.97.140:49229] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI1mhP68VyHNvj1e55Q5gAAAMw"]
[Fri Apr 17 21:28:59.158488 2026] [:error] [pid 9263:tid 9289] [client 4.235.97.140:58974] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI1mxP68VyHNvj1e55Q6gAAANg"]
[Fri Apr 17 21:28:59.718633 2026] [:error] [pid 9263:tid 9282] [client 4.235.97.140:56111] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI1mxP68VyHNvj1e55Q7gAAANE"]
[Fri Apr 17 21:29:00.359029 2026] [:error] [pid 51878:tid 51885] [client 4.235.97.140:48679] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI1nEnQhUtMbw9EsganXwAAAQU"]
[Fri Apr 17 21:29:00.883319 2026] [:error] [pid 9153:tid 9222] [client 4.235.97.140:58996] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI1nOMHGxkTZX3c45cRmgAAAIQ"]
[Fri Apr 17 21:29:01.420951 2026] [:error] [pid 9263:tid 9269] [client 4.235.97.140:56052] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI1nRP68VyHNvj1e55Q8wAAAMQ"]
[Fri Apr 17 21:29:01.943003 2026] [:error] [pid 9263:tid 9277] [client 4.235.97.140:48677] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1nRP68VyHNvj1e55Q9gAAAMw"]
[Fri Apr 17 21:29:02.467788 2026] [:error] [pid 25010:tid 25033] [client 4.235.97.140:40435] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1no-7kkf42RarqQ1-BwAAAVQ"]
[Fri Apr 17 21:29:03.033158 2026] [:error] [pid 25010:tid 25028] [client 4.235.97.140:2311] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1n4-7kkf42RarqQ1-CQAAAU8"]
[Fri Apr 17 21:29:03.571004 2026] [:error] [pid 51878:tid 51890] [client 4.235.97.140:49230] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1n0nQhUtMbw9EsganYQAAAQo"]
[Fri Apr 17 21:29:04.111284 2026] [:error] [pid 9263:tid 9272] [client 4.235.97.140:28794] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeI1oBP68VyHNvj1e55Q_gAAAMc"]
[Fri Apr 17 21:29:04.662275 2026] [:error] [pid 9263:tid 9289] [client 4.235.97.140:50060] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeI1oBP68VyHNvj1e55RAAAAANg"]
[Fri Apr 17 21:29:05.221855 2026] [:error] [pid 9153:tid 9232] [client 4.235.97.140:50092] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeI1oeMHGxkTZX3c45cRnQAAAI4"]
[Fri Apr 17 21:29:05.760080 2026] [:error] [pid 61523:tid 61559] [client 4.235.97.140:59536] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeI1ocOaH-Pgc7WEf4PctwAAAdE"]
[Fri Apr 17 21:29:06.349961 2026] [:error] [pid 9263:tid 9279] [client 4.235.97.140:49279] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeI1ohP68VyHNvj1e55RBgAAAM4"]
[Fri Apr 17 21:29:06.892615 2026] [:error] [pid 51878:tid 51882] [client 4.235.97.140:49237] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeI1oknQhUtMbw9EsganZQAAAQI"]
[Fri Apr 17 21:29:07.466308 2026] [:error] [pid 61523:tid 61545] [client 4.235.97.140:26320] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeI1o8OaH-Pgc7WEf4PcuQAAAcM"]
[Fri Apr 17 21:29:08.114802 2026] [:error] [pid 34273:tid 34296] [client 4.235.97.140:28772] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeI1pGuQDW686mK3dgEPlwAAAZU"]
[Fri Apr 17 21:29:08.677019 2026] [:error] [pid 51878:tid 51904] [client 4.235.97.140:40447] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1pEnQhUtMbw9EsganaQAAARg"]
[Fri Apr 17 21:29:09.218302 2026] [:error] [pid 9263:tid 9288] [client 4.235.97.140:48693] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1pRP68VyHNvj1e55RGgAAANc"]
[Fri Apr 17 21:29:09.767699 2026] [:error] [pid 9263:tid 9285] [client 4.235.97.140:29902] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1pRP68VyHNvj1e55RJAAAANQ"]
[Fri Apr 17 21:29:10.318334 2026] [:error] [pid 9153:tid 9225] [client 4.235.97.140:26344] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeI1puMHGxkTZX3c45cRnwAAAIc"]
[Fri Apr 17 21:29:10.885950 2026] [:error] [pid 61523:tid 61556] [client 4.235.97.140:39328] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeI1psOaH-Pgc7WEf4PcuwAAAc4"]
[Fri Apr 17 21:29:11.447564 2026] [:error] [pid 9152:tid 9209] [client 4.235.97.140:50012] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeI1p5JYca8I3TNCwIdqKQAAAFM"]
[Fri Apr 17 21:29:11.966805 2026] [:error] [pid 9152:tid 9199] [client 4.235.97.140:35524] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeI1p5JYca8I3TNCwIdqKwAAAEk"]
[Fri Apr 17 21:29:12.508383 2026] [:error] [pid 61523:tid 61564] [client 4.235.97.140:49267] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeI1qMOaH-Pgc7WEf4PcvwAAAdY"]
[Fri Apr 17 21:29:13.139209 2026] [:error] [pid 61523:tid 61558] [client 4.235.97.140:47338] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeI1qcOaH-Pgc7WEf4PcwgAAAdA"]
[Fri Apr 17 21:29:13.669647 2026] [:error] [pid 61523:tid 61557] [client 4.235.97.140:39298] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeI1qcOaH-Pgc7WEf4PcxQAAAc8"]
[Fri Apr 17 21:29:14.195885 2026] [:error] [pid 9152:tid 9212] [client 4.235.97.140:49993] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeI1qpJYca8I3TNCwIdqNgAAAFY"]
[Fri Apr 17 21:29:14.732907 2026] [:error] [pid 9152:tid 9200] [client 4.235.97.140:58955] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeI1qpJYca8I3TNCwIdqNwAAAEo"]
[Fri Apr 17 21:29:15.307998 2026] [:error] [pid 51878:tid 51899] [client 4.235.97.140:56088] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeI1q0nQhUtMbw9EsganbwAAARM"]
[Fri Apr 17 21:29:15.853006 2026] [:error] [pid 34273:tid 34279] [client 4.235.97.140:22508] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeI1q2uQDW686mK3dgEPnQAAAYQ"]
[Fri Apr 17 21:29:16.384996 2026] [:error] [pid 61523:tid 61544] [client 4.235.97.140:48672] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeI1rMOaH-Pgc7WEf4PcywAAAcI"]
[Fri Apr 17 21:29:16.903266 2026] [:error] [pid 61523:tid 61550] [client 4.235.97.140:49236] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aeI1rMOaH-Pgc7WEf4PczgAAAcg"]
[Fri Apr 17 21:29:17.430764 2026] [:error] [pid 9153:tid 9219] [client 4.235.97.140:29904] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI1reMHGxkTZX3c45cRoQAAAIE"]
[Fri Apr 17 21:29:17.967016 2026] [:error] [pid 61523:tid 61556] [client 4.235.97.140:49276] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI1rcOaH-Pgc7WEf4PczwAAAc4"]
[Fri Apr 17 21:29:18.499041 2026] [:error] [pid 9151:tid 9178] [client 4.235.97.140:49237] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI1rshTVuRPkua22vREFgAAABE"]
[Fri Apr 17 21:29:19.038996 2026] [:error] [pid 9263:tid 9275] [client 4.235.97.140:59582] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI1rxP68VyHNvj1e55RLwAAAMo"]
[Fri Apr 17 21:29:19.570398 2026] [:error] [pid 34273:tid 34280] [client 4.235.97.140:56115] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeI1r2uQDW686mK3dgEPngAAAYU"]
[Fri Apr 17 21:29:20.096802 2026] [:error] [pid 9263:tid 9272] [client 4.235.97.140:41771] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeI1sBP68VyHNvj1e55RMwAAAMc"]
[Fri Apr 17 21:29:20.619121 2026] [:error] [pid 9263:tid 9267] [client 4.235.97.140:59533] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeI1sBP68VyHNvj1e55RNQAAAMI"]
[Fri Apr 17 21:29:21.161794 2026] [:error] [pid 9152:tid 9191] [client 4.235.97.140:49246] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeI1sZJYca8I3TNCwIdqQQAAAEE"]
[Fri Apr 17 21:29:21.699083 2026] [:error] [pid 61523:tid 61566] [client 4.235.97.140:28777] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeI1scOaH-Pgc7WEf4Pc1AAAAdg"]
[Fri Apr 17 21:29:22.250955 2026] [:error] [pid 9263:tid 9281] [client 4.235.97.140:26334] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeI1shP68VyHNvj1e55ROgAAANA"]
[Fri Apr 17 21:29:22.782684 2026] [:error] [pid 9263:tid 9273] [client 4.235.97.140:41741] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeI1shP68VyHNvj1e55ROwAAAMg"]
[Fri Apr 17 21:29:23.433365 2026] [proxy_fcgi:error] [pid 9263:tid 9275] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:23.696059 2026] [proxy_fcgi:error] [pid 9263:tid 9279] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:23.957999 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:24.227037 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:24.761455 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:25.300965 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:25.562320 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:26.086497 2026] [proxy_fcgi:error] [pid 9263:tid 9279] [client 4.235.97.140:56068] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:29:26.349528 2026] [:error] [pid 9263:tid 9284] [client 4.235.97.140:56068] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI1thP68VyHNvj1e55RVQAAANM"]
[Fri Apr 17 21:29:26.882581 2026] [:error] [pid 25010:tid 25019] [client 4.235.97.140:48651] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI1to-7kkf42RarqQ1-EwAAAUY"]
[Fri Apr 17 21:29:27.450106 2026] [:error] [pid 25010:tid 25014] [client 4.235.97.140:48692] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI1t4-7kkf42RarqQ1-FQAAAUE"]
[Fri Apr 17 21:29:28.006012 2026] [:error] [pid 51878:tid 51888] [client 4.235.97.140:50085] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI1uEnQhUtMbw9EsgandAAAAQg"]
[Fri Apr 17 21:29:28.537117 2026] [:error] [pid 25010:tid 25021] [client 4.235.97.140:50020] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1uI-7kkf42RarqQ1-GAAAAUg"]
[Fri Apr 17 21:29:29.074220 2026] [:error] [pid 61523:tid 61562] [client 4.235.97.140:50066] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1ucOaH-Pgc7WEf4Pc2QAAAdQ"]
[Fri Apr 17 21:29:29.639020 2026] [:error] [pid 61523:tid 61564] [client 4.235.97.140:41776] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1ucOaH-Pgc7WEf4Pc2gAAAdY"]
[Fri Apr 17 21:29:30.158855 2026] [:error] [pid 25010:tid 25015] [client 4.235.97.140:48615] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeI1uo-7kkf42RarqQ1-JAAAAUI"]
[Fri Apr 17 21:29:30.729792 2026] [:error] [pid 9263:tid 9280] [client 4.235.97.140:48643] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeI1uhP68VyHNvj1e55RVwAAAM8"]
[Fri Apr 17 21:29:31.257481 2026] [:error] [pid 34273:tid 34284] [client 4.235.97.140:22516] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeI1u2uQDW686mK3dgEPogAAAYk"]
[Fri Apr 17 21:29:31.824517 2026] [:error] [pid 51878:tid 51901] [client 4.235.97.140:48696] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeI1u0nQhUtMbw9EsganewAAARU"]
[Fri Apr 17 21:29:32.350854 2026] [:error] [pid 51878:tid 51899] [client 4.235.97.140:22514] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeI1vEnQhUtMbw9EsgangAAAARM"]
[Fri Apr 17 21:29:32.927852 2026] [:error] [pid 51878:tid 51902] [client 4.235.97.140:2579] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeI1vEnQhUtMbw9EsganhQAAARY"]
[Fri Apr 17 21:29:33.459492 2026] [:error] [pid 51878:tid 51892] [client 4.235.97.140:56084] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeI1vUnQhUtMbw9EsganiAAAAQw"]
[Fri Apr 17 21:29:33.983980 2026] [:error] [pid 34273:tid 34291] [client 4.235.97.140:28786] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeI1vWuQDW686mK3dgEPowAAAZA"]
[Fri Apr 17 21:29:34.513665 2026] [:error] [pid 51878:tid 51890] [client 4.235.97.140:55419] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeI1vknQhUtMbw9EsganjwAAAQo"]
[Fri Apr 17 21:29:35.041044 2026] [:error] [pid 34273:tid 34298] [client 4.235.97.140:29912] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeI1v2uQDW686mK3dgEPpgAAAZc"]
[Fri Apr 17 21:29:35.560229 2026] [:error] [pid 51878:tid 51891] [client 4.235.97.140:2607] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeI1v0nQhUtMbw9EsganlAAAAQs"]
[Fri Apr 17 21:29:36.082860 2026] [:error] [pid 9152:tid 9199] [client 4.235.97.140:29941] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeI1wJJYca8I3TNCwIdqXAAAAEk"]
[Fri Apr 17 21:29:36.612565 2026] [:error] [pid 51878:tid 51889] [client 4.235.97.140:26353] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeI1wEnQhUtMbw9EsganmgAAAQk"]
[Fri Apr 17 21:29:37.142510 2026] [:error] [pid 51878:tid 51895] [client 4.235.97.140:26364] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeI1wUnQhUtMbw9EsgannAAAAQ8"]
[Fri Apr 17 21:29:37.662063 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:48655] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeI1wUnQhUtMbw9EsgannwAAAQY"]
[Fri Apr 17 21:29:38.195073 2026] [:error] [pid 9152:tid 9202] [client 4.235.97.140:55420] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeI1wpJYca8I3TNCwIdqYQAAAEw"]
[Fri Apr 17 21:29:38.721674 2026] [:error] [pid 9151:tid 9180] [client 4.235.97.140:26318] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeI1wshTVuRPkua22vREGgAAABM"]
[Fri Apr 17 21:29:39.242816 2026] [:error] [pid 51878:tid 51882] [client 4.235.97.140:50068] [client 4.235.97.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeI1w0nQhUtMbw9EsganowAAAQI"]
[Fri Apr 17 21:29:39.769289 2026] [:error] [pid 61523:tid 61551] [client 4.235.97.140:28755] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeI1w8OaH-Pgc7WEf4Pc4AAAAck"]
[Fri Apr 17 21:29:40.301432 2026] [:error] [pid 51878:tid 51886] [client 4.235.97.140:48658] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeI1xEnQhUtMbw9EsganpgAAAQY"]
[Fri Apr 17 21:29:40.820971 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:55421] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeI1xBP68VyHNvj1e55RXwAAAME"]
[Fri Apr 17 21:29:41.345014 2026] [:error] [pid 51878:tid 51890] [client 4.235.97.140:49228] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeI1xUnQhUtMbw9EsganqAAAAQo"]
[Fri Apr 17 21:29:41.863925 2026] [:error] [pid 34273:tid 34290] [client 4.235.97.140:26311] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI1xWuQDW686mK3dgEPtwAAAY8"]
[Fri Apr 17 21:29:42.412795 2026] [:error] [pid 34273:tid 34283] [client 4.235.97.140:26342] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI1xmuQDW686mK3dgEPuwAAAYg"]
[Fri Apr 17 21:29:43.007985 2026] [:error] [pid 9152:tid 9199] [client 4.235.97.140:26360] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI1x5JYca8I3TNCwIdqbwAAAEk"]
[Fri Apr 17 21:29:43.560195 2026] [:error] [pid 25010:tid 25015] [client 4.235.97.140:22497] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI1x4-7kkf42RarqQ1-KQAAAUI"]
[Fri Apr 17 21:29:44.086792 2026] [:error] [pid 9152:tid 9193] [client 4.235.97.140:28736] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeI1yJJYca8I3TNCwIdqcgAAAEM"]
[Fri Apr 17 21:29:44.663506 2026] [:error] [pid 9152:tid 9203] [client 4.235.97.140:55404] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeI1yJJYca8I3TNCwIdqdQAAAE0"]
[Fri Apr 17 21:29:45.232141 2026] [:error] [pid 9152:tid 9201] [client 4.235.97.140:50108] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeI1yZJYca8I3TNCwIdqegAAAEs"]
[Fri Apr 17 21:29:45.806653 2026] [:error] [pid 9152:tid 9192] [client 4.235.97.140:22484] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeI1yZJYca8I3TNCwIdqfQAAAEI"]
[Fri Apr 17 21:29:46.366700 2026] [:error] [pid 9263:tid 9275] [client 4.235.97.140:41778] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeI1yhP68VyHNvj1e55RZAAAAMo"]
[Fri Apr 17 21:29:46.936407 2026] [:error] [pid 9263:tid 9279] [client 4.235.97.140:58995] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeI1yhP68VyHNvj1e55RaAAAAM4"]
[Fri Apr 17 21:29:47.465864 2026] [:error] [pid 9263:tid 9284] [client 4.235.97.140:41749] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeI1yxP68VyHNvj1e55RagAAANM"]
[Fri Apr 17 21:29:48.016219 2026] [:error] [pid 9263:tid 9271] [client 4.235.97.140:55388] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeI1zBP68VyHNvj1e55RbgAAAMY"]
[Fri Apr 17 21:29:48.535658 2026] [:error] [pid 51878:tid 51887] [client 4.235.97.140:28792] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeI1zEnQhUtMbw9EsganqwAAAQc"]
[Fri Apr 17 21:29:49.056124 2026] [:error] [pid 51878:tid 51899] [client 4.235.97.140:30349] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeI1zUnQhUtMbw9EsganrQAAARM"]
[Fri Apr 17 21:29:49.585019 2026] [:error] [pid 9263:tid 9281] [client 4.235.97.140:21874] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeI1zRP68VyHNvj1e55RdAAAANA"]
[Fri Apr 17 21:29:50.109649 2026] [:error] [pid 9263:tid 9275] [client 4.235.97.140:21829] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeI1zhP68VyHNvj1e55RdQAAAMo"]
[Fri Apr 17 21:29:50.634522 2026] [:error] [pid 51878:tid 51890] [client 4.235.97.140:57838] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeI1zknQhUtMbw9EsgansgAAAQo"]
[Fri Apr 17 21:29:51.171056 2026] [:error] [pid 51878:tid 51898] [client 4.235.97.140:55402] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeI1z0nQhUtMbw9EsgantwAAARI"]
[Fri Apr 17 21:29:51.699384 2026] [:error] [pid 51878:tid 51892] [client 4.235.97.140:2570] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeI1z0nQhUtMbw9EsganuwAAAQw"]
[Fri Apr 17 21:29:52.222856 2026] [:error] [pid 9263:tid 9272] [client 4.235.97.140:21856] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeI10BP68VyHNvj1e55ReQAAAMc"]
[Fri Apr 17 21:29:52.747789 2026] [:error] [pid 9263:tid 9276] [client 4.235.97.140:26313] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeI10BP68VyHNvj1e55RewAAAMs"]
[Fri Apr 17 21:29:53.298649 2026] [:error] [pid 61523:tid 61547] [client 4.235.97.140:22472] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeI10cOaH-Pgc7WEf4Pc5wAAAcU"]
[Fri Apr 17 21:29:53.836370 2026] [:error] [pid 9263:tid 9268] [client 4.235.97.140:2567] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeI10RP68VyHNvj1e55RfwAAAMM"]
[Fri Apr 17 21:29:54.378800 2026] [:error] [pid 51878:tid 51891] [client 4.235.97.140:30395] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeI10knQhUtMbw9EsganyAAAAQs"]
[Fri Apr 17 21:29:54.943582 2026] [:error] [pid 51878:tid 51902] [client 4.235.97.140:41735] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeI10knQhUtMbw9EsganzAAAARY"]
[Fri Apr 17 21:29:55.519702 2026] [:error] [pid 51878:tid 51895] [client 4.235.97.140:55422] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeI100nQhUtMbw9Esgan0wAAAQ8"]
[Fri Apr 17 21:29:56.069134 2026] [:error] [pid 51878:tid 51898] [client 4.235.97.140:42985] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeI11EnQhUtMbw9Esgan2gAAARI"]
[Fri Apr 17 21:29:56.603590 2026] [:error] [pid 9152:tid 9200] [client 4.235.97.140:41744] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeI11JJYca8I3TNCwIdqkwAAAEo"]
[Fri Apr 17 21:29:57.131468 2026] [:error] [pid 9152:tid 9194] [client 4.235.97.140:22509] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeI11ZJYca8I3TNCwIdqmAAAAEQ"]
[Fri Apr 17 21:29:57.661510 2026] [:error] [pid 9263:tid 9287] [client 4.235.97.140:30346] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeI11RP68VyHNvj1e55RhAAAANY"]
[Fri Apr 17 21:29:58.180951 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:23563] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeI11hP68VyHNvj1e55RhwAAAME"]
[Fri Apr 17 21:29:58.737412 2026] [:error] [pid 9263:tid 9279] [client 4.235.97.140:42963] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeI11hP68VyHNvj1e55RiwAAAM4"]
[Fri Apr 17 21:29:59.273658 2026] [:error] [pid 9263:tid 9271] [client 4.235.97.140:2592] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeI11xP68VyHNvj1e55RkgAAAMY"]
[Fri Apr 17 21:29:59.837522 2026] [:error] [pid 9263:tid 9287] [client 4.235.97.140:23609] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeI11xP68VyHNvj1e55RlQAAANY"]
[Fri Apr 17 21:30:00.426999 2026] [:error] [pid 9263:tid 9288] [client 4.235.97.140:23553] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeI12BP68VyHNvj1e55RlgAAANc"]
[Fri Apr 17 21:30:00.987226 2026] [:error] [pid 9263:tid 9265] [client 4.235.97.140:39275] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeI12BP68VyHNvj1e55RmwAAAMA"]
[Fri Apr 17 21:30:01.615702 2026] [:error] [pid 61523:tid 61557] [client 4.235.97.140:55415] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeI12cOaH-Pgc7WEf4Pc7AAAAc8"]
[Fri Apr 17 21:30:02.165816 2026] [:error] [pid 61523:tid 61560] [client 4.235.97.140:32121] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeI12sOaH-Pgc7WEf4Pc8AAAAdI"]
[Fri Apr 17 21:30:02.750323 2026] [:error] [pid 61523:tid 61544] [client 4.235.97.140:32073] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeI12sOaH-Pgc7WEf4Pc9AAAAcI"]
[Fri Apr 17 21:30:03.269332 2026] [:error] [pid 9152:tid 9208] [client 4.235.97.140:61869] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeI125JYca8I3TNCwIdqnwAAAFI"]
[Fri Apr 17 21:30:03.858910 2026] [:error] [pid 9263:tid 9283] [client 4.235.97.140:21887] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeI12xP68VyHNvj1e55RngAAANI"]
[Fri Apr 17 21:30:04.448935 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:32071] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeI13BP68VyHNvj1e55RowAAAME"]
[Fri Apr 17 21:30:05.031438 2026] [:error] [pid 9263:tid 9277] [client 4.235.97.140:39276] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeI13RP68VyHNvj1e55RpgAAAMw"]
[Fri Apr 17 21:30:05.577191 2026] [:error] [pid 34273:tid 34299] [client 4.235.97.140:39241] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeI13WuQDW686mK3dgEP3QAAAZg"]
[Fri Apr 17 21:30:06.104711 2026] [:error] [pid 9153:tid 9233] [client 4.235.97.140:44881] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeI13uMHGxkTZX3c45cRtAAAAI8"]
[Fri Apr 17 21:30:06.634795 2026] [:error] [pid 9263:tid 9284] [client 4.235.97.140:57812] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeI13hP68VyHNvj1e55RqgAAANM"]
[Fri Apr 17 21:30:07.161866 2026] [:error] [pid 9263:tid 9289] [client 4.235.97.140:39256] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeI13xP68VyHNvj1e55RqwAAANg"]
[Fri Apr 17 21:30:07.724557 2026] [:error] [pid 9152:tid 9203] [client 4.235.97.140:30385] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeI135JYca8I3TNCwIdqqAAAAE0"]
[Fri Apr 17 21:30:08.281113 2026] [:error] [pid 9152:tid 9207] [client 4.235.97.140:32113] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeI14JJYca8I3TNCwIdqrAAAAFE"]
[Fri Apr 17 21:30:08.815268 2026] [:error] [pid 9152:tid 9205] [client 4.235.97.140:42991] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeI14JJYca8I3TNCwIdqrQAAAE8"]
[Fri Apr 17 21:30:09.348270 2026] [:error] [pid 9153:tid 9242] [client 4.235.97.140:51195] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeI14eMHGxkTZX3c45cRugAAAJg"]
[Fri Apr 17 21:30:09.872649 2026] [:error] [pid 61523:tid 61562] [client 4.235.97.140:62969] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeI14cOaH-Pgc7WEf4Pc_AAAAdQ"]
[Fri Apr 17 21:30:10.393229 2026] [:error] [pid 9152:tid 9213] [client 4.235.97.140:21852] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeI14pJYca8I3TNCwIdqsQAAAFc"]
[Fri Apr 17 21:30:10.920474 2026] [:error] [pid 9263:tid 9276] [client 4.235.97.140:44899] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeI14hP68VyHNvj1e55RtwAAAMs"]
[Fri Apr 17 21:30:11.439553 2026] [:error] [pid 9263:tid 9288] [client 4.235.97.140:39251] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeI14xP68VyHNvj1e55RvgAAANc"]
[Fri Apr 17 21:30:11.958503 2026] [:error] [pid 9263:tid 9275] [client 4.235.97.140:62425] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeI14xP68VyHNvj1e55RwQAAAMo"]
[Fri Apr 17 21:30:12.480072 2026] [:error] [pid 9263:tid 9282] [client 4.235.97.140:51153] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeI15BP68VyHNvj1e55RxwAAANE"]
[Fri Apr 17 21:30:13.002900 2026] [:error] [pid 25010:tid 25030] [client 4.235.97.140:42953] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeI15Y-7kkf42RarqQ1-NAAAAVE"]
[Fri Apr 17 21:30:13.538480 2026] [:error] [pid 9263:tid 9268] [client 4.235.97.140:23607] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeI15RP68VyHNvj1e55RywAAAMM"]
[Fri Apr 17 21:30:14.073010 2026] [:error] [pid 9263:tid 9282] [client 4.235.97.140:62925] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeI15hP68VyHNvj1e55RzgAAANE"]
[Fri Apr 17 21:30:14.600761 2026] [:error] [pid 9263:tid 9276] [client 4.235.97.140:23611] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeI15hP68VyHNvj1e55R0gAAAMs"]
[Fri Apr 17 21:30:15.137814 2026] [:error] [pid 9152:tid 9196] [client 4.235.97.140:2940] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeI155JYca8I3TNCwIdqtQAAAEY"]
[Fri Apr 17 21:30:15.655216 2026] [:error] [pid 9151:tid 9179] [client 4.235.97.140:62934] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeI158hTVuRPkua22vREOgAAABI"]
[Fri Apr 17 21:30:16.206388 2026] [:error] [pid 9151:tid 9176] [client 4.235.97.140:39255] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeI16MhTVuRPkua22vREOwAAAA8"]
[Fri Apr 17 21:30:16.736532 2026] [:error] [pid 9263:tid 9274] [client 4.235.97.140:39286] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeI16BP68VyHNvj1e55R3AAAAMk"]
[Fri Apr 17 21:30:17.256780 2026] [:error] [pid 9263:tid 9279] [client 4.235.97.140:44874] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeI16RP68VyHNvj1e55R4gAAAM4"]
[Fri Apr 17 21:30:17.774439 2026] [:error] [pid 9263:tid 9282] [client 4.235.97.140:42999] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeI16RP68VyHNvj1e55R5QAAANE"]
[Fri Apr 17 21:30:18.303750 2026] [:error] [pid 9152:tid 9203] [client 4.235.97.140:51176] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeI16pJYca8I3TNCwIdqtgAAAE0"]
[Fri Apr 17 21:30:18.827160 2026] [:error] [pid 9263:tid 9279] [client 4.235.97.140:2601] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI16hP68VyHNvj1e55R7wAAAM4"]
[Fri Apr 17 21:30:19.353799 2026] [:error] [pid 9152:tid 9210] [client 4.235.97.140:44867] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI165JYca8I3TNCwIdqtwAAAFQ"]
[Fri Apr 17 21:30:19.875182 2026] [:error] [pid 9263:tid 9271] [client 4.235.97.140:51167] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI16xP68VyHNvj1e55R9gAAAMY"]
[Fri Apr 17 21:30:20.417300 2026] [:error] [pid 9152:tid 9197] [client 4.235.97.140:44867] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeI17JJYca8I3TNCwIdquQAAAEc"]
[Fri Apr 17 21:30:20.939069 2026] [:error] [pid 34273:tid 34282] [client 4.235.97.140:23591] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeI17GuQDW686mK3dgEP5AAAAYc"]
[Fri Apr 17 21:30:21.467187 2026] [:error] [pid 9263:tid 9269] [client 4.235.97.140:48587] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeI17RP68VyHNvj1e55R-wAAAMQ"]
[Fri Apr 17 21:30:21.985914 2026] [:error] [pid 9263:tid 9266] [client 4.235.97.140:21880] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeI17RP68VyHNvj1e55R_gAAAME"]
[Fri Apr 17 21:30:22.505586 2026] [:error] [pid 61523:tid 61553] [client 4.235.97.140:30985] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeI17sOaH-Pgc7WEf4Pc_wAAAcs"]
[Fri Apr 17 21:30:23.022356 2026] [:error] [pid 34273:tid 34288] [client 4.235.97.140:26957] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeI172uQDW686mK3dgEP5gAAAY0"]
[Fri Apr 17 21:30:23.543019 2026] [:error] [pid 9151:tid 9182] [client 4.235.97.140:38092] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeI178hTVuRPkua22vREQAAAABU"]
[Fri Apr 17 21:30:24.062094 2026] [:error] [pid 61523:tid 61556] [client 4.235.97.140:38086] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeI18MOaH-Pgc7WEf4PdAgAAAc4"]
[Fri Apr 17 21:30:24.586771 2026] [:error] [pid 9152:tid 9212] [client 4.235.97.140:26951] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeI18JJYca8I3TNCwIdqvQAAAFY"]
[Fri Apr 17 21:30:25.119236 2026] [:error] [pid 9152:tid 9213] [client 4.235.97.140:38082] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file21.php"] [unique_id "aeI18ZJYca8I3TNCwIdqvwAAAFc"]
[Fri Apr 17 21:30:25.644112 2026] [:error] [pid 9151:tid 9184] [client 4.235.97.140:51151] [client 4.235.97.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file21.php"] [unique_id "aeI18chTVuRPkua22vREQwAAABc"]
[Fri Apr 17 21:30:26.171971 2026] [proxy_fcgi:error] [pid 61523:tid 61543] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:30:26.435434 2026] [proxy_fcgi:error] [pid 61523:tid 61545] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:30:26.697816 2026] [proxy_fcgi:error] [pid 61523:tid 61551] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:30:26.960663 2026] [proxy_fcgi:error] [pid 61523:tid 61548] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:30:27.225392 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:30:27.488465 2026] [proxy_fcgi:error] [pid 61523:tid 61546] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:30:27.753534 2026] [proxy_fcgi:error] [pid 61523:tid 61544] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 21:30:28.016780 2026] [proxy_fcgi:error] [pid 61523:tid 61549] [client 4.235.97.140:48630] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:47.628283 2026] [proxy_fcgi:error] [pid 59136:tid 59163] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:47.909692 2026] [proxy_fcgi:error] [pid 59136:tid 59147] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:48.171473 2026] [proxy_fcgi:error] [pid 59136:tid 59151] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:48.434706 2026] [proxy_fcgi:error] [pid 59136:tid 59156] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:48.730136 2026] [proxy_fcgi:error] [pid 59136:tid 59141] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:48.992995 2026] [proxy_fcgi:error] [pid 59136:tid 59142] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:49.262478 2026] [proxy_fcgi:error] [pid 59136:tid 59162] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:49.524261 2026] [proxy_fcgi:error] [pid 59136:tid 59157] [client 4.235.108.154:28675] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:49.806002 2026] [:error] [pid 59136:tid 59149] [client 4.235.108.154:28675] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeJbiSaoiUyiIR3EhLWX1QAAAMo"]
[Sat Apr 18 00:10:51.401617 2026] [proxy_fcgi:error] [pid 59043:tid 59090] [client 4.235.108.154:29395] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:51.665927 2026] [proxy_fcgi:error] [pid 59043:tid 59078] [client 4.235.108.154:29395] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:10:51.947987 2026] [:error] [pid 59043:tid 59077] [client 4.235.108.154:29395] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeJbi4RtUGE9SfUh2wz8uAAAAEM"]
[Sat Apr 18 00:10:56.161596 2026] [:error] [pid 59044:tid 59121] [client 4.235.108.154:20928] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeJbkAFamkFyEtD_SMGh-gAAAJQ"]
[Sat Apr 18 00:11:01.770493 2026] [:error] [pid 59136:tid 59143] [client 4.235.108.154:26983] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "aeJblSaoiUyiIR3EhLWX8wAAAMQ"]
[Sat Apr 18 00:11:09.012735 2026] [:error] [pid 59042:tid 59054] [client 4.235.108.154:7574] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeJbnZ6p5oql0UklEBIbagAAAAc"]
[Sat Apr 18 00:11:11.170308 2026] [:error] [pid 59043:tid 59074] [client 4.235.108.154:20939] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeJbn4RtUGE9SfUh2wz9AgAAAEA"]
[Sat Apr 18 00:11:12.245170 2026] [:error] [pid 59043:tid 59093] [client 4.235.108.154:26814] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeJboIRtUGE9SfUh2wz9CgAAAFM"]
[Sat Apr 18 00:11:13.186641 2026] [:error] [pid 59043:tid 59079] [client 4.235.108.154:20954] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeJboYRtUGE9SfUh2wz9DgAAAEU"]
[Sat Apr 18 00:11:14.233305 2026] [:error] [pid 59136:tid 59156] [client 4.235.108.154:62853] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeJboiaoiUyiIR3EhLWYEwAAANE"]
[Sat Apr 18 00:11:17.564161 2026] [:error] [pid 59136:tid 59149] [client 4.235.108.154:26969] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeJbpSaoiUyiIR3EhLWYGgAAAMo"]
[Sat Apr 18 00:11:23.760413 2026] [:error] [pid 59042:tid 59055] [client 4.235.108.154:32565] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/state.php"] [unique_id "aeJbq56p5oql0UklEBIbnwAAAAg"]
[Sat Apr 18 00:11:34.994462 2026] [:error] [pid 59042:tid 59068] [client 4.235.108.154:28722] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeJbtp6p5oql0UklEBIb4wAAABU"]
[Sat Apr 18 00:11:48.493322 2026] [:error] [pid 59042:tid 59067] [client 4.235.108.154:28373] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeJbxJ6p5oql0UklEBIcDAAAABQ"]
[Sat Apr 18 00:11:51.641651 2026] [proxy_fcgi:error] [pid 59042:tid 59065] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:51.907596 2026] [proxy_fcgi:error] [pid 59042:tid 59049] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:52.191268 2026] [proxy_fcgi:error] [pid 59042:tid 59054] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:53.251342 2026] [proxy_fcgi:error] [pid 59042:tid 59065] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:53.513298 2026] [proxy_fcgi:error] [pid 59042:tid 59056] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:53.780761 2026] [proxy_fcgi:error] [pid 59042:tid 59062] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:54.616403 2026] [proxy_fcgi:error] [pid 59042:tid 59068] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:54.888984 2026] [proxy_fcgi:error] [pid 59042:tid 59060] [client 4.235.108.154:23885] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:55.507982 2026] [:error] [pid 59042:tid 59062] [client 4.235.108.154:23885] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aeJby56p5oql0UklEBIcSgAAAA8"]
[Sat Apr 18 00:11:57.385778 2026] [proxy_fcgi:error] [pid 59136:tid 59143] [client 4.235.108.154:36557] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:11:57.689383 2026] [:error] [pid 59136:tid 59156] [client 4.235.108.154:36557] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJbzSaoiUyiIR3EhLWYywAAANE"]
[Sat Apr 18 00:11:59.367382 2026] [:error] [pid 59043:tid 59078] [client 4.235.108.154:7776] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJbz4RtUGE9SfUh2wz9qgAAAEQ"]
[Sat Apr 18 00:12:01.860039 2026] [:error] [pid 59136:tid 59149] [client 4.235.108.154:24673] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJb0SaoiUyiIR3EhLWY3gAAAMo"]
[Sat Apr 18 00:12:03.579069 2026] [:error] [pid 59136:tid 59152] [client 4.235.108.154:20699] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJb0yaoiUyiIR3EhLWY5gAAAM0"]
[Sat Apr 18 00:12:04.831014 2026] [:error] [pid 59136:tid 59160] [client 4.235.108.154:27967] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeJb1CaoiUyiIR3EhLWY8wAAANU"]
[Sat Apr 18 00:12:06.132416 2026] [:error] [pid 59043:tid 59087] [client 4.235.108.154:20766] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeJb1oRtUGE9SfUh2wz9wgAAAE0"]
[Sat Apr 18 00:12:09.501563 2026] [:error] [pid 59136:tid 59161] [client 4.235.108.154:28192] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeJb2SaoiUyiIR3EhLWZGgAAANY"]
[Sat Apr 18 00:12:16.751725 2026] [:error] [pid 59044:tid 59116] [client 4.235.108.154:29742] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeJb4AFamkFyEtD_SMGjOQAAAI8"]
[Sat Apr 18 00:12:23.458411 2026] [:error] [pid 59042:tid 59062] [client 4.235.108.154:7827] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeJb556p5oql0UklEBIcvQAAAA8"]
[Sat Apr 18 00:12:31.220215 2026] [:error] [pid 59136:tid 59147] [client 4.235.108.154:32922] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeJb7yaoiUyiIR3EhLWZXAAAAMg"]
[Sat Apr 18 00:12:36.363779 2026] [:error] [pid 59044:tid 59110] [client 4.235.108.154:37078] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/footer.php"] [unique_id "aeJb9AFamkFyEtD_SMGjjwAAAIk"]
[Sat Apr 18 00:12:38.446621 2026] [:error] [pid 59042:tid 59049] [client 4.235.108.154:37678] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/footer.php"] [unique_id "aeJb9p6p5oql0UklEBIdBQAAAAI"]
[Sat Apr 18 00:12:39.747396 2026] [:error] [pid 59043:tid 59078] [client 4.235.108.154:38468] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/footer.php"] [unique_id "aeJb94RtUGE9SfUh2wz-BQAAAEQ"]
[Sat Apr 18 00:12:40.825581 2026] [:error] [pid 59042:tid 59060] [client 4.235.108.154:37103] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/footer.php"] [unique_id "aeJb-J6p5oql0UklEBIdDQAAAA0"]
[Sat Apr 18 00:12:41.767300 2026] [:error] [pid 59136:tid 59158] [client 4.235.108.154:7423] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeJb-SaoiUyiIR3EhLWZaAAAANM"]
[Sat Apr 18 00:12:42.920326 2026] [:error] [pid 59136:tid 59140] [client 4.235.108.154:26423] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeJb-iaoiUyiIR3EhLWZbAAAAME"]
[Sat Apr 18 00:12:44.140337 2026] [:error] [pid 59044:tid 59102] [client 4.235.108.154:20307] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeJb_AFamkFyEtD_SMGjmgAAAIE"]
[Sat Apr 18 00:12:45.748518 2026] [:error] [pid 59044:tid 59106] [client 4.235.108.154:7389] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeJb_QFamkFyEtD_SMGjogAAAIU"]
[Sat Apr 18 00:12:46.607470 2026] [:error] [pid 59044:tid 59120] [client 4.235.108.154:20781] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeJb_gFamkFyEtD_SMGjpAAAAJM"]
[Sat Apr 18 00:12:47.662595 2026] [:error] [pid 59136:tid 59140] [client 4.235.108.154:19977] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeJb_yaoiUyiIR3EhLWZiwAAAME"]
[Sat Apr 18 00:12:49.156454 2026] [:error] [pid 59043:tid 59082] [client 4.235.108.154:7392] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeJcAYRtUGE9SfUh2wz-FAAAAEg"]
[Sat Apr 18 00:12:50.820969 2026] [:error] [pid 59044:tid 59113] [client 4.235.108.154:20780] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeJcAgFamkFyEtD_SMGjugAAAIw"]
[Sat Apr 18 00:12:51.993185 2026] [:error] [pid 59042:tid 59057] [client 4.235.108.154:20006] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeJcA56p5oql0UklEBIdGgAAAAo"]
[Sat Apr 18 00:12:54.029728 2026] [:error] [pid 59136:tid 59159] [client 4.235.108.154:20616] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeJcBiaoiUyiIR3EhLWZ1AAAANQ"]
[Sat Apr 18 00:13:04.265453 2026] [proxy_fcgi:error] [pid 59043:tid 59090] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:04.531514 2026] [proxy_fcgi:error] [pid 59043:tid 59077] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:04.799645 2026] [proxy_fcgi:error] [pid 59043:tid 59093] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:05.064144 2026] [proxy_fcgi:error] [pid 59043:tid 59078] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:05.327423 2026] [proxy_fcgi:error] [pid 59043:tid 59081] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:05.590921 2026] [proxy_fcgi:error] [pid 59043:tid 59085] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:05.883204 2026] [proxy_fcgi:error] [pid 59043:tid 59076] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:07.949482 2026] [proxy_fcgi:error] [pid 59043:tid 59077] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:08.211601 2026] [proxy_fcgi:error] [pid 59043:tid 59095] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:08.585474 2026] [proxy_fcgi:error] [pid 59043:tid 59075] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:08.857466 2026] [proxy_fcgi:error] [pid 59043:tid 59081] [client 4.235.108.154:34572] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:13:09.116595 2026] [:error] [pid 59043:tid 59085] [client 4.235.108.154:34572] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeJcFYRtUGE9SfUh2wz-SgAAAEs"]
[Sat Apr 18 00:13:13.077287 2026] [:error] [pid 59042:tid 59059] [client 4.235.108.154:27498] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeJcGZ6p5oql0UklEBIdbAAAAAw"]
[Sat Apr 18 00:13:15.326813 2026] [:error] [pid 59043:tid 59075] [client 4.235.108.154:38869] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeJcG4RtUGE9SfUh2wz-UQAAAEE"]
[Sat Apr 18 00:13:18.340550 2026] [:error] [pid 59042:tid 59049] [client 4.235.108.154:8156] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeJcHp6p5oql0UklEBIdgQAAAAI"]
[Sat Apr 18 00:13:19.223611 2026] [:error] [pid 59136:tid 59139] [client 4.235.108.154:27891] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJcHyaoiUyiIR3EhLWaXAAAAMA"]
[Sat Apr 18 00:13:35.039546 2026] [:error] [pid 59136:tid 59152] [client 4.235.108.154:22806] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJcLyaoiUyiIR3EhLWalgAAAM0"]
[Sat Apr 18 00:13:40.438918 2026] [:error] [pid 59042:tid 59058] [client 4.235.108.154:20147] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJcNJ6p5oql0UklEBId3QAAAAs"]
[Sat Apr 18 00:13:46.591589 2026] [:error] [pid 59136:tid 59163] [client 4.235.108.154:39323] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJcOiaoiUyiIR3EhLWatAAAANg"]
[Sat Apr 18 00:13:49.125818 2026] [:error] [pid 59043:tid 59082] [client 4.235.108.154:24227] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJcPYRtUGE9SfUh2wz-nAAAAEg"]
[Sat Apr 18 00:14:06.860420 2026] [:error] [pid 59044:tid 59119] [client 4.235.108.154:32478] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bdktk.php"] [unique_id "aeJcTgFamkFyEtD_SMGkowAAAJI"]
[Sat Apr 18 00:14:20.149771 2026] [proxy_fcgi:error] [pid 59136:tid 59162] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:20.415389 2026] [proxy_fcgi:error] [pid 59136:tid 59156] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:20.688811 2026] [proxy_fcgi:error] [pid 59136:tid 59157] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:20.962458 2026] [proxy_fcgi:error] [pid 59136:tid 59139] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:21.224920 2026] [proxy_fcgi:error] [pid 59136:tid 59159] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:21.496732 2026] [proxy_fcgi:error] [pid 59136:tid 59147] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:21.762288 2026] [proxy_fcgi:error] [pid 59136:tid 59151] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:22.043789 2026] [proxy_fcgi:error] [pid 59136:tid 59154] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:22.323378 2026] [proxy_fcgi:error] [pid 59136:tid 59142] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:22.606378 2026] [proxy_fcgi:error] [pid 59136:tid 59143] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:25.004639 2026] [proxy_fcgi:error] [pid 59136:tid 59151] [client 4.235.108.154:27028] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:14:25.294947 2026] [:error] [pid 59136:tid 59143] [client 4.235.108.154:27028] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gz.php"] [unique_id "aeJcYSaoiUyiIR3EhLWbagAAAMQ"]
[Sat Apr 18 00:14:36.029934 2026] [:error] [pid 59043:tid 59091] [client 4.235.108.154:43370] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gz.php"] [unique_id "aeJcbIRtUGE9SfUh2wz_HAAAAFE"]
[Sat Apr 18 00:15:16.009844 2026] [:error] [pid 59043:tid 59079] [client 4.235.108.154:24683] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aeJclIRtUGE9SfUh2wz_fAAAAEU"]
[Sat Apr 18 00:15:21.112201 2026] [:error] [pid 59043:tid 59080] [client 4.235.108.154:21005] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aeJcmYRtUGE9SfUh2wz_igAAAEY"]
[Sat Apr 18 00:15:24.157634 2026] [:error] [pid 59042:tid 59063] [client 4.235.108.154:25778] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qqa.php"] [unique_id "aeJcnJ6p5oql0UklEBIfeAAAABA"]
[Sat Apr 18 00:15:25.961886 2026] [proxy_fcgi:error] [pid 59042:tid 59047] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:26.224580 2026] [proxy_fcgi:error] [pid 59042:tid 59053] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:26.519092 2026] [proxy_fcgi:error] [pid 59042:tid 59066] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:26.781861 2026] [proxy_fcgi:error] [pid 59042:tid 59062] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:27.045502 2026] [proxy_fcgi:error] [pid 59042:tid 59059] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:27.309315 2026] [proxy_fcgi:error] [pid 59042:tid 59057] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:27.570401 2026] [proxy_fcgi:error] [pid 59042:tid 59052] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:27.833044 2026] [proxy_fcgi:error] [pid 59042:tid 59068] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:28.096397 2026] [proxy_fcgi:error] [pid 59042:tid 59069] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:28.359510 2026] [proxy_fcgi:error] [pid 59042:tid 59049] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:28.642417 2026] [proxy_fcgi:error] [pid 59042:tid 59064] [client 4.235.108.154:23983] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:15:28.902713 2026] [:error] [pid 59042:tid 59057] [client 4.235.108.154:23983] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJcoJ6p5oql0UklEBIfoAAAAAo"]
[Sat Apr 18 00:15:29.953903 2026] [:error] [pid 59042:tid 59055] [client 4.235.108.154:23998] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJcoZ6p5oql0UklEBIfpQAAAAg"]
[Sat Apr 18 00:15:31.795743 2026] [:error] [pid 59042:tid 59055] [client 4.235.108.154:42898] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJco56p5oql0UklEBIfyQAAAAg"]
[Sat Apr 18 00:15:35.627295 2026] [:error] [pid 59044:tid 59105] [client 4.235.108.154:32072] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJcpwFamkFyEtD_SMGlrAAAAIQ"]
[Sat Apr 18 00:15:37.745535 2026] [:error] [pid 59042:tid 59052] [client 4.235.108.154:32108] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeJcqZ6p5oql0UklEBIf-wAAAAU"]
[Sat Apr 18 00:15:39.498153 2026] [:error] [pid 59043:tid 59075] [client 4.235.108.154:42883] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeJcq4RtUGE9SfUh2wz_sAAAAEE"]
[Sat Apr 18 00:15:41.193941 2026] [:error] [pid 59042:tid 59066] [client 4.235.108.154:7454] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeJcrZ6p5oql0UklEBIgKAAAABM"]
[Sat Apr 18 00:15:45.841321 2026] [:error] [pid 59136:tid 59150] [client 4.235.108.154:21966] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeJcsSaoiUyiIR3EhLWcawAAAMs"]
[Sat Apr 18 00:15:47.599550 2026] [:error] [pid 59044:tid 59118] [client 4.235.108.154:29902] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJcswFamkFyEtD_SMGl0QAAAJE"]
[Sat Apr 18 00:15:48.713530 2026] [:error] [pid 59044:tid 59101] [client 4.235.108.154:21216] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJctAFamkFyEtD_SMGl2AAAAIA"]
[Sat Apr 18 00:15:50.416791 2026] [:error] [pid 59042:tid 59054] [client 4.235.108.154:36613] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJctp6p5oql0UklEBIgWQAAAAc"]
[Sat Apr 18 00:15:53.162000 2026] [:error] [pid 59043:tid 59084] [client 4.235.108.154:23185] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJcuYRtUGE9SfUh2wz_zAAAAEo"]
[Sat Apr 18 00:15:54.514008 2026] [:error] [pid 59136:tid 59142] [client 4.235.108.154:30144] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wglum1.php"] [unique_id "aeJcuiaoiUyiIR3EhLWcjAAAAMM"]
[Sat Apr 18 00:15:55.502020 2026] [:error] [pid 59042:tid 59065] [client 4.235.108.154:34181] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wglum1.php"] [unique_id "aeJcu56p5oql0UklEBIgdgAAABI"]
[Sat Apr 18 00:15:56.784477 2026] [:error] [pid 59044:tid 59110] [client 4.235.108.154:34234] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wglum1.php"] [unique_id "aeJcvAFamkFyEtD_SMGl5QAAAIk"]
[Sat Apr 18 00:15:58.893562 2026] [:error] [pid 59136:tid 59142] [client 4.235.108.154:30224] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wglum1.php"] [unique_id "aeJcviaoiUyiIR3EhLWcngAAAMM"]
[Sat Apr 18 00:16:00.308180 2026] [:error] [pid 59136:tid 59161] [client 4.235.108.154:23375] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aeJcwCaoiUyiIR3EhLWcpAAAANY"]
[Sat Apr 18 00:16:01.680715 2026] [:error] [pid 59136:tid 59145] [client 4.235.108.154:29463] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aeJcwSaoiUyiIR3EhLWcqgAAAMY"]
[Sat Apr 18 00:16:03.256456 2026] [:error] [pid 59136:tid 59160] [client 4.235.108.154:30252] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aeJcwyaoiUyiIR3EhLWcsQAAANU"]
[Sat Apr 18 00:16:04.629433 2026] [:error] [pid 59044:tid 59102] [client 4.235.108.154:22039] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aeJcxAFamkFyEtD_SMGl_QAAAIE"]
[Sat Apr 18 00:16:05.672483 2026] [:error] [pid 59044:tid 59125] [client 4.235.108.154:32856] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeJcxQFamkFyEtD_SMGmBQAAAJg"]
[Sat Apr 18 00:16:07.198192 2026] [:error] [pid 59044:tid 59103] [client 4.235.108.154:7787] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeJcxwFamkFyEtD_SMGmCAAAAII"]
[Sat Apr 18 00:16:08.489334 2026] [:error] [pid 59043:tid 59081] [client 4.235.108.154:21792] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeJcyIRtUGE9SfUh2wz_4AAAAEc"]
[Sat Apr 18 00:16:10.514518 2026] [:error] [pid 59044:tid 59120] [client 4.235.108.154:22047] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper.php"] [unique_id "aeJcygFamkFyEtD_SMGmHQAAAJM"]
[Sat Apr 18 00:16:12.314264 2026] [:error] [pid 59136:tid 59139] [client 4.235.108.154:32895] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxpass.php"] [unique_id "aeJczCaoiUyiIR3EhLWc1wAAAMA"]
[Sat Apr 18 00:16:14.549041 2026] [:error] [pid 59136:tid 59143] [client 4.235.108.154:38185] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxpass.php"] [unique_id "aeJcziaoiUyiIR3EhLWc6wAAAMQ"]
[Sat Apr 18 00:16:18.415971 2026] [:error] [pid 59042:tid 59054] [client 4.235.108.154:7500] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxpass.php"] [unique_id "aeJc0p6p5oql0UklEBIgrAAAAAc"]
[Sat Apr 18 00:16:23.316492 2026] [:error] [pid 59042:tid 59047] [client 4.235.108.154:23920] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wxpass.php"] [unique_id "aeJc156p5oql0UklEBIgwAAAAAA"]
[Sat Apr 18 00:16:25.472588 2026] [:error] [pid 59042:tid 59067] [client 4.235.108.154:27524] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/000.php"] [unique_id "aeJc2Z6p5oql0UklEBIgzAAAABQ"]
[Sat Apr 18 00:16:28.174187 2026] [proxy_fcgi:error] [pid 59042:tid 59064] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:28.863675 2026] [proxy_fcgi:error] [pid 59042:tid 59070] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:29.126654 2026] [proxy_fcgi:error] [pid 59042:tid 59069] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:29.391157 2026] [proxy_fcgi:error] [pid 59042:tid 59056] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:29.654856 2026] [proxy_fcgi:error] [pid 59042:tid 59053] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:30.058808 2026] [proxy_fcgi:error] [pid 59042:tid 59048] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:30.344508 2026] [proxy_fcgi:error] [pid 59042:tid 59062] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:30.613545 2026] [proxy_fcgi:error] [pid 59042:tid 59057] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:30.896433 2026] [proxy_fcgi:error] [pid 59042:tid 59070] [client 4.235.108.154:7231] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:31.156655 2026] [:error] [pid 59042:tid 59069] [client 4.235.108.154:7231] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeJc356p5oql0UklEBIg7AAAABY"]
[Sat Apr 18 00:16:32.114548 2026] [proxy_fcgi:error] [pid 59136:tid 59159] [client 4.235.108.154:25109] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:32.376616 2026] [proxy_fcgi:error] [pid 59136:tid 59140] [client 4.235.108.154:25109] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:16:32.646686 2026] [:error] [pid 59136:tid 59158] [client 4.235.108.154:25109] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeJc4CaoiUyiIR3EhLWdaAAAANM"]
[Sat Apr 18 00:16:34.551550 2026] [:error] [pid 59042:tid 59052] [client 4.235.108.154:25498] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeJc4p6p5oql0UklEBIhDQAAAAU"]
[Sat Apr 18 00:16:36.675806 2026] [:error] [pid 59042:tid 59070] [client 4.235.108.154:28872] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeJc5J6p5oql0UklEBIhGgAAABc"]
[Sat Apr 18 00:16:39.026273 2026] [:error] [pid 59136:tid 59148] [client 4.235.108.154:63407] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aeJc5yaoiUyiIR3EhLWdjgAAAMk"]
[Sat Apr 18 00:16:40.968041 2026] [:error] [pid 59042:tid 59063] [client 4.235.108.154:32958] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeJc6J6p5oql0UklEBIhJwAAABA"]
[Sat Apr 18 00:16:42.753303 2026] [:error] [pid 59044:tid 59118] [client 4.235.108.154:30437] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeJc6gFamkFyEtD_SMGmcgAAAJE"]
[Sat Apr 18 00:16:44.289031 2026] [:error] [pid 59136:tid 59152] [client 4.235.108.154:38132] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeJc7CaoiUyiIR3EhLWdtwAAAM0"]
[Sat Apr 18 00:16:46.076808 2026] [:error] [pid 59042:tid 59052] [client 4.235.108.154:31728] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeJc7p6p5oql0UklEBIhMwAAAAU"]
[Sat Apr 18 00:16:48.084022 2026] [:error] [pid 59043:tid 59097] [client 4.235.108.154:19899] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeJc8IRtUGE9SfUh2wwAOwAAAFc"]
[Sat Apr 18 00:16:50.467565 2026] [:error] [pid 59043:tid 59074] [client 4.235.108.154:39248] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeJc8oRtUGE9SfUh2wwAPwAAAEA"]
[Sat Apr 18 00:16:55.113206 2026] [:error] [pid 59042:tid 59052] [client 4.235.108.154:33639] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeJc956p5oql0UklEBIhXAAAAAU"]
[Sat Apr 18 00:16:59.404001 2026] [:error] [pid 59136:tid 59160] [client 4.235.108.154:33612] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aeJc-yaoiUyiIR3EhLWd_wAAANU"]
[Sat Apr 18 00:17:01.239476 2026] [:error] [pid 59043:tid 59092] [client 4.235.108.154:30419] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeJc_YRtUGE9SfUh2wwAVAAAAFI"]
[Sat Apr 18 00:17:07.494512 2026] [:error] [pid 59042:tid 59050] [client 4.235.108.154:39284] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeJdA56p5oql0UklEBIhggAAAAM"]
[Sat Apr 18 00:17:13.151228 2026] [:error] [pid 59136:tid 59153] [client 4.235.108.154:19823] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeJdCSaoiUyiIR3EhLWeRgAAAM4"]
[Sat Apr 18 00:17:16.016851 2026] [:error] [pid 59042:tid 59061] [client 4.235.108.154:33601] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeJdDJ6p5oql0UklEBIhuwAAAA4"]
[Sat Apr 18 00:17:19.603419 2026] [:error] [pid 59042:tid 59058] [client 4.235.108.154:43397] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeJdD56p5oql0UklEBIh7gAAAAs"]
[Sat Apr 18 00:17:21.358155 2026] [:error] [pid 59043:tid 59075] [client 4.235.108.154:23203] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeJdEYRtUGE9SfUh2wwAsAAAAEE"]
[Sat Apr 18 00:17:24.071273 2026] [:error] [pid 59042:tid 59067] [client 4.235.108.154:31367] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeJdFJ6p5oql0UklEBIiIwAAABQ"]
[Sat Apr 18 00:17:31.186058 2026] [:error] [pid 59042:tid 59047] [client 4.235.108.154:31421] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xynz.php"] [unique_id "aeJdG56p5oql0UklEBIiQQAAAAA"]
[Sat Apr 18 00:17:36.454974 2026] [proxy_fcgi:error] [pid 59042:tid 59059] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:36.719250 2026] [proxy_fcgi:error] [pid 59042:tid 59065] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:36.983593 2026] [proxy_fcgi:error] [pid 59042:tid 59061] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:37.249172 2026] [proxy_fcgi:error] [pid 59042:tid 59051] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:37.512026 2026] [proxy_fcgi:error] [pid 59042:tid 59059] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:37.805845 2026] [proxy_fcgi:error] [pid 59042:tid 59068] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:38.074503 2026] [proxy_fcgi:error] [pid 59042:tid 59065] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:38.347612 2026] [proxy_fcgi:error] [pid 59042:tid 59047] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:38.624968 2026] [proxy_fcgi:error] [pid 59042:tid 59060] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:38.918339 2026] [proxy_fcgi:error] [pid 59042:tid 59063] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:39.184371 2026] [proxy_fcgi:error] [pid 59042:tid 59068] [client 4.235.108.154:26381] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:17:39.445064 2026] [:error] [pid 59042:tid 59062] [client 4.235.108.154:26381] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeJdI56p5oql0UklEBIijwAAAA8"]
[Sat Apr 18 00:17:44.661500 2026] [:error] [pid 59042:tid 59067] [client 4.235.108.154:20317] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeJdKJ6p5oql0UklEBIiswAAABQ"]
[Sat Apr 18 00:17:48.378319 2026] [:error] [pid 59043:tid 59096] [client 4.235.108.154:27814] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeJdLIRtUGE9SfUh2wwA-gAAAFY"]
[Sat Apr 18 00:17:53.953908 2026] [:error] [pid 59042:tid 59064] [client 4.235.108.154:27802] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/curl.php"] [unique_id "aeJdMZ6p5oql0UklEBIi9gAAABE"]
[Sat Apr 18 00:18:00.748595 2026] [:error] [pid 59044:tid 59110] [client 4.235.108.154:27883] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeJdOAFamkFyEtD_SMGnlAAAAIk"]
[Sat Apr 18 00:18:02.128203 2026] [:error] [pid 59043:tid 59075] [client 4.235.108.154:26174] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeJdOoRtUGE9SfUh2wwBOAAAAEE"]
[Sat Apr 18 00:18:03.900719 2026] [:error] [pid 59136:tid 59142] [client 4.235.108.154:62898] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeJdOyaoiUyiIR3EhLWfXQAAAMM"]
[Sat Apr 18 00:18:05.679852 2026] [:error] [pid 59042:tid 59055] [client 4.235.108.154:20480] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeJdPZ6p5oql0UklEBIjUgAAAAg"]
[Sat Apr 18 00:18:09.552679 2026] [:error] [pid 59042:tid 59050] [client 4.235.108.154:8145] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeJdQZ6p5oql0UklEBIjbgAAAAM"]
[Sat Apr 18 00:18:13.662068 2026] [:error] [pid 59044:tid 59116] [client 4.235.108.154:42314] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeJdRQFamkFyEtD_SMGnvQAAAI8"]
[Sat Apr 18 00:18:28.780369 2026] [:error] [pid 59042:tid 59058] [client 4.235.108.154:34211] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeJdVJ6p5oql0UklEBIkPwAAAAs"]
[Sat Apr 18 00:18:35.678047 2026] [:error] [pid 59136:tid 59159] [client 4.235.108.154:37174] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeJdWyaoiUyiIR3EhLWf6gAAANQ"]
[Sat Apr 18 00:18:41.337490 2026] [proxy_fcgi:error] [pid 59043:tid 59086] [client 4.235.108.154:30761] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:18:41.599204 2026] [proxy_fcgi:error] [pid 59043:tid 59090] [client 4.235.108.154:30761] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 00:18:41.860980 2026] [proxy_fcgi:error] [pid 59043:tid 59077] [client 4.235.108.154:30761] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:36.569093 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 172.202.75.66:26498] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:36.928652 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 172.202.75.66:26498] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:37.365428 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 172.202.75.66:26498] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:37.565300 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 172.202.75.66:26498] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:38.156928 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 172.202.75.66:26498] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:38.342345 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:26498] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/wp-config.php"] [unique_id "aeKbeiYdRLRhVmaIMx2V3gAAAMs"]
[Sat Apr 18 04:43:38.971403 2026] [proxy_fcgi:error] [pid 9865:tid 9940] [client 172.202.75.66:26610] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:39.183962 2026] [:error] [pid 9865:tid 9945] [client 172.202.75.66:26610] [client 172.202.75.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.202.75.66, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aeKbe6zb5knECIY-C-iEcgAAAIg"]
[Sat Apr 18 04:43:39.188147 2026] [proxy_fcgi:error] [pid 9865:tid 9945] [client 172.202.75.66:26610] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:43:39.384356 2026] [:error] [pid 9865:tid 9943] [client 172.202.75.66:26610] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeKbe6zb5knECIY-C-iEdQAAAIY"]
[Sat Apr 18 04:43:40.093998 2026] [:error] [pid 9864:tid 9906] [client 172.202.75.66:26617] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeKbfICFeowknfXHM7kaigAAAEE"]
[Sat Apr 18 04:43:40.735793 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:26571] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeKbfCYdRLRhVmaIMx2V4AAAANc"]
[Sat Apr 18 04:43:41.351579 2026] [:error] [pid 9864:tid 9914] [client 172.202.75.66:26516] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeKbfYCFeowknfXHM7kakgAAAEg"]
[Sat Apr 18 04:43:42.141959 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:26614] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/unsubscribe.php"] [unique_id "aeKbfiYdRLRhVmaIMx2V5QAAAM0"]
[Sat Apr 18 04:43:42.804573 2026] [:error] [pid 9864:tid 9912] [client 172.202.75.66:26560] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/unsubscribe.php"] [unique_id "aeKbfoCFeowknfXHM7kanAAAAEY"]
[Sat Apr 18 04:43:43.426386 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:26504] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/unsubscribe.php"] [unique_id "aeKbfyYdRLRhVmaIMx2V6QAAAMM"]
[Sat Apr 18 04:43:44.710243 2026] [:error] [pid 9864:tid 9922] [client 172.202.75.66:26586] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/unsubscribe.php"] [unique_id "aeKbgICFeowknfXHM7kaogAAAFA"]
[Sat Apr 18 04:43:45.465639 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:26563] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "aeKbgSYdRLRhVmaIMx2V7AAAANc"]
[Sat Apr 18 04:43:46.244008 2026] [:error] [pid 9865:tid 9956] [client 172.202.75.66:26508] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "aeKbgqzb5knECIY-C-iEgwAAAJM"]
[Sat Apr 18 04:43:46.828459 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:26576] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "aeKbgqzb5knECIY-C-iEiAAAAJA"]
[Sat Apr 18 04:43:47.686392 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:26512] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "aeKbgyYdRLRhVmaIMx2V8wAAAM0"]
[Sat Apr 18 04:43:48.334832 2026] [:error] [pid 9865:tid 9959] [client 172.202.75.66:26613] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function.php"] [unique_id "aeKbhKzb5knECIY-C-iEigAAAJY"]
[Sat Apr 18 04:43:49.188800 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:26597] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function.php"] [unique_id "aeKbhSYdRLRhVmaIMx2V-AAAAMY"]
[Sat Apr 18 04:43:50.298563 2026] [:error] [pid 9864:tid 9905] [client 172.202.75.66:26598] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function.php"] [unique_id "aeKbhoCFeowknfXHM7kapAAAAEA"]
[Sat Apr 18 04:43:50.752566 2026] [:error] [pid 9863:tid 9876] [client 172.202.75.66:26511] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function.php"] [unique_id "aeKbhjjjiypiFrTucbL3AwAAAAM"]
[Sat Apr 18 04:43:51.616096 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:26591] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "aeKbhyYdRLRhVmaIMx2WAwAAANA"]
[Sat Apr 18 04:43:52.574941 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:26589] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "aeKbiCYdRLRhVmaIMx2WCQAAAMY"]
[Sat Apr 18 04:43:53.197747 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26607] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "aeKbiSYdRLRhVmaIMx2WEAAAAMw"]
[Sat Apr 18 04:43:53.877130 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:26590] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "aeKbiSYdRLRhVmaIMx2WFgAAAMA"]
[Sat Apr 18 04:43:54.401318 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26574] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeKbiiYdRLRhVmaIMx2WHAAAAMI"]
[Sat Apr 18 04:43:56.466220 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:26515] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeKbjCYdRLRhVmaIMx2WKQAAAMM"]
[Sat Apr 18 04:43:57.743351 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26606] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeKbjSYdRLRhVmaIMx2WMwAAANU"]
[Sat Apr 18 04:43:58.510498 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:26599] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeKbjiYdRLRhVmaIMx2WOwAAAMM"]
[Sat Apr 18 04:43:59.363674 2026] [:error] [pid 9865:tid 9959] [client 172.202.75.66:26523] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKbj6zb5knECIY-C-iEqQAAAJY"]
[Sat Apr 18 04:43:59.914026 2026] [:error] [pid 9863:tid 9882] [client 172.202.75.66:26602] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKbjzjjiypiFrTucbL3GQAAAAk"]
[Sat Apr 18 04:44:00.521318 2026] [:error] [pid 9863:tid 9878] [client 172.202.75.66:26621] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKbkDjjiypiFrTucbL3HAAAAAU"]
[Sat Apr 18 04:44:01.662487 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:26497] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKbkazb5knECIY-C-iErQAAAJE"]
[Sat Apr 18 04:44:02.289451 2026] [:error] [pid 9865:tid 9941] [client 172.202.75.66:26548] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aeKbkqzb5knECIY-C-iErwAAAIQ"]
[Sat Apr 18 04:44:03.416528 2026] [:error] [pid 9865:tid 9956] [client 172.202.75.66:26521] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aeKbk6zb5knECIY-C-iEuAAAAJM"]
[Sat Apr 18 04:44:04.485970 2026] [:error] [pid 9865:tid 9950] [client 172.202.75.66:26608] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aeKblKzb5knECIY-C-iEvgAAAI0"]
[Sat Apr 18 04:44:05.909006 2026] [:error] [pid 9864:tid 9918] [client 172.202.75.66:26587] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/css.php"] [unique_id "aeKblYCFeowknfXHM7kasgAAAEw"]
[Sat Apr 18 04:44:06.814053 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:26619] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "aeKblqzb5knECIY-C-iExgAAAJU"]
[Sat Apr 18 04:44:08.697623 2026] [:error] [pid 9864:tid 9916] [client 172.202.75.66:26582] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "aeKbmICFeowknfXHM7kavgAAAEo"]
[Sat Apr 18 04:44:10.246349 2026] [:error] [pid 9865:tid 9957] [client 172.202.75.66:26507] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "aeKbmqzb5knECIY-C-iEzQAAAJQ"]
[Sat Apr 18 04:44:11.888108 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:26594] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/init.php"] [unique_id "aeKbm6zb5knECIY-C-iE0gAAAI8"]
[Sat Apr 18 04:44:13.075300 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:26500] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byp.php"] [unique_id "aeKbnSYdRLRhVmaIMx2WRwAAAMs"]
[Sat Apr 18 04:44:14.945222 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:26524] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byp.php"] [unique_id "aeKbnoCFeowknfXHM7kayQAAAFY"]
[Sat Apr 18 04:44:16.908975 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:26612] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byp.php"] [unique_id "aeKboCYdRLRhVmaIMx2WSgAAANg"]
[Sat Apr 18 04:44:18.923895 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:26577] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byp.php"] [unique_id "aeKboqzb5knECIY-C-iE5AAAAI8"]
[Sat Apr 18 04:44:20.338991 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:26578] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeKbpCYdRLRhVmaIMx2WUwAAAMg"]
[Sat Apr 18 04:44:21.648952 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:26524] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeKbpTjjiypiFrTucbL3SgAAABY"]
[Sat Apr 18 04:44:22.591593 2026] [:error] [pid 9864:tid 9921] [client 172.202.75.66:26544] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeKbpoCFeowknfXHM7ka8QAAAE8"]
[Sat Apr 18 04:44:23.930549 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26452] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeKbpyYdRLRhVmaIMx2WWwAAAMI"]
[Sat Apr 18 04:44:29.075689 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:26535] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/chosen.php"] [unique_id "aeKbrSYdRLRhVmaIMx2WcAAAAMk"]
[Sat Apr 18 04:44:31.290772 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:26499] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/chosen.php"] [unique_id "aeKbryYdRLRhVmaIMx2WdwAAAMo"]
[Sat Apr 18 04:44:33.777032 2026] [:error] [pid 9865:tid 9950] [client 172.202.75.66:26601] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/chosen.php"] [unique_id "aeKbsazb5knECIY-C-iFEgAAAI0"]
[Sat Apr 18 04:44:35.655843 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:26554] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/chosen.php"] [unique_id "aeKbs6zb5knECIY-C-iFGQAAAJE"]
[Sat Apr 18 04:44:36.738419 2026] [:error] [pid 9864:tid 9914] [client 172.202.75.66:26592] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about/chosen.php"] [unique_id "aeKbtICFeowknfXHM7kbBQAAAEg"]
[Sat Apr 18 04:44:39.105748 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 172.202.75.66:26562] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:44:39.301847 2026] [proxy_fcgi:error] [pid 9864:tid 9917] [client 172.202.75.66:26562] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:44:40.455526 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 172.202.75.66:26562] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:44:40.645169 2026] [proxy_fcgi:error] [pid 9864:tid 9913] [client 172.202.75.66:26562] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:44:40.838018 2026] [proxy_fcgi:error] [pid 9864:tid 9920] [client 172.202.75.66:26562] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:44:41.026756 2026] [proxy_fcgi:error] [pid 9864:tid 9930] [client 172.202.75.66:26562] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:44:41.238107 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:26562] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeKbuYCFeowknfXHM7kbFwAAAEM"]
[Sat Apr 18 04:44:42.127344 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:26509] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeKbuiYdRLRhVmaIMx2WnwAAANg"]
[Sat Apr 18 04:44:42.678035 2026] [:error] [pid 9865:tid 9959] [client 172.202.75.66:26435] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeKbuqzb5knECIY-C-iFJQAAAJY"]
[Sat Apr 18 04:44:43.389068 2026] [:error] [pid 9863:tid 9885] [client 172.202.75.66:26575] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeKbuzjjiypiFrTucbL3XwAAAAw"]
[Sat Apr 18 04:44:43.928337 2026] [:error] [pid 9865:tid 9942] [client 172.202.75.66:26514] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pages.php"] [unique_id "aeKbu6zb5knECIY-C-iFJwAAAIU"]
[Sat Apr 18 04:44:44.494290 2026] [:error] [pid 9865:tid 9948] [client 172.202.75.66:26525] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pages.php"] [unique_id "aeKbvKzb5knECIY-C-iFKwAAAIs"]
[Sat Apr 18 04:44:45.395208 2026] [:error] [pid 9865:tid 9947] [client 172.202.75.66:26432] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pages.php"] [unique_id "aeKbvazb5knECIY-C-iFLwAAAIo"]
[Sat Apr 18 04:44:45.983249 2026] [:error] [pid 9863:tid 9880] [client 172.202.75.66:26620] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pages.php"] [unique_id "aeKbvTjjiypiFrTucbL3YAAAAAc"]
[Sat Apr 18 04:44:47.067603 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:26570] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "aeKbvyYdRLRhVmaIMx2WtQAAAMY"]
[Sat Apr 18 04:44:48.122312 2026] [:error] [pid 9865:tid 9949] [client 172.202.75.66:26605] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "aeKbwKzb5knECIY-C-iFNwAAAIw"]
[Sat Apr 18 04:44:48.637669 2026] [:error] [pid 9863:tid 9878] [client 172.202.75.66:26531] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "aeKbwDjjiypiFrTucbL3YgAAAAU"]
[Sat Apr 18 04:44:51.729581 2026] [:error] [pid 9864:tid 9921] [client 172.202.75.66:26556] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "aeKbw4CFeowknfXHM7kbIwAAAE8"]
[Sat Apr 18 04:44:52.183097 2026] [:error] [pid 9863:tid 9887] [client 172.202.75.66:26518] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKbxDjjiypiFrTucbL3awAAAA4"]
[Sat Apr 18 04:44:52.801063 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:26559] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKbxCYdRLRhVmaIMx2WzAAAAMs"]
[Sat Apr 18 04:44:53.529284 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:26433] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKbxazb5knECIY-C-iFPQAAAI8"]
[Sat Apr 18 04:44:54.499102 2026] [:error] [pid 9863:tid 9893] [client 172.202.75.66:26450] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKbxjjjiypiFrTucbL3bwAAABQ"]
[Sat Apr 18 04:44:56.137019 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:26528] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "aeKbyKzb5knECIY-C-iFQwAAAJA"]
[Sat Apr 18 04:44:57.796817 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:26540] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "aeKbySYdRLRhVmaIMx2W6wAAAMc"]
[Sat Apr 18 04:45:01.687687 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:26438] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "aeKbzSYdRLRhVmaIMx2W_gAAANE"]
[Sat Apr 18 04:45:05.471099 2026] [:error] [pid 9863:tid 9874] [client 172.202.75.66:26596] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "aeKb0TjjiypiFrTucbL3dAAAAAE"]
[Sat Apr 18 04:45:07.812164 2026] [:error] [pid 9864:tid 9916] [client 172.202.75.66:26510] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/post.php"] [unique_id "aeKb04CFeowknfXHM7kbMgAAAEo"]
[Sat Apr 18 04:45:09.845810 2026] [:error] [pid 9863:tid 9887] [client 172.202.75.66:26464] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/post.php"] [unique_id "aeKb1TjjiypiFrTucbL3egAAAA4"]
[Sat Apr 18 04:45:11.861131 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:26579] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/post.php"] [unique_id "aeKb1yYdRLRhVmaIMx2XJwAAAM8"]
[Sat Apr 18 04:45:13.658446 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:26611] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/post.php"] [unique_id "aeKb2SYdRLRhVmaIMx2XLgAAANg"]
[Sat Apr 18 04:45:15.117510 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26566] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb2yYdRLRhVmaIMx2XOQAAAMQ"]
[Sat Apr 18 04:45:16.342476 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:26551] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb3Kzb5knECIY-C-iFbgAAAIM"]
[Sat Apr 18 04:45:17.319279 2026] [:error] [pid 9865:tid 9961] [client 172.202.75.66:26585] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb3azb5knECIY-C-iFdwAAAJg"]
[Sat Apr 18 04:45:17.900490 2026] [:error] [pid 9865:tid 9939] [client 172.202.75.66:26564] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb3azb5knECIY-C-iFfAAAAII"]
[Sat Apr 18 04:45:19.067011 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:26468] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kk.php"] [unique_id "aeKb36zb5knECIY-C-iFiAAAAJc"]
[Sat Apr 18 04:45:19.729772 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26588] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kk.php"] [unique_id "aeKb3yYdRLRhVmaIMx2XQgAAAMw"]
[Sat Apr 18 04:45:20.660675 2026] [:error] [pid 9865:tid 9949] [client 172.202.75.66:26437] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kk.php"] [unique_id "aeKb4Kzb5knECIY-C-iFqQAAAIw"]
[Sat Apr 18 04:45:21.430355 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:26496] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kk.php"] [unique_id "aeKb4SYdRLRhVmaIMx2XSAAAAMg"]
[Sat Apr 18 04:45:22.035034 2026] [:error] [pid 9970:tid 9992] [client 172.202.75.66:26490] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "aeKb4iYdRLRhVmaIMx2XSwAAANI"]
[Sat Apr 18 04:45:22.702865 2026] [:error] [pid 9863:tid 9877] [client 172.202.75.66:26425] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "aeKb4jjjiypiFrTucbL3lAAAAAQ"]
[Sat Apr 18 04:45:23.392886 2026] [:error] [pid 9864:tid 9913] [client 172.202.75.66:26440] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "aeKb44CFeowknfXHM7kbYwAAAEc"]
[Sat Apr 18 04:45:23.990476 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:26553] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin.php"] [unique_id "aeKb44CFeowknfXHM7kbZgAAAEM"]
[Sat Apr 18 04:45:24.582913 2026] [:error] [pid 9863:tid 9888] [client 172.202.75.66:26434] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKb5DjjiypiFrTucbL3mQAAAA8"]
[Sat Apr 18 04:45:25.004605 2026] [:error] [pid 9864:tid 9923] [client 172.202.75.66:26465] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKb5YCFeowknfXHM7kbagAAAFE"]
[Sat Apr 18 04:45:25.618063 2026] [:error] [pid 9864:tid 9905] [client 172.202.75.66:26555] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKb5YCFeowknfXHM7kbbgAAAEA"]
[Sat Apr 18 04:45:26.285500 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:26522] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeKb5iYdRLRhVmaIMx2XXwAAAM8"]
[Sat Apr 18 04:45:26.956771 2026] [:error] [pid 9863:tid 9873] [client 172.202.75.66:26439] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "aeKb5jjjiypiFrTucbL3ogAAAAA"]
[Sat Apr 18 04:45:27.540778 2026] [:error] [pid 9863:tid 9885] [client 172.202.75.66:26475] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "aeKb5zjjiypiFrTucbL3pQAAAAw"]
[Sat Apr 18 04:45:29.180962 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:26472] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "aeKb6SYdRLRhVmaIMx2XaQAAAMs"]
[Sat Apr 18 04:45:30.120052 2026] [:error] [pid 9864:tid 9921] [client 172.202.75.66:26603] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "aeKb6oCFeowknfXHM7kbegAAAE8"]
[Sat Apr 18 04:45:31.623782 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26567] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/index.php"] [unique_id "aeKb6yYdRLRhVmaIMx2XbwAAAMw"]
[Sat Apr 18 04:45:32.566154 2026] [:error] [pid 9863:tid 9875] [client 172.202.75.66:26573] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/index.php"] [unique_id "aeKb7DjjiypiFrTucbL3qgAAAAI"]
[Sat Apr 18 04:45:33.630857 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26534] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/index.php"] [unique_id "aeKb7SYdRLRhVmaIMx2XeQAAANU"]
[Sat Apr 18 04:45:34.250552 2026] [:error] [pid 9865:tid 9948] [client 172.202.75.66:26455] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/index.php"] [unique_id "aeKb7qzb5knECIY-C-iFwQAAAIs"]
[Sat Apr 18 04:45:35.660375 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:26569] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-signup.php"] [unique_id "aeKb7yYdRLRhVmaIMx2XgwAAAMA"]
[Sat Apr 18 04:45:37.176196 2026] [:error] [pid 9863:tid 9881] [client 172.202.75.66:26476] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-signup.php"] [unique_id "aeKb8TjjiypiFrTucbL3rwAAAAg"]
[Sat Apr 18 04:45:38.139479 2026] [:error] [pid 9864:tid 9906] [client 172.202.75.66:26503] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-signup.php"] [unique_id "aeKb8oCFeowknfXHM7kbkgAAAEE"]
[Sat Apr 18 04:45:39.093961 2026] [:error] [pid 9864:tid 9909] [client 172.202.75.66:26616] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-signup.php"] [unique_id "aeKb84CFeowknfXHM7kbmAAAAEQ"]
[Sat Apr 18 04:45:39.963630 2026] [:error] [pid 9970:tid 9975] [client 172.202.75.66:26448] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ty.php"] [unique_id "aeKb8yYdRLRhVmaIMx2XigAAAME"]
[Sat Apr 18 04:45:40.496558 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:26513] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ty.php"] [unique_id "aeKb9DjjiypiFrTucbL3uwAAABY"]
[Sat Apr 18 04:45:41.050716 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:41.285502 2026] [proxy_fcgi:error] [pid 9863:tid 9883] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:41.480909 2026] [proxy_fcgi:error] [pid 9863:tid 9873] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:41.911463 2026] [proxy_fcgi:error] [pid 9863:tid 9880] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:42.268844 2026] [proxy_fcgi:error] [pid 9863:tid 9882] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:42.463731 2026] [proxy_fcgi:error] [pid 9863:tid 9894] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:42.711195 2026] [proxy_fcgi:error] [pid 9863:tid 9888] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:42.905723 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:43.574742 2026] [proxy_fcgi:error] [pid 9863:tid 9897] [client 172.202.75.66:26449] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:45:44.033773 2026] [:error] [pid 9863:tid 9874] [client 172.202.75.66:26449] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aeKb-DjjiypiFrTucbL30AAAAAE"]
[Sat Apr 18 04:45:45.476934 2026] [:error] [pid 9865:tid 9937] [client 172.202.75.66:26404] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aeKb-azb5knECIY-C-iFxAAAAIA"]
[Sat Apr 18 04:45:46.608695 2026] [:error] [pid 9970:tid 9975] [client 172.202.75.66:26593] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aeKb-iYdRLRhVmaIMx2XmQAAAME"]
[Sat Apr 18 04:45:49.604895 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:26412] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aeKb_SYdRLRhVmaIMx2XqgAAANQ"]
[Sat Apr 18 04:45:51.325052 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26552] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeKb_yYdRLRhVmaIMx2XtAAAAMI"]
[Sat Apr 18 04:45:53.221963 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26442] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeKcASYdRLRhVmaIMx2XwQAAAMI"]
[Sat Apr 18 04:45:54.664369 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:26436] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeKcAiYdRLRhVmaIMx2X1QAAAM0"]
[Sat Apr 18 04:45:56.898888 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:26541] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeKcBKzb5knECIY-C-iFyAAAAJI"]
[Sat Apr 18 04:46:05.985388 2026] [:error] [pid 9863:tid 9877] [client 172.202.75.66:26505] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/privacy.php"] [unique_id "aeKcDTjjiypiFrTucbL3_gAAAAQ"]
[Sat Apr 18 04:46:10.531347 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:26532] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/privacy.php"] [unique_id "aeKcEqzb5knECIY-C-iF3QAAAJE"]
[Sat Apr 18 04:46:12.761581 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26558] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conffg.php"] [unique_id "aeKcFCYdRLRhVmaIMx2YHQAAANU"]
[Sat Apr 18 04:46:15.150091 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26519] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conffg.php"] [unique_id "aeKcFyYdRLRhVmaIMx2YMAAAAMQ"]
[Sat Apr 18 04:46:16.362766 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:26462] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conffg.php"] [unique_id "aeKcGKzb5knECIY-C-iF5wAAAJI"]
[Sat Apr 18 04:46:17.571268 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:26536] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conffg.php"] [unique_id "aeKcGTjjiypiFrTucbL4DAAAABY"]
[Sat Apr 18 04:46:18.926406 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26526] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "aeKcGiYdRLRhVmaIMx2YOgAAANU"]
[Sat Apr 18 04:46:19.681751 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26474] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "aeKcGyYdRLRhVmaIMx2YPwAAAMQ"]
[Sat Apr 18 04:46:20.208147 2026] [:error] [pid 9863:tid 9877] [client 172.202.75.66:26542] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "aeKcHDjjiypiFrTucbL4DQAAAAQ"]
[Sat Apr 18 04:46:20.870955 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:26381] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "aeKcHKzb5knECIY-C-iF6wAAAIM"]
[Sat Apr 18 04:46:21.450388 2026] [:error] [pid 9864:tid 9929] [client 172.202.75.66:26502] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lf.php"] [unique_id "aeKcHYCFeowknfXHM7kbvwAAAFc"]
[Sat Apr 18 04:46:21.983705 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:26477] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lf.php"] [unique_id "aeKcHSYdRLRhVmaIMx2YRwAAAMo"]
[Sat Apr 18 04:46:22.930193 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:26445] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lf.php"] [unique_id "aeKcHqzb5knECIY-C-iF7gAAAIc"]
[Sat Apr 18 04:46:23.534897 2026] [:error] [pid 9865:tid 9948] [client 172.202.75.66:26492] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lf.php"] [unique_id "aeKcH6zb5knECIY-C-iF7wAAAIs"]
[Sat Apr 18 04:46:24.027903 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:26487] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/WSO.php"] [unique_id "aeKcICYdRLRhVmaIMx2YTAAAAMk"]
[Sat Apr 18 04:46:25.582113 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:26561] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/WSO.php"] [unique_id "aeKcISYdRLRhVmaIMx2YUwAAAMM"]
[Sat Apr 18 04:46:26.760947 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:26604] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/WSO.php"] [unique_id "aeKcIiYdRLRhVmaIMx2YXwAAAMA"]
[Sat Apr 18 04:46:28.032724 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:26533] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/WSO.php"] [unique_id "aeKcJKzb5knECIY-C-iF-wAAAJA"]
[Sat Apr 18 04:46:29.565518 2026] [:error] [pid 9864:tid 9912] [client 172.202.75.66:26572] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "aeKcJYCFeowknfXHM7kbxwAAAEY"]
[Sat Apr 18 04:46:30.279101 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:26369] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "aeKcJqzb5knECIY-C-iF_wAAAIM"]
[Sat Apr 18 04:46:31.121185 2026] [:error] [pid 9865:tid 9948] [client 172.202.75.66:26595] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "aeKcJ6zb5knECIY-C-iGBAAAAIs"]
[Sat Apr 18 04:46:31.905405 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26480] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "aeKcJyYdRLRhVmaIMx2YeAAAANU"]
[Sat Apr 18 04:46:32.407429 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:26383] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aeKcKKzb5knECIY-C-iGBgAAAI8"]
[Sat Apr 18 04:46:33.140121 2026] [:error] [pid 9865:tid 9939] [client 172.202.75.66:26489] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aeKcKazb5knECIY-C-iGBwAAAII"]
[Sat Apr 18 04:46:33.665559 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:26622] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aeKcKSYdRLRhVmaIMx2YgAAAAMo"]
[Sat Apr 18 04:46:34.511193 2026] [:error] [pid 9865:tid 9956] [client 172.202.75.66:26529] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aeKcKqzb5knECIY-C-iGCQAAAJM"]
[Sat Apr 18 04:46:35.229938 2026] [:error] [pid 9864:tid 9927] [client 172.202.75.66:26467] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/if.php"] [unique_id "aeKcK4CFeowknfXHM7kbywAAAFU"]
[Sat Apr 18 04:46:35.907168 2026] [:error] [pid 9863:tid 9894] [client 172.202.75.66:26583] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/if.php"] [unique_id "aeKcKzjjiypiFrTucbL4FgAAABU"]
[Sat Apr 18 04:46:36.677808 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26527] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/if.php"] [unique_id "aeKcLCYdRLRhVmaIMx2YiAAAAMI"]
[Sat Apr 18 04:46:37.506369 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:26483] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/if.php"] [unique_id "aeKcLSYdRLRhVmaIMx2YigAAANE"]
[Sat Apr 18 04:46:38.305522 2026] [:error] [pid 9864:tid 9929] [client 172.202.75.66:26584] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mrjn.php"] [unique_id "aeKcLoCFeowknfXHM7kbzQAAAFc"]
[Sat Apr 18 04:46:38.789445 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:26550] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mrjn.php"] [unique_id "aeKcLjjjiypiFrTucbL4FwAAABc"]
[Sat Apr 18 04:46:39.663527 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:26557] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mrjn.php"] [unique_id "aeKcLyYdRLRhVmaIMx2YjwAAAM0"]
[Sat Apr 18 04:46:41.047998 2026] [:error] [pid 9864:tid 9926] [client 172.202.75.66:26623] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mrjn.php"] [unique_id "aeKcMYCFeowknfXHM7kb0wAAAFQ"]
[Sat Apr 18 04:46:41.734688 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:26600] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kn.php"] [unique_id "aeKcMazb5knECIY-C-iGFAAAAJc"]
[Sat Apr 18 04:46:42.365529 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:26461] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kn.php"] [unique_id "aeKcMqzb5knECIY-C-iGFQAAAJE"]
[Sat Apr 18 04:46:43.945816 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:44.135586 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:44.335693 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:44.898065 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:45.123462 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:46.114373 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:46.939298 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:47.752958 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:47.992317 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:48.183803 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:48.816670 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 172.202.75.66:26485] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:46:49.047039 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:26485] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sendmail.php"] [unique_id "aeKcOSYdRLRhVmaIMx2YtgAAAMM"]
[Sat Apr 18 04:46:51.050360 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26530] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sendmail.php"] [unique_id "aeKcOyYdRLRhVmaIMx2YvQAAANU"]
[Sat Apr 18 04:47:00.329931 2026] [:error] [pid 9865:tid 9941] [client 172.202.75.66:26444] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sendmail.php"] [unique_id "aeKcRKzb5knECIY-C-iGLAAAAIQ"]
[Sat Apr 18 04:47:01.272924 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:26390] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sendmail.php"] [unique_id "aeKcRTjjiypiFrTucbL4JgAAABY"]
[Sat Apr 18 04:47:08.251943 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:26470] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rahma.php"] [unique_id "aeKcTCYdRLRhVmaIMx2Y-gAAAMU"]
[Sat Apr 18 04:47:17.990530 2026] [:error] [pid 9864:tid 9913] [client 172.202.75.66:26539] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nasgor.php"] [unique_id "aeKcVYCFeowknfXHM7kb6QAAAEc"]
[Sat Apr 18 04:47:33.459254 2026] [:error] [pid 9864:tid 9909] [client 172.202.75.66:26371] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nasgor.php"] [unique_id "aeKcZYCFeowknfXHM7kb-QAAAEQ"]
[Sat Apr 18 04:47:47.930356 2026] [:error] [pid 9863:tid 9874] [client 172.202.75.66:26537] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-confirm.php"] [unique_id "aeKcczjjiypiFrTucbL4cAAAAAE"]
[Sat Apr 18 04:48:06.068291 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 172.202.75.66:26463] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:48:06.275744 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 172.202.75.66:26463] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:48:06.496880 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 172.202.75.66:26463] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:48:06.693693 2026] [proxy_fcgi:error] [pid 9970:tid 9985] [client 172.202.75.66:26463] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:48:09.248886 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 172.202.75.66:26463] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:48:09.460266 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 172.202.75.66:26463] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:48:09.649565 2026] [proxy_fcgi:error] [pid 9970:tid 9982] [client 172.202.75.66:26463] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:48:09.834504 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:26463] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/it.php"] [unique_id "aeKciSYdRLRhVmaIMx2ZiwAAANc"]
[Sat Apr 18 04:48:21.662011 2026] [:error] [pid 9970:tid 9988] [client 172.202.75.66:26615] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/it.php"] [unique_id "aeKclSYdRLRhVmaIMx2ZrQAAAM4"]
[Sat Apr 18 04:48:57.919178 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26514] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aeKcuSYdRLRhVmaIMx2Z7gAAAMw"]
[Sat Apr 18 04:49:01.978891 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:26547] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aeKcvSYdRLRhVmaIMx2Z9AAAAM8"]
[Sat Apr 18 04:49:04.173404 2026] [:error] [pid 9865:tid 9961] [client 172.202.75.66:26378] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aeKcwKzb5knECIY-C-iHbQAAAJg"]
[Sat Apr 18 04:49:06.205974 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:26605] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0.php"] [unique_id "aeKcwqzb5knECIY-C-iHcAAAAJE"]
[Sat Apr 18 04:49:07.407000 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:26562] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owl.php"] [unique_id "aeKcw6zb5knECIY-C-iHdQAAAJU"]
[Sat Apr 18 04:49:08.641997 2026] [:error] [pid 9865:tid 9959] [client 172.202.75.66:26451] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owl.php"] [unique_id "aeKcxKzb5knECIY-C-iHggAAAJY"]
[Sat Apr 18 04:49:09.919090 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:10.129853 2026] [proxy_fcgi:error] [pid 9970:tid 9988] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:10.319049 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:10.508917 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:10.697675 2026] [proxy_fcgi:error] [pid 9970:tid 9998] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:10.888950 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:11.083939 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:11.274183 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:11.462734 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:11.653295 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:12.528466 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 172.202.75.66:26570] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:49:12.721732 2026] [:error] [pid 9970:tid 9975] [client 172.202.75.66:26570] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alexuse.php"] [unique_id "aeKcyCYdRLRhVmaIMx2aJAAAAME"]
[Sat Apr 18 04:49:13.754708 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:26589] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alexuse.php"] [unique_id "aeKcySYdRLRhVmaIMx2aJgAAANY"]
[Sat Apr 18 04:49:16.880730 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:26509] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alexuse.php"] [unique_id "aeKczCYdRLRhVmaIMx2aOQAAAMM"]
[Sat Apr 18 04:49:19.768622 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26576] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alexuse.php"] [unique_id "aeKczyYdRLRhVmaIMx2aQAAAAMI"]
[Sat Apr 18 04:49:21.996595 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:26586] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sendemail.php"] [unique_id "aeKc0YCFeowknfXHM7kcngAAAFY"]
[Sat Apr 18 04:49:26.694325 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:26507] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sendemail.php"] [unique_id "aeKc1qzb5knECIY-C-iHrwAAAJU"]
[Sat Apr 18 04:49:28.896445 2026] [:error] [pid 9863:tid 9888] [client 172.202.75.66:26612] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sendemail.php"] [unique_id "aeKc2DjjiypiFrTucbL44wAAAA8"]
[Sat Apr 18 04:49:37.961931 2026] [:error] [pid 9865:tid 9939] [client 172.202.75.66:26579] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "aeKc4azb5knECIY-C-iHvAAAAII"]
[Sat Apr 18 04:49:41.661570 2026] [:error] [pid 9864:tid 9916] [client 172.202.75.66:26546] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "aeKc5YCFeowknfXHM7kcwQAAAEo"]
[Sat Apr 18 04:49:46.158244 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:26597] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "aeKc6iYdRLRhVmaIMx2aaQAAANQ"]
[Sat Apr 18 04:49:47.837051 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26621] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/content.php"] [unique_id "aeKc6yYdRLRhVmaIMx2acwAAAMw"]
[Sat Apr 18 04:49:53.340181 2026] [:error] [pid 9865:tid 9946] [client 172.202.75.66:26434] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/olu.php"] [unique_id "aeKc8azb5knECIY-C-iH0wAAAIk"]
[Sat Apr 18 04:49:57.755852 2026] [:error] [pid 9864:tid 9918] [client 172.202.75.66:26617] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/olu.php"] [unique_id "aeKc9YCFeowknfXHM7kc2AAAAEw"]
[Sat Apr 18 04:49:58.717357 2026] [:error] [pid 9864:tid 9921] [client 172.202.75.66:26457] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/olu.php"] [unique_id "aeKc9oCFeowknfXHM7kc2gAAAE8"]
[Sat Apr 18 04:50:00.135184 2026] [:error] [pid 9865:tid 9937] [client 172.202.75.66:26500] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/olu.php"] [unique_id "aeKc-Kzb5knECIY-C-iH5QAAAIA"]
[Sat Apr 18 04:50:01.228349 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:26609] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad/about.php"] [unique_id "aeKc-TjjiypiFrTucbL5LgAAABc"]
[Sat Apr 18 04:50:01.938999 2026] [:error] [pid 9863:tid 9876] [client 172.202.75.66:26601] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad/about.php"] [unique_id "aeKc-TjjiypiFrTucbL5MQAAAAM"]
[Sat Apr 18 04:50:02.503176 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26531] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad/about.php"] [unique_id "aeKc-iYdRLRhVmaIMx2alQAAAMQ"]
[Sat Apr 18 04:50:03.214560 2026] [:error] [pid 9863:tid 9890] [client 172.202.75.66:26587] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad/about.php"] [unique_id "aeKc-zjjiypiFrTucbL5NAAAABE"]
[Sat Apr 18 04:50:04.079711 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:26568] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aeKc_CYdRLRhVmaIMx2angAAANc"]
[Sat Apr 18 04:50:04.502830 2026] [:error] [pid 9970:tid 9988] [client 172.202.75.66:26556] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aeKc_CYdRLRhVmaIMx2aoAAAAM4"]
[Sat Apr 18 04:50:05.753682 2026] [:error] [pid 9865:tid 9947] [client 172.202.75.66:26585] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aeKc_azb5knECIY-C-iH6wAAAIo"]
[Sat Apr 18 04:50:07.053677 2026] [:error] [pid 9863:tid 9893] [client 172.202.75.66:26621] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aeKc_zjjiypiFrTucbL5NwAAABQ"]
[Sat Apr 18 04:50:07.653101 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:26582] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "aeKc_yYdRLRhVmaIMx2aqgAAAMg"]
[Sat Apr 18 04:50:08.325294 2026] [:error] [pid 9864:tid 9923] [client 172.202.75.66:26581] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "aeKdAICFeowknfXHM7kdCwAAAFE"]
[Sat Apr 18 04:50:09.613642 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26435] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "aeKdASYdRLRhVmaIMx2aswAAANU"]
[Sat Apr 18 04:50:10.560643 2026] [:error] [pid 9970:tid 9975] [client 172.202.75.66:26608] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goat.php"] [unique_id "aeKdAiYdRLRhVmaIMx2atAAAAME"]
[Sat Apr 18 04:50:11.771147 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:26591] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "aeKdA6zb5knECIY-C-iH-gAAAJE"]
[Sat Apr 18 04:50:12.675759 2026] [proxy_fcgi:error] [pid 9863:tid 9875] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:13.242151 2026] [proxy_fcgi:error] [pid 9863:tid 9884] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:14.051804 2026] [proxy_fcgi:error] [pid 9863:tid 9878] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:14.251906 2026] [proxy_fcgi:error] [pid 9863:tid 9896] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:14.700948 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:15.278678 2026] [proxy_fcgi:error] [pid 9863:tid 9885] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:15.471800 2026] [proxy_fcgi:error] [pid 9863:tid 9876] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:15.666187 2026] [proxy_fcgi:error] [pid 9863:tid 9882] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:15.866982 2026] [proxy_fcgi:error] [pid 9863:tid 9897] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:16.065716 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:16.288161 2026] [proxy_fcgi:error] [pid 9863:tid 9883] [client 172.202.75.66:26374] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:50:16.475935 2026] [:error] [pid 9863:tid 9894] [client 172.202.75.66:26374] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/leafmailer.php"] [unique_id "aeKdCDjjiypiFrTucbL5SwAAABU"]
[Sat Apr 18 04:50:18.282989 2026] [:error] [pid 9863:tid 9888] [client 172.202.75.66:26567] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/leafmailer.php"] [unique_id "aeKdCjjjiypiFrTucbL5TgAAAA8"]
[Sat Apr 18 04:50:19.939409 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:26599] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/leafmailer.php"] [unique_id "aeKdCyYdRLRhVmaIMx2a0gAAANA"]
[Sat Apr 18 04:50:21.159641 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:26314] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/leafmailer.php"] [unique_id "aeKdDSYdRLRhVmaIMx2a1gAAAMo"]
[Sat Apr 18 04:50:22.533863 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:26503] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aeKdDiYdRLRhVmaIMx2a3QAAANE"]
[Sat Apr 18 04:50:24.656458 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:26588] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aeKdECYdRLRhVmaIMx2a4QAAAM8"]
[Sat Apr 18 04:50:26.691942 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:26593] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aeKdEiYdRLRhVmaIMx2a5QAAAM0"]
[Sat Apr 18 04:50:27.481141 2026] [:error] [pid 9863:tid 9876] [client 172.202.75.66:26304] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aeKdEzjjiypiFrTucbL5UwAAAAM"]
[Sat Apr 18 04:50:28.057451 2026] [:error] [pid 9865:tid 9951] [client 172.202.75.66:26502] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/date.php"] [unique_id "aeKdFKzb5knECIY-C-iICAAAAI4"]
[Sat Apr 18 04:50:28.724929 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:26542] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/date.php"] [unique_id "aeKdFKzb5knECIY-C-iICQAAAJE"]
[Sat Apr 18 04:50:29.401846 2026] [:error] [pid 9865:tid 9950] [client 172.202.75.66:26603] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/date.php"] [unique_id "aeKdFazb5knECIY-C-iIDgAAAI0"]
[Sat Apr 18 04:50:30.328102 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26522] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/date.php"] [unique_id "aeKdFiYdRLRhVmaIMx2a7QAAAMw"]
[Sat Apr 18 04:50:31.292912 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26512] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo.php"] [unique_id "aeKdFyYdRLRhVmaIMx2a9AAAAMI"]
[Sat Apr 18 04:50:32.207815 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26376] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo.php"] [unique_id "aeKdGCYdRLRhVmaIMx2a_QAAAMw"]
[Sat Apr 18 04:50:33.243935 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26519] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo.php"] [unique_id "aeKdGSYdRLRhVmaIMx2bAgAAANU"]
[Sat Apr 18 04:50:34.226064 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26616] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pomo.php"] [unique_id "aeKdGiYdRLRhVmaIMx2bBAAAAMQ"]
[Sat Apr 18 04:50:35.134826 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:26613] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeKdG4CFeowknfXHM7kdbAAAAEM"]
[Sat Apr 18 04:50:35.707603 2026] [:error] [pid 9865:tid 9943] [client 172.202.75.66:26555] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeKdG6zb5knECIY-C-iIKQAAAIY"]
[Sat Apr 18 04:50:36.247317 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:26517] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeKdHCYdRLRhVmaIMx2bCQAAAM0"]
[Sat Apr 18 04:50:36.862734 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:26610] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeKdHCYdRLRhVmaIMx2bDAAAANE"]
[Sat Apr 18 04:50:37.594623 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:26566] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t/rfi.php"] [unique_id "aeKdHTjjiypiFrTucbL5XwAAAAs"]
[Sat Apr 18 04:50:38.428703 2026] [:error] [pid 9864:tid 9905] [client 172.202.75.66:26523] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t/rfi.php"] [unique_id "aeKdHoCFeowknfXHM7kdbgAAAEA"]
[Sat Apr 18 04:50:39.032663 2026] [:error] [pid 9865:tid 9938] [client 172.202.75.66:26513] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t/rfi.php"] [unique_id "aeKdH6zb5knECIY-C-iIQgAAAIE"]
[Sat Apr 18 04:50:39.748455 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:26611] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t/rfi.php"] [unique_id "aeKdHyYdRLRhVmaIMx2bDgAAAM8"]
[Sat Apr 18 04:50:40.807899 2026] [:error] [pid 9864:tid 9913] [client 172.202.75.66:26444] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/filelib.php"] [unique_id "aeKdIICFeowknfXHM7kdcgAAAEc"]
[Sat Apr 18 04:50:41.561876 2026] [:error] [pid 9864:tid 9920] [client 172.202.75.66:26559] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/filelib.php"] [unique_id "aeKdIYCFeowknfXHM7kddgAAAE4"]
[Sat Apr 18 04:50:42.407917 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:26607] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/filelib.php"] [unique_id "aeKdIiYdRLRhVmaIMx2bEQAAAMU"]
[Sat Apr 18 04:50:43.828648 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26620] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/filelib.php"] [unique_id "aeKdIyYdRLRhVmaIMx2bFAAAAMQ"]
[Sat Apr 18 04:50:44.598106 2026] [:error] [pid 9863:tid 9876] [client 172.202.75.66:26590] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pluginfile.php"] [unique_id "aeKdJDjjiypiFrTucbL5YgAAAAM"]
[Sat Apr 18 04:50:45.459997 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:26563] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pluginfile.php"] [unique_id "aeKdJSYdRLRhVmaIMx2bGAAAAMY"]
[Sat Apr 18 04:50:46.545001 2026] [:error] [pid 9864:tid 9917] [client 172.202.75.66:26619] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pluginfile.php"] [unique_id "aeKdJoCFeowknfXHM7kdiwAAAEs"]
[Sat Apr 18 04:50:47.131359 2026] [:error] [pid 9863:tid 9890] [client 172.202.75.66:26533] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pluginfile.php"] [unique_id "aeKdJzjjiypiFrTucbL5ZQAAABE"]
[Sat Apr 18 04:50:48.284142 2026] [:error] [pid 9865:tid 9956] [client 172.202.75.66:26443] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/setup.php"] [unique_id "aeKdKKzb5knECIY-C-iIZAAAAJM"]
[Sat Apr 18 04:50:49.123682 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:26614] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/setup.php"] [unique_id "aeKdKSYdRLRhVmaIMx2bIQAAAMs"]
[Sat Apr 18 04:50:50.431710 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:26583] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/setup.php"] [unique_id "aeKdKoCFeowknfXHM7kdkgAAAEM"]
[Sat Apr 18 04:50:51.582705 2026] [:error] [pid 9863:tid 9891] [client 172.202.75.66:26544] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/setup.php"] [unique_id "aeKdKzjjiypiFrTucbL5bwAAABI"]
[Sat Apr 18 04:50:52.288809 2026] [:error] [pid 9864:tid 9907] [client 172.202.75.66:26505] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/version.php"] [unique_id "aeKdLICFeowknfXHM7kdkwAAAEI"]
[Sat Apr 18 04:50:52.926132 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:26600] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/version.php"] [unique_id "aeKdLCYdRLRhVmaIMx2bLAAAAM0"]
[Sat Apr 18 04:50:54.160858 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:26527] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/version.php"] [unique_id "aeKdLjjjiypiFrTucbL5cQAAABY"]
[Sat Apr 18 04:50:54.842761 2026] [:error] [pid 9863:tid 9883] [client 172.202.75.66:26499] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/version.php"] [unique_id "aeKdLjjjiypiFrTucbL5dgAAAAo"]
[Sat Apr 18 04:50:55.940855 2026] [:error] [pid 9863:tid 9888] [client 172.202.75.66:26496] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth/oauth2/lib.php"] [unique_id "aeKdLzjjiypiFrTucbL5fQAAAA8"]
[Sat Apr 18 04:50:56.458495 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:26452] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth/oauth2/lib.php"] [unique_id "aeKdMCYdRLRhVmaIMx2bMAAAAMA"]
[Sat Apr 18 04:50:57.193672 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26575] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth/oauth2/lib.php"] [unique_id "aeKdMSYdRLRhVmaIMx2bMwAAAMI"]
[Sat Apr 18 04:51:03.354145 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:26578] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth/oauth2/lib.php"] [unique_id "aeKdNyYdRLRhVmaIMx2bOQAAANU"]
[Sat Apr 18 04:51:04.001960 2026] [:error] [pid 9864:tid 9926] [client 172.202.75.66:26504] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeKdOICFeowknfXHM7kdoAAAAFQ"]
[Sat Apr 18 04:51:08.025573 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:26534] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeKdPICFeowknfXHM7kdpgAAAEM"]
[Sat Apr 18 04:51:09.644739 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:26379] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeKdPazb5knECIY-C-iImwAAAJc"]
[Sat Apr 18 04:51:11.435049 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:26595] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeKdPyYdRLRhVmaIMx2bWAAAANY"]
[Sat Apr 18 04:51:15.815283 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:26440] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f19.php"] [unique_id "aeKdQzjjiypiFrTucbL5oAAAAAs"]
[Sat Apr 18 04:51:18.588212 2026] [proxy_fcgi:error] [pid 9970:tid 9992] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:18.825075 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:19.032867 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:19.244597 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:19.444181 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:19.635125 2026] [proxy_fcgi:error] [pid 9970:tid 9974] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:19.828114 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:20.215068 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 172.202.75.66:26577] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:20.662075 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:26577] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aeKdSCYdRLRhVmaIMx2bcwAAAMg"]
[Sat Apr 18 04:51:21.608142 2026] [proxy_fcgi:error] [pid 9864:tid 9914] [client 172.202.75.66:26469] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:21.798754 2026] [proxy_fcgi:error] [pid 9864:tid 9927] [client 172.202.75.66:26469] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:51:21.985555 2026] [:error] [pid 9864:tid 9926] [client 172.202.75.66:26469] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeKdSYCFeowknfXHM7kd7gAAAFQ"]
[Sat Apr 18 04:51:23.424132 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:26473] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeKdS6zb5knECIY-C-iIqwAAAIc"]
[Sat Apr 18 04:51:25.135967 2026] [:error] [pid 9865:tid 9951] [client 172.202.75.66:26525] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeKdTazb5knECIY-C-iIrgAAAI4"]
[Sat Apr 18 04:51:27.387960 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:26508] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeKdT4CFeowknfXHM7kd8gAAAFY"]
[Sat Apr 18 04:51:28.875634 2026] [:error] [pid 9865:tid 9946] [client 172.202.75.66:26539] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeKdUKzb5knECIY-C-iIugAAAIk"]
[Sat Apr 18 04:51:29.710590 2026] [:error] [pid 9865:tid 9938] [client 172.202.75.66:26549] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeKdUazb5knECIY-C-iIvgAAAIE"]
[Sat Apr 18 04:51:30.779892 2026] [:error] [pid 9865:tid 9957] [client 172.202.75.66:26524] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeKdUqzb5knECIY-C-iIxQAAAJQ"]
[Sat Apr 18 04:51:32.055422 2026] [:error] [pid 9864:tid 9927] [client 172.202.75.66:26530] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "aeKdVICFeowknfXHM7kd-gAAAFU"]
[Sat Apr 18 04:51:33.450595 2026] [:error] [pid 9863:tid 9876] [client 172.202.75.66:26572] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aeKdVTjjiypiFrTucbL5rQAAAAM"]
[Sat Apr 18 04:51:34.141425 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:26545] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aeKdViYdRLRhVmaIMx2bhwAAANY"]
[Sat Apr 18 04:51:36.210654 2026] [:error] [pid 9863:tid 9874] [client 172.202.75.66:26516] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aeKdWDjjiypiFrTucbL5sAAAAAE"]
[Sat Apr 18 04:51:37.104883 2026] [:error] [pid 9865:tid 9946] [client 172.202.75.66:26483] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aeKdWazb5knECIY-C-iI0QAAAIk"]
[Sat Apr 18 04:51:38.214136 2026] [:error] [pid 9865:tid 9938] [client 172.202.75.66:26438] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKdWqzb5knECIY-C-iI1QAAAIE"]
[Sat Apr 18 04:51:38.788307 2026] [:error] [pid 9865:tid 9950] [client 172.202.75.66:26526] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKdWqzb5knECIY-C-iI2AAAAI0"]
[Sat Apr 18 04:51:39.509393 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:26602] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKdWzjjiypiFrTucbL5swAAABc"]
[Sat Apr 18 04:51:40.244722 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:26464] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKdXKzb5knECIY-C-iI4QAAAJc"]
[Sat Apr 18 04:51:40.991552 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:26399] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeKdXKzb5knECIY-C-iI5gAAAJU"]
[Sat Apr 18 04:51:41.927151 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:26445] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeKdXSYdRLRhVmaIMx2blwAAAMw"]
[Sat Apr 18 04:51:42.668990 2026] [:error] [pid 9865:tid 9947] [client 172.202.75.66:26565] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeKdXqzb5knECIY-C-iI8gAAAIo"]
[Sat Apr 18 04:51:43.266948 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26406] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeKdXyYdRLRhVmaIMx2bmgAAAMQ"]
[Sat Apr 18 04:51:44.124402 2026] [:error] [pid 9864:tid 9925] [client 172.202.75.66:26461] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "aeKdYICFeowknfXHM7keCwAAAFM"]
[Sat Apr 18 04:51:44.935622 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:26560] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "aeKdYCYdRLRhVmaIMx2bnwAAAMg"]
[Sat Apr 18 04:51:45.561426 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:26382] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "aeKdYSYdRLRhVmaIMx2bowAAANA"]
[Sat Apr 18 04:51:46.098520 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:26528] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "aeKdYiYdRLRhVmaIMx2bpQAAAMk"]
[Sat Apr 18 04:51:46.776765 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:26432] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeKdYiYdRLRhVmaIMx2bqQAAAMQ"]
[Sat Apr 18 04:51:47.292075 2026] [:error] [pid 9863:tid 9879] [client 172.202.75.66:26598] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeKdYzjjiypiFrTucbL5vQAAAAY"]
[Sat Apr 18 04:51:48.304716 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:26515] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeKdZDjjiypiFrTucbL5vwAAABY"]
[Sat Apr 18 04:51:49.006536 2026] [:error] [pid 9865:tid 9939] [client 172.202.75.66:26584] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeKdZazb5knECIY-C-iI_AAAAII"]
[Sat Apr 18 04:51:50.046496 2026] [:error] [pid 9864:tid 9926] [client 172.202.75.66:26501] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "aeKdZoCFeowknfXHM7keGwAAAFQ"]
[Sat Apr 18 04:51:51.285156 2026] [:error] [pid 9864:tid 9910] [client 172.202.75.66:26455] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "aeKdZ4CFeowknfXHM7keHwAAAEU"]
[Sat Apr 18 04:51:52.502591 2026] [:error] [pid 9865:tid 9945] [client 172.202.75.66:26521] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "aeKdaKzb5knECIY-C-iJAwAAAIg"]
[Sat Apr 18 04:51:53.057662 2026] [:error] [pid 9864:tid 9909] [client 172.202.75.66:26468] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "aeKdaYCFeowknfXHM7keIAAAAEQ"]
[Sat Apr 18 04:51:53.981455 2026] [:error] [pid 9864:tid 9912] [client 172.202.75.66:26436] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buy.php"] [unique_id "aeKdaYCFeowknfXHM7keJAAAAEY"]
[Sat Apr 18 04:51:55.301540 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:26541] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buy.php"] [unique_id "aeKdayYdRLRhVmaIMx2brwAAAMM"]
[Sat Apr 18 04:51:56.130803 2026] [:error] [pid 9970:tid 9992] [client 172.202.75.66:26529] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buy.php"] [unique_id "aeKdbCYdRLRhVmaIMx2btgAAANI"]
[Sat Apr 18 04:51:57.054056 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:26467] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/buy.php"] [unique_id "aeKdbTjjiypiFrTucbL5ywAAAAs"]
[Sat Apr 18 04:51:58.243832 2026] [:error] [pid 9863:tid 9882] [client 172.202.75.66:26447] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core.php"] [unique_id "aeKdbjjjiypiFrTucbL5zwAAAAk"]
[Sat Apr 18 04:51:59.979591 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:26596] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core.php"] [unique_id "aeKdbyYdRLRhVmaIMx2bvgAAAMs"]
[Sat Apr 18 04:52:01.168901 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:26497] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core.php"] [unique_id "aeKdcSYdRLRhVmaIMx2bwAAAANg"]
[Sat Apr 18 04:52:02.505104 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:26561] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core.php"] [unique_id "aeKdciYdRLRhVmaIMx2bwwAAAM8"]
[Sat Apr 18 04:52:04.086228 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26511] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKddCYdRLRhVmaIMx2byAAAAMI"]
[Sat Apr 18 04:52:06.487891 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:26462] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKddiYdRLRhVmaIMx2bywAAAMk"]
[Sat Apr 18 04:52:07.966593 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:26487] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKddzjjiypiFrTucbL52wAAAAs"]
[Sat Apr 18 04:52:12.087592 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:26622] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lock360.php"] [unique_id "aeKdfKzb5knECIY-C-iJKwAAAIM"]
[Sat Apr 18 04:52:18.784015 2026] [:error] [pid 9864:tid 9919] [client 172.202.75.66:26474] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeKdgoCFeowknfXHM7keNQAAAE0"]
[Sat Apr 18 04:52:25.667911 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 172.202.75.66:26437] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:26.059726 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:26437] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeKdiiYdRLRhVmaIMx2b7QAAAMI"]
[Sat Apr 18 04:52:29.940601 2026] [:error] [pid 9864:tid 9926] [client 172.202.75.66:26458] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeKdjYCFeowknfXHM7keSAAAAFQ"]
[Sat Apr 18 04:52:31.290606 2026] [proxy_fcgi:error] [pid 9864:tid 9921] [client 172.202.75.66:26554] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:31.479466 2026] [proxy_fcgi:error] [pid 9864:tid 9913] [client 172.202.75.66:26554] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:32.938942 2026] [proxy_fcgi:error] [pid 9864:tid 9906] [client 172.202.75.66:26554] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:33.135841 2026] [proxy_fcgi:error] [pid 9864:tid 9907] [client 172.202.75.66:26554] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:33.326486 2026] [proxy_fcgi:error] [pid 9864:tid 9905] [client 172.202.75.66:26554] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:34.211816 2026] [:error] [pid 9864:tid 9920] [client 172.202.75.66:26554] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeKdkoCFeowknfXHM7keWwAAAE4"]
[Sat Apr 18 04:52:36.424752 2026] [proxy_fcgi:error] [pid 9970:tid 9994] [client 172.202.75.66:26594] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:36.678403 2026] [proxy_fcgi:error] [pid 9970:tid 9995] [client 172.202.75.66:26594] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 04:52:36.868678 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:26594] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKdlCYdRLRhVmaIMx2b-QAAAMU"]
[Sat Apr 18 04:52:38.593140 2026] [:error] [pid 9865:tid 9959] [client 172.202.75.66:26381] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKdlqzb5knECIY-C-iJWwAAAJY"]
[Sat Apr 18 04:52:43.895617 2026] [:error] [pid 9864:tid 9919] [client 172.202.75.66:26482] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKdm4CFeowknfXHM7keZAAAAE0"]
[Sat Apr 18 04:52:47.660704 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:26558] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKdnyYdRLRhVmaIMx2cAwAAANQ"]
[Sat Apr 18 04:52:49.215898 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:26489] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeKdoazb5knECIY-C-iJZwAAAI8"]
[Sat Apr 18 11:33:26.613620 2026] [:error] [pid 13023:tid 13032] [client 23.226.132.115:49526] [client 23.226.132.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stratapluswa.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "aeL7hv1e7hG8DAeABB-MxQAAAQc"], referer: https://www.google.com/
[Sat Apr 18 19:27:25.026485 2026] [:error] [pid 9864:tid 9918] [client 150.228.224.208:58245] [client 150.228.224.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.224.208, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNqnYCFeowknfXHM7kGkQAAAEw"]
[Sat Apr 18 19:27:25.037394 2026] [proxy_fcgi:error] [pid 9864:tid 9918] [client 150.228.224.208:58245] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:55.136220 2026] [proxy_fcgi:error] [pid 33517:tid 33521] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:55.391264 2026] [proxy_fcgi:error] [pid 33517:tid 33537] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:55.634123 2026] [proxy_fcgi:error] [pid 33517:tid 33538] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:55.877191 2026] [proxy_fcgi:error] [pid 33517:tid 33540] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:56.131665 2026] [proxy_fcgi:error] [pid 33517:tid 33533] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:56.373813 2026] [proxy_fcgi:error] [pid 33517:tid 33539] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:56.616993 2026] [proxy_fcgi:error] [pid 33517:tid 33524] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:56.860736 2026] [proxy_fcgi:error] [pid 33517:tid 33521] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:57.117999 2026] [proxy_fcgi:error] [pid 33517:tid 33531] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:57.370637 2026] [proxy_fcgi:error] [pid 33517:tid 33533] [client 158.158.124.190:8189] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:04:57.621125 2026] [:error] [pid 33517:tid 33534] [client 158.158.124.190:8189] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "aeO5uX4Zz-rubR1wiZ-ayAAAAM8"]
[Sun Apr 19 01:04:58.202783 2026] [:error] [pid 33517:tid 33531] [client 158.158.124.190:8191] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "aeO5un4Zz-rubR1wiZ-azwAAAMw"]
[Sun Apr 19 01:04:58.883813 2026] [:error] [pid 60910:tid 60922] [client 158.158.124.190:8157] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "aeO5unFWunkyacYqsD0epQAAAUo"]
[Sun Apr 19 01:04:59.423020 2026] [:error] [pid 33517:tid 33527] [client 158.158.124.190:8159] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "aeO5u34Zz-rubR1wiZ-a1wAAAMg"]
[Sun Apr 19 01:05:00.306454 2026] [:error] [pid 33517:tid 33522] [client 158.158.124.190:8164] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeO5vH4Zz-rubR1wiZ-a3AAAAMM"]
[Sun Apr 19 01:05:01.084124 2026] [:error] [pid 33517:tid 33521] [client 158.158.124.190:7706] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeO5vX4Zz-rubR1wiZ-a4AAAAMI"]
[Sun Apr 19 01:05:01.628961 2026] [:error] [pid 33517:tid 33529] [client 158.158.124.190:8174] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeO5vX4Zz-rubR1wiZ-a4wAAAMo"]
[Sun Apr 19 01:05:02.627178 2026] [:error] [pid 33517:tid 33531] [client 158.158.124.190:7682] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeO5vn4Zz-rubR1wiZ-a5wAAAMw"]
[Sun Apr 19 01:05:03.131221 2026] [:error] [pid 33517:tid 33520] [client 158.158.124.190:7683] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeO5v34Zz-rubR1wiZ-a6QAAAME"]
[Sun Apr 19 01:05:03.738381 2026] [:error] [pid 32252:tid 32263] [client 158.158.124.190:8177] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeO5v-Xl4Yc-Lt5fJ9iTeQAAAQk"]
[Sun Apr 19 01:05:04.303481 2026] [:error] [pid 32252:tid 32256] [client 158.158.124.190:8143] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeO5wOXl4Yc-Lt5fJ9iTegAAAQI"]
[Sun Apr 19 01:05:04.862347 2026] [:error] [pid 33517:tid 33531] [client 158.158.124.190:8187] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aeO5wH4Zz-rubR1wiZ-a9QAAAMw"]
[Sun Apr 19 01:05:05.409699 2026] [:error] [pid 32167:tid 32231] [client 158.158.124.190:7686] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeO5wUyD4Jm27Mb3NJhoDQAAAIY"]
[Sun Apr 19 01:05:05.981307 2026] [:error] [pid 33517:tid 33538] [client 158.158.124.190:8152] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeO5wX4Zz-rubR1wiZ-a-wAAANM"]
[Sun Apr 19 01:05:06.676099 2026] [:error] [pid 33517:tid 33542] [client 158.158.124.190:8071] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeO5wn4Zz-rubR1wiZ-bAAAAANc"]
[Sun Apr 19 01:05:07.252763 2026] [:error] [pid 33517:tid 33522] [client 158.158.124.190:7689] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "aeO5w34Zz-rubR1wiZ-bAgAAAMM"]
[Sun Apr 19 01:05:07.757012 2026] [:error] [pid 32165:tid 32193] [client 158.158.124.190:8160] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeO5w6e2vKwEk_N0BrbsyAAAABg"]
[Sun Apr 19 01:05:08.327223 2026] [:error] [pid 33517:tid 33536] [client 158.158.124.190:7684] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeO5xH4Zz-rubR1wiZ-bBAAAANE"]
[Sun Apr 19 01:05:09.439604 2026] [:error] [pid 33517:tid 33520] [client 158.158.124.190:8170] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeO5xX4Zz-rubR1wiZ-bBgAAAME"]
[Sun Apr 19 01:05:10.112987 2026] [:error] [pid 33517:tid 33526] [client 158.158.124.190:7714] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeO5xn4Zz-rubR1wiZ-bCAAAAMc"]
[Sun Apr 19 01:05:10.718741 2026] [:error] [pid 33517:tid 33536] [client 158.158.124.190:8130] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeO5xn4Zz-rubR1wiZ-bDQAAANE"]
[Sun Apr 19 01:05:11.405364 2026] [:error] [pid 60910:tid 60925] [client 158.158.124.190:7742] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeO5x3FWunkyacYqsD0erQAAAU0"]
[Sun Apr 19 01:05:11.959670 2026] [:error] [pid 33517:tid 33532] [client 158.158.124.190:8186] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeO5x34Zz-rubR1wiZ-bHAAAAM0"]
[Sun Apr 19 01:05:12.547638 2026] [:error] [pid 33517:tid 33526] [client 158.158.124.190:8163] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "aeO5yH4Zz-rubR1wiZ-bLgAAAMc"]
[Sun Apr 19 01:05:13.127932 2026] [:error] [pid 33517:tid 33541] [client 158.158.124.190:8145] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeO5yX4Zz-rubR1wiZ-bNQAAANY"]
[Sun Apr 19 01:05:13.667318 2026] [:error] [pid 33517:tid 33542] [client 158.158.124.190:8136] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeO5yX4Zz-rubR1wiZ-bPQAAANc"]
[Sun Apr 19 01:05:14.246561 2026] [:error] [pid 33517:tid 33526] [client 158.158.124.190:7712] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeO5yn4Zz-rubR1wiZ-bRgAAAMc"]
[Sun Apr 19 01:05:14.914065 2026] [:error] [pid 33517:tid 33541] [client 158.158.124.190:7688] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeO5yn4Zz-rubR1wiZ-bUAAAANY"]
[Sun Apr 19 01:05:15.810729 2026] [:error] [pid 33517:tid 33521] [client 158.158.124.190:8180] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeO5y34Zz-rubR1wiZ-bWQAAAMI"]
[Sun Apr 19 01:05:16.404945 2026] [:error] [pid 32252:tid 32256] [client 158.158.124.190:7681] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeO5zOXl4Yc-Lt5fJ9iThgAAAQI"]
[Sun Apr 19 01:05:17.111180 2026] [:error] [pid 60910:tid 60933] [client 158.158.124.190:8131] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeO5zXFWunkyacYqsD0exgAAAVU"]
[Sun Apr 19 01:05:17.785798 2026] [:error] [pid 32252:tid 32270] [client 158.158.124.190:8175] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "aeO5zeXl4Yc-Lt5fJ9iTjwAAARA"]
[Sun Apr 19 01:05:18.468800 2026] [:error] [pid 32252:tid 32258] [client 158.158.124.190:8172] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeO5zuXl4Yc-Lt5fJ9iTlgAAAQQ"]
[Sun Apr 19 01:05:19.321139 2026] [:error] [pid 32167:tid 32231] [client 158.158.124.190:7693] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeO5z0yD4Jm27Mb3NJhoLAAAAIY"]
[Sun Apr 19 01:05:19.990622 2026] [:error] [pid 32252:tid 32260] [client 158.158.124.190:8147] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeO5z-Xl4Yc-Lt5fJ9iTnQAAAQY"]
[Sun Apr 19 01:05:20.711159 2026] [:error] [pid 32167:tid 32247] [client 158.158.124.190:8162] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeO50EyD4Jm27Mb3NJhoLgAAAJY"]
[Sun Apr 19 01:05:21.373473 2026] [:error] [pid 33517:tid 33540] [client 158.158.124.190:8165] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeO50X4Zz-rubR1wiZ-baQAAANU"]
[Sun Apr 19 01:05:22.064207 2026] [:error] [pid 33517:tid 33543] [client 158.158.124.190:8169] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeO50n4Zz-rubR1wiZ-bcgAAANg"]
[Sun Apr 19 01:05:22.603928 2026] [:error] [pid 32165:tid 32171] [client 158.158.124.190:7697] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeO50qe2vKwEk_N0Brbs8AAAAAI"]
[Sun Apr 19 01:05:23.356053 2026] [:error] [pid 32165:tid 32169] [client 158.158.124.190:7696] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeO506e2vKwEk_N0Brbs8QAAAAA"]
[Sun Apr 19 01:05:23.965894 2026] [:error] [pid 33517:tid 33521] [client 158.158.124.190:8171] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeO5034Zz-rubR1wiZ-bdwAAAMI"]
[Sun Apr 19 01:05:24.696509 2026] [:error] [pid 33517:tid 33525] [client 158.158.124.190:8150] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeO51H4Zz-rubR1wiZ-begAAAMY"]
[Sun Apr 19 01:05:25.570643 2026] [:error] [pid 60910:tid 60915] [client 158.158.124.190:7738] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeO51XFWunkyacYqsD0e0wAAAUM"]
[Sun Apr 19 01:05:26.324835 2026] [:error] [pid 60910:tid 60928] [client 158.158.124.190:7694] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aeO51nFWunkyacYqsD0e1wAAAVA"]
[Sun Apr 19 01:05:27.080927 2026] [:error] [pid 32252:tid 32264] [client 158.158.124.190:7713] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aeO51-Xl4Yc-Lt5fJ9iTrAAAAQo"]
[Sun Apr 19 01:05:28.392340 2026] [:error] [pid 33517:tid 33539] [client 158.158.124.190:8184] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aeO52H4Zz-rubR1wiZ-bgwAAANQ"]
[Sun Apr 19 01:05:29.391108 2026] [:error] [pid 32166:tid 32199] [client 158.158.124.190:8176] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aeO52ZCHNkWwdiZnafLDjwAAAEE"]
[Sun Apr 19 01:05:30.420777 2026] [:error] [pid 32166:tid 32210] [client 158.158.124.190:7692] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aeO52pCHNkWwdiZnafLDlwAAAEw"]
[Sun Apr 19 01:05:31.138863 2026] [:error] [pid 32166:tid 32207] [client 158.158.124.190:7685] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aeO525CHNkWwdiZnafLDmgAAAEk"]
[Sun Apr 19 01:05:32.623706 2026] [:error] [pid 33517:tid 33529] [client 158.158.124.190:8167] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aeO53H4Zz-rubR1wiZ-bkwAAAMo"]
[Sun Apr 19 01:05:33.423049 2026] [:error] [pid 33517:tid 33537] [client 158.158.124.190:7727] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aeO53X4Zz-rubR1wiZ-bmgAAANI"]
[Sun Apr 19 01:05:34.236405 2026] [:error] [pid 32167:tid 32239] [client 158.158.124.190:8093] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aeO53kyD4Jm27Mb3NJhoRgAAAI4"]
[Sun Apr 19 01:05:35.125199 2026] [:error] [pid 32167:tid 32237] [client 158.158.124.190:8087] [client 158.158.124.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aeO530yD4Jm27Mb3NJhoSAAAAIw"]
[Sun Apr 19 01:05:36.168933 2026] [:error] [pid 32166:tid 32217] [client 158.158.124.190:7733] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeO54JCHNkWwdiZnafLDpgAAAFM"]
[Sun Apr 19 01:05:36.993605 2026] [:error] [pid 33517:tid 33523] [client 158.158.124.190:8140] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeO54H4Zz-rubR1wiZ-bqAAAAMQ"]
[Sun Apr 19 01:05:37.712813 2026] [:error] [pid 60910:tid 60914] [client 158.158.124.190:7729] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeO54XFWunkyacYqsD0e-wAAAUI"]
[Sun Apr 19 01:05:38.468375 2026] [:error] [pid 32167:tid 32248] [client 158.158.124.190:8151] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny"] [unique_id "aeO54kyD4Jm27Mb3NJhoWAAAAJc"]
[Sun Apr 19 01:05:39.782650 2026] [:error] [pid 32166:tid 32209] [client 158.158.124.190:8179] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeO545CHNkWwdiZnafLDrgAAAEs"]
[Sun Apr 19 01:05:40.391470 2026] [:error] [pid 32166:tid 32205] [client 158.158.124.190:8074] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeO55JCHNkWwdiZnafLDsQAAAEc"]
[Sun Apr 19 01:05:41.262244 2026] [:error] [pid 33517:tid 33520] [client 158.158.124.190:7691] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeO55X4Zz-rubR1wiZ-brQAAAME"]
[Sun Apr 19 01:05:42.229092 2026] [:error] [pid 32252:tid 32264] [client 158.158.124.190:8156] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeO55uXl4Yc-Lt5fJ9iTxQAAAQo"]
[Sun Apr 19 01:05:42.967279 2026] [:error] [pid 32252:tid 32261] [client 158.158.124.190:7743] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeO55uXl4Yc-Lt5fJ9iTzAAAAQc"]
[Sun Apr 19 01:05:44.220159 2026] [:error] [pid 33517:tid 33537] [client 158.158.124.190:8070] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeO56H4Zz-rubR1wiZ-buAAAANI"]
[Sun Apr 19 01:05:45.420434 2026] [:error] [pid 33517:tid 33524] [client 158.158.124.190:8139] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeO56X4Zz-rubR1wiZ-bxAAAAMU"]
[Sun Apr 19 01:05:46.552574 2026] [:error] [pid 32252:tid 32265] [client 158.158.124.190:8168] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aeO56uXl4Yc-Lt5fJ9iT1AAAAQs"]
[Sun Apr 19 01:05:47.450952 2026] [:error] [pid 32166:tid 32198] [client 158.158.124.190:8153] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeO565CHNkWwdiZnafLDwQAAAEA"]
[Sun Apr 19 01:05:48.072983 2026] [:error] [pid 32165:tid 32174] [client 158.158.124.190:7710] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeO57Ke2vKwEk_N0BrbtCAAAAAU"]
[Sun Apr 19 01:05:49.057525 2026] [:error] [pid 32166:tid 32216] [client 158.158.124.190:8182] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeO57ZCHNkWwdiZnafLDxAAAAFI"]
[Sun Apr 19 01:05:50.545534 2026] [:error] [pid 32165:tid 32190] [client 158.158.124.190:7700] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeO57qe2vKwEk_N0BrbtEQAAABU"]
[Sun Apr 19 01:05:52.282829 2026] [:error] [pid 32165:tid 32178] [client 158.158.124.190:7721] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aeO58Ke2vKwEk_N0BrbtFwAAAAk"]
[Sun Apr 19 01:05:54.556315 2026] [:error] [pid 33517:tid 33521] [client 158.158.124.190:7735] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aeO58n4Zz-rubR1wiZ-b1wAAAMI"]
[Sun Apr 19 01:05:55.744078 2026] [:error] [pid 33517:tid 33522] [client 158.158.124.190:7687] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aeO5834Zz-rubR1wiZ-b3wAAAMM"]
[Sun Apr 19 01:05:56.673064 2026] [:error] [pid 32167:tid 32243] [client 158.158.124.190:7720] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aeO59EyD4Jm27Mb3NJhocgAAAJI"]
[Sun Apr 19 01:05:57.637602 2026] [proxy_fcgi:error] [pid 32166:tid 32206] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:57.896648 2026] [proxy_fcgi:error] [pid 32166:tid 32222] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:58.146864 2026] [proxy_fcgi:error] [pid 32166:tid 32211] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:58.399502 2026] [proxy_fcgi:error] [pid 32166:tid 32207] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:58.731754 2026] [proxy_fcgi:error] [pid 32166:tid 32209] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:58.975105 2026] [proxy_fcgi:error] [pid 32166:tid 32203] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:59.218204 2026] [proxy_fcgi:error] [pid 32166:tid 32200] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:59.461421 2026] [proxy_fcgi:error] [pid 32166:tid 32218] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:59.705128 2026] [proxy_fcgi:error] [pid 32166:tid 32198] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:05:59.951734 2026] [proxy_fcgi:error] [pid 32166:tid 32205] [client 158.158.124.190:8133] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:06:00.455740 2026] [:error] [pid 32166:tid 32204] [client 158.158.124.190:8133] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeO5-JCHNkWwdiZnafLD5QAAAEY"]
[Sun Apr 19 01:06:02.542753 2026] [:error] [pid 60910:tid 60922] [client 158.158.124.190:7719] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeO5-nFWunkyacYqsD0fDgAAAUo"]
[Sun Apr 19 01:06:03.645862 2026] [:error] [pid 32166:tid 32220] [client 158.158.124.190:8134] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeO5-5CHNkWwdiZnafLD7QAAAFY"]
[Sun Apr 19 01:06:04.981351 2026] [:error] [pid 60910:tid 60931] [client 158.158.124.190:8129] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeO5_HFWunkyacYqsD0fGwAAAVM"]
[Sun Apr 19 01:06:06.118012 2026] [:error] [pid 60910:tid 60912] [client 158.158.124.190:8066] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeO5_nFWunkyacYqsD0fJgAAAUA"]
[Sun Apr 19 01:06:07.216109 2026] [:error] [pid 32252:tid 32259] [client 158.158.124.190:8149] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeO5_-Xl4Yc-Lt5fJ9iT8wAAAQU"]
[Sun Apr 19 01:06:08.535014 2026] [:error] [pid 33517:tid 33530] [client 158.158.124.190:8185] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeO6AH4Zz-rubR1wiZ-cIwAAAMs"]
[Sun Apr 19 01:06:09.858385 2026] [:error] [pid 33517:tid 33529] [client 158.158.124.190:8125] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeO6AX4Zz-rubR1wiZ-cKAAAAMo"]
[Sun Apr 19 01:06:12.027731 2026] [:error] [pid 32167:tid 32238] [client 158.158.124.190:7702] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "aeO6BEyD4Jm27Mb3NJhohgAAAI0"]
[Sun Apr 19 01:06:13.187449 2026] [:error] [pid 60910:tid 60923] [client 158.158.124.190:7708] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "aeO6BXFWunkyacYqsD0fOQAAAUs"]
[Sun Apr 19 01:06:14.123194 2026] [:error] [pid 32166:tid 32206] [client 158.158.124.190:7709] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "aeO6BpCHNkWwdiZnafLEDAAAAEg"]
[Sun Apr 19 01:06:15.283796 2026] [:error] [pid 32167:tid 32245] [client 158.158.124.190:8069] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "aeO6B0yD4Jm27Mb3NJhoiQAAAJQ"]
[Sun Apr 19 01:06:17.088612 2026] [:error] [pid 32252:tid 32275] [client 158.158.124.190:7741] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "aeO6CeXl4Yc-Lt5fJ9iT_wAAARU"]
[Sun Apr 19 01:06:17.933586 2026] [:error] [pid 33517:tid 33520] [client 158.158.124.190:8146] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "aeO6CX4Zz-rubR1wiZ-cQAAAAME"]
[Sun Apr 19 01:06:18.785832 2026] [:error] [pid 32252:tid 32274] [client 158.158.124.190:8178] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "aeO6CuXl4Yc-Lt5fJ9iUAAAAARQ"]
[Sun Apr 19 01:06:19.686505 2026] [:error] [pid 33517:tid 33530] [client 158.158.124.190:7717] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "aeO6C34Zz-rubR1wiZ-cRAAAAMs"]
[Sun Apr 19 01:06:21.009424 2026] [:error] [pid 32167:tid 32245] [client 158.158.124.190:7715] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeO6DUyD4Jm27Mb3NJhomQAAAJQ"]
[Sun Apr 19 01:06:21.813912 2026] [:error] [pid 32252:tid 32278] [client 158.158.124.190:8098] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeO6DeXl4Yc-Lt5fJ9iUCAAAARg"]
[Sun Apr 19 01:06:22.443688 2026] [:error] [pid 32252:tid 32277] [client 158.158.124.190:7732] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeO6DuXl4Yc-Lt5fJ9iUCwAAARc"]
[Sun Apr 19 01:06:23.235848 2026] [:error] [pid 33517:tid 33538] [client 158.158.124.190:7707] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeO6D34Zz-rubR1wiZ-cRgAAANM"]
[Sun Apr 19 01:06:24.576995 2026] [:error] [pid 32252:tid 32269] [client 158.158.124.190:8161] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeO6EOXl4Yc-Lt5fJ9iUEAAAAQ8"]
[Sun Apr 19 01:06:25.424828 2026] [:error] [pid 32167:tid 32231] [client 158.158.124.190:8138] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeO6EUyD4Jm27Mb3NJhoqgAAAIY"]
[Sun Apr 19 01:06:26.090993 2026] [:error] [pid 33517:tid 33531] [client 158.158.124.190:7704] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeO6En4Zz-rubR1wiZ-cSQAAAMw"]
[Sun Apr 19 01:06:27.037529 2026] [:error] [pid 60910:tid 60922] [client 158.158.124.190:7619] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aeO6E3FWunkyacYqsD0fVwAAAUo"]
[Sun Apr 19 01:06:28.350598 2026] [:error] [pid 32252:tid 32278] [client 158.158.124.190:8181] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "aeO6FOXl4Yc-Lt5fJ9iUGAAAARg"]
[Sun Apr 19 01:06:29.142392 2026] [:error] [pid 32167:tid 32232] [client 158.158.124.190:8141] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "aeO6FUyD4Jm27Mb3NJhosgAAAIc"]
[Sun Apr 19 01:06:29.852458 2026] [:error] [pid 60910:tid 60919] [client 158.158.124.190:8081] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "aeO6FXFWunkyacYqsD0faQAAAUc"]
[Sun Apr 19 01:06:31.040311 2026] [:error] [pid 32252:tid 32273] [client 158.158.124.190:7711] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "aeO6F-Xl4Yc-Lt5fJ9iUGwAAARM"]
[Sun Apr 19 01:06:32.578934 2026] [:error] [pid 60910:tid 60924] [client 158.158.124.190:8072] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aeO6GHFWunkyacYqsD0ffAAAAUw"]
[Sun Apr 19 01:06:33.232119 2026] [:error] [pid 60910:tid 60922] [client 158.158.124.190:8166] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aeO6GXFWunkyacYqsD0fgAAAAUo"]
[Sun Apr 19 01:06:33.869360 2026] [:error] [pid 32166:tid 32215] [client 158.158.124.190:8155] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aeO6GZCHNkWwdiZnafLELAAAAFE"]
[Sun Apr 19 01:06:34.884425 2026] [:error] [pid 32166:tid 32202] [client 158.158.124.190:7625] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aeO6GpCHNkWwdiZnafLEMAAAAEQ"]
[Sun Apr 19 01:06:35.790965 2026] [:error] [pid 60910:tid 60920] [client 158.158.124.190:8082] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeO6G3FWunkyacYqsD0fiQAAAUg"]
[Sun Apr 19 01:06:36.343335 2026] [:error] [pid 32167:tid 32242] [client 158.158.124.190:8110] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeO6HEyD4Jm27Mb3NJhoywAAAJE"]
[Sun Apr 19 01:06:37.014955 2026] [:error] [pid 60910:tid 60912] [client 158.158.124.190:8135] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeO6HXFWunkyacYqsD0fjgAAAUA"]
[Sun Apr 19 01:06:37.652562 2026] [:error] [pid 60910:tid 60923] [client 158.158.124.190:8129] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeO6HXFWunkyacYqsD0flAAAAUs"]
[Sun Apr 19 01:06:38.613419 2026] [:error] [pid 33517:tid 33534] [client 158.158.124.190:8097] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeO6Hn4Zz-rubR1wiZ-cVgAAAM8"]
[Sun Apr 19 01:06:39.858670 2026] [:error] [pid 33517:tid 33528] [client 158.158.124.190:7716] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeO6H34Zz-rubR1wiZ-cWwAAAMk"]
[Sun Apr 19 01:06:40.739222 2026] [:error] [pid 32252:tid 32277] [client 158.158.124.190:7698] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeO6IOXl4Yc-Lt5fJ9iUJwAAARc"]
[Sun Apr 19 01:06:41.576557 2026] [:error] [pid 32167:tid 32233] [client 158.158.124.190:8188] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeO6IUyD4Jm27Mb3NJho1QAAAIg"]
[Sun Apr 19 01:06:42.146793 2026] [:error] [pid 32166:tid 32211] [client 158.158.124.190:8099] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeO6IpCHNkWwdiZnafLENAAAAE0"]
[Sun Apr 19 01:06:42.792930 2026] [:error] [pid 32167:tid 32234] [client 158.158.124.190:7705] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeO6IkyD4Jm27Mb3NJho2QAAAIk"]
[Sun Apr 19 01:06:43.580389 2026] [:error] [pid 32252:tid 32259] [client 158.158.124.190:8064] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeO6I-Xl4Yc-Lt5fJ9iULgAAAQU"]
[Sun Apr 19 01:06:44.552821 2026] [:error] [pid 32252:tid 32257] [client 158.158.124.190:7680] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aeO6JOXl4Yc-Lt5fJ9iUNQAAAQM"]
[Sun Apr 19 01:06:45.970049 2026] [:error] [pid 32167:tid 32237] [client 158.158.124.190:8086] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeO6JUyD4Jm27Mb3NJho4AAAAIw"]
[Sun Apr 19 01:06:47.095729 2026] [:error] [pid 33517:tid 33519] [client 158.158.124.190:8088] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeO6J34Zz-rubR1wiZ-cZgAAAMA"]
[Sun Apr 19 01:06:48.531321 2026] [:error] [pid 60910:tid 60931] [client 158.158.124.190:7728] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeO6KHFWunkyacYqsD0ftwAAAVM"]
[Sun Apr 19 01:06:49.302442 2026] [:error] [pid 32252:tid 32255] [client 158.158.124.190:8090] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeO6KeXl4Yc-Lt5fJ9iUPQAAAQE"]
[Sun Apr 19 01:06:50.611717 2026] [:error] [pid 60910:tid 60914] [client 158.158.124.190:7701] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aeO6KnFWunkyacYqsD0fvQAAAUI"]
[Sun Apr 19 01:06:51.548817 2026] [:error] [pid 60910:tid 60917] [client 158.158.124.190:7647] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aeO6K3FWunkyacYqsD0fwwAAAUU"]
[Sun Apr 19 01:06:52.141707 2026] [:error] [pid 32252:tid 32271] [client 158.158.124.190:8111] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aeO6LOXl4Yc-Lt5fJ9iUQwAAARE"]
[Sun Apr 19 01:06:52.893758 2026] [:error] [pid 32252:tid 32269] [client 158.158.124.190:7740] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aeO6LOXl4Yc-Lt5fJ9iURgAAAQ8"]
[Sun Apr 19 01:06:54.126246 2026] [:error] [pid 32252:tid 32264] [client 158.158.124.190:8114] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeO6LuXl4Yc-Lt5fJ9iUTwAAAQo"]
[Sun Apr 19 01:06:54.987910 2026] [:error] [pid 32167:tid 32232] [client 158.158.124.190:8122] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeO6LkyD4Jm27Mb3NJho6QAAAIc"]
[Sun Apr 19 01:06:55.811768 2026] [:error] [pid 60910:tid 60921] [client 158.158.124.190:8183] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeO6L3FWunkyacYqsD0f1QAAAUk"]
[Sun Apr 19 01:06:56.514143 2026] [:error] [pid 32252:tid 32261] [client 158.158.124.190:7734] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeO6MOXl4Yc-Lt5fJ9iUVwAAAQc"]
[Sun Apr 19 01:06:57.040468 2026] [:error] [pid 32165:tid 32175] [client 158.158.124.190:7739] [client 158.158.124.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeO6Mae2vKwEk_N0BrbtbgAAAAY"]
[Sun Apr 19 01:06:57.787814 2026] [:error] [pid 60910:tid 60935] [client 158.158.124.190:8148] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aeO6MXFWunkyacYqsD0f3QAAAVc"]
[Sun Apr 19 01:06:58.425712 2026] [:error] [pid 32167:tid 32249] [client 158.158.124.190:7731] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aeO6MkyD4Jm27Mb3NJho-wAAAJg"]
[Sun Apr 19 01:06:59.130967 2026] [:error] [pid 32165:tid 32186] [client 158.158.124.190:7621] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aeO6M6e2vKwEk_N0BrbtdwAAABE"]
[Sun Apr 19 01:07:00.516009 2026] [proxy_fcgi:error] [pid 32167:tid 32232] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:00.768044 2026] [proxy_fcgi:error] [pid 32167:tid 32226] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:01.025359 2026] [proxy_fcgi:error] [pid 32167:tid 32247] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:01.433561 2026] [proxy_fcgi:error] [pid 32167:tid 32234] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:01.680931 2026] [proxy_fcgi:error] [pid 32167:tid 32240] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:01.925280 2026] [proxy_fcgi:error] [pid 32167:tid 32237] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:02.168189 2026] [proxy_fcgi:error] [pid 32167:tid 32232] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:02.414545 2026] [proxy_fcgi:error] [pid 32167:tid 32228] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:02.671451 2026] [proxy_fcgi:error] [pid 32167:tid 32243] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:02.922059 2026] [proxy_fcgi:error] [pid 32167:tid 32225] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:03.175349 2026] [proxy_fcgi:error] [pid 32167:tid 32245] [client 158.158.124.190:7703] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:07:03.415117 2026] [:error] [pid 32167:tid 32241] [client 158.158.124.190:7703] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeO6N0yD4Jm27Mb3NJhpDgAAAJA"]
[Sun Apr 19 01:07:04.374161 2026] [:error] [pid 33517:tid 33522] [client 158.158.124.190:8083] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeO6OH4Zz-rubR1wiZ-cfQAAAMM"]
[Sun Apr 19 01:07:05.240098 2026] [:error] [pid 33517:tid 33524] [client 158.158.124.190:8094] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeO6OX4Zz-rubR1wiZ-cgQAAAMU"]
[Sun Apr 19 01:07:06.182688 2026] [:error] [pid 32167:tid 32233] [client 158.158.124.190:8123] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeO6OkyD4Jm27Mb3NJhpEQAAAIg"]
[Sun Apr 19 01:07:06.827641 2026] [:error] [pid 33517:tid 33519] [client 158.158.124.190:8107] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aeO6On4Zz-rubR1wiZ-chAAAAMA"]
[Sun Apr 19 01:07:07.559964 2026] [:error] [pid 60910:tid 60928] [client 158.158.124.190:7627] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aeO6O3FWunkyacYqsD0f6wAAAVA"]
[Sun Apr 19 01:07:08.293704 2026] [:error] [pid 32165:tid 32180] [client 158.158.124.190:8154] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aeO6PKe2vKwEk_N0BrbthQAAAAs"]
[Sun Apr 19 01:07:08.990230 2026] [:error] [pid 32165:tid 32169] [client 158.158.124.190:8116] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aeO6PKe2vKwEk_N0BrbthgAAAAA"]
[Sun Apr 19 01:07:09.882694 2026] [:error] [pid 60910:tid 60916] [client 158.158.124.190:8190] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aeO6PXFWunkyacYqsD0f7wAAAUQ"]
[Sun Apr 19 01:07:10.539993 2026] [:error] [pid 60910:tid 60933] [client 158.158.124.190:8077] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aeO6PnFWunkyacYqsD0f9gAAAVU"]
[Sun Apr 19 01:07:11.717121 2026] [:error] [pid 33517:tid 33534] [client 158.158.124.190:8076] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aeO6P34Zz-rubR1wiZ-clAAAAM8"]
[Sun Apr 19 01:07:12.687757 2026] [:error] [pid 32167:tid 32240] [client 158.158.124.190:8103] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aeO6QEyD4Jm27Mb3NJhpGAAAAI8"]
[Sun Apr 19 01:07:13.521408 2026] [:error] [pid 33517:tid 33519] [client 158.158.124.190:8092] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeO6QX4Zz-rubR1wiZ-cnQAAAMA"]
[Sun Apr 19 01:07:14.364981 2026] [:error] [pid 60910:tid 60916] [client 158.158.124.190:7724] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeO6QnFWunkyacYqsD0f_wAAAUQ"]
[Sun Apr 19 01:07:15.668516 2026] [:error] [pid 32252:tid 32256] [client 158.158.124.190:7723] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeO6Q-Xl4Yc-Lt5fJ9iUewAAAQI"]
[Sun Apr 19 01:07:16.832329 2026] [:error] [pid 60910:tid 60912] [client 158.158.124.190:8124] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aeO6RHFWunkyacYqsD0gAwAAAUA"]
[Sun Apr 19 01:07:17.492723 2026] [:error] [pid 33517:tid 33534] [client 158.158.124.190:7736] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeO6RX4Zz-rubR1wiZ-czgAAAM8"]
[Sun Apr 19 01:07:18.077664 2026] [:error] [pid 33517:tid 33525] [client 158.158.124.190:7671] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeO6Rn4Zz-rubR1wiZ-c1wAAAMY"]
[Sun Apr 19 01:07:18.875438 2026] [:error] [pid 32165:tid 32171] [client 158.158.124.190:8144] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeO6Rqe2vKwEk_N0BrbtjQAAAAI"]
[Sun Apr 19 01:07:19.624514 2026] [:error] [pid 32252:tid 32256] [client 158.158.124.190:7630] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeO6R-Xl4Yc-Lt5fJ9iUhwAAAQI"]
[Sun Apr 19 01:07:20.270432 2026] [:error] [pid 33517:tid 33542] [client 158.158.124.190:7643] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeO6SH4Zz-rubR1wiZ-c7QAAANc"]
[Sun Apr 19 01:07:21.665167 2026] [:error] [pid 32165:tid 32180] [client 158.158.124.190:8104] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeO6Sae2vKwEk_N0BrbtkgAAAAs"]
[Sun Apr 19 01:07:22.826162 2026] [:error] [pid 33517:tid 33540] [client 158.158.124.190:8084] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeO6Sn4Zz-rubR1wiZ-dBgAAANU"]
[Sun Apr 19 01:07:24.142750 2026] [:error] [pid 33517:tid 33540] [client 158.158.124.190:8080] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index.php"] [unique_id "aeO6TH4Zz-rubR1wiZ-dGQAAANU"]
[Sun Apr 19 01:07:24.962432 2026] [:error] [pid 60910:tid 60920] [client 158.158.124.190:8100] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeO6THFWunkyacYqsD0gDQAAAUg"]
[Sun Apr 19 01:07:26.580750 2026] [:error] [pid 32252:tid 32268] [client 158.158.124.190:7648] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeO6TuXl4Yc-Lt5fJ9iUigAAAQ4"]
[Sun Apr 19 01:07:27.406588 2026] [:error] [pid 60910:tid 60918] [client 158.158.124.190:8085] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeO6T3FWunkyacYqsD0gFQAAAUY"]
[Sun Apr 19 01:07:27.944192 2026] [:error] [pid 33517:tid 33526] [client 158.158.124.190:8108] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aeO6T34Zz-rubR1wiZ-dNgAAAMc"]
[Sun Apr 19 01:07:28.842989 2026] [:error] [pid 32167:tid 32233] [client 158.158.124.190:8102] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeO6UEyD4Jm27Mb3NJhpIQAAAIg"]
[Sun Apr 19 01:07:29.654966 2026] [:error] [pid 32165:tid 32170] [client 158.158.124.190:7699] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeO6Uae2vKwEk_N0BrbtmQAAAAE"]
[Sun Apr 19 01:07:30.324579 2026] [:error] [pid 32165:tid 32174] [client 158.158.124.190:8065] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeO6Uqe2vKwEk_N0BrbtnAAAAAU"]
[Sun Apr 19 01:07:30.884925 2026] [:error] [pid 32166:tid 32204] [client 158.158.124.190:8079] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aeO6UpCHNkWwdiZnafLEXwAAAEY"]
[Sun Apr 19 01:07:31.591955 2026] [:error] [pid 32252:tid 32275] [client 158.158.124.190:8007] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeO6U-Xl4Yc-Lt5fJ9iUlgAAARU"]
[Sun Apr 19 01:07:32.108906 2026] [:error] [pid 32252:tid 32258] [client 158.158.124.190:7628] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeO6VOXl4Yc-Lt5fJ9iUmAAAAQQ"]
[Sun Apr 19 01:07:32.951726 2026] [:error] [pid 32166:tid 32222] [client 158.158.124.190:7642] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeO6VJCHNkWwdiZnafLEYAAAAFg"]
[Sun Apr 19 01:07:33.704338 2026] [:error] [pid 33517:tid 33532] [client 158.158.124.190:8078] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aeO6VX4Zz-rubR1wiZ-dVQAAAM0"]
[Sun Apr 19 01:07:34.349449 2026] [:error] [pid 32166:tid 32217] [client 158.158.124.190:8113] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeO6VpCHNkWwdiZnafLEYgAAAFM"]
[Sun Apr 19 01:07:35.650652 2026] [:error] [pid 33517:tid 33538] [client 158.158.124.190:7669] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeO6V34Zz-rubR1wiZ-dYgAAANM"]
[Sun Apr 19 01:07:36.820290 2026] [:error] [pid 32165:tid 32189] [client 158.158.124.190:7665] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeO6WKe2vKwEk_N0BrbtpgAAABQ"]
[Sun Apr 19 01:07:38.343401 2026] [:error] [pid 60910:tid 60932] [client 158.158.124.190:8106] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeO6WnFWunkyacYqsD0gJwAAAVQ"]
[Sun Apr 19 01:07:39.845020 2026] [:error] [pid 60910:tid 60913] [client 158.158.124.190:7690] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aeO6W3FWunkyacYqsD0gKQAAAUE"]
[Sun Apr 19 01:07:40.869092 2026] [:error] [pid 60910:tid 60917] [client 158.158.124.190:7652] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aeO6XHFWunkyacYqsD0gLgAAAUU"]
[Sun Apr 19 01:07:41.823710 2026] [:error] [pid 60910:tid 60921] [client 158.158.124.190:7662] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aeO6XXFWunkyacYqsD0gMQAAAUk"]
[Sun Apr 19 01:07:43.039171 2026] [:error] [pid 32166:tid 32205] [client 158.158.124.190:7659] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aeO6X5CHNkWwdiZnafLEZwAAAEc"]
[Sun Apr 19 01:07:44.312800 2026] [:error] [pid 32252:tid 32254] [client 158.158.124.190:8119] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeO6YOXl4Yc-Lt5fJ9iUqwAAAQA"]
[Sun Apr 19 01:07:45.072465 2026] [:error] [pid 32167:tid 32246] [client 158.158.124.190:7617] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeO6YUyD4Jm27Mb3NJhpWgAAAJU"]
[Sun Apr 19 01:07:46.024712 2026] [:error] [pid 32165:tid 32187] [client 158.158.124.190:7725] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeO6Yqe2vKwEk_N0BrbtvAAAABI"]
[Sun Apr 19 01:07:46.651028 2026] [:error] [pid 32252:tid 32263] [client 158.158.124.190:8117] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "aeO6YuXl4Yc-Lt5fJ9iUsgAAAQk"]
[Sun Apr 19 01:07:47.343431 2026] [:error] [pid 60910:tid 60926] [client 158.158.124.190:8128] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeO6Y3FWunkyacYqsD0gOgAAAU4"]
[Sun Apr 19 01:07:47.944912 2026] [:error] [pid 33517:tid 33524] [client 158.158.124.190:7634] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeO6Y34Zz-rubR1wiZ-djAAAAMU"]
[Sun Apr 19 01:07:48.522521 2026] [:error] [pid 32167:tid 32245] [client 158.158.124.190:8109] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeO6ZEyD4Jm27Mb3NJhpdAAAAJQ"]
[Sun Apr 19 01:07:49.275829 2026] [:error] [pid 32252:tid 32266] [client 158.158.124.190:7638] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tiny2.php"] [unique_id "aeO6ZeXl4Yc-Lt5fJ9iUuAAAAQw"]
[Sun Apr 19 01:07:49.823196 2026] [:error] [pid 33517:tid 33521] [client 158.158.124.190:7695] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeO6ZX4Zz-rubR1wiZ-dlwAAAMI"]
[Sun Apr 19 01:07:50.354148 2026] [:error] [pid 33517:tid 33522] [client 158.158.124.190:7737] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeO6Zn4Zz-rubR1wiZ-dnAAAAMM"]
[Sun Apr 19 01:07:51.021895 2026] [:error] [pid 32167:tid 32239] [client 158.158.124.190:7649] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeO6Z0yD4Jm27Mb3NJhpgQAAAI4"]
[Sun Apr 19 01:07:51.772527 2026] [:error] [pid 33517:tid 33536] [client 158.158.124.190:7620] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeO6Z34Zz-rubR1wiZ-dpgAAANE"]
[Sun Apr 19 01:07:52.528658 2026] [:error] [pid 33517:tid 33521] [client 158.158.124.190:7663] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gz.php"] [unique_id "aeO6aH4Zz-rubR1wiZ-dqgAAAMI"]
[Sun Apr 19 01:07:53.393503 2026] [:error] [pid 33517:tid 33542] [client 158.158.124.190:7651] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gz.php"] [unique_id "aeO6aX4Zz-rubR1wiZ-drwAAANc"]
[Sun Apr 19 01:07:54.307801 2026] [:error] [pid 33517:tid 33539] [client 158.158.124.190:8045] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gz.php"] [unique_id "aeO6an4Zz-rubR1wiZ-dtAAAANQ"]
[Sun Apr 19 01:07:55.416453 2026] [:error] [pid 32167:tid 32246] [client 158.158.124.190:8004] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gz.php"] [unique_id "aeO6a0yD4Jm27Mb3NJhplAAAAJU"]
[Sun Apr 19 01:07:56.202334 2026] [:error] [pid 33517:tid 33532] [client 158.158.124.190:8002] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeO6bH4Zz-rubR1wiZ-duwAAAM0"]
[Sun Apr 19 01:07:56.799999 2026] [:error] [pid 33517:tid 33519] [client 158.158.124.190:7632] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeO6bH4Zz-rubR1wiZ-dvwAAAMA"]
[Sun Apr 19 01:07:57.397328 2026] [:error] [pid 32166:tid 32213] [client 158.158.124.190:8097] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeO6bZCHNkWwdiZnafLEcAAAAE8"]
[Sun Apr 19 01:07:57.890937 2026] [:error] [pid 33517:tid 33542] [client 158.158.124.190:7674] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeO6bX4Zz-rubR1wiZ-dxQAAANc"]
[Sun Apr 19 01:07:58.588506 2026] [:error] [pid 33517:tid 33539] [client 158.158.124.190:8105] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeO6bn4Zz-rubR1wiZ-dygAAANQ"]
[Sun Apr 19 01:07:59.138345 2026] [:error] [pid 32252:tid 32263] [client 158.158.124.190:8008] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeO6b-Xl4Yc-Lt5fJ9iUxgAAAQk"]
[Sun Apr 19 01:07:59.907948 2026] [:error] [pid 33517:tid 33529] [client 158.158.124.190:7616] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeO6b34Zz-rubR1wiZ-dzgAAAMo"]
[Sun Apr 19 01:08:00.483739 2026] [:error] [pid 32165:tid 32173] [client 158.158.124.190:7631] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "aeO6cKe2vKwEk_N0BrbtygAAAAQ"]
[Sun Apr 19 01:08:01.155348 2026] [:error] [pid 32165:tid 32172] [client 158.158.124.190:8142] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "aeO6cae2vKwEk_N0BrbtywAAAAM"]
[Sun Apr 19 01:08:01.672566 2026] [:error] [pid 33517:tid 33540] [client 158.158.124.190:7718] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "aeO6cX4Zz-rubR1wiZ-d2QAAANU"]
[Sun Apr 19 01:08:02.540159 2026] [:error] [pid 32252:tid 32254] [client 158.158.124.190:8010] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "aeO6cuXl4Yc-Lt5fJ9iU0gAAAQA"]
[Sun Apr 19 01:08:04.138826 2026] [proxy_fcgi:error] [pid 32165:tid 32179] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:05.728425 2026] [proxy_fcgi:error] [pid 32165:tid 32188] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:05.993517 2026] [proxy_fcgi:error] [pid 32165:tid 32181] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:06.237201 2026] [proxy_fcgi:error] [pid 32165:tid 32185] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:06.480661 2026] [proxy_fcgi:error] [pid 32165:tid 32177] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:06.860925 2026] [proxy_fcgi:error] [pid 32165:tid 32173] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:07.116806 2026] [proxy_fcgi:error] [pid 32165:tid 32172] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:07.359597 2026] [proxy_fcgi:error] [pid 32165:tid 32187] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:07.601793 2026] [proxy_fcgi:error] [pid 32165:tid 32191] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:07.852494 2026] [proxy_fcgi:error] [pid 32165:tid 32180] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:08:08.099754 2026] [proxy_fcgi:error] [pid 32165:tid 32179] [client 158.158.124.190:8089] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 03:17:02.465704 2026] [:error] [pid 41277:tid 41291] [client 45.132.115.88:27737] [client 45.132.115.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.88, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aePYrkH3ayszMLZYflsQdgAAAYw"]
[Sun Apr 19 03:17:02.474494 2026] [proxy_fcgi:error] [pid 41277:tid 41291] [client 45.132.115.88:27737] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 04:55:30.876387 2026] [:error] [pid 15694:tid 15746] [client 3.121.227.207:46306] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aePvwrimB-jol1fwqAq1jAAAAZQ"]
[Sun Apr 19 04:55:32.136944 2026] [:error] [pid 47886:tid 47900] [client 3.121.227.207:46330] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aePvxESe8yiyuPrD7yPfHwAAAMw"]
[Sun Apr 19 04:55:33.142061 2026] [:error] [pid 15764:tid 15847] [client 3.121.227.207:46348] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "aePvxWLL_sqdSHoVp-TizgAAAlU"]
[Sun Apr 19 04:55:34.171211 2026] [:error] [pid 47772:tid 47794] [client 3.121.227.207:46368] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "aePvxoc0L16cb4smAz-NNwAAAAU"]
[Sun Apr 19 04:55:35.181118 2026] [:error] [pid 47773:tid 47827] [client 3.121.227.207:46378] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "aePvx-iBHdnCJDuPq9A5yAAAAEs"]
[Sun Apr 19 04:55:36.187958 2026] [:error] [pid 47775:tid 47866] [client 3.121.227.207:46382] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.development"] [unique_id "aePvyLmztjlk9tsmoexirgAAAJc"]
[Sun Apr 19 04:55:37.226823 2026] [:error] [pid 47773:tid 47828] [client 3.121.227.207:46390] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.test"] [unique_id "aePvyeiBHdnCJDuPq9A50AAAAEw"]
[Sun Apr 19 04:55:38.244355 2026] [:error] [pid 15764:tid 15826] [client 3.121.227.207:54396] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.remote"] [unique_id "aePvymLL_sqdSHoVp-Ti1AAAAkA"]
[Sun Apr 19 04:55:39.236595 2026] [:error] [pid 47773:tid 47829] [client 3.121.227.207:54412] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "aePvy-iBHdnCJDuPq9A58gAAAE0"]
[Sun Apr 19 04:55:40.261546 2026] [:error] [pid 47773:tid 47832] [client 3.121.227.207:54432] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "aePvzOiBHdnCJDuPq9A6BQAAAFA"]
[Sun Apr 19 04:55:41.321397 2026] [:error] [pid 47775:tid 47850] [client 3.121.227.207:54452] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.save"] [unique_id "aePvzbmztjlk9tsmoexiwwAAAIc"]
[Sun Apr 19 04:55:42.315854 2026] [:error] [pid 47773:tid 47827] [client 3.121.227.207:54460] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.old"] [unique_id "aePvzuiBHdnCJDuPq9A6LAAAAEs"]
[Sun Apr 19 04:55:43.326021 2026] [:error] [pid 47886:tid 47911] [client 3.121.227.207:54476] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "aePvz0Se8yiyuPrD7yPfLwAAANc"]
[Sun Apr 19 04:55:44.313949 2026] [:error] [pid 47775:tid 47866] [client 3.121.227.207:54496] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.example"] [unique_id "aePv0Lmztjlk9tsmoexixwAAAJc"]
[Sun Apr 19 04:55:45.308632 2026] [:error] [pid 47775:tid 47856] [client 3.121.227.207:54516] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "aePv0bmztjlk9tsmoexizAAAAI0"]
[Sun Apr 19 04:55:46.324403 2026] [:error] [pid 15763:tid 15817] [client 3.121.227.207:54528] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "aePv0rMXv1Y1THOoxaAdBgAAAhU"]
[Sun Apr 19 04:55:47.336205 2026] [:error] [pid 15764:tid 15831] [client 3.121.227.207:54560] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.stage"] [unique_id "aePv02LL_sqdSHoVp-Ti3QAAAkU"]
[Sun Apr 19 04:55:48.347424 2026] [:error] [pid 47772:tid 47803] [client 3.121.227.207:53008] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.ci"] [unique_id "aePv1Ic0L16cb4smAz-NVwAAAA4"]
[Sun Apr 19 04:55:49.361654 2026] [:error] [pid 47772:tid 47808] [client 3.121.227.207:53034] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.docker"] [unique_id "aePv1Yc0L16cb4smAz-NWwAAABM"]
[Sun Apr 19 04:55:50.423005 2026] [:error] [pid 47773:tid 47817] [client 3.121.227.207:53044] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.live"] [unique_id "aePv1uiBHdnCJDuPq9A6iQAAAEE"]
[Sun Apr 19 04:55:51.417197 2026] [:error] [pid 15763:tid 15807] [client 3.121.227.207:53054] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.preprod"] [unique_id "aePv17MXv1Y1THOoxaAdDgAAAgs"]
[Sun Apr 19 04:55:52.395694 2026] [:error] [pid 47886:tid 47903] [client 3.121.227.207:53068] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.uat"] [unique_id "aePv2ESe8yiyuPrD7yPfOwAAAM8"]
[Sun Apr 19 04:55:53.382653 2026] [:error] [pid 15760:tid 15780] [client 3.121.227.207:53092] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "aePv2fSdD_XHQMJ_ISsSIwAAAcw"]
[Sun Apr 19 04:55:54.423784 2026] [:error] [pid 47773:tid 47836] [client 3.121.227.207:53106] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "aePv2uiBHdnCJDuPq9A6mQAAAFQ"]
[Sun Apr 19 04:55:55.398763 2026] [:error] [pid 15765:tid 15855] [client 3.121.227.207:53114] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env~"] [unique_id "aePv2_Rqinw-W5EwQ754pQAAAoI"]
[Sun Apr 19 04:55:56.374972 2026] [:error] [pid 15763:tid 15814] [client 3.121.227.207:53138] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "aePv3LMXv1Y1THOoxaAdFgAAAhI"]
[Sun Apr 19 04:55:57.350197 2026] [:error] [pid 47772:tid 47804] [client 3.121.227.207:53156] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/apps/.env"] [unique_id "aePv3Yc0L16cb4smAz-NfAAAAA8"]
[Sun Apr 19 04:55:58.396114 2026] [:error] [pid 47775:tid 47852] [client 3.121.227.207:36442] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "aePv3rmztjlk9tsmoexi4AAAAIk"]
[Sun Apr 19 04:55:59.380296 2026] [:error] [pid 47772:tid 47793] [client 3.121.227.207:36456] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/web/.env"] [unique_id "aePv34c0L16cb4smAz-NgAAAAAQ"]
[Sun Apr 19 04:56:00.355353 2026] [:error] [pid 47886:tid 47908] [client 3.121.227.207:36482] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/site/.env"] [unique_id "aePv4ESe8yiyuPrD7yPfQAAAANQ"]
[Sun Apr 19 04:56:01.328323 2026] [:error] [pid 47772:tid 47799] [client 3.121.227.207:36502] [client 3.121.227.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/public/.env"] [unique_id "aePv4Yc0L16cb4smAz-NgwAAAAo"]
[Sun Apr 19 05:42:05.303334 2026] [proxy_fcgi:error] [pid 47773:tid 47838] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:05.621614 2026] [proxy_fcgi:error] [pid 47773:tid 47819] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:05.834994 2026] [proxy_fcgi:error] [pid 47773:tid 47830] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:06.051552 2026] [proxy_fcgi:error] [pid 47773:tid 47821] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:06.280333 2026] [proxy_fcgi:error] [pid 47773:tid 47827] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:06.546164 2026] [proxy_fcgi:error] [pid 47773:tid 47839] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:06.809644 2026] [proxy_fcgi:error] [pid 47773:tid 47825] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:07.062929 2026] [proxy_fcgi:error] [pid 47773:tid 47822] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:07.492633 2026] [proxy_fcgi:error] [pid 47773:tid 47840] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:07.706278 2026] [proxy_fcgi:error] [pid 47773:tid 47823] [client 20.48.254.119:65156] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 05:42:07.917596 2026] [:error] [pid 47773:tid 47832] [client 20.48.254.119:65156] [client 20.48.254.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "aeP6r-iBHdnCJDuPq9BWLAAAAFA"]
[Sun Apr 19 05:42:16.028409 2026] [:error] [pid 47772:tid 47813] [client 20.48.254.119:60907] [client 20.48.254.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "aeP6uIc0L16cb4smAz-gzQAAABg"]
[Sun Apr 19 05:42:18.904958 2026] [:error] [pid 47773:tid 47837] [client 20.48.254.119:60885] [client 20.48.254.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "aeP6uuiBHdnCJDuPq9BWNAAAAFU"]
[Sun Apr 19 05:42:22.731160 2026] [:error] [pid 47773:tid 47831] [client 20.48.254.119:65135] [client 20.48.254.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "aeP6vuiBHdnCJDuPq9BWOgAAAE8"]
[Sun Apr 19 18:21:38.230938 2026] [:error] [pid 15763:tid 15799] [client 116.73.124.255:64517] [client 116.73.124.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.73.124.255, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeSssrMXv1Y1THOoxaDK-gAAAgM"]
[Sun Apr 19 18:21:38.242792 2026] [proxy_fcgi:error] [pid 15763:tid 15799] [client 116.73.124.255:64517] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 19:07:35.608111 2026] [:error] [pid 15764:tid 15835] [client 185.213.175.224:46294] [client 185.213.175.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aeS3d2LL_sqdSHoVp-TdfwAAAkk"]
[Sun Apr 19 19:07:35.884131 2026] [:error] [pid 15764:tid 15842] [client 185.213.175.224:46310] [client 185.213.175.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "aeS3d2LL_sqdSHoVp-TdggAAAlA"]
[Sun Apr 19 19:07:37.395810 2026] [:error] [pid 47775:tid 47845] [client 185.213.175.224:46326] [client 185.213.175.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "aeS3ebmztjlk9tsmoez-sQAAAII"]
[Sun Apr 19 19:07:37.396852 2026] [:error] [pid 47775:tid 47847] [client 185.213.175.224:46318] [client 185.213.175.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "aeS3ebmztjlk9tsmoez-sgAAAIQ"]
[Sun Apr 19 19:07:37.396852 2026] [:error] [pid 15765:tid 15874] [client 185.213.175.224:46342] [client 185.213.175.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aeS3efRqinw-W5EwQ77plQAAApU"]
[Sun Apr 19 19:13:52.672916 2026] [:error] [pid 47772:tid 47805] [client 213.35.109.170:59140] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||stratapluswa.com.au|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS48Ic0L16cb4smAz-TCwAAABA"]
[Sun Apr 19 20:02:35.075626 2026] [proxy_fcgi:error] [pid 15694:tid 15751] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:35.315391 2026] [proxy_fcgi:error] [pid 15694:tid 15743] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:35.555127 2026] [proxy_fcgi:error] [pid 15694:tid 15725] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:35.813488 2026] [proxy_fcgi:error] [pid 15694:tid 15735] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:36.052875 2026] [proxy_fcgi:error] [pid 15694:tid 15748] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:36.292886 2026] [proxy_fcgi:error] [pid 15694:tid 15734] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:36.545990 2026] [proxy_fcgi:error] [pid 15694:tid 15742] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:36.787779 2026] [proxy_fcgi:error] [pid 15694:tid 15731] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:37.026960 2026] [proxy_fcgi:error] [pid 15694:tid 15740] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:37.265956 2026] [proxy_fcgi:error] [pid 15694:tid 15738] [client 20.43.33.49:12073] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:02:37.523056 2026] [:error] [pid 15694:tid 15739] [client 20.43.33.49:12073] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeTEXbimB-jol1fwqAoEJwAAAY0"]
[Sun Apr 19 20:02:38.150815 2026] [:error] [pid 15760:tid 15769] [client 20.43.33.49:12060] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeTEXvSdD_XHQMJ_ISv-xAAAAcE"]
[Sun Apr 19 20:02:38.763798 2026] [:error] [pid 47773:tid 47819] [client 20.43.33.49:12243] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeTEXuiBHdnCJDuPq9AwMAAAAEM"]
[Sun Apr 19 20:02:39.313170 2026] [:error] [pid 15763:tid 15818] [client 20.43.33.49:12084] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeTEX7MXv1Y1THOoxaDi0wAAAhY"]
[Sun Apr 19 20:02:40.152829 2026] [:error] [pid 47773:tid 47833] [client 20.43.33.49:12230] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeTEYOiBHdnCJDuPq9AwNQAAAFE"]
[Sun Apr 19 20:02:41.367345 2026] [:error] [pid 15760:tid 15791] [client 20.43.33.49:12224] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeTEYfSdD_XHQMJ_ISv-ygAAAdc"]
[Sun Apr 19 20:02:42.346089 2026] [:error] [pid 15764:tid 15829] [client 20.43.33.49:12076] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeTEYmLL_sqdSHoVp-Tz2gAAAkM"]
[Sun Apr 19 20:02:43.637578 2026] [:error] [pid 15764:tid 15842] [client 20.43.33.49:12242] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeTEY2LL_sqdSHoVp-Tz3QAAAlA"]
[Sun Apr 19 20:02:44.722295 2026] [:error] [pid 47775:tid 47862] [client 20.43.33.49:12041] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeTEZLmztjlk9tsmoewHbAAAAJM"]
[Sun Apr 19 20:02:45.750939 2026] [:error] [pid 15765:tid 15876] [client 20.43.33.49:12074] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeTEZfRqinw-W5EwQ77xjAAAApc"]
[Sun Apr 19 20:02:46.338909 2026] [:error] [pid 47886:tid 47895] [client 20.43.33.49:12088] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeTEZkSe8yiyuPrD7yNrtQAAAMc"]
[Sun Apr 19 20:02:46.891287 2026] [:error] [pid 15694:tid 15737] [client 20.43.33.49:12083] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeTEZrimB-jol1fwqAoELAAAAYs"]
[Sun Apr 19 20:02:47.555491 2026] [:error] [pid 15763:tid 15802] [client 20.43.33.49:12090] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeTEZ7MXv1Y1THOoxaDi2gAAAgY"]
[Sun Apr 19 20:02:48.644017 2026] [:error] [pid 47775:tid 47855] [client 20.43.33.49:12244] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeTEaLmztjlk9tsmoewHbwAAAIw"]
[Sun Apr 19 20:02:49.755028 2026] [:error] [pid 15765:tid 15877] [client 20.43.33.49:12078] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeTEafRqinw-W5EwQ77xjgAAApg"]
[Sun Apr 19 20:02:50.423515 2026] [:error] [pid 47772:tid 47797] [client 20.43.33.49:12039] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeTEaoc0L16cb4smAz-jFAAAAAg"]
[Sun Apr 19 20:02:51.934605 2026] [:error] [pid 47772:tid 47807] [client 20.43.33.49:12227] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeTEa4c0L16cb4smAz-jFgAAABI"]
[Sun Apr 19 20:02:53.961903 2026] [:error] [pid 47886:tid 47909] [client 20.43.33.49:12063] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeTEbUSe8yiyuPrD7yNrvQAAANU"]
[Sun Apr 19 20:02:54.728093 2026] [:error] [pid 47886:tid 47903] [client 20.43.33.49:12053] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeTEbkSe8yiyuPrD7yNrvwAAAM8"]
[Sun Apr 19 20:02:56.328323 2026] [:error] [pid 15693:tid 15720] [client 20.43.33.49:12233] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeTEcMNMD-ccazQlTslS6wAAAVg"]
[Sun Apr 19 20:02:57.877328 2026] [:error] [pid 47773:tid 47838] [client 20.43.33.49:12051] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeTEceiBHdnCJDuPq9AwOQAAAFY"]
[Sun Apr 19 20:02:59.492131 2026] [:error] [pid 15764:tid 15847] [client 20.43.33.49:12241] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeTEc2LL_sqdSHoVp-Tz4gAAAlU"]
[Sun Apr 19 20:03:02.407921 2026] [:error] [pid 15764:tid 15836] [client 20.43.33.49:12032] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeTEdmLL_sqdSHoVp-Tz5QAAAko"]
[Sun Apr 19 20:03:05.869935 2026] [:error] [pid 15760:tid 15782] [client 20.43.33.49:12095] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeTEefSdD_XHQMJ_ISv-0AAAAc4"]
[Sun Apr 19 20:03:07.592524 2026] [:error] [pid 15760:tid 15786] [client 20.43.33.49:12069] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeTEe_SdD_XHQMJ_ISv-1wAAAdI"]
[Sun Apr 19 20:03:10.829835 2026] [:error] [pid 15694:tid 15737] [client 20.43.33.49:12250] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeTEfrimB-jol1fwqAoENQAAAYs"]
[Sun Apr 19 20:03:14.283573 2026] [:error] [pid 15765:tid 15869] [client 20.43.33.49:12256] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeTEgvRqinw-W5EwQ77xogAAApA"]
[Sun Apr 19 20:03:17.783137 2026] [:error] [pid 15760:tid 15791] [client 20.43.33.49:12231] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeTEhfSdD_XHQMJ_ISv-4AAAAdc"]
[Sun Apr 19 20:03:19.927117 2026] [:error] [pid 15760:tid 15792] [client 20.43.33.49:12237] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeTEh_SdD_XHQMJ_ISv-5gAAAdg"]
[Sun Apr 19 20:03:21.117742 2026] [:error] [pid 15765:tid 15861] [client 20.43.33.49:12087] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeTEifRqinw-W5EwQ77xrgAAAog"]
[Sun Apr 19 20:03:22.085509 2026] [:error] [pid 47773:tid 47824] [client 20.43.33.49:12071] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeTEiuiBHdnCJDuPq9AwQQAAAEg"]
[Sun Apr 19 20:03:22.805884 2026] [:error] [pid 15760:tid 15771] [client 20.43.33.49:12062] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeTEivSdD_XHQMJ_ISv-5wAAAcM"]
[Sun Apr 19 20:03:23.486530 2026] [:error] [pid 15763:tid 15815] [client 20.43.33.49:12235] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "aeTEi7MXv1Y1THOoxaDjAAAAAhM"]
[Sun Apr 19 20:03:24.319212 2026] [:error] [pid 47772:tid 47807] [client 20.43.33.49:12180] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "aeTEjIc0L16cb4smAz-jHgAAABI"]
[Sun Apr 19 20:03:25.898366 2026] [:error] [pid 47886:tid 47898] [client 20.43.33.49:12228] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "aeTEjUSe8yiyuPrD7yNr1wAAAMo"]
[Sun Apr 19 20:03:44.872607 2026] [proxy_fcgi:error] [pid 15694:tid 15746] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:45.114907 2026] [proxy_fcgi:error] [pid 15694:tid 15726] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:45.354985 2026] [proxy_fcgi:error] [pid 15694:tid 15724] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:45.635652 2026] [proxy_fcgi:error] [pid 15694:tid 15730] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:46.022090 2026] [proxy_fcgi:error] [pid 15694:tid 15733] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:46.261962 2026] [proxy_fcgi:error] [pid 15694:tid 15736] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:46.501191 2026] [proxy_fcgi:error] [pid 15694:tid 15737] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:46.742878 2026] [proxy_fcgi:error] [pid 15694:tid 15751] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:46.986787 2026] [proxy_fcgi:error] [pid 15694:tid 15735] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:47.256162 2026] [proxy_fcgi:error] [pid 15694:tid 15745] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:47.496335 2026] [proxy_fcgi:error] [pid 15694:tid 15734] [client 20.43.33.49:12251] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:03:47.910314 2026] [:error] [pid 15694:tid 15740] [client 20.43.33.49:12251] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeTEo7imB-jol1fwqAoEVQAAAY4"]
[Sun Apr 19 20:03:50.299104 2026] [:error] [pid 47775:tid 47851] [client 20.43.33.49:12046] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeTEprmztjlk9tsmoewHhgAAAIg"]
[Sun Apr 19 20:03:52.176207 2026] [:error] [pid 47772:tid 47807] [client 20.43.33.49:12229] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeTEqIc0L16cb4smAz-jOQAAABI"]
[Sun Apr 19 20:03:53.672890 2026] [:error] [pid 47773:tid 47823] [client 20.43.33.49:12089] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeTEqeiBHdnCJDuPq9AwVAAAAEc"]
[Sun Apr 19 20:03:54.902963 2026] [:error] [pid 47773:tid 47838] [client 20.43.33.49:12086] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeTEquiBHdnCJDuPq9AwVgAAAFY"]
[Sun Apr 19 20:03:55.732216 2026] [:error] [pid 15763:tid 15808] [client 20.43.33.49:12072] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeTEq7MXv1Y1THOoxaDjIwAAAgw"]
[Sun Apr 19 20:03:57.663999 2026] [:error] [pid 15694:tid 15737] [client 20.43.33.49:12236] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeTErbimB-jol1fwqAoEVwAAAYs"]
[Sun Apr 19 20:03:59.154111 2026] [:error] [pid 47772:tid 47796] [client 20.43.33.49:12092] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeTEr4c0L16cb4smAz-jRAAAAAc"]
[Sun Apr 19 20:04:00.033287 2026] [:error] [pid 15760:tid 15779] [client 20.43.33.49:12049] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeTEsPSdD_XHQMJ_ISv_FgAAAcs"]
[Sun Apr 19 20:04:01.146706 2026] [:error] [pid 15760:tid 15780] [client 20.43.33.49:12268] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeTEsfSdD_XHQMJ_ISv_GgAAAcw"]
[Sun Apr 19 20:04:02.795572 2026] [:error] [pid 47773:tid 47820] [client 20.43.33.49:12080] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeTEsuiBHdnCJDuPq9AwWgAAAEQ"]
[Sun Apr 19 20:04:05.946354 2026] [:error] [pid 15760:tid 15774] [client 20.43.33.49:12057] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeTEtfSdD_XHQMJ_ISv_KgAAAcY"]
[Sun Apr 19 20:04:09.520505 2026] [:error] [pid 47886:tid 47903] [client 20.43.33.49:12093] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeTEuUSe8yiyuPrD7yNr5QAAAM8"]
[Sun Apr 19 20:04:24.017985 2026] [:error] [pid 15764:tid 15842] [client 20.43.33.49:12055] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeTEyGLL_sqdSHoVp-T0HAAAAlA"]
[Sun Apr 19 20:04:32.984409 2026] [:error] [pid 47772:tid 47799] [client 20.43.33.49:12272] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeTE0Ic0L16cb4smAz-jUAAAAAo"]
[Sun Apr 19 20:05:33.035161 2026] [proxy_fcgi:error] [pid 15760:tid 15772] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:33.385600 2026] [proxy_fcgi:error] [pid 15760:tid 15771] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:33.647277 2026] [proxy_fcgi:error] [pid 15760:tid 15791] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:33.919773 2026] [proxy_fcgi:error] [pid 15760:tid 15769] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:34.159100 2026] [proxy_fcgi:error] [pid 15760:tid 15780] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:34.400597 2026] [proxy_fcgi:error] [pid 15760:tid 15768] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:34.666994 2026] [proxy_fcgi:error] [pid 15760:tid 15788] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:34.904689 2026] [proxy_fcgi:error] [pid 15760:tid 15782] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:35.144927 2026] [proxy_fcgi:error] [pid 15760:tid 15773] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:35.384054 2026] [proxy_fcgi:error] [pid 15760:tid 15792] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:35.642607 2026] [proxy_fcgi:error] [pid 15760:tid 15781] [client 20.43.33.49:12174] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:05:35.889719 2026] [:error] [pid 15760:tid 15789] [client 20.43.33.49:12174] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeTFD_SdD_XHQMJ_ISv_xgAAAdU"]
[Sun Apr 19 20:05:37.954773 2026] [:error] [pid 47773:tid 47830] [client 20.43.33.49:12079] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeTFEeiBHdnCJDuPq9AwgAAAAE4"]
[Sun Apr 19 20:05:38.893943 2026] [:error] [pid 47772:tid 47800] [client 20.43.33.49:12278] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeTFEoc0L16cb4smAz-jeAAAAAs"]
[Sun Apr 19 20:05:39.488207 2026] [:error] [pid 47773:tid 47838] [client 20.43.33.49:12264] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeTFE-iBHdnCJDuPq9AwgwAAAFY"]
[Sun Apr 19 20:05:40.192641 2026] [:error] [pid 15760:tid 15775] [client 20.43.33.49:12162] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeTFFPSdD_XHQMJ_ISv_zQAAAcc"]
[Sun Apr 19 20:05:41.014053 2026] [:error] [pid 47773:tid 47823] [client 20.43.33.49:12085] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeTFFeiBHdnCJDuPq9AwhAAAAEc"]
[Sun Apr 19 20:05:41.976516 2026] [:error] [pid 47772:tid 47793] [client 20.43.33.49:12232] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeTFFYc0L16cb4smAz-jgAAAAAQ"]
[Sun Apr 19 20:05:43.531004 2026] [:error] [pid 15760:tid 15787] [client 20.43.33.49:12091] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeTFF_SdD_XHQMJ_ISv_zwAAAdM"]
[Sun Apr 19 20:05:45.835903 2026] [:error] [pid 15765:tid 15852] [client 20.43.33.49:12038] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeTFGfRqinw-W5EwQ77xzAAAAoA"]
[Sun Apr 19 20:05:47.144498 2026] [:error] [pid 47773:tid 47834] [client 20.43.33.49:12065] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeTFG-iBHdnCJDuPq9AwhwAAAFI"]
[Sun Apr 19 20:05:48.280194 2026] [:error] [pid 47775:tid 47854] [client 20.43.33.49:12042] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeTFHLmztjlk9tsmoewHrQAAAIs"]
[Sun Apr 19 20:05:49.057556 2026] [:error] [pid 47772:tid 47813] [client 20.43.33.49:12050] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeTFHYc0L16cb4smAz-jhQAAABg"]
[Sun Apr 19 20:05:50.692606 2026] [:error] [pid 47775:tid 47844] [client 20.43.33.49:12066] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeTFHrmztjlk9tsmoewHsQAAAIE"]
[Sun Apr 19 20:05:51.661599 2026] [:error] [pid 15763:tid 15798] [client 20.43.33.49:12266] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeTFH7MXv1Y1THOoxaDjQwAAAgI"]
[Sun Apr 19 20:05:52.684179 2026] [:error] [pid 47772:tid 47802] [client 20.43.33.49:12165] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeTFIIc0L16cb4smAz-jjgAAAA0"]
[Sun Apr 19 20:05:53.493418 2026] [:error] [pid 47886:tid 47890] [client 20.43.33.49:12164] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeTFIUSe8yiyuPrD7yNr-wAAAMI"]
[Sun Apr 19 20:05:54.233406 2026] [:error] [pid 15694:tid 15743] [client 20.43.33.49:12252] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "aeTFIrimB-jol1fwqAoEcwAAAZE"]
[Sun Apr 19 20:05:55.596284 2026] [:error] [pid 15765:tid 15867] [client 20.43.33.49:12258] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "aeTFI_Rqinw-W5EwQ77xzwAAAo4"]
[Sun Apr 19 20:05:56.445762 2026] [:error] [pid 15693:tid 15712] [client 20.43.33.49:12045] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "aeTFJMNMD-ccazQlTslTHAAAAVA"]
[Sun Apr 19 20:05:57.961497 2026] [:error] [pid 15760:tid 15782] [client 20.43.33.49:12181] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zample.php"] [unique_id "aeTFJfSdD_XHQMJ_ISv_1wAAAc4"]
[Sun Apr 19 20:05:59.055031 2026] [:error] [pid 15764:tid 15829] [client 20.43.33.49:12260] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeTFJ2LL_sqdSHoVp-T0cQAAAkM"]
[Sun Apr 19 20:05:59.969422 2026] [:error] [pid 15693:tid 15701] [client 20.43.33.49:12098] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeTFJ8NMD-ccazQlTslTHwAAAUU"]
[Sun Apr 19 20:06:01.066784 2026] [:error] [pid 47772:tid 47792] [client 20.43.33.49:12226] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeTFKYc0L16cb4smAz-jkgAAAAM"]
[Sun Apr 19 20:06:03.031419 2026] [:error] [pid 15763:tid 15813] [client 20.43.33.49:12245] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeTFK7MXv1Y1THOoxaDjSwAAAhE"]
[Sun Apr 19 20:06:05.113204 2026] [:error] [pid 15760:tid 15772] [client 20.43.33.49:12081] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeTFLfSdD_XHQMJ_ISv_4AAAAcQ"]
[Sun Apr 19 20:06:07.510094 2026] [:error] [pid 15760:tid 15781] [client 20.43.33.49:12184] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeTFL_SdD_XHQMJ_ISv_5AAAAc0"]
[Sun Apr 19 20:06:10.088429 2026] [:error] [pid 15760:tid 15791] [client 20.43.33.49:12253] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeTFMvSdD_XHQMJ_ISv_6gAAAdc"]
[Sun Apr 19 20:06:12.737775 2026] [:error] [pid 47773:tid 47833] [client 20.43.33.49:12248] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeTFNOiBHdnCJDuPq9AwkQAAAFE"]
[Sun Apr 19 20:06:21.453068 2026] [:error] [pid 15764:tid 15841] [client 20.43.33.49:12064] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeTFPWLL_sqdSHoVp-T0nAAAAk8"]
[Sun Apr 19 20:06:27.030494 2026] [:error] [pid 47773:tid 47836] [client 20.43.33.49:12170] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeTFQ-iBHdnCJDuPq9AwmQAAAFQ"]
[Sun Apr 19 20:06:28.050314 2026] [:error] [pid 15760:tid 15783] [client 20.43.33.49:12281] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeTFRPSdD_XHQMJ_ISsABgAAAc8"]
[Sun Apr 19 20:06:29.553070 2026] [:error] [pid 15763:tid 15808] [client 20.43.33.49:12262] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeTFRbMXv1Y1THOoxaDjYgAAAgw"]
[Sun Apr 19 20:06:31.018153 2026] [:error] [pid 15760:tid 15777] [client 20.43.33.49:12058] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeTFR_SdD_XHQMJ_ISsACgAAAck"]
[Sun Apr 19 20:06:34.410840 2026] [:error] [pid 47775:tid 47861] [client 20.43.33.49:12222] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeTFSrmztjlk9tsmoewH1QAAAJI"]
[Sun Apr 19 20:06:35.438082 2026] [proxy_fcgi:error] [pid 47886:tid 47891] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:35.718669 2026] [proxy_fcgi:error] [pid 47886:tid 47902] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:35.971784 2026] [proxy_fcgi:error] [pid 47886:tid 47907] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:36.476479 2026] [proxy_fcgi:error] [pid 47886:tid 47894] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:36.725895 2026] [proxy_fcgi:error] [pid 47886:tid 47889] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:36.972375 2026] [proxy_fcgi:error] [pid 47886:tid 47911] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:37.266924 2026] [proxy_fcgi:error] [pid 47886:tid 47892] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:37.506580 2026] [proxy_fcgi:error] [pid 47886:tid 47912] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:37.747200 2026] [proxy_fcgi:error] [pid 47886:tid 47897] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:38.038730 2026] [proxy_fcgi:error] [pid 47886:tid 47909] [client 20.43.33.49:12094] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:06:38.558126 2026] [:error] [pid 47886:tid 47903] [client 20.43.33.49:12094] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTFTkSe8yiyuPrD7yNsCgAAAM8"]
[Sun Apr 19 20:06:40.683503 2026] [:error] [pid 47773:tid 47832] [client 20.43.33.49:12037] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTFUOiBHdnCJDuPq9AwogAAAFA"]
[Sun Apr 19 20:06:44.926754 2026] [:error] [pid 15760:tid 15788] [client 20.43.33.49:12206] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTFVPSdD_XHQMJ_ISsAHQAAAdQ"]
[Sun Apr 19 20:06:46.551279 2026] [:error] [pid 47773:tid 47837] [client 20.43.33.49:12059] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTFVuiBHdnCJDuPq9AwpAAAAFU"]
[Sun Apr 19 20:06:47.592882 2026] [:error] [pid 15764:tid 15837] [client 20.43.33.49:12286] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeTFV2LL_sqdSHoVp-T0ywAAAks"]
[Sun Apr 19 20:06:49.205598 2026] [:error] [pid 15764:tid 15850] [client 20.43.33.49:12279] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeTFWWLL_sqdSHoVp-T00AAAAlc"]
[Sun Apr 19 20:06:49.874947 2026] [:error] [pid 47773:tid 47821] [client 20.43.33.49:12163] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeTFWeiBHdnCJDuPq9AwqgAAAEU"]
[Sun Apr 19 20:06:50.537144 2026] [:error] [pid 47773:tid 47820] [client 20.43.33.49:12283] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeTFWuiBHdnCJDuPq9AwqwAAAEQ"]
[Sun Apr 19 20:06:51.454115 2026] [:error] [pid 15760:tid 15768] [client 20.43.33.49:12234] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeTFW_SdD_XHQMJ_ISsAKQAAAcA"]
[Sun Apr 19 20:06:52.453282 2026] [:error] [pid 15760:tid 15788] [client 20.43.33.49:12238] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeTFXPSdD_XHQMJ_ISsALAAAAdQ"]
[Sun Apr 19 20:06:54.315361 2026] [:error] [pid 15760:tid 15777] [client 20.43.33.49:12282] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeTFXvSdD_XHQMJ_ISsAMgAAAck"]
[Sun Apr 19 20:06:56.869777 2026] [:error] [pid 15693:tid 15707] [client 20.43.33.49:12192] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeTFYMNMD-ccazQlTslTJAAAAUs"]
[Sun Apr 19 20:06:59.085773 2026] [:error] [pid 15763:tid 15815] [client 20.43.33.49:12275] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeTFY7MXv1Y1THOoxaDjbQAAAhM"]
[Sun Apr 19 20:07:00.438372 2026] [:error] [pid 15760:tid 15784] [client 20.43.33.49:12244] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeTFZPSdD_XHQMJ_ISsAPgAAAdA"]
[Sun Apr 19 20:07:02.129581 2026] [:error] [pid 15765:tid 15870] [client 20.43.33.49:12047] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeTFZvRqinw-W5EwQ77x5wAAApE"]
[Sun Apr 19 20:07:03.726592 2026] [:error] [pid 15765:tid 15855] [client 20.43.33.49:12274] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeTFZ_Rqinw-W5EwQ77x6QAAAoI"]
[Sun Apr 19 20:07:05.013334 2026] [:error] [pid 15760:tid 15775] [client 20.43.33.49:12172] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeTFafSdD_XHQMJ_ISsASwAAAcc"]
[Sun Apr 19 20:07:06.242408 2026] [:error] [pid 47773:tid 47821] [client 20.43.33.49:12246] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeTFauiBHdnCJDuPq9AwsgAAAEU"]
[Sun Apr 19 20:07:06.932892 2026] [:error] [pid 15760:tid 15787] [client 20.43.33.49:12242] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeTFavSdD_XHQMJ_ISsAUgAAAdM"]
[Sun Apr 19 20:07:07.892127 2026] [:error] [pid 15764:tid 15850] [client 20.43.33.49:12167] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeTFa2LL_sqdSHoVp-T00gAAAlc"]
[Sun Apr 19 20:07:08.492450 2026] [:error] [pid 15764:tid 15844] [client 20.43.33.49:12043] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeTFbGLL_sqdSHoVp-T00wAAAlI"]
[Sun Apr 19 20:07:09.692659 2026] [:error] [pid 15763:tid 15813] [client 20.43.33.49:12033] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeTFbbMXv1Y1THOoxaDjcwAAAhE"]
[Sun Apr 19 20:07:10.681133 2026] [:error] [pid 47886:tid 47893] [client 20.43.33.49:12171] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeTFbkSe8yiyuPrD7yNsCwAAAMU"]
[Sun Apr 19 20:07:12.228556 2026] [:error] [pid 15694:tid 15724] [client 20.43.33.49:12074] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeTFcLimB-jol1fwqAoEgAAAAYE"]
[Sun Apr 19 20:07:13.928607 2026] [:error] [pid 15764:tid 15833] [client 20.43.33.49:12110] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeTFcWLL_sqdSHoVp-T02QAAAkc"]
[Sun Apr 19 20:07:17.093000 2026] [:error] [pid 15764:tid 15834] [client 20.43.33.49:12073] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeTFdWLL_sqdSHoVp-T03AAAAkg"]
[Sun Apr 19 20:07:19.777662 2026] [:error] [pid 15764:tid 15827] [client 20.43.33.49:12240] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeTFd2LL_sqdSHoVp-T05QAAAkE"]
[Sun Apr 19 20:07:22.695850 2026] [:error] [pid 15764:tid 15845] [client 20.43.33.49:12067] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeTFemLL_sqdSHoVp-T07AAAAlM"]
[Sun Apr 19 20:07:27.252305 2026] [:error] [pid 15763:tid 15810] [client 20.43.33.49:12212] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTFf7MXv1Y1THOoxaDjfwAAAg4"]
[Sun Apr 19 20:07:28.384302 2026] [:error] [pid 15763:tid 15808] [client 20.43.33.49:12250] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTFgLMXv1Y1THOoxaDjgQAAAgw"]
[Sun Apr 19 20:07:29.845987 2026] [:error] [pid 15763:tid 15812] [client 20.43.33.49:12077] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTFgbMXv1Y1THOoxaDjhgAAAhA"]
[Sun Apr 19 20:07:31.035732 2026] [:error] [pid 47886:tid 47898] [client 20.43.33.49:12044] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTFg0Se8yiyuPrD7yNsFwAAAMo"]
[Sun Apr 19 20:07:32.692144 2026] [:error] [pid 15764:tid 15838] [client 20.43.33.49:12036] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTFhGLL_sqdSHoVp-T1BAAAAkw"]
[Sun Apr 19 20:07:33.528441 2026] [:error] [pid 15763:tid 15815] [client 20.43.33.49:12243] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTFhbMXv1Y1THOoxaDjiAAAAhM"]
[Sun Apr 19 20:07:36.463710 2026] [:error] [pid 47773:tid 47825] [client 20.43.33.49:12168] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTFiOiBHdnCJDuPq9AwtwAAAEk"]
[Sun Apr 19 20:07:37.611601 2026] [:error] [pid 47775:tid 47850] [client 20.43.33.49:12198] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTFibmztjlk9tsmoewH3AAAAIc"]
[Sun Apr 19 20:07:39.116657 2026] [proxy_fcgi:error] [pid 15764:tid 15832] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:39.358246 2026] [proxy_fcgi:error] [pid 15764:tid 15827] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:39.610473 2026] [proxy_fcgi:error] [pid 15764:tid 15833] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:39.849994 2026] [proxy_fcgi:error] [pid 15764:tid 15831] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:40.089544 2026] [proxy_fcgi:error] [pid 15764:tid 15843] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:40.437625 2026] [proxy_fcgi:error] [pid 15764:tid 15851] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:40.968167 2026] [proxy_fcgi:error] [pid 15764:tid 15845] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:41.226890 2026] [proxy_fcgi:error] [pid 15764:tid 15829] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:41.466665 2026] [proxy_fcgi:error] [pid 15764:tid 15840] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:41.876506 2026] [proxy_fcgi:error] [pid 15764:tid 15830] [client 20.43.33.49:12084] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:07:42.116336 2026] [:error] [pid 15764:tid 15832] [client 20.43.33.49:12084] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTFjmLL_sqdSHoVp-T1JQAAAkY"]
[Sun Apr 19 20:07:43.296983 2026] [:error] [pid 15760:tid 15784] [client 20.43.33.49:12034] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTFj_SdD_XHQMJ_ISsAZQAAAdA"]
[Sun Apr 19 20:07:44.171591 2026] [:error] [pid 15764:tid 15841] [client 20.43.33.49:12270] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTFkGLL_sqdSHoVp-T1KAAAAk8"]
[Sun Apr 19 20:07:45.821173 2026] [:error] [pid 15693:tid 15710] [client 20.43.33.49:12249] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTFkcNMD-ccazQlTslTfAAAAU4"]
[Sun Apr 19 20:07:46.625471 2026] [:error] [pid 47775:tid 47844] [client 20.43.33.49:12185] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTFkrmztjlk9tsmoewH3gAAAIE"]
[Sun Apr 19 20:07:47.412017 2026] [:error] [pid 47772:tid 47807] [client 20.43.33.49:12075] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTFk4c0L16cb4smAz-jtgAAABI"]
[Sun Apr 19 20:07:49.057552 2026] [:error] [pid 15765:tid 15852] [client 20.43.33.49:12054] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTFlfRqinw-W5EwQ77x8gAAAoA"]
[Sun Apr 19 20:07:50.778458 2026] [:error] [pid 47773:tid 47830] [client 20.43.33.49:12070] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTFluiBHdnCJDuPq9AwzAAAAE4"]
[Sun Apr 19 20:07:51.718983 2026] [:error] [pid 15764:tid 15838] [client 20.43.33.49:12230] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeTFl2LL_sqdSHoVp-T1MQAAAkw"]
[Sun Apr 19 20:07:56.054666 2026] [:error] [pid 47772:tid 47806] [client 20.43.33.49:12247] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeTFnIc0L16cb4smAz-jwAAAABE"]
[Sun Apr 19 20:08:04.175297 2026] [:error] [pid 15693:tid 15709] [client 20.43.33.49:12257] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeTFpMNMD-ccazQlTslTmAAAAU0"]
[Sun Apr 19 20:08:08.129743 2026] [:error] [pid 47886:tid 47894] [client 20.43.33.49:12088] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeTFqESe8yiyuPrD7yNsKwAAAMY"]
[Sun Apr 19 20:08:11.030871 2026] [:error] [pid 47886:tid 47908] [client 20.43.33.49:12241] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeTFq0Se8yiyuPrD7yNsUgAAANQ"]
[Sun Apr 19 20:08:19.273017 2026] [:error] [pid 15760:tid 15789] [client 20.43.33.49:12160] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeTFs_SdD_XHQMJ_ISsAnAAAAdU"]
[Sun Apr 19 20:08:26.352577 2026] [:error] [pid 15760:tid 15790] [client 20.43.33.49:12040] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeTFuvSdD_XHQMJ_ISsAsAAAAdY"]
[Sun Apr 19 20:08:28.078899 2026] [:error] [pid 15764:tid 15830] [client 20.43.33.49:12273] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeTFvGLL_sqdSHoVp-T1aAAAAkQ"]
[Sun Apr 19 20:08:28.676249 2026] [:error] [pid 47773:tid 47827] [client 20.43.33.49:12228] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeTFvOiBHdnCJDuPq9Aw1QAAAEs"]
[Sun Apr 19 20:08:29.839761 2026] [:error] [pid 47775:tid 47845] [client 20.43.33.49:12086] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeTFvbmztjlk9tsmoewICAAAAII"]
[Sun Apr 19 20:08:30.917940 2026] [:error] [pid 47773:tid 47820] [client 20.43.33.49:12229] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeTFvuiBHdnCJDuPq9Aw2QAAAEQ"]
[Sun Apr 19 20:08:31.640590 2026] [:error] [pid 15763:tid 15814] [client 20.43.33.49:12095] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeTFv7MXv1Y1THOoxaDjowAAAhI"]
[Sun Apr 19 20:08:32.429338 2026] [:error] [pid 15760:tid 15776] [client 20.43.33.49:12183] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeTFwPSdD_XHQMJ_ISsAuQAAAcg"]
[Sun Apr 19 20:08:33.227225 2026] [:error] [pid 15764:tid 15833] [client 20.43.33.49:12101] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeTFwWLL_sqdSHoVp-T1bgAAAkc"]
[Sun Apr 19 20:08:34.229593 2026] [:error] [pid 47773:tid 47818] [client 20.43.33.49:12186] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTFwuiBHdnCJDuPq9Aw2wAAAEI"]
[Sun Apr 19 20:08:35.122632 2026] [:error] [pid 47886:tid 47899] [client 20.43.33.49:12090] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTFw0Se8yiyuPrD7yNsXAAAAMs"]
[Sun Apr 19 20:08:35.838299 2026] [:error] [pid 47773:tid 47837] [client 20.43.33.49:12076] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTFw-iBHdnCJDuPq9Aw3QAAAFU"]
[Sun Apr 19 20:08:36.733058 2026] [:error] [pid 15760:tid 15788] [client 20.43.33.49:12285] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTFxPSdD_XHQMJ_ISsAvgAAAdQ"]
[Sun Apr 19 20:08:37.384689 2026] [:error] [pid 15765:tid 15870] [client 20.43.33.49:12282] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeTFxfRqinw-W5EwQ77yKQAAApE"]
[Sun Apr 19 20:08:38.850546 2026] [:error] [pid 15760:tid 15775] [client 20.43.33.49:12176] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeTFxvSdD_XHQMJ_ISsAwgAAAcc"]
[Sun Apr 19 20:08:40.593342 2026] [:error] [pid 47773:tid 47834] [client 20.43.33.49:12287] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeTFyOiBHdnCJDuPq9Aw_gAAAFI"]
[Sun Apr 19 20:08:45.147071 2026] [proxy_fcgi:error] [pid 47772:tid 47801] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:45.389084 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:45.916962 2026] [proxy_fcgi:error] [pid 47772:tid 47810] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:46.171067 2026] [proxy_fcgi:error] [pid 47772:tid 47807] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:46.410752 2026] [proxy_fcgi:error] [pid 47772:tid 47802] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:46.649954 2026] [proxy_fcgi:error] [pid 47772:tid 47791] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:46.889536 2026] [proxy_fcgi:error] [pid 47772:tid 47805] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:48.244905 2026] [proxy_fcgi:error] [pid 47772:tid 47807] [client 20.43.33.49:12046] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:08:48.720150 2026] [:error] [pid 47772:tid 47790] [client 20.43.33.49:12046] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeTF0Ic0L16cb4smAz-j-AAAAAE"]
[Sun Apr 19 20:08:51.119132 2026] [:error] [pid 15760:tid 15779] [client 20.43.33.49:12200] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeTF0_SdD_XHQMJ_ISsA0gAAAcs"]
[Sun Apr 19 20:08:53.052958 2026] [:error] [pid 47772:tid 47797] [client 20.43.33.49:12255] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeTF1Yc0L16cb4smAz-j-wAAAAg"]
[Sun Apr 19 20:08:54.696106 2026] [:error] [pid 15693:tid 15718] [client 20.43.33.49:12057] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeTF1sNMD-ccazQlTslTuwAAAVY"]
[Sun Apr 19 20:08:56.118933 2026] [:error] [pid 15694:tid 15748] [client 20.43.33.49:12194] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeTF2LimB-jol1fwqAoEkgAAAZY"]
[Sun Apr 19 20:08:58.438194 2026] [:error] [pid 15764:tid 15837] [client 20.43.33.49:12277] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeTF2mLL_sqdSHoVp-T1-AAAAks"]
[Sun Apr 19 20:09:00.030769 2026] [:error] [pid 15760:tid 15789] [client 20.43.33.49:12224] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeTF3PSdD_XHQMJ_ISsA2wAAAdU"]
[Sun Apr 19 20:09:02.484455 2026] [:error] [pid 15760:tid 15782] [client 20.43.33.49:12236] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeTF3vSdD_XHQMJ_ISsA4wAAAc4"]
[Sun Apr 19 20:09:03.643697 2026] [:error] [pid 47772:tid 47793] [client 20.43.33.49:12096] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeTF34c0L16cb4smAz-kBAAAAAQ"]
[Sun Apr 19 20:09:04.775075 2026] [:error] [pid 15694:tid 15730] [client 20.43.33.49:12068] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeTF4LimB-jol1fwqAoElgAAAYQ"]
[Sun Apr 19 20:09:06.653106 2026] [:error] [pid 15760:tid 15778] [client 20.43.33.49:12261] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeTF4vSdD_XHQMJ_ISsA5gAAAco"]
[Sun Apr 19 20:09:11.755520 2026] [:error] [pid 47775:tid 47853] [client 20.43.33.49:12080] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeTF57mztjlk9tsmoewIIwAAAIo"]
[Sun Apr 19 20:09:14.410019 2026] [:error] [pid 15764:tid 15851] [client 20.43.33.49:12166] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeTF6mLL_sqdSHoVp-T2BAAAAlg"]
[Sun Apr 19 20:09:16.247964 2026] [:error] [pid 15765:tid 15867] [client 20.43.33.49:12239] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeTF7PRqinw-W5EwQ77yNQAAAo4"]
[Sun Apr 19 20:09:18.458368 2026] [:error] [pid 15760:tid 15778] [client 20.43.33.49:12267] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeTF7vSdD_XHQMJ_ISsA9gAAAco"]
[Sun Apr 19 20:09:20.791892 2026] [:error] [pid 15693:tid 15698] [client 20.43.33.49:12259] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeTF8MNMD-ccazQlTslTxgAAAUI"]
[Sun Apr 19 20:09:22.101859 2026] [:error] [pid 15764:tid 15843] [client 20.43.33.49:12218] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeTF8mLL_sqdSHoVp-T2CAAAAlE"]
[Sun Apr 19 20:09:22.841726 2026] [:error] [pid 47773:tid 47821] [client 20.43.33.49:12117] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeTF8uiBHdnCJDuPq9AxDgAAAEU"]
[Sun Apr 19 20:09:23.803670 2026] [:error] [pid 15760:tid 15788] [client 20.43.33.49:12071] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeTF8_SdD_XHQMJ_ISsA-QAAAdQ"]
[Sun Apr 19 20:09:24.519688 2026] [:error] [pid 15760:tid 15770] [client 20.43.33.49:12175] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeTF9PSdD_XHQMJ_ISsA_AAAAcI"]
[Sun Apr 19 20:09:25.244750 2026] [:error] [pid 47773:tid 47817] [client 20.43.33.49:12225] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTF9eiBHdnCJDuPq9AxDwAAAEE"]
[Sun Apr 19 20:09:26.319418 2026] [:error] [pid 47773:tid 47836] [client 20.43.33.49:12062] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTF9uiBHdnCJDuPq9AxEQAAAFQ"]
[Sun Apr 19 20:09:26.971689 2026] [:error] [pid 15764:tid 15833] [client 20.43.33.49:12082] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTF9mLL_sqdSHoVp-T2DgAAAkc"]
[Sun Apr 19 20:09:30.449673 2026] [:error] [pid 15764:tid 15838] [client 20.43.33.49:12203] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeTF-mLL_sqdSHoVp-T2EgAAAkw"]
[Sun Apr 19 20:09:31.176141 2026] [:error] [pid 47775:tid 47844] [client 20.43.33.49:12039] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeTF-7mztjlk9tsmoewIKgAAAIE"]
[Sun Apr 19 20:09:32.215854 2026] [:error] [pid 47772:tid 47799] [client 20.43.33.49:12272] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeTF_Ic0L16cb4smAz-kEQAAAAo"]
[Sun Apr 19 20:09:33.533366 2026] [:error] [pid 15765:tid 15871] [client 20.43.33.49:12233] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeTF_fRqinw-W5EwQ77yOgAAApI"]
[Sun Apr 19 20:09:34.338184 2026] [:error] [pid 47772:tid 47813] [client 20.43.33.49:12063] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeTF_oc0L16cb4smAz-kFAAAABg"]
[Sun Apr 19 20:09:35.597888 2026] [:error] [pid 47773:tid 47834] [client 20.43.33.49:12237] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeTF_-iBHdnCJDuPq9AxEwAAAFI"]
[Sun Apr 19 20:09:36.460998 2026] [:error] [pid 15694:tid 15743] [client 20.43.33.49:12060] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeTGALimB-jol1fwqAoEnAAAAZE"]
[Sun Apr 19 20:09:37.858301 2026] [:error] [pid 15764:tid 15851] [client 20.43.33.49:12056] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeTGAWLL_sqdSHoVp-T2FgAAAlg"]
[Sun Apr 19 20:09:39.560047 2026] [:error] [pid 15760:tid 15785] [client 20.43.33.49:12173] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeTGA_SdD_XHQMJ_ISsBLwAAAdE"]
[Sun Apr 19 20:09:41.050413 2026] [:error] [pid 15760:tid 15789] [client 20.43.33.49:12052] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeTGBfSdD_XHQMJ_ISsBNgAAAdU"]
[Sun Apr 19 20:09:42.008252 2026] [:error] [pid 15760:tid 15771] [client 20.43.33.49:12051] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeTGBvSdD_XHQMJ_ISsBOwAAAcM"]
[Sun Apr 19 20:09:42.612407 2026] [:error] [pid 15760:tid 15785] [client 20.43.33.49:12072] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeTGBvSdD_XHQMJ_ISsBPgAAAdE"]
[Sun Apr 19 20:09:43.173600 2026] [:error] [pid 15760:tid 15790] [client 20.43.33.49:12276] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeTGB_SdD_XHQMJ_ISsBQAAAAdY"]
[Sun Apr 19 20:09:43.667454 2026] [:error] [pid 47886:tid 47904] [client 20.43.33.49:12254] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeTGB0Se8yiyuPrD7yNsdAAAANA"]
[Sun Apr 19 20:09:44.171628 2026] [:error] [pid 15764:tid 15846] [client 20.43.33.49:12196] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeTGCGLL_sqdSHoVp-T2HgAAAlQ"]
[Sun Apr 19 20:09:45.328157 2026] [:error] [pid 15765:tid 15857] [client 20.43.33.49:12055] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeTGCfRqinw-W5EwQ77yPwAAAoQ"]
[Sun Apr 19 20:09:46.747087 2026] [:error] [pid 47886:tid 47895] [client 20.43.33.49:12169] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeTGCkSe8yiyuPrD7yNsdwAAAMc"]
[Sun Apr 19 20:09:47.769380 2026] [:error] [pid 15760:tid 15788] [client 20.43.33.49:12189] [client 20.43.33.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeTGC_SdD_XHQMJ_ISsBRQAAAdQ"]
[Sun Apr 19 20:09:48.853912 2026] [proxy_fcgi:error] [pid 15760:tid 15791] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:49.853700 2026] [proxy_fcgi:error] [pid 15760:tid 15785] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:50.520623 2026] [proxy_fcgi:error] [pid 15760:tid 15790] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:51.239432 2026] [proxy_fcgi:error] [pid 15760:tid 15776] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:52.173902 2026] [proxy_fcgi:error] [pid 15760:tid 15782] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:52.413061 2026] [proxy_fcgi:error] [pid 15760:tid 15768] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:52.651866 2026] [proxy_fcgi:error] [pid 15760:tid 15775] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:54.160750 2026] [proxy_fcgi:error] [pid 15760:tid 15773] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:54.402592 2026] [proxy_fcgi:error] [pid 15760:tid 15779] [client 20.43.33.49:12220] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:09:54.637850 2026] [:error] [pid 15760:tid 15776] [client 20.43.33.49:12220] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeTGEvSdD_XHQMJ_ISsBXQAAAcg"]
[Sun Apr 19 20:09:58.424028 2026] [:error] [pid 15763:tid 15814] [client 20.43.33.49:12085] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeTGFrMXv1Y1THOoxaDjzgAAAhI"]
[Sun Apr 19 20:10:00.888024 2026] [:error] [pid 15760:tid 15780] [client 20.43.33.49:12092] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeTGGPSdD_XHQMJ_ISsBdAAAAcw"]
[Sun Apr 19 20:10:02.658553 2026] [:error] [pid 15765:tid 15860] [client 20.43.33.49:12227] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeTGGvRqinw-W5EwQ77yQwAAAoc"]
[Sun Apr 19 20:10:04.045058 2026] [:error] [pid 47772:tid 47793] [client 20.43.33.49:12264] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTGHIc0L16cb4smAz-kQAAAAAQ"]
[Sun Apr 19 20:10:05.836019 2026] [:error] [pid 47772:tid 47792] [client 20.43.33.49:12204] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTGHYc0L16cb4smAz-kRQAAAAM"]
[Sun Apr 19 20:10:06.811198 2026] [:error] [pid 47772:tid 47801] [client 20.43.33.49:12210] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTGHoc0L16cb4smAz-kRwAAAAw"]
[Sun Apr 19 20:10:09.439516 2026] [:error] [pid 15760:tid 15788] [client 20.43.33.49:12165] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTGIfSdD_XHQMJ_ISsBdwAAAdQ"]
[Sun Apr 19 20:10:10.838420 2026] [:error] [pid 15763:tid 15815] [client 20.43.33.49:12048] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeTGIrMXv1Y1THOoxaDj0wAAAhM"]
[Sun Apr 19 20:10:11.817028 2026] [:error] [pid 15763:tid 15805] [client 20.43.33.49:12042] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeTGI7MXv1Y1THOoxaDj1gAAAgk"]
[Sun Apr 19 20:10:12.424630 2026] [:error] [pid 15764:tid 15842] [client 20.43.33.49:12091] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeTGJGLL_sqdSHoVp-T2hgAAAlA"]
[Sun Apr 19 20:10:13.653326 2026] [:error] [pid 15763:tid 15808] [client 20.43.33.49:12221] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeTGJbMXv1Y1THOoxaDj2AAAAgw"]
[Sun Apr 19 20:10:14.700517 2026] [:error] [pid 47775:tid 47856] [client 20.43.33.49:12083] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeTGJrmztjlk9tsmoewIPQAAAI0"]
[Sun Apr 19 20:10:15.598490 2026] [:error] [pid 15764:tid 15830] [client 20.43.33.49:12115] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeTGJ2LL_sqdSHoVp-T2iQAAAkQ"]
[Sun Apr 19 20:10:17.347512 2026] [:error] [pid 15764:tid 15844] [client 20.43.33.49:12260] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeTGKWLL_sqdSHoVp-T2lAAAAlI"]
[Sun Apr 19 20:10:19.640416 2026] [:error] [pid 15760:tid 15770] [client 20.43.33.49:12093] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeTGK_SdD_XHQMJ_ISsBgQAAAcI"]
[Sun Apr 19 20:10:25.299671 2026] [:error] [pid 47772:tid 47805] [client 20.43.33.49:12251] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeTGMYc0L16cb4smAz-kXAAAABA"]
[Sun Apr 19 20:10:28.626281 2026] [:error] [pid 47773:tid 47823] [client 20.43.33.49:12108] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeTGNOiBHdnCJDuPq9AxRAAAAEc"]
[Sun Apr 19 20:10:30.069348 2026] [:error] [pid 47772:tid 47806] [client 20.43.33.49:12253] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeTGNoc0L16cb4smAz-kYAAAABE"]
[Sun Apr 19 20:10:31.578118 2026] [:error] [pid 15764:tid 15838] [client 20.43.33.49:12035] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeTGN2LL_sqdSHoVp-T2rwAAAkw"]
[Sun Apr 19 20:10:33.127647 2026] [:error] [pid 15764:tid 15842] [client 20.43.33.49:12271] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeTGOWLL_sqdSHoVp-T2sQAAAlA"]
[Sun Apr 19 20:10:33.805763 2026] [:error] [pid 15765:tid 15873] [client 20.43.33.49:12211] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeTGOfRqinw-W5EwQ77ySwAAApQ"]
[Sun Apr 19 20:10:35.378441 2026] [:error] [pid 15760:tid 15783] [client 20.43.33.49:12032] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeTGO_SdD_XHQMJ_ISsBkQAAAc8"]
[Sun Apr 19 20:10:38.383017 2026] [:error] [pid 47773:tid 47816] [client 20.43.33.49:12226] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeTGPuiBHdnCJDuPq9AxTQAAAEA"]
[Sun Apr 19 20:10:40.192099 2026] [:error] [pid 47772:tid 47798] [client 20.43.33.49:12098] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeTGQIc0L16cb4smAz-kaAAAAAk"]
[Sun Apr 19 20:10:42.927710 2026] [:error] [pid 15694:tid 15740] [client 20.43.33.49:12235] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeTGQrimB-jol1fwqAoEuwAAAY4"]
[Sun Apr 19 20:10:48.364212 2026] [:error] [pid 15760:tid 15772] [client 20.43.33.49:12216] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeTGSPSdD_XHQMJ_ISsBoAAAAcQ"]
[Sun Apr 19 20:10:52.106936 2026] [:error] [pid 47775:tid 47862] [client 20.43.33.49:12266] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeTGTLmztjlk9tsmoewITAAAAJM"]
[Sun Apr 19 20:10:57.705489 2026] [proxy_fcgi:error] [pid 15760:tid 15769] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:10:58.182110 2026] [proxy_fcgi:error] [pid 15760:tid 15775] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:10:58.420813 2026] [proxy_fcgi:error] [pid 15760:tid 15781] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:10:58.668813 2026] [proxy_fcgi:error] [pid 15760:tid 15770] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:10:58.911289 2026] [proxy_fcgi:error] [pid 15760:tid 15789] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:10:59.697893 2026] [proxy_fcgi:error] [pid 15760:tid 15773] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:10:59.940167 2026] [proxy_fcgi:error] [pid 15760:tid 15791] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:11:00.181075 2026] [proxy_fcgi:error] [pid 15760:tid 15792] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:11:00.420460 2026] [proxy_fcgi:error] [pid 15760:tid 15788] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:11:00.662291 2026] [proxy_fcgi:error] [pid 15760:tid 15769] [client 20.43.33.49:12069] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 20:11:01.055427 2026] [:error] [pid 15760:tid 15768] [client 20.43.33.49:12069] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeTGVfSdD_XHQMJ_ISsBvQAAAcA"]
[Sun Apr 19 20:11:02.994214 2026] [:error] [pid 47773:tid 47828] [client 20.43.33.49:12256] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeTGVuiBHdnCJDuPq9AxYwAAAEw"]
[Sun Apr 19 20:11:04.801299 2026] [:error] [pid 47772:tid 47798] [client 20.43.33.49:12049] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeTGWIc0L16cb4smAz-kgwAAAAk"]
[Sun Apr 19 20:11:07.667980 2026] [:error] [pid 15763:tid 15815] [client 20.43.33.49:12065] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aeTGW7MXv1Y1THOoxaDkAwAAAhM"]
[Sun Apr 19 20:11:10.108874 2026] [:error] [pid 15693:tid 15707] [client 20.43.33.49:12252] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeTGXsNMD-ccazQlTslT1gAAAUs"]
[Sun Apr 19 20:11:11.507113 2026] [:error] [pid 15764:tid 15837] [client 20.43.33.49:12078] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeTGX2LL_sqdSHoVp-T24QAAAks"]
[Sun Apr 19 20:11:13.388772 2026] [:error] [pid 15763:tid 15806] [client 20.43.33.49:12163] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeTGYbMXv1Y1THOoxaDkDAAAAgo"]
[Sun Apr 19 20:11:16.071261 2026] [:error] [pid 47773:tid 47831] [client 20.43.33.49:12066] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeTGZOiBHdnCJDuPq9AxcgAAAE8"]
[Sun Apr 19 20:11:17.683252 2026] [:error] [pid 47773:tid 47836] [client 20.43.33.49:12231] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeTGZeiBHdnCJDuPq9AxdAAAAFQ"]
[Sun Apr 19 20:11:18.980097 2026] [:error] [pid 15764:tid 15827] [client 20.43.33.49:12162] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeTGZmLL_sqdSHoVp-T24wAAAkE"]
[Sun Apr 19 20:11:20.731385 2026] [:error] [pid 15694:tid 15737] [client 20.43.33.49:12265] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeTGaLimB-jol1fwqAoEzAAAAYs"]
[Sun Apr 19 20:11:21.690156 2026] [:error] [pid 15694:tid 15747] [client 20.43.33.49:12201] [client 20.43.33.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeTGabimB-jol1fwqAoEzQAAAZU"]
[Sun Apr 19 22:50:47.631810 2026] [:error] [pid 15760:tid 15777] [client 146.70.194.222:43494] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTrx_SdD_XHQMJ_IStfYgAAAck"]
[Sun Apr 19 22:54:07.793007 2026] [proxy_fcgi:error] [pid 47772:tid 47794] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:08.056529 2026] [proxy_fcgi:error] [pid 47772:tid 47812] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:08.364900 2026] [proxy_fcgi:error] [pid 47772:tid 47804] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:08.631815 2026] [proxy_fcgi:error] [pid 47772:tid 47789] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:08.917271 2026] [proxy_fcgi:error] [pid 47772:tid 47801] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:09.524814 2026] [proxy_fcgi:error] [pid 47772:tid 47811] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:09.788003 2026] [proxy_fcgi:error] [pid 47772:tid 47793] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:10.056579 2026] [proxy_fcgi:error] [pid 47772:tid 47807] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:10.332887 2026] [proxy_fcgi:error] [pid 47772:tid 47803] [client 158.158.74.143:23798] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:54:10.618693 2026] [:error] [pid 47772:tid 47802] [client 158.158.74.143:23798] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "aeTskoc0L16cb4smAz_bsgAAAA0"]
[Sun Apr 19 22:54:50.463384 2026] [:error] [pid 47773:tid 47820] [client 158.158.74.143:28143] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeTsuuiBHdnCJDuPq9BX1AAAAEQ"]
[Sun Apr 19 22:55:32.942567 2026] [proxy_fcgi:error] [pid 15760:tid 15770] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:33.945768 2026] [proxy_fcgi:error] [pid 15760:tid 15776] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:34.189171 2026] [proxy_fcgi:error] [pid 15760:tid 15784] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:34.432573 2026] [proxy_fcgi:error] [pid 15760:tid 15782] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:36.400142 2026] [proxy_fcgi:error] [pid 15760:tid 15780] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:36.659968 2026] [proxy_fcgi:error] [pid 15760:tid 15788] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:36.904073 2026] [proxy_fcgi:error] [pid 15760:tid 15789] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:37.999862 2026] [proxy_fcgi:error] [pid 15760:tid 15774] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:38.354069 2026] [proxy_fcgi:error] [pid 15760:tid 15776] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:38.654473 2026] [proxy_fcgi:error] [pid 15760:tid 15782] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:40.434809 2026] [proxy_fcgi:error] [pid 15760:tid 15787] [client 158.158.74.143:18349] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:55:40.674339 2026] [:error] [pid 15760:tid 15781] [client 158.158.74.143:18349] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "aeTs7PSdD_XHQMJ_ISth-gAAAc0"]
[Sun Apr 19 22:55:43.317037 2026] [:error] [pid 47773:tid 47838] [client 158.158.74.143:27116] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "aeTs7-iBHdnCJDuPq9BX-gAAAFY"]
[Sun Apr 19 22:55:45.179167 2026] [:error] [pid 47775:tid 47852] [client 158.158.74.143:12319] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "aeTs8bmztjlk9tsmoewodAAAAIk"]
[Sun Apr 19 22:55:46.823201 2026] [:error] [pid 47773:tid 47829] [client 158.158.74.143:27052] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "aeTs8uiBHdnCJDuPq9BYAAAAAE0"]
[Sun Apr 19 22:55:47.715882 2026] [:error] [pid 15764:tid 15834] [client 158.158.74.143:15416] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "aeTs82LL_sqdSHoVp-Q8UQAAAkg"]
[Sun Apr 19 22:55:48.978534 2026] [:error] [pid 15693:tid 15699] [client 158.158.74.143:12307] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "aeTs9MNMD-ccazQlTslkdAAAAUM"]
[Sun Apr 19 22:55:51.052443 2026] [:error] [pid 15764:tid 15827] [client 158.158.74.143:15428] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "aeTs92LL_sqdSHoVp-Q8WAAAAkE"]
[Sun Apr 19 22:55:52.082464 2026] [:error] [pid 47775:tid 47861] [client 158.158.74.143:24554] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bmi.php"] [unique_id "aeTs-Lmztjlk9tsmoewofQAAAJI"]
[Sun Apr 19 22:55:53.495323 2026] [:error] [pid 15764:tid 15826] [client 158.158.74.143:28303] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeTs-WLL_sqdSHoVp-Q8YAAAAkA"]
[Sun Apr 19 22:55:55.543166 2026] [:error] [pid 15765:tid 15873] [client 158.158.74.143:18333] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeTs-_Rqinw-W5EwQ74I_QAAApQ"]
[Sun Apr 19 22:55:56.599675 2026] [:error] [pid 15760:tid 15770] [client 158.158.74.143:18323] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeTs_PSdD_XHQMJ_IStiBgAAAcI"]
[Sun Apr 19 22:55:57.342738 2026] [:error] [pid 47773:tid 47820] [client 158.158.74.143:14653] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aeTs_eiBHdnCJDuPq9BYDQAAAEQ"]
[Sun Apr 19 22:55:58.205014 2026] [:error] [pid 15760:tid 15783] [client 158.158.74.143:27037] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeTs_vSdD_XHQMJ_IStiBwAAAc8"]
[Sun Apr 19 22:55:59.185590 2026] [:error] [pid 15760:tid 15792] [client 158.158.74.143:12295] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeTs__SdD_XHQMJ_IStiDAAAAdg"]
[Sun Apr 19 22:56:00.433935 2026] [:error] [pid 15760:tid 15780] [client 158.158.74.143:27076] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeTtAPSdD_XHQMJ_IStiEQAAAcw"]
[Sun Apr 19 22:56:01.676027 2026] [:error] [pid 15760:tid 15774] [client 158.158.74.143:18348] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeTtAfSdD_XHQMJ_IStiFAAAAcY"]
[Sun Apr 19 22:56:03.159726 2026] [:error] [pid 47773:tid 47836] [client 158.158.74.143:17288] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeTtA-iBHdnCJDuPq9BYEwAAAFQ"]
[Sun Apr 19 22:56:06.400837 2026] [:error] [pid 47886:tid 47899] [client 158.158.74.143:28347] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeTtBkSe8yiyuPrD7yOGZAAAAMs"]
[Sun Apr 19 22:56:09.023880 2026] [:error] [pid 47772:tid 47795] [client 158.158.74.143:16169] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeTtCYc0L16cb4smAz_cGgAAAAY"]
[Sun Apr 19 22:56:10.292667 2026] [:error] [pid 47772:tid 47810] [client 158.158.74.143:15365] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeTtCoc0L16cb4smAz_cHAAAABU"]
[Sun Apr 19 22:56:12.714810 2026] [:error] [pid 47775:tid 47857] [client 158.158.74.143:17128] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeTtDLmztjlk9tsmoewoiQAAAI4"]
[Sun Apr 19 22:56:14.568466 2026] [:error] [pid 15764:tid 15827] [client 158.158.74.143:2077] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeTtDmLL_sqdSHoVp-Q8hgAAAkE"]
[Sun Apr 19 22:56:15.434274 2026] [:error] [pid 15764:tid 15847] [client 158.158.74.143:28865] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeTtD2LL_sqdSHoVp-Q8iQAAAlU"]
[Sun Apr 19 22:56:16.507161 2026] [:error] [pid 15760:tid 15789] [client 158.158.74.143:12340] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeTtEPSdD_XHQMJ_IStiIwAAAdU"]
[Sun Apr 19 22:56:17.229161 2026] [:error] [pid 15760:tid 15776] [client 158.158.74.143:16179] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeTtEfSdD_XHQMJ_IStiJgAAAcg"]
[Sun Apr 19 22:56:18.446673 2026] [:error] [pid 15760:tid 15782] [client 158.158.74.143:17291] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeTtEvSdD_XHQMJ_IStiKgAAAc4"]
[Sun Apr 19 22:56:19.556274 2026] [:error] [pid 15760:tid 15775] [client 158.158.74.143:15484] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeTtE_SdD_XHQMJ_IStiMAAAAcc"]
[Sun Apr 19 22:56:20.884670 2026] [:error] [pid 15763:tid 15817] [client 158.158.74.143:12329] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeTtFLMXv1Y1THOoxaAUtgAAAhU"]
[Sun Apr 19 22:56:22.207788 2026] [:error] [pid 15764:tid 15847] [client 158.158.74.143:15464] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeTtFmLL_sqdSHoVp-Q8kAAAAlU"]
[Sun Apr 19 22:56:23.599849 2026] [:error] [pid 15693:tid 15704] [client 158.158.74.143:18309] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeTtF8NMD-ccazQlTslkewAAAUg"]
[Sun Apr 19 22:56:24.787935 2026] [:error] [pid 47772:tid 47809] [client 158.158.74.143:15480] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeTtGIc0L16cb4smAz_cJgAAABQ"]
[Sun Apr 19 22:56:25.474008 2026] [:error] [pid 15763:tid 15812] [client 158.158.74.143:17406] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeTtGbMXv1Y1THOoxaAUuwAAAhA"]
[Sun Apr 19 22:56:26.060580 2026] [:error] [pid 15760:tid 15773] [client 158.158.74.143:18391] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeTtGvSdD_XHQMJ_IStiPQAAAcU"]
[Sun Apr 19 22:56:27.473589 2026] [:error] [pid 15760:tid 15783] [client 158.158.74.143:17362] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeTtG_SdD_XHQMJ_IStiQwAAAc8"]
[Sun Apr 19 22:56:28.439744 2026] [:error] [pid 15760:tid 15771] [client 158.158.74.143:27073] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeTtHPSdD_XHQMJ_IStiRAAAAcM"]
[Sun Apr 19 22:56:29.830540 2026] [:error] [pid 47772:tid 47797] [client 158.158.74.143:17398] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeTtHYc0L16cb4smAz_cKAAAAAg"]
[Sun Apr 19 22:56:31.068846 2026] [:error] [pid 47772:tid 47790] [client 158.158.74.143:2069] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeTtH4c0L16cb4smAz_cLAAAAAE"]
[Sun Apr 19 22:56:31.765830 2026] [:error] [pid 15764:tid 15851] [client 158.158.74.143:17380] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeTtH2LL_sqdSHoVp-Q8mAAAAlg"]
[Sun Apr 19 22:56:32.633480 2026] [:error] [pid 47772:tid 47791] [client 158.158.74.143:17352] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeTtIIc0L16cb4smAz_cMwAAAAI"]
[Sun Apr 19 22:56:34.811330 2026] [:error] [pid 15763:tid 15803] [client 158.158.74.143:28330] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeTtIrMXv1Y1THOoxaAUvgAAAgc"]
[Sun Apr 19 22:56:36.387360 2026] [:error] [pid 15763:tid 15809] [client 158.158.74.143:16132] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTtJLMXv1Y1THOoxaAUvwAAAg0"]
[Sun Apr 19 22:56:37.386179 2026] [:error] [pid 15765:tid 15859] [client 158.158.74.143:16148] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTtJfRqinw-W5EwQ74JEgAAAoY"]
[Sun Apr 19 22:56:38.702985 2026] [:error] [pid 15694:tid 15723] [client 158.158.74.143:18317] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTtJrimB-jol1fwqAoZEgAAAYA"]
[Sun Apr 19 22:56:40.775102 2026] [proxy_fcgi:error] [pid 15694:tid 15751] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:41.017606 2026] [proxy_fcgi:error] [pid 15694:tid 15749] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:41.261473 2026] [proxy_fcgi:error] [pid 15694:tid 15742] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:42.084972 2026] [proxy_fcgi:error] [pid 15694:tid 15725] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:42.607947 2026] [proxy_fcgi:error] [pid 15694:tid 15740] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:42.849819 2026] [proxy_fcgi:error] [pid 15694:tid 15741] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:43.636106 2026] [proxy_fcgi:error] [pid 15694:tid 15724] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:44.129996 2026] [proxy_fcgi:error] [pid 15694:tid 15738] [client 158.158.74.143:17130] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:56:44.370960 2026] [:error] [pid 15694:tid 15744] [client 158.158.74.143:17130] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "aeTtLLimB-jol1fwqAoZIgAAAZI"]
[Sun Apr 19 22:56:46.333187 2026] [:error] [pid 15760:tid 15772] [client 158.158.74.143:15371] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "aeTtLvSdD_XHQMJ_IStiXAAAAcQ"]
[Sun Apr 19 22:56:47.903599 2026] [:error] [pid 47886:tid 47909] [client 158.158.74.143:16154] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "aeTtL0Se8yiyuPrD7yOGcgAAANU"]
[Sun Apr 19 22:56:48.667700 2026] [:error] [pid 15760:tid 15777] [client 158.158.74.143:15437] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/term.php"] [unique_id "aeTtMPSdD_XHQMJ_IStiYgAAAck"]
[Sun Apr 19 22:56:49.886923 2026] [:error] [pid 15763:tid 15816] [client 158.158.74.143:13062] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "aeTtMbMXv1Y1THOoxaAUwwAAAhQ"]
[Sun Apr 19 22:56:50.893511 2026] [:error] [pid 47773:tid 47830] [client 158.158.74.143:18338] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "aeTtMuiBHdnCJDuPq9BYHwAAAE4"]
[Sun Apr 19 22:56:52.549269 2026] [:error] [pid 15760:tid 15771] [client 158.158.74.143:17102] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "aeTtNPSdD_XHQMJ_ISticAAAAcM"]
[Sun Apr 19 22:56:54.199138 2026] [:error] [pid 47773:tid 47836] [client 158.158.74.143:12303] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/b.php"] [unique_id "aeTtNuiBHdnCJDuPq9BYIAAAAFQ"]
[Sun Apr 19 22:56:55.445524 2026] [:error] [pid 15694:tid 15737] [client 158.158.74.143:18370] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeTtN7imB-jol1fwqAoZJAAAAYs"]
[Sun Apr 19 22:56:57.624503 2026] [:error] [pid 15765:tid 15870] [client 158.158.74.143:28328] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeTtOfRqinw-W5EwQ74JFAAAApE"]
[Sun Apr 19 22:56:59.203365 2026] [:error] [pid 15765:tid 15865] [client 158.158.74.143:17398] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeTtO_Rqinw-W5EwQ74JFgAAAow"]
[Sun Apr 19 22:57:00.877709 2026] [:error] [pid 15763:tid 15809] [client 158.158.74.143:12350] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aeTtPLMXv1Y1THOoxaAUyAAAAg0"]
[Sun Apr 19 22:57:02.809384 2026] [:error] [pid 15765:tid 15877] [client 158.158.74.143:15433] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeTtPvRqinw-W5EwQ74JHQAAApg"]
[Sun Apr 19 22:57:05.585081 2026] [:error] [pid 47773:tid 47839] [client 158.158.74.143:17306] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeTtQeiBHdnCJDuPq9BYLAAAAFc"]
[Sun Apr 19 22:57:08.023007 2026] [:error] [pid 47773:tid 47826] [client 158.158.74.143:15975] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeTtROiBHdnCJDuPq9BYMAAAAEo"]
[Sun Apr 19 22:57:11.798629 2026] [:error] [pid 47773:tid 47829] [client 158.158.74.143:28376] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeTtR-iBHdnCJDuPq9BYNQAAAE0"]
[Sun Apr 19 22:57:14.826627 2026] [:error] [pid 47772:tid 47808] [client 158.158.74.143:28319] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeTtSoc0L16cb4smAz_cTwAAABM"]
[Sun Apr 19 22:57:15.900737 2026] [:error] [pid 47772:tid 47805] [client 158.158.74.143:18384] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeTtS4c0L16cb4smAz_cUAAAABA"]
[Sun Apr 19 22:57:17.361307 2026] [:error] [pid 15760:tid 15770] [client 158.158.74.143:2080] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeTtTfSdD_XHQMJ_IStihAAAAcI"]
[Sun Apr 19 22:57:19.015350 2026] [:error] [pid 15765:tid 15875] [client 158.158.74.143:18429] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeTtT_Rqinw-W5EwQ74JIgAAApY"]
[Sun Apr 19 22:57:20.245918 2026] [:error] [pid 47886:tid 47888] [client 158.158.74.143:17146] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeTtUESe8yiyuPrD7yOGewAAAMA"]
[Sun Apr 19 22:57:21.151407 2026] [:error] [pid 47772:tid 47811] [client 158.158.74.143:12336] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeTtUYc0L16cb4smAz_cUgAAABY"]
[Sun Apr 19 22:57:22.005229 2026] [:error] [pid 15764:tid 15827] [client 158.158.74.143:26053] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeTtUmLL_sqdSHoVp-Q8zAAAAkE"]
[Sun Apr 19 22:57:23.184563 2026] [:error] [pid 15760:tid 15785] [client 158.158.74.143:18413] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeTtU_SdD_XHQMJ_IStikgAAAdE"]
[Sun Apr 19 22:57:24.260402 2026] [:error] [pid 15765:tid 15852] [client 158.158.74.143:2814] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeTtVPRqinw-W5EwQ74JJQAAAoA"]
[Sun Apr 19 22:57:32.141551 2026] [:error] [pid 47886:tid 47901] [client 158.158.74.143:28375] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeTtXESe8yiyuPrD7yOGgQAAAM0"]
[Sun Apr 19 22:57:33.062290 2026] [:error] [pid 15763:tid 15815] [client 158.158.74.143:18394] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeTtXbMXv1Y1THOoxaAU4AAAAhM"]
[Sun Apr 19 22:57:34.144177 2026] [:error] [pid 15760:tid 15778] [client 158.158.74.143:18402] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeTtXvSdD_XHQMJ_IStiqAAAAco"]
[Sun Apr 19 22:57:35.848035 2026] [:error] [pid 47772:tid 47794] [client 158.158.74.143:15424] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTtX4c0L16cb4smAz_cYQAAAAU"]
[Sun Apr 19 22:57:37.406295 2026] [:error] [pid 15760:tid 15791] [client 158.158.74.143:12326] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTtYfSdD_XHQMJ_IStirwAAAdc"]
[Sun Apr 19 22:57:40.080933 2026] [:error] [pid 47886:tid 47911] [client 158.158.74.143:15909] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTtZESe8yiyuPrD7yOGhgAAANc"]
[Sun Apr 19 22:57:41.039685 2026] [:error] [pid 47773:tid 47823] [client 158.158.74.143:17136] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTtZeiBHdnCJDuPq9BYPAAAAEc"]
[Sun Apr 19 22:57:41.722942 2026] [:error] [pid 15765:tid 15856] [client 158.158.74.143:18371] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aeTtZfRqinw-W5EwQ74JNAAAAoM"]
[Sun Apr 19 22:57:42.970841 2026] [:error] [pid 15763:tid 15797] [client 158.158.74.143:28359] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aeTtZrMXv1Y1THOoxaAU5gAAAgE"]
[Sun Apr 19 22:57:44.192156 2026] [proxy_fcgi:error] [pid 47886:tid 47889] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:44.436289 2026] [proxy_fcgi:error] [pid 47886:tid 47899] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:44.698911 2026] [proxy_fcgi:error] [pid 47886:tid 47902] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:45.092868 2026] [proxy_fcgi:error] [pid 47886:tid 47910] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:45.336935 2026] [proxy_fcgi:error] [pid 47886:tid 47904] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:45.580934 2026] [proxy_fcgi:error] [pid 47886:tid 47895] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:46.258102 2026] [proxy_fcgi:error] [pid 47886:tid 47912] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:46.501171 2026] [proxy_fcgi:error] [pid 47886:tid 47901] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:46.744672 2026] [proxy_fcgi:error] [pid 47886:tid 47905] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:46.988188 2026] [proxy_fcgi:error] [pid 47886:tid 47907] [client 158.158.74.143:28883] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:57:47.266009 2026] [:error] [pid 47886:tid 47903] [client 158.158.74.143:28883] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeTta0Se8yiyuPrD7yOGlAAAAM8"]
[Sun Apr 19 22:57:48.262806 2026] [:error] [pid 15763:tid 15804] [client 158.158.74.143:2104] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeTtbLMXv1Y1THOoxaAU8gAAAgg"]
[Sun Apr 19 22:57:49.510907 2026] [:error] [pid 15760:tid 15774] [client 158.158.74.143:28927] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeTtbfSdD_XHQMJ_IStiyAAAAcY"]
[Sun Apr 19 22:57:50.445944 2026] [:error] [pid 15760:tid 15771] [client 158.158.74.143:28339] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aeTtbvSdD_XHQMJ_IStizQAAAcM"]
[Sun Apr 19 22:57:51.444820 2026] [:error] [pid 47772:tid 47789] [client 158.158.74.143:13086] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "aeTtb4c0L16cb4smAz_cegAAAAA"]
[Sun Apr 19 22:57:52.204989 2026] [:error] [pid 15763:tid 15801] [client 158.158.74.143:13056] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "aeTtcLMXv1Y1THOoxaAU-AAAAgU"]
[Sun Apr 19 22:57:53.145026 2026] [:error] [pid 15763:tid 15802] [client 158.158.74.143:24448] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "aeTtcbMXv1Y1THOoxaAU-gAAAgY"]
[Sun Apr 19 22:57:54.340073 2026] [:error] [pid 15763:tid 15814] [client 158.158.74.143:17287] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "aeTtcrMXv1Y1THOoxaAU_AAAAhI"]
[Sun Apr 19 22:57:56.088828 2026] [:error] [pid 47886:tid 47894] [client 158.158.74.143:17090] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aeTtdESe8yiyuPrD7yOGlgAAAMY"]
[Sun Apr 19 22:57:57.005633 2026] [:error] [pid 47772:tid 47800] [client 158.158.74.143:13078] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aeTtdYc0L16cb4smAz_cggAAAAs"]
[Sun Apr 19 22:57:58.125614 2026] [:error] [pid 47886:tid 47906] [client 158.158.74.143:3022] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aeTtdkSe8yiyuPrD7yOGmAAAANI"]
[Sun Apr 19 22:57:59.568187 2026] [:error] [pid 15694:tid 15734] [client 158.158.74.143:3050] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aeTtd7imB-jol1fwqAoZRAAAAYg"]
[Sun Apr 19 22:58:01.570217 2026] [:error] [pid 15694:tid 15736] [client 158.158.74.143:13105] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aeTtebimB-jol1fwqAoZRQAAAYo"]
[Sun Apr 19 22:58:02.373357 2026] [:error] [pid 15764:tid 15829] [client 158.158.74.143:27328] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aeTtemLL_sqdSHoVp-Q89AAAAkM"]
[Sun Apr 19 22:58:03.255552 2026] [:error] [pid 15765:tid 15855] [client 158.158.74.143:21486] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aeTte_Rqinw-W5EwQ74JOQAAAoI"]
[Sun Apr 19 22:58:04.677582 2026] [:error] [pid 15760:tid 15769] [client 158.158.74.143:18409] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aeTtfPSdD_XHQMJ_ISti7AAAAcE"]
[Sun Apr 19 22:58:06.258742 2026] [:error] [pid 47772:tid 47792] [client 158.158.74.143:28545] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTtfoc0L16cb4smAz_cjAAAAAM"]
[Sun Apr 19 22:58:07.032993 2026] [:error] [pid 47775:tid 47864] [client 158.158.74.143:13092] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTtf7mztjlk9tsmoewotgAAAJU"]
[Sun Apr 19 22:58:08.005698 2026] [:error] [pid 15760:tid 15769] [client 158.158.74.143:14389] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTtgPSdD_XHQMJ_ISti8gAAAcE"]
[Sun Apr 19 22:58:08.653280 2026] [:error] [pid 15760:tid 15773] [client 158.158.74.143:18397] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTtgPSdD_XHQMJ_ISti9gAAAcU"]
[Sun Apr 19 22:58:09.481963 2026] [:error] [pid 47773:tid 47834] [client 158.158.74.143:28386] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTtgeiBHdnCJDuPq9BYTAAAAFI"]
[Sun Apr 19 22:58:10.678562 2026] [:error] [pid 47772:tid 47810] [client 158.158.74.143:14354] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTtgoc0L16cb4smAz_cjgAAABU"]
[Sun Apr 19 22:58:11.296634 2026] [:error] [pid 15760:tid 15777] [client 158.158.74.143:13080] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTtg_SdD_XHQMJ_ISti_AAAAck"]
[Sun Apr 19 22:58:12.080531 2026] [:error] [pid 15765:tid 15863] [client 158.158.74.143:2092] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeTthPRqinw-W5EwQ74JRAAAAoo"]
[Sun Apr 19 22:58:13.008831 2026] [:error] [pid 47886:tid 47911] [client 158.158.74.143:29130] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeTthUSe8yiyuPrD7yOGowAAANc"]
[Sun Apr 19 22:58:13.786376 2026] [:error] [pid 15694:tid 15751] [client 158.158.74.143:16158] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeTthbimB-jol1fwqAoZRwAAAZg"]
[Sun Apr 19 22:58:16.002965 2026] [:error] [pid 15765:tid 15868] [client 158.158.74.143:28288] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeTtiPRqinw-W5EwQ74JSgAAAo8"]
[Sun Apr 19 22:58:16.798283 2026] [:error] [pid 47772:tid 47812] [client 158.158.74.143:24047] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeTtiIc0L16cb4smAz_ckQAAABc"]
[Sun Apr 19 22:58:17.807199 2026] [:error] [pid 47772:tid 47796] [client 158.158.74.143:24048] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeTtiYc0L16cb4smAz_ckwAAAAc"]
[Sun Apr 19 22:58:19.216312 2026] [:error] [pid 47775:tid 47867] [client 158.158.74.143:17309] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeTti7mztjlk9tsmoewowAAAAJg"]
[Sun Apr 19 22:58:19.919899 2026] [:error] [pid 47775:tid 47849] [client 158.158.74.143:16167] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeTti7mztjlk9tsmoewoxAAAAIY"]
[Sun Apr 19 22:58:21.474314 2026] [:error] [pid 15765:tid 15863] [client 158.158.74.143:16153] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeTtjfRqinw-W5EwQ74JUgAAAoo"]
[Sun Apr 19 22:58:22.848548 2026] [:error] [pid 47773:tid 47830] [client 158.158.74.143:21455] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeTtjuiBHdnCJDuPq9BYVQAAAE4"]
[Sun Apr 19 22:58:24.909925 2026] [:error] [pid 47773:tid 47823] [client 158.158.74.143:13118] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeTtkOiBHdnCJDuPq9BYWgAAAEc"]
[Sun Apr 19 22:58:25.695037 2026] [:error] [pid 15763:tid 15817] [client 158.158.74.143:18419] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeTtkbMXv1Y1THOoxaAVBAAAAhU"]
[Sun Apr 19 22:58:27.746067 2026] [:error] [pid 47772:tid 47813] [client 158.158.74.143:16163] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeTtk4c0L16cb4smAz_cnAAAABg"]
[Sun Apr 19 22:58:28.490463 2026] [:error] [pid 15760:tid 15772] [client 158.158.74.143:23753] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTtlPSdD_XHQMJ_IStjEQAAAcQ"]
[Sun Apr 19 22:58:29.138228 2026] [:error] [pid 15763:tid 15820] [client 158.158.74.143:17131] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTtlbMXv1Y1THOoxaAVEAAAAhg"]
[Sun Apr 19 22:58:30.126452 2026] [:error] [pid 15760:tid 15782] [client 158.158.74.143:17306] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTtlvSdD_XHQMJ_IStjEwAAAc4"]
[Sun Apr 19 22:58:31.312292 2026] [:error] [pid 47886:tid 47911] [client 158.158.74.143:28884] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeTtl0Se8yiyuPrD7yOGrAAAANc"]
[Sun Apr 19 22:58:34.053326 2026] [:error] [pid 15765:tid 15875] [client 158.158.74.143:14347] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTtmvRqinw-W5EwQ74JWAAAApY"]
[Sun Apr 19 22:58:35.479618 2026] [:error] [pid 15760:tid 15777] [client 158.158.74.143:17892] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTtm_SdD_XHQMJ_IStjPAAAAck"]
[Sun Apr 19 22:58:36.520749 2026] [:error] [pid 15764:tid 15842] [client 158.158.74.143:2095] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTtnGLL_sqdSHoVp-Q9FQAAAlA"]
[Sun Apr 19 22:58:37.754494 2026] [:error] [pid 15760:tid 15788] [client 158.158.74.143:22255] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTtnfSdD_XHQMJ_IStjQQAAAdQ"]
[Sun Apr 19 22:58:38.638697 2026] [:error] [pid 15760:tid 15770] [client 158.158.74.143:22234] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeTtnvSdD_XHQMJ_IStjRAAAAcI"]
[Sun Apr 19 22:58:40.231588 2026] [:error] [pid 15760:tid 15769] [client 158.158.74.143:18165] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeTtoPSdD_XHQMJ_IStjSQAAAcE"]
[Sun Apr 19 22:58:41.504850 2026] [:error] [pid 47775:tid 47843] [client 158.158.74.143:28414] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeTtobmztjlk9tsmoewo1AAAAIA"]
[Sun Apr 19 22:58:43.199504 2026] [:error] [pid 15760:tid 15781] [client 158.158.74.143:28415] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aeTto_SdD_XHQMJ_IStjTwAAAc0"]
[Sun Apr 19 22:58:44.707703 2026] [:error] [pid 15763:tid 15814] [client 158.158.74.143:28332] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeTtpLMXv1Y1THOoxaAVFgAAAhI"]
[Sun Apr 19 22:58:45.866659 2026] [:error] [pid 15764:tid 15848] [client 158.158.74.143:22219] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeTtpWLL_sqdSHoVp-Q9NQAAAlY"]
[Sun Apr 19 22:58:47.393952 2026] [proxy_fcgi:error] [pid 15764:tid 15833] [client 158.158.74.143:15117] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:58:47.648948 2026] [proxy_fcgi:error] [pid 15764:tid 15843] [client 158.158.74.143:15117] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:58:47.895609 2026] [proxy_fcgi:error] [pid 15764:tid 15844] [client 158.158.74.143:15117] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:58:48.139307 2026] [proxy_fcgi:error] [pid 15764:tid 15826] [client 158.158.74.143:15117] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:58:48.696979 2026] [proxy_fcgi:error] [pid 15764:tid 15851] [client 158.158.74.143:15117] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:58:48.941496 2026] [proxy_fcgi:error] [pid 15764:tid 15830] [client 158.158.74.143:15117] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:58:49.722589 2026] [proxy_fcgi:error] [pid 15764:tid 15832] [client 158.158.74.143:15117] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:58:49.963277 2026] [:error] [pid 15764:tid 15847] [client 158.158.74.143:15117] [client 158.158.74.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aeTtqWLL_sqdSHoVp-Q9SAAAAlU"]
[Mon Apr 20 01:09:03.009334 2026] [proxy_fcgi:error] [pid 15763:tid 15810] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:03.269889 2026] [proxy_fcgi:error] [pid 15763:tid 15805] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:03.516972 2026] [proxy_fcgi:error] [pid 15763:tid 15812] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:03.779683 2026] [proxy_fcgi:error] [pid 15763:tid 15798] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:04.021249 2026] [proxy_fcgi:error] [pid 15763:tid 15809] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:04.648338 2026] [proxy_fcgi:error] [pid 15763:tid 15796] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:04.887342 2026] [proxy_fcgi:error] [pid 15763:tid 15817] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:05.154177 2026] [proxy_fcgi:error] [pid 15763:tid 15797] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:05.394077 2026] [proxy_fcgi:error] [pid 15763:tid 15811] [client 20.203.188.128:12266] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:09:05.660960 2026] [:error] [pid 15763:tid 15820] [client 20.203.188.128:12266] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "aeUMMbMXv1Y1THOoxaAySwAAAhg"]
[Mon Apr 20 01:09:08.696539 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:11402] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "aeUMNGLL_sqdSHoVp-RqoQAAAkU"]
[Mon Apr 20 01:09:12.204634 2026] [:error] [pid 15693:tid 15699] [client 20.203.188.128:12224] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "aeUMOMNMD-ccazQlTslvTgAAAUM"]
[Mon Apr 20 01:09:14.257251 2026] [:error] [pid 47773:tid 47822] [client 20.203.188.128:11430] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t.php"] [unique_id "aeUMOuiBHdnCJDuPq9BwlgAAAEY"]
[Mon Apr 20 01:09:17.044773 2026] [:error] [pid 15693:tid 15707] [client 20.203.188.128:11441] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeUMPcNMD-ccazQlTslvTwAAAUs"]
[Mon Apr 20 01:09:18.363458 2026] [:error] [pid 15764:tid 15846] [client 20.203.188.128:11427] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeUMPmLL_sqdSHoVp-Rq1QAAAlQ"]
[Mon Apr 20 01:09:20.460389 2026] [:error] [pid 47773:tid 47837] [client 20.203.188.128:41505] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeUMQOiBHdnCJDuPq9BwngAAAFU"]
[Mon Apr 20 01:09:22.853793 2026] [:error] [pid 47886:tid 47897] [client 20.203.188.128:43330] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aeUMQkSe8yiyuPrD7yOYRgAAAMk"]
[Mon Apr 20 01:09:25.276309 2026] [:error] [pid 47772:tid 47805] [client 20.203.188.128:41472] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeUMRYc0L16cb4smAz8BGwAAABA"]
[Mon Apr 20 01:09:27.292055 2026] [:error] [pid 15760:tid 15789] [client 20.203.188.128:43538] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeUMR_SdD_XHQMJ_ISug_gAAAdU"]
[Mon Apr 20 01:09:29.777091 2026] [:error] [pid 47772:tid 47799] [client 20.203.188.128:44436] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeUMSYc0L16cb4smAz8BIQAAAAo"]
[Mon Apr 20 01:09:31.684718 2026] [:error] [pid 47772:tid 47800] [client 20.203.188.128:54123] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aeUMS4c0L16cb4smAz8BKQAAAAs"]
[Mon Apr 20 01:09:33.081263 2026] [:error] [pid 15760:tid 15784] [client 20.203.188.128:44439] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "aeUMTfSdD_XHQMJ_ISuhEgAAAdA"]
[Mon Apr 20 01:09:34.861030 2026] [:error] [pid 47772:tid 47801] [client 20.203.188.128:44456] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "aeUMToc0L16cb4smAz8BMgAAAAw"]
[Mon Apr 20 01:09:36.384320 2026] [:error] [pid 15760:tid 15775] [client 20.203.188.128:59368] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "aeUMUPSdD_XHQMJ_ISuhGQAAAcc"]
[Mon Apr 20 01:09:37.703600 2026] [:error] [pid 47772:tid 47799] [client 20.203.188.128:36433] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "aeUMUYc0L16cb4smAz8BNgAAAAo"]
[Mon Apr 20 01:09:39.448677 2026] [:error] [pid 15765:tid 15858] [client 20.203.188.128:54094] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeUMU_Rqinw-W5EwQ74ZeAAAAoU"]
[Mon Apr 20 01:09:42.144264 2026] [:error] [pid 15765:tid 15873] [client 20.203.188.128:38728] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeUMVvRqinw-W5EwQ74ZewAAApQ"]
[Mon Apr 20 01:09:44.769015 2026] [:error] [pid 15764:tid 15840] [client 20.203.188.128:42923] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeUMWGLL_sqdSHoVp-RrAgAAAk4"]
[Mon Apr 20 01:09:45.972882 2026] [:error] [pid 15764:tid 15847] [client 20.203.188.128:37552] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeUMWWLL_sqdSHoVp-RrBgAAAlU"]
[Mon Apr 20 01:09:47.962375 2026] [:error] [pid 47886:tid 47894] [client 20.203.188.128:59389] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeUMW0Se8yiyuPrD7yOYYgAAAMY"]
[Mon Apr 20 01:09:49.608915 2026] [:error] [pid 47886:tid 47900] [client 20.203.188.128:11614] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeUMXUSe8yiyuPrD7yOYZAAAAMw"]
[Mon Apr 20 01:09:50.714567 2026] [:error] [pid 15765:tid 15860] [client 20.203.188.128:56554] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeUMXvRqinw-W5EwQ74ZfgAAAoc"]
[Mon Apr 20 01:09:51.952320 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:42885] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeUMX_SdD_XHQMJ_ISuhOQAAAcE"]
[Mon Apr 20 01:09:53.889312 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:11639] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeUMYWLL_sqdSHoVp-RrEAAAAkY"]
[Mon Apr 20 01:09:56.114249 2026] [:error] [pid 15764:tid 15851] [client 20.203.188.128:42906] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeUMZGLL_sqdSHoVp-RrEgAAAlg"]
[Mon Apr 20 01:09:57.375637 2026] [:error] [pid 47772:tid 47803] [client 20.203.188.128:12108] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeUMZYc0L16cb4smAz8BTwAAAA4"]
[Mon Apr 20 01:09:58.960540 2026] [:error] [pid 15763:tid 15807] [client 20.203.188.128:12084] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "aeUMZrMXv1Y1THOoxaAyYgAAAgs"]
[Mon Apr 20 01:10:01.043782 2026] [:error] [pid 15764:tid 15829] [client 20.203.188.128:44711] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "aeUMaWLL_sqdSHoVp-RrGQAAAkM"]
[Mon Apr 20 01:10:02.711190 2026] [:error] [pid 15760:tid 15777] [client 20.203.188.128:11626] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "aeUMavSdD_XHQMJ_ISuhQwAAAck"]
[Mon Apr 20 01:10:03.958284 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:40136] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tool.php"] [unique_id "aeUMa2LL_sqdSHoVp-RrHgAAAkY"]
[Mon Apr 20 01:10:05.618390 2026] [proxy_fcgi:error] [pid 47772:tid 47805] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:05.859155 2026] [proxy_fcgi:error] [pid 47772:tid 47812] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:06.106156 2026] [proxy_fcgi:error] [pid 47772:tid 47797] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:06.346436 2026] [proxy_fcgi:error] [pid 47772:tid 47807] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:06.585457 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:06.825361 2026] [proxy_fcgi:error] [pid 47772:tid 47801] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:07.081061 2026] [proxy_fcgi:error] [pid 47772:tid 47802] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:07.377559 2026] [proxy_fcgi:error] [pid 47772:tid 47789] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:07.665012 2026] [proxy_fcgi:error] [pid 47772:tid 47803] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:07.942462 2026] [proxy_fcgi:error] [pid 47772:tid 47804] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:08.183333 2026] [proxy_fcgi:error] [pid 47772:tid 47798] [client 20.203.188.128:11621] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:10:08.423464 2026] [:error] [pid 47772:tid 47793] [client 20.203.188.128:11621] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeUMcIc0L16cb4smAz8BYwAAAAQ"]
[Mon Apr 20 01:10:10.276941 2026] [:error] [pid 15763:tid 15817] [client 20.203.188.128:40186] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeUMcrMXv1Y1THOoxaAycAAAAhU"]
[Mon Apr 20 01:10:11.935489 2026] [:error] [pid 15763:tid 15801] [client 20.203.188.128:29074] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeUMc7MXv1Y1THOoxaAydwAAAgU"]
[Mon Apr 20 01:10:13.583464 2026] [:error] [pid 47772:tid 47796] [client 20.203.188.128:47990] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aeUMdYc0L16cb4smAz8BawAAAAc"]
[Mon Apr 20 01:10:15.687692 2026] [:error] [pid 47886:tid 47889] [client 20.203.188.128:47985] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeUMd0Se8yiyuPrD7yOYcAAAAME"]
[Mon Apr 20 01:10:17.699253 2026] [:error] [pid 15760:tid 15780] [client 20.203.188.128:30929] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeUMefSdD_XHQMJ_ISuhZgAAAcw"]
[Mon Apr 20 01:10:20.902598 2026] [:error] [pid 15760:tid 15787] [client 20.203.188.128:40190] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeUMfPSdD_XHQMJ_ISuhdQAAAdM"]
[Mon Apr 20 01:10:24.084620 2026] [:error] [pid 47773:tid 47823] [client 20.203.188.128:27566] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aeUMgOiBHdnCJDuPq9BwuQAAAEc"]
[Mon Apr 20 01:10:25.627149 2026] [:error] [pid 15765:tid 15863] [client 20.203.188.128:44702] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeUMgfRqinw-W5EwQ74ZgwAAAoo"]
[Mon Apr 20 01:10:27.208715 2026] [:error] [pid 15760:tid 15787] [client 20.203.188.128:25972] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeUMg_SdD_XHQMJ_ISuhjAAAAdM"]
[Mon Apr 20 01:10:28.647649 2026] [:error] [pid 15693:tid 15697] [client 20.203.188.128:40153] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeUMhMNMD-ccazQlTslvaAAAAUE"]
[Mon Apr 20 01:10:29.996429 2026] [:error] [pid 15764:tid 15843] [client 20.203.188.128:29084] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aeUMhWLL_sqdSHoVp-RrKgAAAlE"]
[Mon Apr 20 01:10:31.191025 2026] [:error] [pid 47772:tid 47802] [client 20.203.188.128:27548] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeUMh4c0L16cb4smAz8BhAAAAA0"]
[Mon Apr 20 01:10:32.374389 2026] [:error] [pid 15763:tid 15814] [client 20.203.188.128:40154] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeUMiLMXv1Y1THOoxaAyjAAAAhI"]
[Mon Apr 20 01:10:33.941953 2026] [:error] [pid 15694:tid 15724] [client 20.203.188.128:44694] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeUMibimB-jol1fwqAomJgAAAYE"]
[Mon Apr 20 01:10:35.151388 2026] [:error] [pid 47775:tid 47848] [client 20.203.188.128:29099] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aeUMi7mztjlk9tsmoew-ywAAAIU"]
[Mon Apr 20 01:10:39.830012 2026] [:error] [pid 15764:tid 15850] [client 20.203.188.128:29112] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeUMj2LL_sqdSHoVp-RrNgAAAlc"]
[Mon Apr 20 01:10:40.639788 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:30946] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeUMkPSdD_XHQMJ_ISuhnQAAAco"]
[Mon Apr 20 01:10:41.728831 2026] [:error] [pid 15760:tid 15779] [client 20.203.188.128:30944] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeUMkfSdD_XHQMJ_ISuhoAAAAcs"]
[Mon Apr 20 01:10:43.114459 2026] [:error] [pid 15760:tid 15781] [client 20.203.188.128:25932] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s.php"] [unique_id "aeUMk_SdD_XHQMJ_ISuhpAAAAc0"]
[Mon Apr 20 01:10:44.302420 2026] [:error] [pid 15760:tid 15785] [client 20.203.188.128:38718] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeUMlPSdD_XHQMJ_ISuhqgAAAdE"]
[Mon Apr 20 01:10:46.164474 2026] [:error] [pid 47773:tid 47830] [client 20.203.188.128:40144] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeUMluiBHdnCJDuPq9BwwAAAAE4"]
[Mon Apr 20 01:10:47.557906 2026] [:error] [pid 47773:tid 47822] [client 20.203.188.128:30966] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeUMl-iBHdnCJDuPq9BwxQAAAEY"]
[Mon Apr 20 01:10:48.945502 2026] [:error] [pid 47886:tid 47912] [client 20.203.188.128:30962] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/first.php"] [unique_id "aeUMmESe8yiyuPrD7yOYegAAANg"]
[Mon Apr 20 01:10:52.104517 2026] [:error] [pid 15693:tid 15707] [client 20.203.188.128:38716] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeUMnMNMD-ccazQlTslvbQAAAUs"]
[Mon Apr 20 01:10:53.555675 2026] [:error] [pid 15763:tid 15814] [client 20.203.188.128:25925] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeUMnbMXv1Y1THOoxaAypAAAAhI"]
[Mon Apr 20 01:10:55.840546 2026] [:error] [pid 47886:tid 47912] [client 20.203.188.128:44689] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeUMn0Se8yiyuPrD7yOYhgAAANg"]
[Mon Apr 20 01:10:57.334323 2026] [:error] [pid 47775:tid 47846] [client 20.203.188.128:30966] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeUMobmztjlk9tsmoew-1wAAAIM"]
[Mon Apr 20 01:10:58.746575 2026] [:error] [pid 15760:tid 15785] [client 20.203.188.128:38666] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeUMovSdD_XHQMJ_ISuhtwAAAdE"]
[Mon Apr 20 01:10:59.921732 2026] [:error] [pid 15765:tid 15875] [client 20.203.188.128:47982] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeUMo_Rqinw-W5EwQ74ZkAAAApY"]
[Mon Apr 20 01:11:01.378979 2026] [:error] [pid 15763:tid 15805] [client 20.203.188.128:40155] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeUMpbMXv1Y1THOoxaAyqgAAAgk"]
[Mon Apr 20 01:11:02.219250 2026] [:error] [pid 47772:tid 47792] [client 20.203.188.128:30968] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeUMpoc0L16cb4smAz8BlQAAAAM"]
[Mon Apr 20 01:11:03.412582 2026] [:error] [pid 47772:tid 47789] [client 20.203.188.128:40167] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "aeUMp4c0L16cb4smAz8BmgAAAAA"]
[Mon Apr 20 01:11:04.480086 2026] [:error] [pid 15763:tid 15807] [client 20.203.188.128:47983] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "aeUMqLMXv1Y1THOoxaAyrgAAAgs"]
[Mon Apr 20 01:11:05.242010 2026] [:error] [pid 47775:tid 47856] [client 20.203.188.128:47974] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "aeUMqbmztjlk9tsmoew-3QAAAI0"]
[Mon Apr 20 01:11:06.404659 2026] [:error] [pid 47772:tid 47810] [client 20.203.188.128:38698] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asd.php"] [unique_id "aeUMqoc0L16cb4smAz8BnwAAABU"]
[Mon Apr 20 01:11:07.764108 2026] [:error] [pid 47775:tid 47854] [client 20.203.188.128:38672] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/vx.php"] [unique_id "aeUMq7mztjlk9tsmoew-4QAAAIs"]
[Mon Apr 20 01:11:09.843619 2026] [proxy_fcgi:error] [pid 15764:tid 15841] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:11.008755 2026] [proxy_fcgi:error] [pid 15764:tid 15831] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:11.252528 2026] [proxy_fcgi:error] [pid 15764:tid 15836] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:11.968251 2026] [proxy_fcgi:error] [pid 15764:tid 15851] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:12.211212 2026] [proxy_fcgi:error] [pid 15764:tid 15833] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:12.566220 2026] [proxy_fcgi:error] [pid 15764:tid 15845] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:12.807420 2026] [proxy_fcgi:error] [pid 15764:tid 15830] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:13.082660 2026] [proxy_fcgi:error] [pid 15764:tid 15846] [client 20.203.188.128:27543] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:11:13.333681 2026] [:error] [pid 15764:tid 15835] [client 20.203.188.128:27543] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeUMsWLL_sqdSHoVp-RrVAAAAkk"]
[Mon Apr 20 01:11:15.242424 2026] [:error] [pid 15760:tid 15786] [client 20.203.188.128:25924] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeUMs_SdD_XHQMJ_ISuhxgAAAdI"]
[Mon Apr 20 01:11:16.740471 2026] [:error] [pid 15693:tid 15720] [client 20.203.188.128:30937] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeUMtMNMD-ccazQlTslvdAAAAVg"]
[Mon Apr 20 01:11:17.750041 2026] [:error] [pid 47773:tid 47837] [client 20.203.188.128:25941] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aeUMteiBHdnCJDuPq9Bw5QAAAFU"]
[Mon Apr 20 01:11:19.247008 2026] [:error] [pid 15760:tid 15772] [client 20.203.188.128:38660] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeUMt_SdD_XHQMJ_ISuhzQAAAcQ"]
[Mon Apr 20 01:11:20.445588 2026] [:error] [pid 15760:tid 15776] [client 20.203.188.128:25947] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeUMuPSdD_XHQMJ_ISuhzwAAAcg"]
[Mon Apr 20 01:11:21.135010 2026] [:error] [pid 15760:tid 15783] [client 20.203.188.128:47971] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeUMufSdD_XHQMJ_ISuh0QAAAc8"]
[Mon Apr 20 01:11:22.131074 2026] [:error] [pid 47772:tid 47813] [client 20.203.188.128:29064] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboutc.php"] [unique_id "aeUMuoc0L16cb4smAz8BsgAAABg"]
[Mon Apr 20 01:11:23.747069 2026] [:error] [pid 15693:tid 15719] [client 20.203.188.128:25957] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeUMu8NMD-ccazQlTslvdQAAAVc"]
[Mon Apr 20 01:11:24.986734 2026] [:error] [pid 47772:tid 47793] [client 20.203.188.128:29057] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeUMvIc0L16cb4smAz8BtgAAAAQ"]
[Mon Apr 20 01:11:26.139557 2026] [:error] [pid 47775:tid 47865] [client 20.203.188.128:47994] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeUMvrmztjlk9tsmoew-9AAAAJY"]
[Mon Apr 20 01:11:28.043855 2026] [:error] [pid 47886:tid 47889] [client 20.203.188.128:25934] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "aeUMwESe8yiyuPrD7yOYkwAAAME"]
[Mon Apr 20 01:11:29.943967 2026] [:error] [pid 47772:tid 47809] [client 20.203.188.128:38686] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeUMwYc0L16cb4smAz8BvAAAABQ"]
[Mon Apr 20 01:11:33.236329 2026] [:error] [pid 47775:tid 47852] [client 20.203.188.128:30919] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeUMxbmztjlk9tsmoew-_AAAAIk"]
[Mon Apr 20 01:11:36.074905 2026] [:error] [pid 15694:tid 15738] [client 20.203.188.128:25950] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeUMyLimB-jol1fwqAomMwAAAYw"]
[Mon Apr 20 01:11:38.259755 2026] [:error] [pid 15765:tid 15872] [client 20.203.188.128:27535] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aeUMyvRqinw-W5EwQ74ZnQAAApM"]
[Mon Apr 20 01:11:40.616142 2026] [:error] [pid 47886:tid 47904] [client 20.203.188.128:29102] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeUMzESe8yiyuPrD7yOYnAAAANA"]
[Mon Apr 20 01:11:42.219973 2026] [:error] [pid 47772:tid 47800] [client 20.203.188.128:38669] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeUMzoc0L16cb4smAz8BxQAAAAs"]
[Mon Apr 20 01:11:44.051521 2026] [:error] [pid 47772:tid 47797] [client 20.203.188.128:27579] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeUM0Ic0L16cb4smAz8ByQAAAAg"]
[Mon Apr 20 01:11:45.577497 2026] [:error] [pid 47773:tid 47838] [client 20.203.188.128:30973] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeUM0eiBHdnCJDuPq9Bw7QAAAFY"]
[Mon Apr 20 01:11:47.334755 2026] [:error] [pid 47886:tid 47901] [client 20.203.188.128:38695] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aeUM00Se8yiyuPrD7yOYrQAAAM0"]
[Mon Apr 20 01:11:48.587514 2026] [:error] [pid 47775:tid 47860] [client 20.203.188.128:29075] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aeUM1Lmztjlk9tsmoew_AwAAAJE"]
[Mon Apr 20 01:11:49.226632 2026] [:error] [pid 15763:tid 15807] [client 20.203.188.128:29103] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aeUM1bMXv1Y1THOoxaAyxAAAAgs"]
[Mon Apr 20 01:11:50.918751 2026] [:error] [pid 15693:tid 15704] [client 20.203.188.128:12148] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aeUM1sNMD-ccazQlTslveQAAAUg"]
[Mon Apr 20 01:11:51.973200 2026] [:error] [pid 47886:tid 47889] [client 20.203.188.128:29077] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeUM10Se8yiyuPrD7yOYswAAAME"]
[Mon Apr 20 01:11:53.799640 2026] [:error] [pid 15765:tid 15874] [client 20.203.188.128:27551] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeUM2fRqinw-W5EwQ74ZowAAApU"]
[Mon Apr 20 01:11:55.007576 2026] [:error] [pid 15760:tid 15772] [client 20.203.188.128:27580] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeUM2_SdD_XHQMJ_ISuh6AAAAcQ"]
[Mon Apr 20 01:11:56.555619 2026] [:error] [pid 47772:tid 47804] [client 20.203.188.128:25921] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeUM3Ic0L16cb4smAz8B0gAAAA8"]
[Mon Apr 20 01:11:57.964655 2026] [:error] [pid 15763:tid 15807] [client 20.203.188.128:25966] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeUM3bMXv1Y1THOoxaAyzgAAAgs"]
[Mon Apr 20 01:11:59.100093 2026] [:error] [pid 15764:tid 15834] [client 20.203.188.128:27527] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeUM32LL_sqdSHoVp-RregAAAkg"]
[Mon Apr 20 01:12:00.200310 2026] [:error] [pid 47886:tid 47902] [client 20.203.188.128:29118] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeUM4ESe8yiyuPrD7yOYxQAAAM4"]
[Mon Apr 20 01:12:01.966455 2026] [:error] [pid 15763:tid 15806] [client 20.203.188.128:29077] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aeUM4bMXv1Y1THOoxaAy4gAAAgo"]
[Mon Apr 20 01:12:03.378058 2026] [:error] [pid 47886:tid 47897] [client 20.203.188.128:40159] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "aeUM40Se8yiyuPrD7yOYyAAAAMk"]
[Mon Apr 20 01:12:04.860923 2026] [:error] [pid 15764:tid 15826] [client 20.203.188.128:29076] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "aeUM5GLL_sqdSHoVp-RrggAAAkA"]
[Mon Apr 20 01:12:06.697206 2026] [:error] [pid 47775:tid 47852] [client 20.203.188.128:47989] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "aeUM5rmztjlk9tsmoew_CQAAAIk"]
[Mon Apr 20 01:12:08.617101 2026] [:error] [pid 15764:tid 15850] [client 20.203.188.128:38709] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "aeUM6GLL_sqdSHoVp-RrhgAAAlc"]
[Mon Apr 20 01:12:09.728048 2026] [:error] [pid 15763:tid 15798] [client 20.203.188.128:29098] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeUM6bMXv1Y1THOoxaAy6QAAAgI"]
[Mon Apr 20 01:12:10.772691 2026] [:error] [pid 15763:tid 15809] [client 20.203.188.128:25945] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeUM6rMXv1Y1THOoxaAy6wAAAg0"]
[Mon Apr 20 01:12:12.359443 2026] [:error] [pid 47775:tid 47855] [client 20.203.188.128:40183] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeUM7Lmztjlk9tsmoew_CwAAAIw"]
[Mon Apr 20 01:12:14.048657 2026] [proxy_fcgi:error] [pid 47775:tid 47846] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:14.620334 2026] [proxy_fcgi:error] [pid 47775:tid 47851] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:15.293782 2026] [proxy_fcgi:error] [pid 47775:tid 47847] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:15.563148 2026] [proxy_fcgi:error] [pid 47775:tid 47866] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:16.801065 2026] [proxy_fcgi:error] [pid 47775:tid 47859] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:17.070886 2026] [proxy_fcgi:error] [pid 47775:tid 47865] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:17.343517 2026] [proxy_fcgi:error] [pid 47775:tid 47860] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:17.612954 2026] [proxy_fcgi:error] [pid 47775:tid 47862] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:17.884271 2026] [proxy_fcgi:error] [pid 47775:tid 47844] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:18.155313 2026] [proxy_fcgi:error] [pid 47775:tid 47858] [client 20.203.188.128:40160] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:12:18.484456 2026] [:error] [pid 47775:tid 47856] [client 20.203.188.128:40160] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeUM8rmztjlk9tsmoew_FwAAAI0"]
[Mon Apr 20 01:12:19.760563 2026] [:error] [pid 15765:tid 15871] [client 20.203.188.128:30974] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeUM8_Rqinw-W5EwQ74ZqwAAApI"]
[Mon Apr 20 01:12:21.711613 2026] [:error] [pid 47775:tid 47845] [client 20.203.188.128:40163] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeUM9bmztjlk9tsmoew_GAAAAII"]
[Mon Apr 20 01:12:24.201736 2026] [:error] [pid 15764:tid 15842] [client 20.203.188.128:30961] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeUM-GLL_sqdSHoVp-RrpwAAAlA"]
[Mon Apr 20 01:12:27.021819 2026] [:error] [pid 15760:tid 15791] [client 20.203.188.128:27545] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeUM-_SdD_XHQMJ_ISuiHAAAAdc"]
[Mon Apr 20 01:12:29.586772 2026] [:error] [pid 15764:tid 15835] [client 20.203.188.128:47942] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeUM_WLL_sqdSHoVp-RrqgAAAkk"]
[Mon Apr 20 01:12:30.254097 2026] [:error] [pid 47886:tid 47894] [client 20.203.188.128:30926] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeUM_kSe8yiyuPrD7yOY2QAAAMY"]
[Mon Apr 20 01:12:32.535454 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:25949] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeUNAGLL_sqdSHoVp-RrtgAAAkU"]
[Mon Apr 20 01:12:35.664041 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:11607] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeUNA_SdD_XHQMJ_ISuiIwAAAcE"]
[Mon Apr 20 01:12:38.014844 2026] [:error] [pid 15760:tid 15776] [client 20.203.188.128:25960] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeUNBvSdD_XHQMJ_ISuiJQAAAcg"]
[Mon Apr 20 01:12:42.028466 2026] [:error] [pid 47773:tid 47837] [client 20.203.188.128:25978] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeUNCuiBHdnCJDuPq9BxAAAAAFU"]
[Mon Apr 20 01:12:44.132482 2026] [:error] [pid 15694:tid 15749] [client 20.203.188.128:29058] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws57.php"] [unique_id "aeUNDLimB-jol1fwqAomVgAAAZc"]
[Mon Apr 20 01:12:49.960615 2026] [:error] [pid 15760:tid 15783] [client 20.203.188.128:29080] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeUNEfSdD_XHQMJ_ISuiMwAAAc8"]
[Mon Apr 20 01:12:55.239559 2026] [:error] [pid 47775:tid 47866] [client 20.203.188.128:40158] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aeUNF7mztjlk9tsmoew_MwAAAJc"]
[Mon Apr 20 01:13:04.277343 2026] [:error] [pid 15764:tid 15835] [client 20.203.188.128:27576] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeUNIGLL_sqdSHoVp-Rr_AAAAkk"]
[Mon Apr 20 01:13:07.877074 2026] [:error] [pid 15760:tid 15770] [client 20.203.188.128:29106] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeUNI_SdD_XHQMJ_ISuiTgAAAcI"]
[Mon Apr 20 01:13:09.282761 2026] [:error] [pid 15760:tid 15788] [client 20.203.188.128:47949] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeUNJfSdD_XHQMJ_ISuiUgAAAdQ"]
[Mon Apr 20 01:13:10.815408 2026] [:error] [pid 47775:tid 47857] [client 20.203.188.128:27537] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws66.php"] [unique_id "aeUNJrmztjlk9tsmoew_RQAAAI4"]
[Mon Apr 20 01:13:12.194457 2026] [:error] [pid 15760:tid 15783] [client 20.203.188.128:30917] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeUNKPSdD_XHQMJ_ISuiVQAAAc8"]
[Mon Apr 20 01:13:13.462761 2026] [:error] [pid 15763:tid 15816] [client 20.203.188.128:40149] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeUNKbMXv1Y1THOoxaAzGwAAAhQ"]
[Mon Apr 20 01:13:14.412935 2026] [:error] [pid 47886:tid 47895] [client 20.203.188.128:27522] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeUNKkSe8yiyuPrD7yOY5wAAAMc"]
[Mon Apr 20 01:13:15.417482 2026] [:error] [pid 15763:tid 15813] [client 20.203.188.128:11587] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeUNK7MXv1Y1THOoxaAzHQAAAhE"]
[Mon Apr 20 01:13:16.233202 2026] [:error] [pid 15760:tid 15782] [client 20.203.188.128:40180] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeUNLPSdD_XHQMJ_ISuiWAAAAc4"]
[Mon Apr 20 01:13:17.066194 2026] [:error] [pid 47772:tid 47803] [client 20.203.188.128:38697] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeUNLYc0L16cb4smAz8B-AAAAA4"]
[Mon Apr 20 01:13:18.193036 2026] [proxy_fcgi:error] [pid 15693:tid 15704] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:18.572130 2026] [proxy_fcgi:error] [pid 15693:tid 15708] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:18.813200 2026] [proxy_fcgi:error] [pid 15693:tid 15707] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:19.065465 2026] [proxy_fcgi:error] [pid 15693:tid 15710] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:19.305963 2026] [proxy_fcgi:error] [pid 15693:tid 15696] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:19.546093 2026] [proxy_fcgi:error] [pid 15693:tid 15716] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:19.786650 2026] [proxy_fcgi:error] [pid 15693:tid 15717] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:20.132145 2026] [proxy_fcgi:error] [pid 15693:tid 15711] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:21.029569 2026] [proxy_fcgi:error] [pid 15693:tid 15697] [client 20.203.188.128:27547] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 01:13:21.274484 2026] [:error] [pid 15693:tid 15700] [client 20.203.188.128:27547] [client 20.203.188.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aeUNMcNMD-ccazQlTslvoQAAAUQ"]
[Mon Apr 20 03:44:26.082618 2026] [proxy_fcgi:error] [pid 64334:tid 64412] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:44:26.342619 2026] [proxy_fcgi:error] [pid 64334:tid 64426] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:44:26.601815 2026] [proxy_fcgi:error] [pid 64334:tid 64411] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:44:26.862694 2026] [proxy_fcgi:error] [pid 64334:tid 64404] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:44:27.122893 2026] [proxy_fcgi:error] [pid 64334:tid 64420] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:44:27.391643 2026] [proxy_fcgi:error] [pid 64334:tid 64425] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:44:27.650437 2026] [proxy_fcgi:error] [pid 64334:tid 64410] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:44:27.912019 2026] [proxy_fcgi:error] [pid 64334:tid 64408] [client 20.215.184.8:24248] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:25.380002 2026] [proxy_fcgi:error] [pid 64440:tid 64443] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:25.624797 2026] [proxy_fcgi:error] [pid 64440:tid 64458] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:25.893366 2026] [proxy_fcgi:error] [pid 64440:tid 64467] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:26.558546 2026] [proxy_fcgi:error] [pid 64440:tid 64456] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:26.812653 2026] [proxy_fcgi:error] [pid 64440:tid 64450] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:27.056841 2026] [proxy_fcgi:error] [pid 64440:tid 64447] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:27.309326 2026] [proxy_fcgi:error] [pid 64440:tid 64446] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:49:27.565772 2026] [proxy_fcgi:error] [pid 64440:tid 64449] [client 158.158.114.211:57608] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:10.683034 2026] [proxy_fcgi:error] [pid 48101:tid 48119] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:10.956133 2026] [proxy_fcgi:error] [pid 48101:tid 48126] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:11.192760 2026] [proxy_fcgi:error] [pid 48101:tid 48120] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:11.434669 2026] [proxy_fcgi:error] [pid 48101:tid 48118] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:11.681894 2026] [proxy_fcgi:error] [pid 48101:tid 48122] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:11.918465 2026] [proxy_fcgi:error] [pid 48101:tid 48124] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:12.155505 2026] [proxy_fcgi:error] [pid 48101:tid 48123] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:12.423373 2026] [proxy_fcgi:error] [pid 48101:tid 48108] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:12.671577 2026] [proxy_fcgi:error] [pid 48101:tid 48106] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:12.908638 2026] [proxy_fcgi:error] [pid 48101:tid 48125] [client 72.146.9.108:59058] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:02:13.141944 2026] [:error] [pid 48101:tid 48111] [client 72.146.9.108:59058] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeVtBfIgenNbs2bVQGskngAAAYc"]
[Mon Apr 20 08:02:21.787680 2026] [:error] [pid 64333:tid 64383] [client 72.146.9.108:57199] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeVtDXZav9wH8wxMd_uGDgAAAEc"]
[Mon Apr 20 08:02:26.533534 2026] [:error] [pid 64333:tid 64380] [client 72.146.9.108:57162] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aeVtEnZav9wH8wxMd_uGJgAAAEQ"]
[Mon Apr 20 08:02:29.540539 2026] [:error] [pid 64332:tid 64365] [client 72.146.9.108:59015] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeVtFcAQ57uMKAVSYEknLgAAABc"]
[Mon Apr 20 08:02:30.287514 2026] [:error] [pid 47779:tid 47798] [client 72.146.9.108:59051] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeVtFoahGl1n9UkmcNj64wAAAVE"]
[Mon Apr 20 08:02:31.140453 2026] [:error] [pid 64334:tid 64408] [client 72.146.9.108:57180] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeVtF8Nh9IxxDqsrPyO2SgAAAIU"]
[Mon Apr 20 08:02:31.815392 2026] [:error] [pid 47779:tid 47793] [client 72.146.9.108:59057] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeVtF4ahGl1n9UkmcNj65AAAAUw"]
[Mon Apr 20 08:02:32.671957 2026] [:error] [pid 64333:tid 64392] [client 72.146.9.108:57169] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeVtGHZav9wH8wxMd_uGLQAAAFA"]
[Mon Apr 20 08:02:33.388857 2026] [:error] [pid 48101:tid 48123] [client 72.146.9.108:57186] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeVtGfIgenNbs2bVQGskpAAAAZM"]
[Mon Apr 20 08:02:34.299496 2026] [:error] [pid 64332:tid 64352] [client 72.146.9.108:57189] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeVtGsAQ57uMKAVSYEknOAAAAAo"]
[Mon Apr 20 08:02:36.060888 2026] [:error] [pid 64332:tid 64355] [client 72.146.9.108:59056] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeVtHMAQ57uMKAVSYEknOwAAAA0"]
[Mon Apr 20 08:02:37.198748 2026] [:error] [pid 47731:tid 47746] [client 72.146.9.108:59061] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeVtHVOwpc-h7Nzn-iO79gAAAQ0"]
[Mon Apr 20 08:02:38.278541 2026] [:error] [pid 47731:tid 47733] [client 72.146.9.108:59046] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeVtHlOwpc-h7Nzn-iO79wAAAQA"]
[Mon Apr 20 08:02:39.253326 2026] [:error] [pid 64334:tid 64407] [client 72.146.9.108:59028] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeVtH8Nh9IxxDqsrPyO2UQAAAIQ"]
[Mon Apr 20 08:02:41.324385 2026] [:error] [pid 64333:tid 64390] [client 72.146.9.108:57195] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeVtIXZav9wH8wxMd_uGOQAAAE4"]
[Mon Apr 20 08:02:42.713261 2026] [:error] [pid 64332:tid 64354] [client 72.146.9.108:57178] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeVtIsAQ57uMKAVSYEknRQAAAAw"]
[Mon Apr 20 08:02:43.405934 2026] [:error] [pid 64333:tid 64393] [client 72.146.9.108:59018] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeVtI3Zav9wH8wxMd_uGPQAAAFE"]
[Mon Apr 20 08:02:44.093154 2026] [:error] [pid 64333:tid 64383] [client 72.146.9.108:59035] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeVtJHZav9wH8wxMd_uGPgAAAEc"]
[Mon Apr 20 08:02:45.368008 2026] [:error] [pid 48101:tid 48124] [client 72.146.9.108:59039] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeVtJfIgenNbs2bVQGsktgAAAZQ"]
[Mon Apr 20 08:02:46.795960 2026] [:error] [pid 64333:tid 64393] [client 72.146.9.108:59017] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeVtJnZav9wH8wxMd_uGSgAAAFE"]
[Mon Apr 20 08:02:47.446859 2026] [:error] [pid 64333:tid 64399] [client 72.146.9.108:57166] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeVtJ3Zav9wH8wxMd_uGTwAAAFc"]
[Mon Apr 20 08:02:48.206187 2026] [:error] [pid 64333:tid 64395] [client 72.146.9.108:59055] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeVtKHZav9wH8wxMd_uGVQAAAFM"]
[Mon Apr 20 08:02:48.917991 2026] [:error] [pid 48101:tid 48117] [client 72.146.9.108:59065] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aeVtKPIgenNbs2bVQGskvwAAAY0"]
[Mon Apr 20 08:02:49.829163 2026] [:error] [pid 47731:tid 47738] [client 72.146.9.108:57207] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeVtKVOwpc-h7Nzn-iO7_AAAAQU"]
[Mon Apr 20 08:02:50.482312 2026] [:error] [pid 64332:tid 64353] [client 72.146.9.108:57172] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeVtKsAQ57uMKAVSYEknTQAAAAs"]
[Mon Apr 20 08:02:51.037654 2026] [:error] [pid 60072:tid 60092] [client 72.146.9.108:59060] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeVtK_uj5dzu2v3Qr6GwLAAAAdI"]
[Mon Apr 20 08:02:51.682432 2026] [:error] [pid 64332:tid 64354] [client 72.146.9.108:34654] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeVtK8AQ57uMKAVSYEknUAAAAAw"]
[Mon Apr 20 08:02:52.639870 2026] [:error] [pid 64333:tid 64392] [client 72.146.9.108:57154] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeVtLHZav9wH8wxMd_uGbAAAAFA"]
[Mon Apr 20 08:02:53.505496 2026] [:error] [pid 64333:tid 64379] [client 72.146.9.108:57163] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeVtLXZav9wH8wxMd_uGcgAAAEM"]
[Mon Apr 20 08:02:54.437120 2026] [:error] [pid 64440:tid 64457] [client 72.146.9.108:59044] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeVtLtkVUvTgp8p7mrP8hAAAAM4"]
[Mon Apr 20 08:02:55.013504 2026] [:error] [pid 64333:tid 64398] [client 72.146.9.108:59037] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/water.php"] [unique_id "aeVtL3Zav9wH8wxMd_uGdgAAAFY"]
[Mon Apr 20 08:02:55.502871 2026] [:error] [pid 64333:tid 64391] [client 72.146.9.108:57203] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "aeVtL3Zav9wH8wxMd_uGeAAAAE8"]
[Mon Apr 20 08:02:56.177707 2026] [:error] [pid 64334:tid 64427] [client 72.146.9.108:59068] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "aeVtMMNh9IxxDqsrPyO2XwAAAJg"]
[Mon Apr 20 08:02:56.802046 2026] [:error] [pid 64332:tid 64358] [client 72.146.9.108:57183] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "aeVtMMAQ57uMKAVSYEknVwAAABA"]
[Mon Apr 20 08:02:57.498091 2026] [:error] [pid 64332:tid 64362] [client 72.146.9.108:59059] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "aeVtMcAQ57uMKAVSYEknWQAAABQ"]
[Mon Apr 20 08:02:58.664338 2026] [:error] [pid 64333:tid 64388] [client 72.146.9.108:59014] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeVtMnZav9wH8wxMd_uGggAAAEw"]
[Mon Apr 20 08:02:59.991477 2026] [:error] [pid 47731:tid 47754] [client 72.146.9.108:59049] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeVtM1Owpc-h7Nzn-iO7_wAAARU"]
[Mon Apr 20 08:03:01.040353 2026] [:error] [pid 64440:tid 64459] [client 72.146.9.108:59034] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeVtNdkVUvTgp8p7mrP8hwAAANA"]
[Mon Apr 20 08:03:03.103374 2026] [:error] [pid 47779:tid 47802] [client 72.146.9.108:57197] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeVtN4ahGl1n9UkmcNj6_wAAAVU"]
[Mon Apr 20 08:03:05.039446 2026] [:error] [pid 47731:tid 47739] [client 72.146.9.108:59050] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wert.php"] [unique_id "aeVtOVOwpc-h7Nzn-iO8CAAAAQY"]
[Mon Apr 20 08:03:09.888021 2026] [:error] [pid 47731:tid 47737] [client 72.146.9.108:34631] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wert.php"] [unique_id "aeVtPVOwpc-h7Nzn-iO8FgAAAQQ"]
[Mon Apr 20 08:03:15.116757 2026] [proxy_fcgi:error] [pid 64333:tid 64382] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:15.354364 2026] [proxy_fcgi:error] [pid 64333:tid 64391] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:15.613754 2026] [proxy_fcgi:error] [pid 64333:tid 64392] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:15.850949 2026] [proxy_fcgi:error] [pid 64333:tid 64394] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:16.087842 2026] [proxy_fcgi:error] [pid 64333:tid 64398] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:16.360698 2026] [proxy_fcgi:error] [pid 64333:tid 64381] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:16.851598 2026] [proxy_fcgi:error] [pid 64333:tid 64395] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:17.092122 2026] [proxy_fcgi:error] [pid 64333:tid 64389] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:17.338539 2026] [proxy_fcgi:error] [pid 64333:tid 64383] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:17.680589 2026] [proxy_fcgi:error] [pid 64333:tid 64380] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:18.018195 2026] [proxy_fcgi:error] [pid 64333:tid 64384] [client 72.146.9.108:57152] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:03:18.254855 2026] [:error] [pid 64333:tid 64377] [client 72.146.9.108:57152] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeVtRnZav9wH8wxMd_uGrgAAAEE"]
[Mon Apr 20 08:03:19.109902 2026] [:error] [pid 64332:tid 64362] [client 72.146.9.108:57173] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeVtR8AQ57uMKAVSYEkneQAAABQ"]
[Mon Apr 20 08:03:19.833461 2026] [:error] [pid 64334:tid 64412] [client 72.146.9.108:59038] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeVtR8Nh9IxxDqsrPyO2dQAAAIk"]
[Mon Apr 20 08:03:20.564178 2026] [:error] [pid 64333:tid 64383] [client 72.146.9.108:59012] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeVtSHZav9wH8wxMd_uGtgAAAEc"]
[Mon Apr 20 08:03:21.227300 2026] [:error] [pid 64333:tid 64397] [client 72.146.9.108:57176] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeVtSXZav9wH8wxMd_uGuwAAAFU"]
[Mon Apr 20 08:03:21.831953 2026] [:error] [pid 64333:tid 64379] [client 72.146.9.108:59030] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeVtSXZav9wH8wxMd_uGwQAAAEM"]
[Mon Apr 20 08:03:22.488794 2026] [:error] [pid 64333:tid 64395] [client 72.146.9.108:59052] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeVtSnZav9wH8wxMd_uGxgAAAFM"]
[Mon Apr 20 08:03:23.596627 2026] [:error] [pid 64332:tid 64357] [client 72.146.9.108:34636] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeVtS8AQ57uMKAVSYEkngQAAAA8"]
[Mon Apr 20 08:03:24.755311 2026] [:error] [pid 64334:tid 64411] [client 72.146.9.108:57159] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeVtTMNh9IxxDqsrPyO2dwAAAIg"]
[Mon Apr 20 08:03:25.623323 2026] [:error] [pid 47779:tid 47790] [client 72.146.9.108:59009] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeVtTYahGl1n9UkmcNj7BwAAAUk"]
[Mon Apr 20 08:03:26.486524 2026] [:error] [pid 60072:tid 60082] [client 72.146.9.108:59070] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeVtTvuj5dzu2v3Qr6GwOwAAAcg"]
[Mon Apr 20 08:03:27.276876 2026] [:error] [pid 60072:tid 60075] [client 72.146.9.108:57170] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeVtT_uj5dzu2v3Qr6GwPQAAAcE"]
[Mon Apr 20 08:03:28.100576 2026] [:error] [pid 48101:tid 48125] [client 72.146.9.108:59013] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeVtUPIgenNbs2bVQGsk0AAAAZU"]
[Mon Apr 20 08:03:28.711219 2026] [:error] [pid 64333:tid 64376] [client 72.146.9.108:34571] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeVtUHZav9wH8wxMd_uG1QAAAEA"]
[Mon Apr 20 08:03:29.325636 2026] [:error] [pid 64334:tid 64404] [client 72.146.9.108:59069] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeVtUcNh9IxxDqsrPyO2ewAAAIE"]
[Mon Apr 20 08:03:30.031378 2026] [:error] [pid 64333:tid 64385] [client 72.146.9.108:57164] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeVtUnZav9wH8wxMd_uG2wAAAEk"]
[Mon Apr 20 08:03:30.936662 2026] [:error] [pid 47779:tid 47801] [client 72.146.9.108:57157] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeVtUoahGl1n9UkmcNj7CwAAAVQ"]
[Mon Apr 20 08:03:31.921189 2026] [:error] [pid 64332:tid 64358] [client 72.146.9.108:57214] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeVtU8AQ57uMKAVSYEknkwAAABA"]
[Mon Apr 20 08:03:32.967359 2026] [:error] [pid 64334:tid 64424] [client 72.146.9.108:57196] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeVtVMNh9IxxDqsrPyO2fQAAAJU"]
[Mon Apr 20 08:03:33.752425 2026] [:error] [pid 60072:tid 60092] [client 72.146.9.108:34640] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeVtVfuj5dzu2v3Qr6GwQQAAAdI"]
[Mon Apr 20 08:03:34.958856 2026] [:error] [pid 64332:tid 64359] [client 72.146.9.108:59031] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeVtVsAQ57uMKAVSYEknmAAAABE"]
[Mon Apr 20 08:03:35.726656 2026] [:error] [pid 64333:tid 64379] [client 72.146.9.108:57155] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeVtV3Zav9wH8wxMd_uG3gAAAEM"]
[Mon Apr 20 08:03:36.458794 2026] [:error] [pid 48101:tid 48109] [client 72.146.9.108:59040] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeVtWPIgenNbs2bVQGsk1QAAAYU"]
[Mon Apr 20 08:03:37.487128 2026] [:error] [pid 64332:tid 64360] [client 72.146.9.108:59066] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeVtWcAQ57uMKAVSYEknnQAAABI"]
[Mon Apr 20 08:03:39.115260 2026] [:error] [pid 64334:tid 64408] [client 72.146.9.108:59054] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeVtW8Nh9IxxDqsrPyO2fgAAAIU"]
[Mon Apr 20 08:03:40.736876 2026] [:error] [pid 47731:tid 47734] [client 72.146.9.108:59047] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeVtXFOwpc-h7Nzn-iO8LQAAAQE"]
[Mon Apr 20 08:03:42.437331 2026] [:error] [pid 64334:tid 64418] [client 72.146.9.108:34663] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeVtXsNh9IxxDqsrPyO2hwAAAI8"]
[Mon Apr 20 08:03:43.880188 2026] [:error] [pid 64334:tid 64416] [client 72.146.9.108:57205] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeVtX8Nh9IxxDqsrPyO2jgAAAI0"]
[Mon Apr 20 08:03:45.867947 2026] [:error] [pid 64333:tid 64380] [client 72.146.9.108:34641] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "aeVtYXZav9wH8wxMd_uG6QAAAEQ"]
[Mon Apr 20 08:03:46.804346 2026] [:error] [pid 64333:tid 64382] [client 72.146.9.108:59023] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "aeVtYnZav9wH8wxMd_uG8AAAAEY"]
[Mon Apr 20 08:03:48.091434 2026] [:error] [pid 64333:tid 64385] [client 72.146.9.108:59029] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "aeVtZHZav9wH8wxMd_uG-AAAAEk"]
[Mon Apr 20 08:03:50.829436 2026] [:error] [pid 64333:tid 64376] [client 72.146.9.108:59062] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/.mopj.php"] [unique_id "aeVtZnZav9wH8wxMd_uHBAAAAEA"]
[Mon Apr 20 08:03:53.509549 2026] [:error] [pid 60072:tid 60092] [client 72.146.9.108:57209] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeVtafuj5dzu2v3Qr6GwSQAAAdI"]
[Mon Apr 20 08:03:55.435627 2026] [:error] [pid 64332:tid 64353] [client 72.146.9.108:59067] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeVta8AQ57uMKAVSYEkntQAAAAs"]
[Mon Apr 20 08:03:56.541684 2026] [:error] [pid 47779:tid 47791] [client 72.146.9.108:57215] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeVtbIahGl1n9UkmcNj7DgAAAUo"]
[Mon Apr 20 08:03:57.073584 2026] [:error] [pid 64334:tid 64409] [client 72.146.9.108:57174] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeVtbcNh9IxxDqsrPyO2nwAAAIY"]
[Mon Apr 20 08:03:57.571343 2026] [:error] [pid 64333:tid 64396] [client 72.146.9.108:57191] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nano.php"] [unique_id "aeVtbXZav9wH8wxMd_uHDwAAAFQ"]
[Mon Apr 20 08:03:58.202653 2026] [:error] [pid 64334:tid 64411] [client 72.146.9.108:57211] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nano.php"] [unique_id "aeVtbsNh9IxxDqsrPyO2pAAAAIg"]
[Mon Apr 20 08:03:58.807992 2026] [:error] [pid 60072:tid 60091] [client 72.146.9.108:34625] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nano.php"] [unique_id "aeVtbvuj5dzu2v3Qr6GwTQAAAdE"]
[Mon Apr 20 08:03:59.426941 2026] [:error] [pid 47731:tid 47750] [client 72.146.9.108:59026] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/nano.php"] [unique_id "aeVtb1Owpc-h7Nzn-iO8PAAAARE"]
[Mon Apr 20 08:04:00.109327 2026] [:error] [pid 64440:tid 64452] [client 72.146.9.108:57202] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeVtcNkVUvTgp8p7mrP8ngAAAMk"]
[Mon Apr 20 08:04:00.981867 2026] [:error] [pid 47779:tid 47787] [client 72.146.9.108:57182] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeVtcIahGl1n9UkmcNj7DwAAAUY"]
[Mon Apr 20 08:04:02.358518 2026] [:error] [pid 64333:tid 64383] [client 72.146.9.108:34576] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeVtcnZav9wH8wxMd_uHEAAAAEc"]
[Mon Apr 20 08:04:04.607591 2026] [:error] [pid 47731:tid 47754] [client 72.146.9.108:59020] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeVtdFOwpc-h7Nzn-iO8YAAAARU"]
[Mon Apr 20 08:04:07.225301 2026] [:error] [pid 47731:tid 47734] [client 72.146.9.108:34660] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeVtd1Owpc-h7Nzn-iO8gQAAAQE"]
[Mon Apr 20 08:04:10.814963 2026] [:error] [pid 64334:tid 64417] [client 72.146.9.108:59011] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeVtesNh9IxxDqsrPyO2qAAAAI4"]
[Mon Apr 20 08:04:12.853114 2026] [:error] [pid 64334:tid 64413] [client 72.146.9.108:57194] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeVtfMNh9IxxDqsrPyO2qQAAAIo"]
[Mon Apr 20 08:04:15.313640 2026] [:error] [pid 64333:tid 64379] [client 72.146.9.108:34671] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeVtf3Zav9wH8wxMd_uHJgAAAEM"]
[Mon Apr 20 08:04:16.941730 2026] [:error] [pid 64333:tid 64396] [client 72.146.9.108:59010] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeVtgHZav9wH8wxMd_uHLQAAAFQ"]
[Mon Apr 20 08:04:19.237280 2026] [proxy_fcgi:error] [pid 64334:tid 64412] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:19.486502 2026] [proxy_fcgi:error] [pid 64334:tid 64414] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:19.828799 2026] [proxy_fcgi:error] [pid 64334:tid 64411] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:20.069403 2026] [proxy_fcgi:error] [pid 64334:tid 64405] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:20.319213 2026] [proxy_fcgi:error] [pid 64334:tid 64418] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:20.615170 2026] [proxy_fcgi:error] [pid 64334:tid 64421] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:20.854566 2026] [proxy_fcgi:error] [pid 64334:tid 64427] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:21.104899 2026] [proxy_fcgi:error] [pid 64334:tid 64423] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:21.374633 2026] [proxy_fcgi:error] [pid 64334:tid 64404] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:21.617344 2026] [proxy_fcgi:error] [pid 64334:tid 64420] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:21.857608 2026] [proxy_fcgi:error] [pid 64334:tid 64422] [client 72.146.9.108:34642] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:04:22.094276 2026] [:error] [pid 64334:tid 64416] [client 72.146.9.108:34642] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeVthsNh9IxxDqsrPyO2ugAAAI0"]
[Mon Apr 20 08:04:25.180092 2026] [:error] [pid 47731:tid 47745] [client 72.146.9.108:57206] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeVtiVOwpc-h7Nzn-iO8rQAAAQw"]
[Mon Apr 20 08:04:25.933803 2026] [:error] [pid 64332:tid 64356] [client 72.146.9.108:34565] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeVticAQ57uMKAVSYEkn1QAAAA4"]
[Mon Apr 20 08:04:27.449452 2026] [:error] [pid 64332:tid 64362] [client 72.146.9.108:34657] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeVti8AQ57uMKAVSYEkn2QAAABQ"]
[Mon Apr 20 08:04:28.440863 2026] [:error] [pid 47779:tid 47796] [client 72.146.9.108:34668] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeVtjIahGl1n9UkmcNj7FwAAAU8"]
[Mon Apr 20 08:04:29.065049 2026] [:error] [pid 64332:tid 64347] [client 72.146.9.108:34682] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeVtjcAQ57uMKAVSYEkn3QAAAAU"]
[Mon Apr 20 08:04:30.371314 2026] [:error] [pid 64332:tid 64357] [client 72.146.9.108:59008] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeVtjsAQ57uMKAVSYEkn5AAAAA8"]
[Mon Apr 20 08:04:31.844606 2026] [:error] [pid 48101:tid 48114] [client 72.146.9.108:34632] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeVtj_IgenNbs2bVQGsk3QAAAYo"]
[Mon Apr 20 08:04:32.950523 2026] [:error] [pid 47731:tid 47735] [client 72.146.9.108:59027] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeVtkFOwpc-h7Nzn-iO8tQAAAQI"]
[Mon Apr 20 08:04:33.571088 2026] [:error] [pid 60072:tid 60080] [client 72.146.9.108:57187] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeVtkfuj5dzu2v3Qr6GwsgAAAcY"]
[Mon Apr 20 08:04:34.083684 2026] [:error] [pid 64334:tid 64427] [client 72.146.9.108:57167] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeVtksNh9IxxDqsrPyO2wQAAAJg"]
[Mon Apr 20 08:04:34.742743 2026] [:error] [pid 47731:tid 47748] [client 72.146.9.108:57193] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeVtklOwpc-h7Nzn-iO8twAAAQ8"]
[Mon Apr 20 08:04:35.554684 2026] [:error] [pid 64332:tid 64360] [client 72.146.9.108:34683] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeVtk8AQ57uMKAVSYEkn8AAAABI"]
[Mon Apr 20 08:04:36.466161 2026] [:error] [pid 47731:tid 47749] [client 72.146.9.108:34627] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeVtlFOwpc-h7Nzn-iO8vAAAARA"]
[Mon Apr 20 08:04:38.269151 2026] [:error] [pid 64333:tid 64391] [client 72.146.9.108:34610] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeVtlnZav9wH8wxMd_uHQAAAAE8"]
[Mon Apr 20 08:04:41.560055 2026] [:error] [pid 47731:tid 47746] [client 72.146.9.108:57213] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeVtmVOwpc-h7Nzn-iO8xgAAAQ0"]
[Mon Apr 20 08:04:42.365113 2026] [:error] [pid 64333:tid 64398] [client 72.146.9.108:59064] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeVtmnZav9wH8wxMd_uHSwAAAFY"]
[Mon Apr 20 08:04:44.284365 2026] [:error] [pid 64332:tid 64363] [client 72.146.9.108:57198] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeVtnMAQ57uMKAVSYEkn_AAAABU"]
[Mon Apr 20 08:04:46.608387 2026] [:error] [pid 64332:tid 64347] [client 72.146.9.108:34685] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeVtnsAQ57uMKAVSYEkn_QAAAAU"]
[Mon Apr 20 08:04:48.089387 2026] [:error] [pid 64332:tid 64349] [client 72.146.9.108:57153] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeVtoMAQ57uMKAVSYEkoBAAAAAc"]
[Mon Apr 20 08:04:49.371478 2026] [:error] [pid 64332:tid 64358] [client 72.146.9.108:34679] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "aeVtocAQ57uMKAVSYEkoCwAAABA"]
[Mon Apr 20 08:04:51.058085 2026] [:error] [pid 64333:tid 64400] [client 72.146.9.108:57210] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "aeVto3Zav9wH8wxMd_uHWAAAAFg"]
[Mon Apr 20 08:04:51.959529 2026] [:error] [pid 60072:tid 60079] [client 72.146.9.108:57184] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "aeVto_uj5dzu2v3Qr6GwvQAAAcU"]
[Mon Apr 20 08:04:53.756805 2026] [:error] [pid 64333:tid 64397] [client 72.146.9.108:34624] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sf.php"] [unique_id "aeVtpXZav9wH8wxMd_uHWwAAAFU"]
[Mon Apr 20 08:04:54.709654 2026] [:error] [pid 47731:tid 47734] [client 72.146.9.108:34633] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeVtplOwpc-h7Nzn-iO81gAAAQE"]
[Mon Apr 20 08:04:55.584891 2026] [:error] [pid 47731:tid 47742] [client 72.146.9.108:59063] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeVtp1Owpc-h7Nzn-iO82QAAAQk"]
[Mon Apr 20 08:04:56.674505 2026] [:error] [pid 64440:tid 64462] [client 72.146.9.108:57160] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeVtqNkVUvTgp8p7mrP8vQAAANM"]
[Mon Apr 20 08:04:57.303974 2026] [:error] [pid 64333:tid 64385] [client 72.146.9.108:34634] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeVtqXZav9wH8wxMd_uHYQAAAEk"]
[Mon Apr 20 08:04:58.646674 2026] [:error] [pid 64332:tid 64358] [client 72.146.9.108:59033] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeVtqsAQ57uMKAVSYEkoEQAAABA"]
[Mon Apr 20 08:04:59.999318 2026] [:error] [pid 47731:tid 47745] [client 72.146.9.108:59024] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeVtq1Owpc-h7Nzn-iO85QAAAQw"]
[Mon Apr 20 08:05:01.106591 2026] [:error] [pid 64332:tid 64355] [client 72.146.9.108:57168] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeVtrcAQ57uMKAVSYEkoFQAAAA0"]
[Mon Apr 20 08:05:02.122703 2026] [:error] [pid 64332:tid 64357] [client 72.146.9.108:34686] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeVtrsAQ57uMKAVSYEkoGAAAAA8"]
[Mon Apr 20 08:05:03.307374 2026] [:error] [pid 64333:tid 64377] [client 72.146.9.108:34618] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeVtr3Zav9wH8wxMd_uHaQAAAEE"]
[Mon Apr 20 08:05:04.138508 2026] [:error] [pid 47779:tid 47798] [client 72.146.9.108:57192] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeVtsIahGl1n9UkmcNj7HAAAAVE"]
[Mon Apr 20 08:05:05.852216 2026] [:error] [pid 64333:tid 64393] [client 72.146.9.108:34629] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeVtsXZav9wH8wxMd_uHcAAAAFE"]
[Mon Apr 20 08:05:07.040651 2026] [:error] [pid 60072:tid 60082] [client 72.146.9.108:34666] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeVts_uj5dzu2v3Qr6GwywAAAcg"]
[Mon Apr 20 08:05:07.896074 2026] [:error] [pid 64333:tid 64395] [client 72.146.9.108:34649] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeVts3Zav9wH8wxMd_uHeAAAAFM"]
[Mon Apr 20 08:05:09.648997 2026] [:error] [pid 64333:tid 64385] [client 72.146.9.108:34575] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeVttXZav9wH8wxMd_uHmQAAAEk"]
[Mon Apr 20 08:05:10.715815 2026] [:error] [pid 64333:tid 64379] [client 72.146.9.108:30938] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeVttnZav9wH8wxMd_uHsAAAAEM"]
[Mon Apr 20 08:05:11.678820 2026] [:error] [pid 64332:tid 64349] [client 72.146.9.108:34678] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeVtt8AQ57uMKAVSYEkoKQAAAAc"]
[Mon Apr 20 08:05:13.007303 2026] [:error] [pid 47731:tid 47742] [client 72.146.9.108:34579] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeVtuVOwpc-h7Nzn-iO87gAAAQk"]
[Mon Apr 20 08:05:13.958268 2026] [:error] [pid 64440:tid 64445] [client 72.146.9.108:34638] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeVtudkVUvTgp8p7mrP8xQAAAMI"]
[Mon Apr 20 08:05:14.866513 2026] [:error] [pid 60072:tid 60093] [client 72.146.9.108:59021] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeVtuvuj5dzu2v3Qr6Gw1AAAAdM"]
[Mon Apr 20 08:05:15.976421 2026] [:error] [pid 64333:tid 64394] [client 72.146.9.108:34673] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeVtu3Zav9wH8wxMd_uHzQAAAFI"]
[Mon Apr 20 08:05:17.161705 2026] [:error] [pid 64333:tid 64399] [client 72.146.9.108:34560] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeVtvXZav9wH8wxMd_uH3wAAAFc"]
[Mon Apr 20 08:05:17.792155 2026] [:error] [pid 64332:tid 64357] [client 72.146.9.108:34672] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeVtvcAQ57uMKAVSYEkoNQAAAA8"]
[Mon Apr 20 08:05:18.572727 2026] [:error] [pid 47731:tid 47749] [client 72.146.9.108:34635] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeVtvlOwpc-h7Nzn-iO88wAAARA"]
[Mon Apr 20 08:05:19.186797 2026] [:error] [pid 47731:tid 47736] [client 72.146.9.108:57181] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeVtv1Owpc-h7Nzn-iO89AAAAQM"]
[Mon Apr 20 08:05:22.661128 2026] [proxy_fcgi:error] [pid 64333:tid 64391] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:22.907463 2026] [proxy_fcgi:error] [pid 64333:tid 64389] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:23.146307 2026] [proxy_fcgi:error] [pid 64333:tid 64392] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:23.382965 2026] [proxy_fcgi:error] [pid 64333:tid 64379] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:23.620542 2026] [proxy_fcgi:error] [pid 64333:tid 64397] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:23.884543 2026] [proxy_fcgi:error] [pid 64333:tid 64376] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:24.133963 2026] [proxy_fcgi:error] [pid 64333:tid 64377] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:24.371083 2026] [proxy_fcgi:error] [pid 64333:tid 64380] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:24.854647 2026] [proxy_fcgi:error] [pid 64333:tid 64385] [client 72.146.9.108:59022] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:05:25.677978 2026] [:error] [pid 64333:tid 64389] [client 72.146.9.108:59022] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeVtxXZav9wH8wxMd_uH_wAAAE0"]
[Mon Apr 20 08:05:29.393933 2026] [:error] [pid 64333:tid 64378] [client 72.146.9.108:57208] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeVtyXZav9wH8wxMd_uIBAAAAEI"]
[Mon Apr 20 08:05:32.248784 2026] [:error] [pid 60072:tid 60084] [client 72.146.9.108:57165] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeVtzPuj5dzu2v3Qr6Gw5AAAAco"]
[Mon Apr 20 08:05:34.486688 2026] [:error] [pid 47731:tid 47748] [client 72.146.9.108:34644] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeVtzlOwpc-h7Nzn-iO9AgAAAQ8"]
[Mon Apr 20 08:05:36.070364 2026] [:error] [pid 64332:tid 64346] [client 72.146.9.108:34646] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeVt0MAQ57uMKAVSYEkoagAAAAQ"]
[Mon Apr 20 08:05:36.949405 2026] [:error] [pid 64440:tid 64467] [client 72.146.9.108:57190] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeVt0NkVUvTgp8p7mrP82QAAANg"]
[Mon Apr 20 08:05:38.332497 2026] [:error] [pid 64332:tid 64359] [client 72.146.9.108:34687] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeVt0sAQ57uMKAVSYEkocwAAABE"]
[Mon Apr 20 08:05:39.126368 2026] [:error] [pid 60072:tid 60089] [client 72.146.9.108:34612] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeVt0_uj5dzu2v3Qr6Gw6gAAAc8"]
[Mon Apr 20 08:05:40.514593 2026] [:error] [pid 47731:tid 47745] [client 72.146.9.108:34598] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeVt1FOwpc-h7Nzn-iO9EAAAAQw"]
[Mon Apr 20 08:05:41.231481 2026] [:error] [pid 47779:tid 47785] [client 72.146.9.108:57156] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeVt1YahGl1n9UkmcNj7UQAAAUQ"]
[Mon Apr 20 08:05:42.051923 2026] [:error] [pid 64440:tid 64449] [client 72.146.9.108:59041] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeVt1tkVUvTgp8p7mrP84QAAAMY"]
[Mon Apr 20 08:05:43.077643 2026] [:error] [pid 64332:tid 64360] [client 72.146.9.108:57188] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeVt18AQ57uMKAVSYEkoegAAABI"]
[Mon Apr 20 08:05:43.699540 2026] [:error] [pid 47731:tid 47743] [client 72.146.9.108:34651] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeVt11Owpc-h7Nzn-iO9FwAAAQo"]
[Mon Apr 20 08:05:44.669274 2026] [:error] [pid 47731:tid 47745] [client 72.146.9.108:57175] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeVt2FOwpc-h7Nzn-iO9GgAAAQw"]
[Mon Apr 20 08:05:45.568387 2026] [:error] [pid 64332:tid 64342] [client 72.146.9.108:34647] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeVt2cAQ57uMKAVSYEkohQAAAAA"]
[Mon Apr 20 08:05:46.810105 2026] [:error] [pid 64334:tid 64405] [client 72.146.9.108:57158] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeVt2sNh9IxxDqsrPyO27wAAAII"]
[Mon Apr 20 08:05:48.709601 2026] [:error] [pid 64333:tid 64377] [client 72.146.9.108:34569] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeVt3HZav9wH8wxMd_uIFAAAAEE"]
[Mon Apr 20 08:05:52.062718 2026] [:error] [pid 64334:tid 64417] [client 72.146.9.108:57204] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeVt4MNh9IxxDqsrPyO28wAAAI4"]
[Mon Apr 20 08:05:59.862070 2026] [:error] [pid 48101:tid 48106] [client 72.146.9.108:46601] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeVt5_IgenNbs2bVQGsk-QAAAYI"]
[Mon Apr 20 08:06:04.877597 2026] [:error] [pid 64333:tid 64383] [client 72.146.9.108:34652] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeVt7HZav9wH8wxMd_uIIgAAAEc"]
[Mon Apr 20 08:06:06.363726 2026] [:error] [pid 47731:tid 47752] [client 72.146.9.108:34637] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeVt7lOwpc-h7Nzn-iO9KgAAARM"]
[Mon Apr 20 08:06:09.320783 2026] [:error] [pid 64332:tid 64343] [client 72.146.9.108:34584] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeVt8cAQ57uMKAVSYEkoqwAAAAE"]
[Mon Apr 20 08:06:10.221358 2026] [:error] [pid 64332:tid 64362] [client 72.146.9.108:46595] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeVt8sAQ57uMKAVSYEkorgAAABQ"]
[Mon Apr 20 08:06:11.324160 2026] [:error] [pid 64334:tid 64409] [client 72.146.9.108:34570] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeVt88Nh9IxxDqsrPyO3FgAAAIY"]
[Mon Apr 20 08:06:12.810862 2026] [:error] [pid 64332:tid 64351] [client 72.146.9.108:34667] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeVt9MAQ57uMKAVSYEkotAAAAAk"]
[Mon Apr 20 08:06:13.801633 2026] [:error] [pid 64332:tid 64354] [client 72.146.9.108:59043] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeVt9cAQ57uMKAVSYEkotQAAAAw"]
[Mon Apr 20 08:06:15.181882 2026] [:error] [pid 64333:tid 64383] [client 72.146.9.108:34623] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeVt93Zav9wH8wxMd_uIMQAAAEc"]
[Mon Apr 20 08:06:16.188175 2026] [:error] [pid 64333:tid 64394] [client 72.146.9.108:34561] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeVt-HZav9wH8wxMd_uINAAAAFI"]
[Mon Apr 20 08:06:17.453893 2026] [:error] [pid 60072:tid 60093] [client 72.146.9.108:34594] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeVt-fuj5dzu2v3Qr6Gw-wAAAdM"]
[Mon Apr 20 08:06:19.252207 2026] [:error] [pid 64334:tid 64417] [client 72.146.9.108:46594] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeVt-8Nh9IxxDqsrPyO3JQAAAI4"]
[Mon Apr 20 08:06:21.781566 2026] [:error] [pid 47779:tid 47792] [client 72.146.9.108:57200] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeVt_YahGl1n9UkmcNj7ZAAAAUs"]
[Mon Apr 20 08:06:24.212914 2026] [proxy_fcgi:error] [pid 64333:tid 64376] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:24.455043 2026] [proxy_fcgi:error] [pid 64333:tid 64391] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:25.612196 2026] [proxy_fcgi:error] [pid 64333:tid 64387] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:25.850734 2026] [proxy_fcgi:error] [pid 64333:tid 64390] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:26.088689 2026] [proxy_fcgi:error] [pid 64333:tid 64376] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:26.384626 2026] [proxy_fcgi:error] [pid 64333:tid 64377] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:26.644097 2026] [proxy_fcgi:error] [pid 64333:tid 64391] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:26.880278 2026] [proxy_fcgi:error] [pid 64333:tid 64386] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:27.126800 2026] [proxy_fcgi:error] [pid 64333:tid 64396] [client 72.146.9.108:34591] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:06:27.376632 2026] [:error] [pid 64333:tid 64400] [client 72.146.9.108:34591] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeVuA3Zav9wH8wxMd_uIVgAAAFg"]
[Mon Apr 20 08:06:31.210473 2026] [:error] [pid 60072:tid 60082] [client 72.146.9.108:57161] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeVuB_uj5dzu2v3Qr6GxAQAAAcg"]
[Mon Apr 20 08:06:35.800344 2026] [:error] [pid 64333:tid 64379] [client 72.146.9.108:34583] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeVuC3Zav9wH8wxMd_uIhgAAAEM"]
[Mon Apr 20 08:06:49.112087 2026] [:error] [pid 64333:tid 64390] [client 72.146.9.108:59036] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeVuGXZav9wH8wxMd_uImQAAAE4"]
[Mon Apr 20 08:06:51.646769 2026] [:error] [pid 64332:tid 64364] [client 72.146.9.108:34650] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeVuG8AQ57uMKAVSYEko2AAAABY"]
[Mon Apr 20 08:06:53.247340 2026] [:error] [pid 64332:tid 64366] [client 72.146.9.108:34573] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeVuHcAQ57uMKAVSYEko4QAAABg"]
[Mon Apr 20 08:06:54.476409 2026] [:error] [pid 64440:tid 64467] [client 72.146.9.108:46623] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeVuHtkVUvTgp8p7mrP9CAAAANg"]
[Mon Apr 20 08:06:56.291431 2026] [:error] [pid 64333:tid 64392] [client 72.146.9.108:34645] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeVuIHZav9wH8wxMd_uIoQAAAFA"]
[Mon Apr 20 08:06:57.400928 2026] [:error] [pid 64333:tid 64384] [client 72.146.9.108:59057] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeVuIXZav9wH8wxMd_uIpQAAAEg"]
[Mon Apr 20 08:06:57.953137 2026] [:error] [pid 64333:tid 64391] [client 72.146.9.108:34659] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeVuIXZav9wH8wxMd_uIpgAAAE8"]
[Mon Apr 20 08:06:58.952826 2026] [:error] [pid 64334:tid 64427] [client 72.146.9.108:57190] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeVuIsNh9IxxDqsrPyO3eQAAAJg"]
[Mon Apr 20 08:07:00.475943 2026] [:error] [pid 64440:tid 64451] [client 72.146.9.108:46605] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeVuJNkVUvTgp8p7mrP9DQAAAMg"]
[Mon Apr 20 08:07:01.504134 2026] [:error] [pid 47731:tid 47757] [client 72.146.9.108:57201] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeVuJVOwpc-h7Nzn-iO9ewAAARg"]
[Mon Apr 20 08:07:02.475093 2026] [:error] [pid 64440:tid 64450] [client 72.146.9.108:34582] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeVuJtkVUvTgp8p7mrP9DgAAAMc"]
[Mon Apr 20 08:07:03.351307 2026] [:error] [pid 47731:tid 47748] [client 72.146.9.108:34621] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeVuJ1Owpc-h7Nzn-iO9gQAAAQ8"]
[Mon Apr 20 08:07:04.346992 2026] [:error] [pid 47731:tid 47736] [client 72.146.9.108:34586] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeVuKFOwpc-h7Nzn-iO9hQAAAQM"]
[Mon Apr 20 08:07:05.751100 2026] [:error] [pid 64332:tid 64359] [client 72.146.9.108:34656] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeVuKcAQ57uMKAVSYEko7AAAABE"]
[Mon Apr 20 08:07:07.044734 2026] [:error] [pid 64333:tid 64393] [client 72.146.9.108:34616] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeVuK3Zav9wH8wxMd_uIrAAAAFE"]
[Mon Apr 20 08:07:08.678064 2026] [:error] [pid 64440:tid 64453] [client 72.146.9.108:57178] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeVuLNkVUvTgp8p7mrP9EwAAAMo"]
[Mon Apr 20 08:07:09.724363 2026] [:error] [pid 47731:tid 47751] [client 72.146.9.108:57207] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeVuLVOwpc-h7Nzn-iO9iwAAARI"]
[Mon Apr 20 08:07:11.384818 2026] [:error] [pid 47779:tid 47786] [client 72.146.9.108:34664] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeVuL4ahGl1n9UkmcNj7cwAAAUU"]
[Mon Apr 20 08:07:13.136905 2026] [:error] [pid 64333:tid 64378] [client 72.146.9.108:34661] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeVuMXZav9wH8wxMd_uIvgAAAEI"]
[Mon Apr 20 08:07:14.897741 2026] [:error] [pid 64333:tid 64392] [client 72.146.9.108:57169] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aeVuMnZav9wH8wxMd_uIwwAAAFA"]
[Mon Apr 20 08:07:16.287975 2026] [:error] [pid 48101:tid 48106] [client 72.146.9.108:59046] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeVuNPIgenNbs2bVQGslFgAAAYI"]
[Mon Apr 20 08:07:17.594467 2026] [:error] [pid 60072:tid 60096] [client 72.146.9.108:34581] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeVuNfuj5dzu2v3Qr6GxEAAAAdY"]
[Mon Apr 20 08:07:18.173086 2026] [:error] [pid 47731:tid 47750] [client 72.146.9.108:34619] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeVuNlOwpc-h7Nzn-iO9jAAAARE"]
[Mon Apr 20 08:07:18.657794 2026] [:error] [pid 64332:tid 64365] [client 72.146.9.108:34669] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeVuNsAQ57uMKAVSYEko8AAAABc"]
[Mon Apr 20 08:07:19.241137 2026] [:error] [pid 47731:tid 47747] [client 72.146.9.108:59014] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeVuN1Owpc-h7Nzn-iO9jQAAAQ4"]
[Mon Apr 20 08:07:20.473006 2026] [:error] [pid 60072:tid 60086] [client 72.146.9.108:59015] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeVuOPuj5dzu2v3Qr6GxEgAAAcw"]
[Mon Apr 20 08:07:21.292598 2026] [:error] [pid 64334:tid 64407] [client 72.146.9.108:59035] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeVuOcNh9IxxDqsrPyO3gQAAAIQ"]
[Mon Apr 20 08:07:22.033097 2026] [:error] [pid 64333:tid 64391] [client 72.146.9.108:59055] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeVuOnZav9wH8wxMd_uIygAAAE8"]
[Mon Apr 20 08:07:22.634027 2026] [:error] [pid 47731:tid 47735] [client 72.146.9.108:34603] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeVuOlOwpc-h7Nzn-iO9kAAAAQI"]
[Mon Apr 20 08:07:23.631716 2026] [:error] [pid 64332:tid 64356] [client 72.146.9.108:59065] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeVuO8AQ57uMKAVSYEko8wAAAA4"]
[Mon Apr 20 08:07:24.147872 2026] [:error] [pid 47731:tid 47742] [client 72.146.9.108:59053] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeVuPFOwpc-h7Nzn-iO9lAAAAQk"]
[Mon Apr 20 08:07:24.815918 2026] [:error] [pid 48101:tid 48118] [client 72.146.9.108:57189] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeVuPPIgenNbs2bVQGslIAAAAY4"]
[Mon Apr 20 08:07:25.475442 2026] [:error] [pid 60072:tid 60092] [client 72.146.9.108:34675] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeVuPfuj5dzu2v3Qr6GxFwAAAdI"]
[Mon Apr 20 08:07:26.076974 2026] [:error] [pid 64334:tid 64419] [client 72.146.9.108:34681] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeVuPsNh9IxxDqsrPyO3iQAAAJA"]
[Mon Apr 20 08:07:26.604348 2026] [:error] [pid 64334:tid 64410] [client 72.146.9.108:34626] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wen.php"] [unique_id "aeVuPsNh9IxxDqsrPyO3igAAAIc"]
[Mon Apr 20 08:07:27.203576 2026] [proxy_fcgi:error] [pid 64440:tid 64444] [client 72.146.9.108:34572] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:28.859074 2026] [proxy_fcgi:error] [pid 64440:tid 64463] [client 72.146.9.108:34572] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:29.387087 2026] [proxy_fcgi:error] [pid 64440:tid 64445] [client 72.146.9.108:34572] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:29.882022 2026] [proxy_fcgi:error] [pid 64440:tid 64448] [client 72.146.9.108:34572] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:30.222724 2026] [proxy_fcgi:error] [pid 64440:tid 64454] [client 72.146.9.108:34572] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:30.461434 2026] [proxy_fcgi:error] [pid 64440:tid 64451] [client 72.146.9.108:34572] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:30.710421 2026] [proxy_fcgi:error] [pid 64440:tid 64450] [client 72.146.9.108:34572] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:31.182379 2026] [:error] [pid 64440:tid 64466] [client 72.146.9.108:34572] [client 72.146.9.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeVuQ9kVUvTgp8p7mrP9JAAAANc"]
[Mon Apr 20 08:07:32.202131 2026] [proxy_fcgi:error] [pid 64332:tid 64356] [client 72.146.9.108:34597] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:07:32.812078 2026] [:error] [pid 64332:tid 64364] [client 72.146.9.108:34597] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeVuRMAQ57uMKAVSYEkpCQAAABY"]
[Mon Apr 20 08:07:34.051855 2026] [:error] [pid 64332:tid 64357] [client 72.146.9.108:57173] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeVuRsAQ57uMKAVSYEkpDQAAAA8"]
[Mon Apr 20 08:07:34.672730 2026] [:error] [pid 64334:tid 64423] [client 72.146.9.108:34670] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeVuRsNh9IxxDqsrPyO3nAAAAJQ"]
[Mon Apr 20 08:07:35.449614 2026] [:error] [pid 64332:tid 64342] [client 72.146.9.108:59039] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeVuR8AQ57uMKAVSYEkpEgAAAAA"]
[Mon Apr 20 08:07:36.477695 2026] [:error] [pid 64333:tid 64391] [client 72.146.9.108:34658] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeVuSHZav9wH8wxMd_uI1wAAAE8"]
[Mon Apr 20 08:07:37.524158 2026] [:error] [pid 60072:tid 60080] [client 72.146.9.108:34622] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeVuSfuj5dzu2v3Qr6GxGwAAAcY"]
[Mon Apr 20 08:07:39.202464 2026] [:error] [pid 64333:tid 64377] [client 72.146.9.108:34606] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeVuS3Zav9wH8wxMd_uI3wAAAEE"]
[Mon Apr 20 08:07:39.744816 2026] [:error] [pid 47779:tid 47800] [client 72.146.9.108:46647] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeVuS4ahGl1n9UkmcNj7ewAAAVM"]
[Mon Apr 20 08:07:40.572192 2026] [:error] [pid 47731:tid 47750] [client 72.146.9.108:59019] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "aeVuTFOwpc-h7Nzn-iO9rgAAARE"]
[Mon Apr 20 08:07:41.354705 2026] [:error] [pid 48101:tid 48115] [client 72.146.9.108:59052] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "aeVuTfIgenNbs2bVQGslIgAAAYs"]
[Mon Apr 20 08:07:41.921939 2026] [:error] [pid 64334:tid 64425] [client 72.146.9.108:46607] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "aeVuTcNh9IxxDqsrPyO3qQAAAJY"]
[Mon Apr 20 08:07:42.500866 2026] [:error] [pid 47731:tid 47742] [client 72.146.9.108:59069] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/prv8.php"] [unique_id "aeVuTlOwpc-h7Nzn-iO9sQAAAQk"]
[Mon Apr 20 08:07:43.189975 2026] [:error] [pid 60072:tid 60086] [client 72.146.9.108:46639] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeVuT_uj5dzu2v3Qr6GxHAAAAcw"]
[Mon Apr 20 08:07:43.831406 2026] [:error] [pid 64440:tid 64467] [client 72.146.9.108:34601] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeVuT9kVUvTgp8p7mrP9LAAAANg"]
[Mon Apr 20 08:07:44.390451 2026] [:error] [pid 47731:tid 47753] [client 72.146.9.108:59044] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeVuUFOwpc-h7Nzn-iO9swAAARQ"]
[Mon Apr 20 08:07:44.934552 2026] [:error] [pid 47731:tid 47756] [client 72.146.9.108:57183] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeVuUFOwpc-h7Nzn-iO9twAAARc"]
[Mon Apr 20 08:07:45.507243 2026] [:error] [pid 47731:tid 47736] [client 72.146.9.108:59058] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeVuUVOwpc-h7Nzn-iO9ugAAAQM"]
[Mon Apr 20 08:07:46.188331 2026] [:error] [pid 47731:tid 47752] [client 72.146.9.108:59049] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeVuUlOwpc-h7Nzn-iO9vwAAARM"]
[Mon Apr 20 08:07:46.755984 2026] [:error] [pid 47731:tid 47738] [client 72.146.9.108:59012] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeVuUlOwpc-h7Nzn-iO9wgAAAQU"]
[Mon Apr 20 08:07:47.416009 2026] [:error] [pid 48101:tid 48109] [client 72.146.9.108:59030] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeVuU_IgenNbs2bVQGslJgAAAYU"]
[Mon Apr 20 08:07:47.971007 2026] [:error] [pid 48101:tid 48110] [client 72.146.9.108:57185] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeVuU_IgenNbs2bVQGslJwAAAYY"]
[Mon Apr 20 08:07:48.622214 2026] [:error] [pid 64334:tid 64424] [client 72.146.9.108:59034] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeVuVMNh9IxxDqsrPyO3rgAAAJU"]
[Mon Apr 20 08:07:49.388320 2026] [:error] [pid 64332:tid 64344] [client 72.146.9.108:59009] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeVuVcAQ57uMKAVSYEkpGAAAAAI"]
[Mon Apr 20 08:07:50.133016 2026] [:error] [pid 64334:tid 64413] [client 72.146.9.108:59071] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeVuVsNh9IxxDqsrPyO3sAAAAIo"]
[Mon Apr 20 08:07:50.708618 2026] [:error] [pid 47779:tid 47803] [client 72.146.9.108:59025] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeVuVoahGl1n9UkmcNj7hgAAAVY"]
[Mon Apr 20 08:07:51.194968 2026] [:error] [pid 64333:tid 64390] [client 72.146.9.108:34640] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeVuV3Zav9wH8wxMd_uI5QAAAE4"]
[Mon Apr 20 08:07:51.802116 2026] [:error] [pid 64333:tid 64389] [client 72.146.9.108:59056] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeVuV3Zav9wH8wxMd_uI5wAAAE0"]
[Mon Apr 20 08:07:52.318708 2026] [:error] [pid 64333:tid 64387] [client 72.146.9.108:57152] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeVuWHZav9wH8wxMd_uI6QAAAEs"]
[Mon Apr 20 08:07:52.866870 2026] [:error] [pid 64332:tid 64353] [client 72.146.9.108:57195] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeVuWMAQ57uMKAVSYEkpGQAAAAs"]
[Mon Apr 20 08:07:53.527189 2026] [:error] [pid 64334:tid 64425] [client 72.146.9.108:59040] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeVuWcNh9IxxDqsrPyO3sgAAAJY"]
[Mon Apr 20 08:07:54.295793 2026] [:error] [pid 47779:tid 47787] [client 72.146.9.108:46608] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeVuWoahGl1n9UkmcNj7iwAAAUY"]
[Mon Apr 20 08:07:54.777736 2026] [:error] [pid 64440:tid 64445] [client 72.146.9.108:59060] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeVuWtkVUvTgp8p7mrP9QAAAAMI"]
[Mon Apr 20 08:07:55.398063 2026] [:error] [pid 64440:tid 64448] [client 72.146.9.108:34566] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeVuW9kVUvTgp8p7mrP9QQAAAMU"]
[Mon Apr 20 08:07:56.154413 2026] [:error] [pid 64333:tid 64392] [client 72.146.9.108:57197] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeVuXHZav9wH8wxMd_uI7gAAAFA"]
[Mon Apr 20 08:07:57.150595 2026] [:error] [pid 64333:tid 64388] [client 72.146.9.108:46635] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeVuXXZav9wH8wxMd_uI8gAAAEw"]
[Mon Apr 20 08:07:57.824489 2026] [:error] [pid 60072:tid 60080] [client 72.146.9.108:34613] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aeVuXfuj5dzu2v3Qr6GxJwAAAcY"]
[Mon Apr 20 08:07:58.660461 2026] [:error] [pid 47779:tid 47785] [client 72.146.9.108:34653] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeVuXoahGl1n9UkmcNj7kQAAAUQ"]
[Mon Apr 20 08:07:59.333474 2026] [:error] [pid 60072:tid 60084] [client 72.146.9.108:34628] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeVuX_uj5dzu2v3Qr6GxLAAAAco"]
[Mon Apr 20 08:07:59.930576 2026] [:error] [pid 60072:tid 60082] [client 72.146.9.108:59037] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeVuX_uj5dzu2v3Qr6GxLgAAAcg"]
[Mon Apr 20 08:08:00.445079 2026] [:error] [pid 64334:tid 64426] [client 72.146.9.108:59038] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeVuYMNh9IxxDqsrPyO3vAAAAJc"]
[Mon Apr 20 08:08:01.152378 2026] [:error] [pid 64332:tid 64350] [client 72.146.9.108:46599] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeVuYcAQ57uMKAVSYEkpHgAAAAg"]
[Mon Apr 20 08:08:01.647882 2026] [:error] [pid 60072:tid 60087] [client 72.146.9.108:30915] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeVuYfuj5dzu2v3Qr6GxMgAAAc0"]
[Mon Apr 20 08:08:02.254091 2026] [:error] [pid 64333:tid 64384] [client 72.146.9.108:34639] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeVuYnZav9wH8wxMd_uI9QAAAEg"]
[Mon Apr 20 08:08:03.063853 2026] [:error] [pid 64440:tid 64456] [client 72.146.9.108:57211] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bengi.php"] [unique_id "aeVuY9kVUvTgp8p7mrP9RQAAAM0"]
[Mon Apr 20 08:08:03.684377 2026] [:error] [pid 64440:tid 64443] [client 72.146.9.108:34662] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeVuY9kVUvTgp8p7mrP9RgAAAMA"]
[Mon Apr 20 08:08:04.387068 2026] [:error] [pid 47779:tid 47799] [client 72.146.9.108:46627] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeVuZIahGl1n9UkmcNj7lgAAAVI"]
[Mon Apr 20 08:08:04.931961 2026] [:error] [pid 64332:tid 64353] [client 72.146.9.108:46637] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeVuZMAQ57uMKAVSYEkpJwAAAAs"]
[Mon Apr 20 08:08:05.479403 2026] [:error] [pid 64332:tid 64359] [client 72.146.9.108:46622] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeVuZcAQ57uMKAVSYEkpKAAAABE"]
[Mon Apr 20 08:08:05.982774 2026] [:error] [pid 64334:tid 64426] [client 72.146.9.108:57215] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeVuZcNh9IxxDqsrPyO3xgAAAJc"]
[Mon Apr 20 08:08:06.548014 2026] [:error] [pid 60072:tid 60092] [client 72.146.9.108:59051] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeVuZvuj5dzu2v3Qr6GxOgAAAdI"]
[Mon Apr 20 08:08:07.496442 2026] [:error] [pid 64332:tid 64352] [client 72.146.9.108:46654] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeVuZ8AQ57uMKAVSYEkpLwAAAAo"]
[Mon Apr 20 08:08:08.149943 2026] [:error] [pid 60072:tid 60080] [client 72.146.9.108:59061] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeVuaPuj5dzu2v3Qr6GxPgAAAcY"]
[Mon Apr 20 08:08:09.151609 2026] [:error] [pid 64332:tid 64348] [client 72.146.9.108:34615] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeVuacAQ57uMKAVSYEkpMgAAAAY"]
[Mon Apr 20 08:08:10.205977 2026] [:error] [pid 60072:tid 60098] [client 72.146.9.108:59029] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeVuavuj5dzu2v3Qr6GxRgAAAdg"]
[Mon Apr 20 08:08:10.924113 2026] [:error] [pid 64333:tid 64399] [client 72.146.9.108:57182] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeVuanZav9wH8wxMd_uI-QAAAFc"]
[Mon Apr 20 08:08:12.085604 2026] [:error] [pid 48101:tid 48113] [client 72.146.9.108:57199] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeVubPIgenNbs2bVQGslSAAAAYk"]
[Mon Apr 20 08:08:12.922786 2026] [:error] [pid 60072:tid 60077] [client 72.146.9.108:34630] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeVubPuj5dzu2v3Qr6GxSwAAAcM"]
[Mon Apr 20 08:08:14.581780 2026] [:error] [pid 64332:tid 64348] [client 72.146.9.108:57180] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeVubsAQ57uMKAVSYEkpPAAAAAY"]
[Mon Apr 20 08:08:16.502992 2026] [:error] [pid 64440:tid 64460] [client 72.146.9.108:34595] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeVucNkVUvTgp8p7mrP9TwAAANE"]
[Mon Apr 20 08:08:17.357929 2026] [:error] [pid 47731:tid 47757] [client 72.146.9.108:57203] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeVucVOwpc-h7Nzn-iO92AAAARg"]
[Mon Apr 20 08:08:18.382378 2026] [:error] [pid 48101:tid 48120] [client 72.146.9.108:34608] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeVucvIgenNbs2bVQGslTAAAAZA"]
[Mon Apr 20 08:08:19.020655 2026] [:error] [pid 47731:tid 47753] [client 72.146.9.108:34585] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeVuc1Owpc-h7Nzn-iO93AAAARQ"]
[Mon Apr 20 08:08:19.570204 2026] [:error] [pid 64333:tid 64388] [client 72.146.9.108:59045] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeVuc3Zav9wH8wxMd_uJAQAAAEw"]
[Mon Apr 20 08:08:20.085307 2026] [:error] [pid 64333:tid 64383] [client 72.146.9.108:30926] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeVudHZav9wH8wxMd_uJBAAAAEc"]
[Mon Apr 20 08:08:20.664482 2026] [:error] [pid 64333:tid 64398] [client 72.146.9.108:34567] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeVudHZav9wH8wxMd_uJBwAAAFY"]
[Mon Apr 20 08:08:21.504656 2026] [:error] [pid 48101:tid 48110] [client 72.146.9.108:34574] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeVudfIgenNbs2bVQGslTQAAAYY"]
[Mon Apr 20 08:08:22.351849 2026] [:error] [pid 64332:tid 64358] [client 72.146.9.108:57214] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeVudsAQ57uMKAVSYEkpRgAAABA"]
[Mon Apr 20 08:08:23.159363 2026] [:error] [pid 64440:tid 64461] [client 72.146.9.108:46611] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeVud9kVUvTgp8p7mrP9UwAAANI"]
[Mon Apr 20 08:08:24.130409 2026] [:error] [pid 47731:tid 47737] [client 72.146.9.108:30932] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeVueFOwpc-h7Nzn-iO94AAAAQQ"]
[Mon Apr 20 08:08:24.958865 2026] [:error] [pid 64333:tid 64388] [client 72.146.9.108:34592] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeVueHZav9wH8wxMd_uJEQAAAEw"]
[Mon Apr 20 08:08:26.008730 2026] [:error] [pid 64333:tid 64389] [client 72.146.9.108:59026] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeVuenZav9wH8wxMd_uJEwAAAE0"]
[Mon Apr 20 08:08:27.158010 2026] [:error] [pid 47731:tid 47747] [client 72.146.9.108:46625] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeVue1Owpc-h7Nzn-iO95gAAAQ4"]
[Mon Apr 20 08:08:28.057903 2026] [:error] [pid 64333:tid 64388] [client 72.146.9.108:59066] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeVufHZav9wH8wxMd_uJGQAAAEw"]
[Mon Apr 20 08:08:30.748969 2026] [:error] [pid 64332:tid 64364] [client 72.146.9.108:59010] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeVufsAQ57uMKAVSYEkpXQAAABY"]
[Mon Apr 20 08:08:36.533505 2026] [proxy_fcgi:error] [pid 64334:tid 64416] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:36.800976 2026] [proxy_fcgi:error] [pid 64334:tid 64419] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:37.048505 2026] [proxy_fcgi:error] [pid 64334:tid 64410] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:37.285796 2026] [proxy_fcgi:error] [pid 64334:tid 64412] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:37.542845 2026] [proxy_fcgi:error] [pid 64334:tid 64423] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:37.783728 2026] [proxy_fcgi:error] [pid 64334:tid 64427] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:38.021419 2026] [proxy_fcgi:error] [pid 64334:tid 64403] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:39.147894 2026] [proxy_fcgi:error] [pid 64334:tid 64411] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:39.386071 2026] [proxy_fcgi:error] [pid 64334:tid 64422] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:39.622922 2026] [proxy_fcgi:error] [pid 64334:tid 64426] [client 72.146.9.108:57196] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:08:39.856721 2026] [:error] [pid 64334:tid 64424] [client 72.146.9.108:57196] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeVuh8Nh9IxxDqsrPyO37gAAAJU"]
[Mon Apr 20 08:08:41.714609 2026] [:error] [pid 64333:tid 64376] [client 72.146.9.108:57186] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeVuiXZav9wH8wxMd_uJKwAAAEA"]
[Mon Apr 20 08:08:43.308165 2026] [:error] [pid 64332:tid 64355] [client 72.146.9.108:34625] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeVui8AQ57uMKAVSYEkpdwAAAA0"]
[Mon Apr 20 08:08:45.292801 2026] [:error] [pid 60072:tid 60095] [client 72.146.9.108:57192] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aeVujfuj5dzu2v3Qr6GxYQAAAdU"]
[Mon Apr 20 08:08:46.780583 2026] [:error] [pid 47731:tid 47745] [client 72.146.9.108:34564] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeVujlOwpc-h7Nzn-iO97QAAAQw"]
[Mon Apr 20 08:08:48.071077 2026] [:error] [pid 64333:tid 64378] [client 72.146.9.108:34671] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeVukHZav9wH8wxMd_uJNQAAAEI"]
[Mon Apr 20 08:08:49.508994 2026] [:error] [pid 64332:tid 64353] [client 72.146.9.108:34563] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeVukcAQ57uMKAVSYEkpewAAAAs"]
[Mon Apr 20 08:08:53.883052 2026] [:error] [pid 64333:tid 64398] [client 72.146.9.108:59062] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeVulXZav9wH8wxMd_uJPgAAAFY"]
[Mon Apr 20 08:40:47.315558 2026] [proxy_fcgi:error] [pid 64334:tid 64420] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:40:47.581534 2026] [proxy_fcgi:error] [pid 64334:tid 64407] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:40:47.846641 2026] [proxy_fcgi:error] [pid 64334:tid 64418] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:40:48.112991 2026] [proxy_fcgi:error] [pid 64334:tid 64421] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:40:48.380103 2026] [proxy_fcgi:error] [pid 64334:tid 64427] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:40:48.647490 2026] [proxy_fcgi:error] [pid 64334:tid 64410] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:40:48.912801 2026] [proxy_fcgi:error] [pid 64334:tid 64423] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 08:40:49.178143 2026] [proxy_fcgi:error] [pid 64334:tid 64416] [client 20.91.204.74:46992] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:22.520958 2026] [proxy_fcgi:error] [pid 11441:tid 11450] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:22.826854 2026] [proxy_fcgi:error] [pid 11441:tid 11444] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:23.132820 2026] [proxy_fcgi:error] [pid 11441:tid 11457] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:23.425096 2026] [proxy_fcgi:error] [pid 11441:tid 11461] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:24.006929 2026] [proxy_fcgi:error] [pid 11441:tid 11453] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:24.313099 2026] [proxy_fcgi:error] [pid 11441:tid 11454] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:24.616098 2026] [proxy_fcgi:error] [pid 11441:tid 11443] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:24.906218 2026] [proxy_fcgi:error] [pid 11441:tid 11460] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:25.196401 2026] [proxy_fcgi:error] [pid 11441:tid 11458] [client 4.223.64.52:2774] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:25.483244 2026] [:error] [pid 11441:tid 11464] [client 4.223.64.52:2774] [client 4.223.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aeWaEcixByFUvmh319CrbAAAANU"]
[Mon Apr 20 11:14:28.016399 2026] [:error] [pid 11441:tid 11443] [client 4.223.64.52:2219] [client 4.223.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aeWaFMixByFUvmh319CrdAAAAMA"]
[Mon Apr 20 11:14:29.288914 2026] [:error] [pid 11351:tid 11401] [client 4.223.64.52:18566] [client 4.223.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aeWaFQN8Z1-vktaI_tNhPwAAAE4"]
[Mon Apr 20 11:14:32.321914 2026] [:error] [pid 11351:tid 11399] [client 4.223.64.52:2394] [client 4.223.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aeWaGAN8Z1-vktaI_tNhRgAAAEw"]
[Mon Apr 20 11:14:41.255089 2026] [proxy_fcgi:error] [pid 11441:tid 11443] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:41.525499 2026] [proxy_fcgi:error] [pid 11441:tid 11464] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:41.796748 2026] [proxy_fcgi:error] [pid 11441:tid 11462] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:42.066907 2026] [proxy_fcgi:error] [pid 11441:tid 11446] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:42.608702 2026] [proxy_fcgi:error] [pid 11441:tid 11458] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:42.898382 2026] [proxy_fcgi:error] [pid 11441:tid 11451] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:43.169280 2026] [proxy_fcgi:error] [pid 11441:tid 11454] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:43.440543 2026] [proxy_fcgi:error] [pid 11441:tid 11457] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:43.710916 2026] [proxy_fcgi:error] [pid 11441:tid 11464] [client 20.107.194.250:15648] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:14:43.978155 2026] [:error] [pid 11441:tid 11446] [client 20.107.194.250:15648] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aeWaI8ixByFUvmh319CrnwAAAMM"]
[Mon Apr 20 11:14:47.669099 2026] [:error] [pid 11351:tid 11403] [client 20.107.194.250:21311] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aeWaJwN8Z1-vktaI_tNhVgAAAFA"]
[Mon Apr 20 11:14:57.017446 2026] [:error] [pid 11350:tid 11383] [client 4.223.64.52:12214] [client 4.223.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWaMf4EoMBgOJuJnT0PZgAAABg"]
[Mon Apr 20 11:14:59.145339 2026] [:error] [pid 11351:tid 11396] [client 4.223.64.52:18284] [client 4.223.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWaMwN8Z1-vktaI_tNhhQAAAEk"]
[Mon Apr 20 11:15:05.977329 2026] [:error] [pid 11352:tid 11436] [client 4.223.64.52:9636] [client 4.223.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "aeWaOWl10mhMSfJ7ir9CUAAAAJY"]
[Mon Apr 20 11:15:13.192717 2026] [:error] [pid 11352:tid 11417] [client 20.107.194.250:23071] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeWaQWl10mhMSfJ7ir9CXQAAAIM"]
[Mon Apr 20 11:15:18.646434 2026] [:error] [pid 11352:tid 11432] [client 20.107.194.250:26415] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeWaRml10mhMSfJ7ir9CagAAAJI"]
[Mon Apr 20 11:15:21.578545 2026] [:error] [pid 11351:tid 11406] [client 20.107.194.250:1712] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeWaSQN8Z1-vktaI_tNhnAAAAFM"]
[Mon Apr 20 11:15:22.955534 2026] [:error] [pid 11441:tid 11457] [client 20.107.194.250:14943] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aeWaSsixByFUvmh319CsDQAAAM4"]
[Mon Apr 20 11:15:25.039604 2026] [proxy_fcgi:error] [pid 11350:tid 11363] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:25.308834 2026] [proxy_fcgi:error] [pid 11350:tid 11375] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:25.580925 2026] [proxy_fcgi:error] [pid 11350:tid 11369] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:25.852416 2026] [proxy_fcgi:error] [pid 11350:tid 11370] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:26.117542 2026] [proxy_fcgi:error] [pid 11350:tid 11365] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:26.470639 2026] [proxy_fcgi:error] [pid 11350:tid 11359] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:26.737735 2026] [proxy_fcgi:error] [pid 11350:tid 11381] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:27.002469 2026] [proxy_fcgi:error] [pid 11350:tid 11371] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:27.281526 2026] [proxy_fcgi:error] [pid 11350:tid 11362] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:27.547570 2026] [proxy_fcgi:error] [pid 11350:tid 11376] [client 4.223.64.52:10866] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:28.355231 2026] [:error] [pid 11352:tid 11420] [client 20.107.194.250:1868] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWaUGl10mhMSfJ7ir9CeQAAAIY"]
[Mon Apr 20 11:15:34.448945 2026] [:error] [pid 11350:tid 11362] [client 20.107.194.250:1864] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWaVv4EoMBgOJuJnT0PoQAAAAM"]
[Mon Apr 20 11:15:37.491444 2026] [:error] [pid 11350:tid 11360] [client 20.107.194.250:16703] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWaWf4EoMBgOJuJnT0PpgAAAAE"]
[Mon Apr 20 11:15:41.543889 2026] [:error] [pid 11351:tid 11398] [client 20.107.194.250:24519] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mini.php"] [unique_id "aeWaXQN8Z1-vktaI_tNhtgAAAEs"]
[Mon Apr 20 11:15:53.994127 2026] [proxy_fcgi:error] [pid 11441:tid 11444] [client 20.107.194.250:16263] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:57.024080 2026] [proxy_fcgi:error] [pid 11351:tid 11396] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:57.294063 2026] [proxy_fcgi:error] [pid 11351:tid 11390] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:57.571590 2026] [proxy_fcgi:error] [pid 11351:tid 11399] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:57.840030 2026] [proxy_fcgi:error] [pid 11351:tid 11409] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:58.110695 2026] [proxy_fcgi:error] [pid 11351:tid 11411] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:58.384201 2026] [proxy_fcgi:error] [pid 11351:tid 11404] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:58.666111 2026] [proxy_fcgi:error] [pid 11351:tid 11408] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:58.946262 2026] [proxy_fcgi:error] [pid 11351:tid 11393] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:59.227920 2026] [proxy_fcgi:error] [pid 11351:tid 11392] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:15:59.496662 2026] [proxy_fcgi:error] [pid 11351:tid 11405] [client 20.107.194.250:22661] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 13:37:08.493283 2026] [:error] [pid 11352:tid 11433] [client 103.65.237.216:62990] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7hGl10mhMSfJ7ir90awAAAJM"]
[Mon Apr 20 16:17:47.748099 2026] [:error] [pid 6928:tid 6941] [client 112.206.67.97:57724] [client 112.206.67.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.206.67.97, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeXhKx3y7MHq1iB0qYpVcAAAAUs"]
[Mon Apr 20 16:17:47.758858 2026] [proxy_fcgi:error] [pid 6928:tid 6941] [client 112.206.67.97:57724] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:55:56.327396 2026] [proxy_fcgi:error] [pid 11351:tid 11410] [client 20.203.254.37:10205] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:55:56.566882 2026] [proxy_fcgi:error] [pid 11351:tid 11407] [client 20.203.254.37:10205] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:55:57.008785 2026] [proxy_fcgi:error] [pid 11350:tid 11367] [client 20.203.254.37:10209] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:55:57.249497 2026] [proxy_fcgi:error] [pid 11350:tid 11370] [client 20.203.254.37:10209] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:55:57.725653 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:10209] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aeZanf4EoMBgOJuJnT0UaAAAABM"]
[Tue Apr 21 00:55:57.759169 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:10205] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZanQN8Z1-vktaI_tN_egAAAEw"]
[Tue Apr 21 00:55:58.198427 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:10195] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aeZangN8Z1-vktaI_tN_fQAAAFg"]
[Tue Apr 21 00:55:58.232061 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:10130] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZangN8Z1-vktaI_tN_fgAAAFA"]
[Tue Apr 21 00:55:58.669717 2026] [:error] [pid 11351:tid 11402] [client 20.203.254.37:10226] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aeZangN8Z1-vktaI_tN_gQAAAE8"]
[Tue Apr 21 00:55:58.712007 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:10202] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZanv4EoMBgOJuJnT0UagAAABE"]
[Tue Apr 21 00:55:59.140943 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:10193] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aeZan_4EoMBgOJuJnT0UbAAAAAI"]
[Tue Apr 21 00:55:59.186545 2026] [:error] [pid 11494:tid 11501] [client 20.203.254.37:10180] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZan8gko5iFiE8YoyQqLQAAAYU"]
[Tue Apr 21 00:55:59.613659 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:10239] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZan_4EoMBgOJuJnT0UcAAAAAE"]
[Tue Apr 21 00:55:59.659844 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:10186] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZanwN8Z1-vktaI_tN_hQAAAEY"]
[Tue Apr 21 00:56:00.084407 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:10218] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZaoAN8Z1-vktaI_tN_hwAAAFU"]
[Tue Apr 21 00:56:00.135505 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:10210] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZaoAN8Z1-vktaI_tN_iAAAAEQ"]
[Tue Apr 21 00:56:00.556966 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:10132] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZaoAN8Z1-vktaI_tN_iwAAAFc"]
[Tue Apr 21 00:56:00.610999 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:10138] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZaoAN8Z1-vktaI_tN_jAAAAFA"]
[Tue Apr 21 00:56:01.029273 2026] [:error] [pid 11351:tid 11396] [client 20.203.254.37:10203] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZaoQN8Z1-vktaI_tN_kAAAAEk"]
[Tue Apr 21 00:56:01.104844 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10121] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZaoQN8Z1-vktaI_tN_kgAAAE0"]
[Tue Apr 21 00:56:01.501202 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:10222] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aeZaoQN8Z1-vktaI_tN_lQAAAEM"]
[Tue Apr 21 00:56:01.580250 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:10201] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZaoQN8Z1-vktaI_tN_lwAAAFE"]
[Tue Apr 21 00:56:01.985760 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:10200] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aeZaoQN8Z1-vktaI_tN_mgAAAEo"]
[Tue Apr 21 00:56:02.076191 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:10113] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZaogN8Z1-vktaI_tN_mwAAAEQ"]
[Tue Apr 21 00:56:02.471907 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:10228] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aeZaosgko5iFiE8YoyQqMQAAAY0"]
[Tue Apr 21 00:56:02.571681 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:10190] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZaosgko5iFiE8YoyQqMgAAAY8"]
[Tue Apr 21 00:56:02.961258 2026] [:error] [pid 11494:tid 11510] [client 20.203.254.37:10229] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aeZaosgko5iFiE8YoyQqNQAAAY4"]
[Tue Apr 21 00:56:03.070900 2026] [:error] [pid 11494:tid 11502] [client 20.203.254.37:10124] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZao8gko5iFiE8YoyQqNwAAAYY"]
[Tue Apr 21 00:56:03.437938 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:10112] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZao_4EoMBgOJuJnT0UdwAAAAs"]
[Tue Apr 21 00:56:03.551126 2026] [:error] [pid 6928:tid 6937] [client 20.203.254.37:10219] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZaox3y7MHq1iB0qYrhUwAAAUc"]
[Tue Apr 21 00:56:03.911377 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:10223] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZao8gko5iFiE8YoyQqOwAAAZI"]
[Tue Apr 21 00:56:04.033519 2026] [:error] [pid 11350:tid 11380] [client 20.203.254.37:10182] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZapP4EoMBgOJuJnT0UeQAAABU"]
[Tue Apr 21 00:56:04.386400 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:10179] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZapP4EoMBgOJuJnT0UewAAABM"]
[Tue Apr 21 00:56:04.512530 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:10187] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZapP4EoMBgOJuJnT0UfgAAABc"]
[Tue Apr 21 00:56:04.859017 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:10231] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/m57.php"] [unique_id "aeZapMgko5iFiE8YoyQqPgAAAYc"]
[Tue Apr 21 00:56:04.985711 2026] [:error] [pid 11441:tid 11450] [client 20.203.254.37:10225] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZapMixByFUvmh319DVMAAAAMc"]
[Tue Apr 21 00:56:05.336813 2026] [:error] [pid 6928:tid 6938] [client 20.203.254.37:10126] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZapR3y7MHq1iB0qYrhVAAAAUg"]
[Tue Apr 21 00:56:05.462121 2026] [:error] [pid 11441:tid 11466] [client 20.203.254.37:10211] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZapcixByFUvmh319DVMQAAANc"]
[Tue Apr 21 00:56:05.810601 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:10178] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZapQN8Z1-vktaI_tN_pAAAAEw"]
[Tue Apr 21 00:56:05.934892 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:10146] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZapQN8Z1-vktaI_tN_pgAAAFc"]
[Tue Apr 21 00:56:06.286488 2026] [:error] [pid 11441:tid 11449] [client 20.203.254.37:10176] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZapsixByFUvmh319DVMgAAAMY"]
[Tue Apr 21 00:56:06.410549 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:10204] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZapgN8Z1-vktaI_tN_rgAAAEM"]
[Tue Apr 21 00:56:06.759618 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:10173] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aeZapgN8Z1-vktaI_tN_tAAAAFM"]
[Tue Apr 21 00:56:06.883951 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:10141] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZapgN8Z1-vktaI_tN_tQAAAEw"]
[Tue Apr 21 00:56:07.234681 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10168] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZapwN8Z1-vktaI_tN_vAAAAE0"]
[Tue Apr 21 00:56:07.409003 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:10237] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZapwN8Z1-vktaI_tN_vwAAAFQ"]
[Tue Apr 21 00:56:07.706922 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:10224] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZapwN8Z1-vktaI_tN_xQAAAFc"]
[Tue Apr 21 00:56:07.880285 2026] [:error] [pid 11351:tid 11396] [client 20.203.254.37:10194] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZapwN8Z1-vktaI_tN_xwAAAEk"]
[Tue Apr 21 00:56:08.181880 2026] [:error] [pid 6928:tid 6948] [client 20.203.254.37:10230] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZaqB3y7MHq1iB0qYrhVgAAAVI"]
[Tue Apr 21 00:56:08.358755 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:10119] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZaqB3y7MHq1iB0qYrhWAAAAUw"]
[Tue Apr 21 00:56:08.670090 2026] [:error] [pid 6928:tid 6932] [client 20.203.254.37:10136] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-m57.php"] [unique_id "aeZaqB3y7MHq1iB0qYrhWQAAAUI"]
[Tue Apr 21 00:56:08.830913 2026] [:error] [pid 6928:tid 6936] [client 20.203.254.37:10233] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZaqB3y7MHq1iB0qYrhWgAAAUY"]
[Tue Apr 21 00:56:09.147920 2026] [:error] [pid 11441:tid 11446] [client 20.203.254.37:10207] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZaqcixByFUvmh319DVMwAAAMM"]
[Tue Apr 21 00:56:09.318715 2026] [:error] [pid 6928:tid 6954] [client 20.203.254.37:10212] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZaqR3y7MHq1iB0qYrhXAAAAVg"]
[Tue Apr 21 00:56:09.663329 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:10153] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZaqf4EoMBgOJuJnT0UgwAAAA0"]
[Tue Apr 21 00:56:09.794435 2026] [:error] [pid 11352:tid 11429] [client 20.203.254.37:10128] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZaqWl10mhMSfJ7ir_6xgAAAI8"]
[Tue Apr 21 00:56:10.142572 2026] [:error] [pid 11494:tid 11501] [client 20.203.254.37:10120] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZaqsgko5iFiE8YoyQqQQAAAYU"]
[Tue Apr 21 00:56:10.289853 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:10197] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZaqgN8Z1-vktaI_tN_zQAAAFU"]
[Tue Apr 21 00:56:10.628919 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:10140] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aeZaqgN8Z1-vktaI_tN_zwAAAFM"]
[Tue Apr 21 00:56:10.764887 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:10073] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZaqgN8Z1-vktaI_tN_0QAAAFg"]
[Tue Apr 21 00:56:11.112089 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:10148] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZaqwN8Z1-vktaI_tN_0wAAAEI"]
[Tue Apr 21 00:56:11.252662 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:10166] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZaqwN8Z1-vktaI_tN_1gAAAEQ"]
[Tue Apr 21 00:56:11.604129 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:10235] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZaqwN8Z1-vktaI_tN_1wAAAEo"]
[Tue Apr 21 00:56:11.725013 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:10214] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZaqwN8Z1-vktaI_tN_2QAAAE4"]
[Tue Apr 21 00:56:12.089339 2026] [:error] [pid 11441:tid 11458] [client 20.203.254.37:10131] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZarMixByFUvmh319DVNgAAAM8"]
[Tue Apr 21 00:56:12.205678 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:10149] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZarAN8Z1-vktaI_tN_3gAAAEU"]
[Tue Apr 21 00:56:12.569096 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:10208] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZarP4EoMBgOJuJnT0UhAAAAAA"]
[Tue Apr 21 00:56:12.719043 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:10134] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZarP4EoMBgOJuJnT0UhQAAAAs"]
[Tue Apr 21 00:56:13.046676 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:10142] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZarf4EoMBgOJuJnT0UhwAAABM"]
[Tue Apr 21 00:56:13.191585 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:10213] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZarQN8Z1-vktaI_tN_4gAAAEM"]
[Tue Apr 21 00:56:13.522021 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:10185] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZarQN8Z1-vktaI_tN_5AAAAFI"]
[Tue Apr 21 00:56:13.682128 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:10236] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZarQN8Z1-vktaI_tN_5gAAAEc"]
[Tue Apr 21 00:56:13.996638 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:10171] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZarQN8Z1-vktaI_tN_6QAAAFA"]
[Tue Apr 21 00:56:14.155531 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:10114] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZargN8Z1-vktaI_tN_6wAAAEo"]
[Tue Apr 21 00:56:14.478545 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:10155] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZargN8Z1-vktaI_tN_7QAAAE4"]
[Tue Apr 21 00:56:14.631418 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:10122] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZargN8Z1-vktaI_tN_7gAAAEA"]
[Tue Apr 21 00:56:14.949625 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:10215] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZargN8Z1-vktaI_tN_8AAAAEc"]
[Tue Apr 21 00:56:15.104844 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:10139] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZarwN8Z1-vktaI_tN_8gAAAEU"]
[Tue Apr 21 00:56:15.426646 2026] [:error] [pid 11352:tid 11423] [client 20.203.254.37:10199] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZar2l10mhMSfJ7ir_6yAAAAIk"]
[Tue Apr 21 00:56:15.578468 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:10172] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZarwN8Z1-vktaI_tN_8wAAAFM"]
[Tue Apr 21 00:56:15.899736 2026] [:error] [pid 11352:tid 11416] [client 20.203.254.37:10191] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZar2l10mhMSfJ7ir_6yQAAAII"]
[Tue Apr 21 00:56:16.050808 2026] [:error] [pid 11441:tid 11463] [client 20.203.254.37:10135] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZasMixByFUvmh319DVNwAAANQ"]
[Tue Apr 21 00:56:16.371557 2026] [:error] [pid 11352:tid 11434] [client 20.203.254.37:10188] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZasGl10mhMSfJ7ir_6ywAAAJQ"]
[Tue Apr 21 00:56:16.526011 2026] [:error] [pid 11441:tid 11461] [client 20.203.254.37:10079] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZasMixByFUvmh319DVOAAAANI"]
[Tue Apr 21 00:56:16.850100 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:10118] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZasMgko5iFiE8YoyQqRQAAAY8"]
[Tue Apr 21 00:56:17.006486 2026] [:error] [pid 11494:tid 11505] [client 20.203.254.37:10052] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZascgko5iFiE8YoyQqRwAAAYk"]
[Tue Apr 21 00:56:17.321399 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:10164] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZascgko5iFiE8YoyQqSQAAAYw"]
[Tue Apr 21 00:56:17.483282 2026] [:error] [pid 42014:tid 42040] [client 20.203.254.37:10064] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZascek-00-ZI0f1NqlnwAAARg"]
[Tue Apr 21 00:56:17.793772 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:10167] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZasQN8Z1-vktaI_tN_-AAAAEw"]
[Tue Apr 21 00:56:17.958993 2026] [:error] [pid 11494:tid 11515] [client 20.203.254.37:10115] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZascgko5iFiE8YoyQqSgAAAZM"]
[Tue Apr 21 00:56:18.266897 2026] [:error] [pid 11441:tid 11452] [client 20.203.254.37:10162] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZassixByFUvmh319DVQgAAAMk"]
[Tue Apr 21 00:56:18.431761 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:10234] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZasgN8Z1-vktaI_tN_-gAAAFI"]
[Tue Apr 21 00:56:18.740281 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:10133] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZasgN8Z1-vktaI_tN__AAAAFE"]
[Tue Apr 21 00:56:18.929557 2026] [:error] [pid 6928:tid 6951] [client 20.203.254.37:10048] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZash3y7MHq1iB0qYrhYAAAAVU"]
[Tue Apr 21 00:56:19.214966 2026] [:error] [pid 42014:tid 42017] [client 20.203.254.37:10152] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZas8ek-00-ZI0f1NqlogAAAQE"]
[Tue Apr 21 00:56:19.408878 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10117] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZaswN8Z1-vktaI_tOAAAAAAE0"]
[Tue Apr 21 00:56:19.697266 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:9985] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZaswN8Z1-vktaI_tOAAwAAAEM"]
[Tue Apr 21 00:56:19.881051 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:10156] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZaswN8Z1-vktaI_tOABAAAAEA"]
[Tue Apr 21 00:56:20.167704 2026] [:error] [pid 11494:tid 11499] [client 20.203.254.37:10058] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZatMgko5iFiE8YoyQqSwAAAYM"]
[Tue Apr 21 00:56:20.354035 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:10080] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZatAN8Z1-vktaI_tOABwAAAFE"]
[Tue Apr 21 00:56:20.649621 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:10189] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZatAN8Z1-vktaI_tOACgAAAFg"]
[Tue Apr 21 00:56:20.826903 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:10108] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZatAN8Z1-vktaI_tOADAAAAEU"]
[Tue Apr 21 00:56:21.123215 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10109] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZatQN8Z1-vktaI_tOADQAAAE0"]
[Tue Apr 21 00:56:21.303100 2026] [:error] [pid 6928:tid 6948] [client 20.203.254.37:10127] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZatR3y7MHq1iB0qYrhYQAAAVI"]
[Tue Apr 21 00:56:21.605151 2026] [:error] [pid 11352:tid 11425] [client 20.203.254.37:10074] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZatWl10mhMSfJ7ir_61wAAAIs"]
[Tue Apr 21 00:56:21.775208 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:10175] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZatR3y7MHq1iB0qYrhYgAAAUw"]
[Tue Apr 21 00:56:22.086562 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:10123] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZatv4EoMBgOJuJnT0UjgAAAA0"]
[Tue Apr 21 00:56:22.252439 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:10165] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZatv4EoMBgOJuJnT0UjwAAAA4"]
[Tue Apr 21 00:56:22.572121 2026] [:error] [pid 11350:tid 11377] [client 20.203.254.37:10145] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZatv4EoMBgOJuJnT0UkQAAABI"]
[Tue Apr 21 00:56:22.729773 2026] [:error] [pid 11441:tid 11455] [client 20.203.254.37:10095] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZatsixByFUvmh319DVSAAAAMw"]
[Tue Apr 21 00:56:23.062550 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:10232] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZatwN8Z1-vktaI_tOAFAAAAEI"]
[Tue Apr 21 00:56:23.240945 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:10129] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZat_4EoMBgOJuJnT0UkwAAAAA"]
[Tue Apr 21 00:56:23.536366 2026] [:error] [pid 11352:tid 11416] [client 20.203.254.37:10051] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZat2l10mhMSfJ7ir_62QAAAII"]
[Tue Apr 21 00:56:23.718132 2026] [:error] [pid 6928:tid 6935] [client 20.203.254.37:10181] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZatx3y7MHq1iB0qYrhYwAAAUU"]
[Tue Apr 21 00:56:24.008937 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:10065] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZauAN8Z1-vktaI_tOAGwAAAEM"]
[Tue Apr 21 00:56:24.196707 2026] [:error] [pid 42014:tid 42034] [client 20.203.254.37:10238] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZauMek-00-ZI0f1NqlpQAAARI"]
[Tue Apr 21 00:56:24.485018 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:10059] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZauP4EoMBgOJuJnT0UlQAAABM"]
[Tue Apr 21 00:56:24.671409 2026] [:error] [pid 11352:tid 11430] [client 20.203.254.37:10157] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZauGl10mhMSfJ7ir_63gAAAJA"]
[Tue Apr 21 00:56:24.956715 2026] [:error] [pid 6928:tid 6945] [client 20.203.254.37:10003] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZauB3y7MHq1iB0qYrhZQAAAU8"]
[Tue Apr 21 00:56:25.144143 2026] [:error] [pid 11352:tid 11431] [client 20.203.254.37:10137] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZauWl10mhMSfJ7ir_63wAAAJE"]
[Tue Apr 21 00:56:25.435843 2026] [:error] [pid 11494:tid 11519] [client 20.203.254.37:10054] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZaucgko5iFiE8YoyQqUAAAAZc"]
[Tue Apr 21 00:56:25.618367 2026] [:error] [pid 11352:tid 11427] [client 20.203.254.37:10144] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZauWl10mhMSfJ7ir_64AAAAI0"]
[Tue Apr 21 00:56:25.919598 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:10192] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZaucgko5iFiE8YoyQqUQAAAZA"]
[Tue Apr 21 00:56:26.090299 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:10221] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZauv4EoMBgOJuJnT0UnAAAABA"]
[Tue Apr 21 00:56:26.397112 2026] [:error] [pid 42014:tid 42026] [client 20.203.254.37:10116] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZausek-00-ZI0f1NqlqQAAAQo"]
[Tue Apr 21 00:56:26.569646 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10183] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZaugN8Z1-vktaI_tOAJgAAAE0"]
[Tue Apr 21 00:56:26.870541 2026] [:error] [pid 11350:tid 11381] [client 20.203.254.37:10055] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZauv4EoMBgOJuJnT0UnwAAABY"]
[Tue Apr 21 00:56:27.058982 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:10061] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZau_4EoMBgOJuJnT0UoAAAAA4"]
[Tue Apr 21 00:56:27.390132 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9986] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZau_4EoMBgOJuJnT0UowAAAAA"]
[Tue Apr 21 00:56:27.546003 2026] [:error] [pid 6928:tid 6953] [client 20.203.254.37:10154] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZaux3y7MHq1iB0qYrhcQAAAVc"]
[Tue Apr 21 00:56:27.862603 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:10075] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZau_4EoMBgOJuJnT0UpwAAABM"]
[Tue Apr 21 00:56:28.019468 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:10077] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZavP4EoMBgOJuJnT0UqAAAABc"]
[Tue Apr 21 00:56:28.336714 2026] [:error] [pid 11350:tid 11380] [client 20.203.254.37:10147] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZavP4EoMBgOJuJnT0UqwAAABU"]
[Tue Apr 21 00:56:28.497706 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:10110] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZavAN8Z1-vktaI_tOAKwAAAFE"]
[Tue Apr 21 00:56:28.811927 2026] [:error] [pid 11352:tid 11418] [client 20.203.254.37:10088] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZavGl10mhMSfJ7ir_65AAAAIQ"]
[Tue Apr 21 00:56:28.971852 2026] [:error] [pid 11352:tid 11424] [client 20.203.254.37:10150] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZavGl10mhMSfJ7ir_65gAAAIo"]
[Tue Apr 21 00:56:29.305804 2026] [:error] [pid 11441:tid 11464] [client 20.203.254.37:9988] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZavcixByFUvmh319DVSgAAANU"]
[Tue Apr 21 00:56:29.444620 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:10227] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZavcgko5iFiE8YoyQqUgAAAY0"]
[Tue Apr 21 00:56:29.776831 2026] [:error] [pid 11494:tid 11513] [client 20.203.254.37:10161] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZavcgko5iFiE8YoyQqUwAAAZE"]
[Tue Apr 21 00:56:29.917250 2026] [:error] [pid 11441:tid 11444] [client 20.203.254.37:10196] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZavcixByFUvmh319DVTAAAAME"]
[Tue Apr 21 00:56:30.249989 2026] [:error] [pid 11352:tid 11415] [client 20.203.254.37:10143] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZavml10mhMSfJ7ir_66gAAAIE"]
[Tue Apr 21 00:56:30.391049 2026] [:error] [pid 11494:tid 11515] [client 20.203.254.37:10093] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZavsgko5iFiE8YoyQqVgAAAZM"]
[Tue Apr 21 00:56:30.726734 2026] [:error] [pid 11494:tid 11504] [client 20.203.254.37:10007] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZavsgko5iFiE8YoyQqWQAAAYg"]
[Tue Apr 21 00:56:30.862898 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:10067] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZavsgko5iFiE8YoyQqWgAAAZQ"]
[Tue Apr 21 00:56:31.200937 2026] [:error] [pid 11494:tid 11501] [client 20.203.254.37:9991] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZav8gko5iFiE8YoyQqXAAAAYU"]
[Tue Apr 21 00:56:31.365653 2026] [:error] [pid 11350:tid 11381] [client 20.203.254.37:10083] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZav_4EoMBgOJuJnT0UrgAAABY"]
[Tue Apr 21 00:56:31.688164 2026] [:error] [pid 11441:tid 11466] [client 20.203.254.37:10084] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZav8ixByFUvmh319DVUQAAANc"]
[Tue Apr 21 00:56:31.838103 2026] [:error] [pid 6928:tid 6939] [client 20.203.254.37:10010] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZavx3y7MHq1iB0qYrhdAAAAUk"]
[Tue Apr 21 00:56:32.166049 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:10063] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZawP4EoMBgOJuJnT0UsQAAABM"]
[Tue Apr 21 00:56:32.323999 2026] [:error] [pid 11441:tid 11449] [client 20.203.254.37:10049] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZawMixByFUvmh319DVUgAAAMY"]
[Tue Apr 21 00:56:32.655670 2026] [:error] [pid 11441:tid 11447] [client 20.203.254.37:10083] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZawMixByFUvmh319DVVAAAAMQ"]
[Tue Apr 21 00:56:32.795831 2026] [:error] [pid 11494:tid 11518] [client 20.203.254.37:10092] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZawMgko5iFiE8YoyQqXQAAAZY"]
[Tue Apr 21 00:56:33.127827 2026] [:error] [pid 42014:tid 42027] [client 20.203.254.37:10056] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZawcek-00-ZI0f1NqlqwAAAQs"]
[Tue Apr 21 00:56:33.267667 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:10011] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZawcgko5iFiE8YoyQqXgAAAZI"]
[Tue Apr 21 00:56:33.598753 2026] [:error] [pid 6928:tid 6945] [client 20.203.254.37:10069] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZawR3y7MHq1iB0qYrhdQAAAU8"]
[Tue Apr 21 00:56:33.741753 2026] [:error] [pid 6928:tid 6936] [client 20.203.254.37:9993] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZawR3y7MHq1iB0qYrhdgAAAUY"]
[Tue Apr 21 00:56:34.072812 2026] [:error] [pid 11350:tid 11381] [client 20.203.254.37:10057] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZawv4EoMBgOJuJnT0UugAAABY"]
[Tue Apr 21 00:56:34.214881 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9984] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZawv4EoMBgOJuJnT0UvQAAABM"]
[Tue Apr 21 00:56:34.544971 2026] [:error] [pid 11350:tid 11380] [client 20.203.254.37:10078] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZawv4EoMBgOJuJnT0UvwAAABU"]
[Tue Apr 21 00:56:34.689547 2026] [:error] [pid 11352:tid 11417] [client 20.203.254.37:10086] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZawml10mhMSfJ7ir_67QAAAIM"]
[Tue Apr 21 00:56:35.018044 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9930] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZaw_4EoMBgOJuJnT0UwgAAABE"]
[Tue Apr 21 00:56:35.162686 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:10087] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZaw_4EoMBgOJuJnT0UwwAAAAI"]
[Tue Apr 21 00:56:35.492168 2026] [:error] [pid 42014:tid 42040] [client 20.203.254.37:10085] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZaw8ek-00-ZI0f1NqlrQAAARg"]
[Tue Apr 21 00:56:35.636210 2026] [:error] [pid 11352:tid 11427] [client 20.203.254.37:10184] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZaw2l10mhMSfJ7ir_67gAAAI0"]
[Tue Apr 21 00:56:35.964416 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:10106] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZawwN8Z1-vktaI_tOAMgAAAFQ"]
[Tue Apr 21 00:56:36.111825 2026] [:error] [pid 6928:tid 6954] [client 20.203.254.37:10096] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZaxB3y7MHq1iB0qYrhdwAAAVg"]
[Tue Apr 21 00:56:36.436989 2026] [:error] [pid 11352:tid 11433] [client 20.203.254.37:10107] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZaxGl10mhMSfJ7ir_67wAAAJM"]
[Tue Apr 21 00:56:36.584221 2026] [:error] [pid 11350:tid 11362] [client 20.203.254.37:10174] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZaxP4EoMBgOJuJnT0UxwAAAAM"]
[Tue Apr 21 00:56:36.907771 2026] [:error] [pid 11494:tid 11517] [client 20.203.254.37:10220] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZaxMgko5iFiE8YoyQqZwAAAZU"]
[Tue Apr 21 00:56:37.055187 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:9994] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZaxcgko5iFiE8YoyQqaAAAAZQ"]
[Tue Apr 21 00:56:37.378958 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:10107] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZaxQN8Z1-vktaI_tOANAAAAFM"]
[Tue Apr 21 00:56:37.526858 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:10160] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZaxQN8Z1-vktaI_tOAOAAAAFg"]
[Tue Apr 21 00:56:37.850259 2026] [:error] [pid 11350:tid 11366] [client 20.203.254.37:10053] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZaxf4EoMBgOJuJnT0UygAAAAc"]
[Tue Apr 21 00:56:37.997501 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:10060] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZaxf4EoMBgOJuJnT0UywAAAAs"]
[Tue Apr 21 00:56:38.329150 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10015] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZaxgN8Z1-vktaI_tOAPgAAAE0"]
[Tue Apr 21 00:56:38.469040 2026] [:error] [pid 11350:tid 11379] [client 20.203.254.37:10009] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZaxv4EoMBgOJuJnT0U0gAAABQ"]
[Tue Apr 21 00:56:38.802456 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:10198] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZaxv4EoMBgOJuJnT0U1gAAABA"]
[Tue Apr 21 00:56:38.940155 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:10056] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZaxsgko5iFiE8YoyQqcQAAAYw"]
[Tue Apr 21 00:56:39.273753 2026] [:error] [pid 42014:tid 42033] [client 20.203.254.37:10036] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZax8ek-00-ZI0f1NqlrgAAARE"]
[Tue Apr 21 00:56:39.412032 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:10216] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZaxwN8Z1-vktaI_tOARgAAAEI"]
[Tue Apr 21 00:56:39.745761 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:9995] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZax8gko5iFiE8YoyQqdQAAAZI"]
[Tue Apr 21 00:56:39.884788 2026] [:error] [pid 42014:tid 42023] [client 20.203.254.37:9998] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZax8ek-00-ZI0f1NqlrwAAAQc"]
[Tue Apr 21 00:56:40.217247 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:10217] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZayAN8Z1-vktaI_tOATQAAAEo"]
[Tue Apr 21 00:56:40.357369 2026] [:error] [pid 42014:tid 42037] [client 20.203.254.37:10089] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZayMek-00-ZI0f1NqlsAAAARU"]
[Tue Apr 21 00:56:40.689453 2026] [:error] [pid 11441:tid 11466] [client 20.203.254.37:10091] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZayMixByFUvmh319DVXQAAANc"]
[Tue Apr 21 00:56:40.829921 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:10177] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZayP4EoMBgOJuJnT0U2wAAAAg"]
[Tue Apr 21 00:56:41.162852 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:10169] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZayf4EoMBgOJuJnT0U3AAAAAs"]
[Tue Apr 21 00:56:41.303121 2026] [:error] [pid 11350:tid 11381] [client 20.203.254.37:10076] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZayf4EoMBgOJuJnT0U3QAAABY"]
[Tue Apr 21 00:56:41.635280 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:10082] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZayf4EoMBgOJuJnT0U3gAAAA0"]
[Tue Apr 21 00:56:41.777798 2026] [:error] [pid 11494:tid 11520] [client 20.203.254.37:10030] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZaycgko5iFiE8YoyQqgAAAAZg"]
[Tue Apr 21 00:56:42.106422 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:10008] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZaygN8Z1-vktaI_tOAWQAAAEY"]
[Tue Apr 21 00:56:42.250296 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:10005] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZaygN8Z1-vktaI_tOAWwAAAEE"]
[Tue Apr 21 00:56:42.577704 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:10081] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZaygN8Z1-vktaI_tOAYAAAAEo"]
[Tue Apr 21 00:56:42.722017 2026] [:error] [pid 11441:tid 11465] [client 20.203.254.37:10170] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZaysixByFUvmh319DVYQAAANY"]
[Tue Apr 21 00:56:43.049893 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10004] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2468.php"] [unique_id "aeZaywN8Z1-vktaI_tOAYQAAAE0"]
[Tue Apr 21 00:56:43.193452 2026] [:error] [pid 42014:tid 42031] [client 20.203.254.37:10159] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZay8ek-00-ZI0f1NqlsQAAAQ8"]
[Tue Apr 21 00:56:43.521651 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:10104] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZaywN8Z1-vktaI_tOAZAAAAE4"]
[Tue Apr 21 00:56:43.669967 2026] [:error] [pid 11352:tid 11428] [client 20.203.254.37:10037] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZay2l10mhMSfJ7ir_68gAAAI4"]
[Tue Apr 21 00:56:43.994132 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:10025] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZay_4EoMBgOJuJnT0U4wAAAAg"]
[Tue Apr 21 00:56:44.143028 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:9932] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZazP4EoMBgOJuJnT0U5AAAAAE"]
[Tue Apr 21 00:56:44.469579 2026] [:error] [pid 6928:tid 6939] [client 20.203.254.37:10105] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZazB3y7MHq1iB0qYrhiAAAAUk"]
[Tue Apr 21 00:56:44.615290 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:10071] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZazB3y7MHq1iB0qYrhiQAAAUw"]
[Tue Apr 21 00:56:44.950413 2026] [:error] [pid 11494:tid 11513] [client 20.203.254.37:9948] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZazMgko5iFiE8YoyQqhQAAAZE"]
[Tue Apr 21 00:56:45.087785 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:10158] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZazQN8Z1-vktaI_tOAbAAAAFU"]
[Tue Apr 21 00:56:45.422474 2026] [:error] [pid 42014:tid 42039] [client 20.203.254.37:10033] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZazcek-00-ZI0f1NqlsgAAARc"]
[Tue Apr 21 00:56:45.564158 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:10101] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZazQN8Z1-vktaI_tOAcwAAAEE"]
[Tue Apr 21 00:56:45.894939 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:10002] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZazQN8Z1-vktaI_tOAdgAAAEI"]
[Tue Apr 21 00:56:46.038005 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:10125] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZazgN8Z1-vktaI_tOAeAAAAFI"]
[Tue Apr 21 00:56:46.394912 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:10101] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZazgN8Z1-vktaI_tOAegAAAEQ"]
[Tue Apr 21 00:56:46.534406 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:10000] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZazgN8Z1-vktaI_tOAfgAAAFY"]
[Tue Apr 21 00:56:46.866308 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9959] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZazgN8Z1-vktaI_tOAggAAAFQ"]
[Tue Apr 21 00:56:47.006301 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:10094] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZazwN8Z1-vktaI_tOAhAAAAFc"]
[Tue Apr 21 00:56:47.340686 2026] [:error] [pid 11351:tid 11396] [client 20.203.254.37:9989] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZazwN8Z1-vktaI_tOAiAAAAEk"]
[Tue Apr 21 00:56:47.491722 2026] [:error] [pid 11350:tid 11379] [client 20.203.254.37:10102] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZaz_4EoMBgOJuJnT0U5QAAABQ"]
[Tue Apr 21 00:56:47.837495 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:10068] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZaz_4EoMBgOJuJnT0U5gAAABA"]
[Tue Apr 21 00:56:47.964183 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9929] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZazwN8Z1-vktaI_tOAkQAAAEw"]
[Tue Apr 21 00:56:48.314827 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9992] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZa0AN8Z1-vktaI_tOAlQAAAFQ"]
[Tue Apr 21 00:56:48.438572 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9936] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZa0AN8Z1-vktaI_tOAlwAAAFc"]
[Tue Apr 21 00:56:48.801986 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:9996] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aeZa0AN8Z1-vktaI_tOAmQAAAFA"]
[Tue Apr 21 00:56:48.910864 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:10001] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZa0P4EoMBgOJuJnT0U6wAAAAQ"]
[Tue Apr 21 00:56:49.276648 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:10103] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZa0f4EoMBgOJuJnT0U7gAAAA8"]
[Tue Apr 21 00:56:49.388165 2026] [:error] [pid 11352:tid 11421] [client 20.203.254.37:10016] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa0Wl10mhMSfJ7ir_68wAAAIc"]
[Tue Apr 21 00:56:49.748449 2026] [:error] [pid 11494:tid 11500] [client 20.203.254.37:10027] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZa0cgko5iFiE8YoyQqiQAAAYQ"]
[Tue Apr 21 00:56:49.871456 2026] [:error] [pid 11352:tid 11415] [client 20.203.254.37:10038] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa0Wl10mhMSfJ7ir_69AAAAIE"]
[Tue Apr 21 00:56:50.231407 2026] [:error] [pid 11441:tid 11464] [client 20.203.254.37:9861] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZa0sixByFUvmh319DVZAAAANU"]
[Tue Apr 21 00:56:50.343220 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:10014] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa0v4EoMBgOJuJnT0U8QAAAAs"]
[Tue Apr 21 00:56:50.705137 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:10070] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aeZa0v4EoMBgOJuJnT0U9AAAAAE"]
[Tue Apr 21 00:56:50.815591 2026] [:error] [pid 42014:tid 42019] [client 20.203.254.37:10023] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa0sek-00-ZI0f1NqlswAAAQM"]
[Tue Apr 21 00:56:51.182734 2026] [:error] [pid 6928:tid 6949] [client 20.203.254.37:10100] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZa0x3y7MHq1iB0qYrhjAAAAVM"]
[Tue Apr 21 00:56:51.289475 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:10006] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeZa0_4EoMBgOJuJnT0U9gAAAAo"]
[Tue Apr 21 00:56:51.656994 2026] [:error] [pid 6928:tid 6950] [client 20.203.254.37:10164] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZa0x3y7MHq1iB0qYrhjQAAAVQ"]
[Tue Apr 21 00:56:51.762541 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9950] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeZa0_4EoMBgOJuJnT0U-AAAABA"]
[Tue Apr 21 00:56:52.127722 2026] [:error] [pid 42014:tid 42025] [client 20.203.254.37:9963] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZa1Mek-00-ZI0f1NqltQAAAQk"]
[Tue Apr 21 00:56:52.245151 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:10098] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeZa1P4EoMBgOJuJnT0U-wAAAAQ"]
[Tue Apr 21 00:56:52.600814 2026] [:error] [pid 11351:tid 11398] [client 20.203.254.37:10206] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aeZa1AN8Z1-vktaI_tOAmwAAAEs"]
[Tue Apr 21 00:56:52.717396 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9924] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeZa1P4EoMBgOJuJnT0U_gAAAAA"]
[Tue Apr 21 00:56:53.074750 2026] [:error] [pid 11350:tid 11362] [client 20.203.254.37:9958] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZa1f4EoMBgOJuJnT0VAQAAAAM"]
[Tue Apr 21 00:56:53.193083 2026] [:error] [pid 6928:tid 6953] [client 20.203.254.37:10045] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZa1R3y7MHq1iB0qYrhjwAAAVc"]
[Tue Apr 21 00:56:53.546442 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9925] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZa1f4EoMBgOJuJnT0VBgAAAAo"]
[Tue Apr 21 00:56:53.670981 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:9893] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZa1f4EoMBgOJuJnT0VCAAAABg"]
[Tue Apr 21 00:56:54.017923 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:10020] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZa1v4EoMBgOJuJnT0VDAAAABA"]
[Tue Apr 21 00:56:54.143623 2026] [:error] [pid 11441:tid 11445] [client 20.203.254.37:10163] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZa1sixByFUvmh319DVZwAAAMI"]
[Tue Apr 21 00:56:54.491147 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:9943] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aeZa1sgko5iFiE8YoyQqjAAAAZI"]
[Tue Apr 21 00:56:54.616931 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:10021] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aeZa1v4EoMBgOJuJnT0VEAAAAAA"]
[Tue Apr 21 00:56:55.010086 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:10151] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa18gko5iFiE8YoyQqjQAAAY8"]
[Tue Apr 21 00:56:55.088532 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:10017] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZa1_4EoMBgOJuJnT0VFAAAABA"]
[Tue Apr 21 00:56:55.483872 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:10072] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa1_4EoMBgOJuJnT0VGAAAAA8"]
[Tue Apr 21 00:56:55.560614 2026] [:error] [pid 11350:tid 11380] [client 20.203.254.37:9923] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZa1_4EoMBgOJuJnT0VGQAAABU"]
[Tue Apr 21 00:56:55.954316 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9939] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa1_4EoMBgOJuJnT0VHgAAABM"]
[Tue Apr 21 00:56:56.038996 2026] [:error] [pid 42014:tid 42029] [client 20.203.254.37:10099] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZa2Mek-00-ZI0f1NqltgAAAQ0"]
[Tue Apr 21 00:56:56.427471 2026] [:error] [pid 42014:tid 42036] [client 20.203.254.37:9980] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aeZa2Mek-00-ZI0f1NqltwAAARQ"]
[Tue Apr 21 00:56:56.510706 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:10022] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZa2Mgko5iFiE8YoyQqjgAAAZA"]
[Tue Apr 21 00:56:56.903961 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:10039] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aeZa2P4EoMBgOJuJnT0VJgAAABA"]
[Tue Apr 21 00:56:56.981695 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:10097] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeZa2P4EoMBgOJuJnT0VKAAAAAk"]
[Tue Apr 21 00:56:57.385557 2026] [proxy_fcgi:error] [pid 11351:tid 11408] [client 20.203.254.37:9899] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:57.457576 2026] [proxy_fcgi:error] [pid 11352:tid 11433] [client 20.203.254.37:9922] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:57.626319 2026] [proxy_fcgi:error] [pid 11351:tid 11405] [client 20.203.254.37:9899] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:57.697275 2026] [proxy_fcgi:error] [pid 11352:tid 11419] [client 20.203.254.37:9922] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:57.867888 2026] [proxy_fcgi:error] [pid 11351:tid 11398] [client 20.203.254.37:9899] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:57.938747 2026] [proxy_fcgi:error] [pid 11352:tid 11418] [client 20.203.254.37:9922] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:58.108993 2026] [proxy_fcgi:error] [pid 11351:tid 11400] [client 20.203.254.37:9899] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:58.179684 2026] [proxy_fcgi:error] [pid 11352:tid 11426] [client 20.203.254.37:9922] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:58.352698 2026] [proxy_fcgi:error] [pid 11351:tid 11387] [client 20.203.254.37:9899] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:58.419773 2026] [proxy_fcgi:error] [pid 11352:tid 11424] [client 20.203.254.37:9922] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:58.594342 2026] [proxy_fcgi:error] [pid 11351:tid 11404] [client 20.203.254.37:9899] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:56:58.656593 2026] [:error] [pid 11352:tid 11436] [client 20.203.254.37:9922] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa2ml10mhMSfJ7ir_7AQAAAJY"]
[Tue Apr 21 00:56:58.831055 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9899] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZa2gN8Z1-vktaI_tOAqgAAAFM"]
[Tue Apr 21 00:56:59.130460 2026] [:error] [pid 6928:tid 6940] [client 20.203.254.37:10012] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa2x3y7MHq1iB0qYrhkwAAAUo"]
[Tue Apr 21 00:56:59.309347 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:9990] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZa28gko5iFiE8YoyQqkwAAAZQ"]
[Tue Apr 21 00:56:59.605823 2026] [:error] [pid 42014:tid 42026] [client 20.203.254.37:10018] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa28ek-00-ZI0f1NqluAAAAQo"]
[Tue Apr 21 00:56:59.786035 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9926] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZa2wN8Z1-vktaI_tOArQAAAEI"]
[Tue Apr 21 00:57:00.087787 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:9938] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa3P4EoMBgOJuJnT0VNgAAAA4"]
[Tue Apr 21 00:57:00.271393 2026] [:error] [pid 6928:tid 6934] [client 20.203.254.37:9880] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZa3B3y7MHq1iB0qYrhlQAAAUQ"]
[Tue Apr 21 00:57:00.564100 2026] [:error] [pid 6928:tid 6938] [client 20.203.254.37:9944] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa3B3y7MHq1iB0qYrhlgAAAUg"]
[Tue Apr 21 00:57:00.744686 2026] [:error] [pid 6928:tid 6951] [client 20.203.254.37:9965] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZa3B3y7MHq1iB0qYrhlwAAAVU"]
[Tue Apr 21 00:57:01.036362 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9954] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa3f4EoMBgOJuJnT0VOQAAAAk"]
[Tue Apr 21 00:57:01.217354 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:10013] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZa3f4EoMBgOJuJnT0VOgAAAAg"]
[Tue Apr 21 00:57:01.518576 2026] [:error] [pid 42014:tid 42018] [client 20.203.254.37:10066] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa3cek-00-ZI0f1NqlwAAAAQI"]
[Tue Apr 21 00:57:01.692405 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:10034] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZa3QN8Z1-vktaI_tOAsAAAAFg"]
[Tue Apr 21 00:57:01.996636 2026] [:error] [pid 11494:tid 11517] [client 20.203.254.37:9940] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa3cgko5iFiE8YoyQqmQAAAZU"]
[Tue Apr 21 00:57:02.167313 2026] [:error] [pid 11351:tid 11398] [client 20.203.254.37:9956] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZa3gN8Z1-vktaI_tOAtAAAAEs"]
[Tue Apr 21 00:57:02.475126 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9997] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa3gN8Z1-vktaI_tOAtwAAAEE"]
[Tue Apr 21 00:57:02.653799 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:10046] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa3v4EoMBgOJuJnT0VPgAAABE"]
[Tue Apr 21 00:57:02.950378 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:10040] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa3gN8Z1-vktaI_tOAugAAAEQ"]
[Tue Apr 21 00:57:03.133664 2026] [:error] [pid 11494:tid 11505] [client 20.203.254.37:10032] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa38gko5iFiE8YoyQqmgAAAYk"]
[Tue Apr 21 00:57:03.428127 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:9927] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa3_4EoMBgOJuJnT0VQQAAABg"]
[Tue Apr 21 00:57:03.608426 2026] [:error] [pid 11494:tid 11498] [client 20.203.254.37:10024] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa38gko5iFiE8YoyQqnQAAAYI"]
[Tue Apr 21 00:57:03.904015 2026] [:error] [pid 11494:tid 11513] [client 20.203.254.37:9975] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa38gko5iFiE8YoyQqoQAAAZE"]
[Tue Apr 21 00:57:04.079756 2026] [:error] [pid 11494:tid 11520] [client 20.203.254.37:9870] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZa4Mgko5iFiE8YoyQqowAAAZg"]
[Tue Apr 21 00:57:04.380037 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:9949] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa4Mgko5iFiE8YoyQqpgAAAYw"]
[Tue Apr 21 00:57:04.550424 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9941] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa4Mgko5iFiE8YoyQqqAAAAYE"]
[Tue Apr 21 00:57:04.851760 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:9999] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa4AN8Z1-vktaI_tOAvQAAAFg"]
[Tue Apr 21 00:57:05.022285 2026] [:error] [pid 42014:tid 42019] [client 20.203.254.37:10111] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa4cek-00-ZI0f1NqlyAAAAQM"]
[Tue Apr 21 00:57:05.324977 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:10029] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa4f4EoMBgOJuJnT0VQwAAAAU"]
[Tue Apr 21 00:57:05.497866 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9921] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa4f4EoMBgOJuJnT0VRAAAABA"]
[Tue Apr 21 00:57:05.796458 2026] [:error] [pid 11350:tid 11371] [client 20.203.254.37:9968] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa4f4EoMBgOJuJnT0VSAAAAAw"]
[Tue Apr 21 00:57:05.971825 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:10019] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZa4QN8Z1-vktaI_tOAvwAAAFQ"]
[Tue Apr 21 00:57:06.271310 2026] [:error] [pid 11352:tid 11428] [client 20.203.254.37:10090] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa4ml10mhMSfJ7ir_7BwAAAI4"]
[Tue Apr 21 00:57:06.445539 2026] [:error] [pid 11352:tid 11415] [client 20.203.254.37:9945] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa4ml10mhMSfJ7ir_7CQAAAIE"]
[Tue Apr 21 00:57:06.743668 2026] [:error] [pid 11352:tid 11430] [client 20.203.254.37:9974] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa4ml10mhMSfJ7ir_7CwAAAJA"]
[Tue Apr 21 00:57:06.918486 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9863] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa4v4EoMBgOJuJnT0VSwAAABE"]
[Tue Apr 21 00:57:07.221291 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:10026] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa4_4EoMBgOJuJnT0VTgAAAAE"]
[Tue Apr 21 00:57:07.400604 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9955] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa4wN8Z1-vktaI_tOAwgAAAE0"]
[Tue Apr 21 00:57:07.701815 2026] [:error] [pid 11494:tid 11513] [client 20.203.254.37:9895] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa48gko5iFiE8YoyQqrgAAAZE"]
[Tue Apr 21 00:57:07.876770 2026] [:error] [pid 11350:tid 11379] [client 20.203.254.37:10031] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZa4_4EoMBgOJuJnT0VVwAAABQ"]
[Tue Apr 21 00:57:08.179643 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9946] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa5P4EoMBgOJuJnT0VWQAAAAo"]
[Tue Apr 21 00:57:08.350593 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9951] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa5Mgko5iFiE8YoyQqsgAAAY8"]
[Tue Apr 21 00:57:08.669017 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:10050] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa5P4EoMBgOJuJnT0VWwAAAAs"]
[Tue Apr 21 00:57:08.832648 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9960] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa5P4EoMBgOJuJnT0VXAAAAAU"]
[Tue Apr 21 00:57:09.149104 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9987] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa5QN8Z1-vktaI_tOAxAAAAFM"]
[Tue Apr 21 00:57:09.314436 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:10043] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa5QN8Z1-vktaI_tOAxQAAAFc"]
[Tue Apr 21 00:57:09.626452 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9862] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa5f4EoMBgOJuJnT0VZgAAAAo"]
[Tue Apr 21 00:57:09.804985 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:10044] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZa5QN8Z1-vktaI_tOAyQAAAEY"]
[Tue Apr 21 00:57:10.105435 2026] [:error] [pid 11350:tid 11366] [client 20.203.254.37:9906] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa5v4EoMBgOJuJnT0VawAAAAc"]
[Tue Apr 21 00:57:10.290395 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9970] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa5v4EoMBgOJuJnT0VbwAAAA0"]
[Tue Apr 21 00:57:10.578104 2026] [:error] [pid 11441:tid 11465] [client 20.203.254.37:9850] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa5sixByFUvmh319DVawAAANY"]
[Tue Apr 21 00:57:10.765603 2026] [:error] [pid 42014:tid 42035] [client 20.203.254.37:9934] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa5sek-00-ZI0f1NqlzAAAARM"]
[Tue Apr 21 00:57:11.056775 2026] [:error] [pid 6928:tid 6931] [client 20.203.254.37:10041] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa5x3y7MHq1iB0qYrhmwAAAUE"]
[Tue Apr 21 00:57:11.248889 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9919] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa5_4EoMBgOJuJnT0VdAAAABc"]
[Tue Apr 21 00:57:11.533548 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9978] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa5wN8Z1-vktaI_tOAzQAAAEI"]
[Tue Apr 21 00:57:11.725006 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9982] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZa5_4EoMBgOJuJnT0VfQAAAAU"]
[Tue Apr 21 00:57:12.005948 2026] [:error] [pid 11351:tid 11398] [client 20.203.254.37:9876] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa6AN8Z1-vktaI_tOAzwAAAEs"]
[Tue Apr 21 00:57:12.209554 2026] [:error] [pid 6928:tid 6947] [client 20.203.254.37:9976] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa6B3y7MHq1iB0qYrhnQAAAVE"]
[Tue Apr 21 00:57:12.484226 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9979] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa6AN8Z1-vktaI_tOA0QAAAEU"]
[Tue Apr 21 00:57:12.681064 2026] [:error] [pid 42014:tid 42020] [client 20.203.254.37:9983] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa6Mek-00-ZI0f1NqlzQAAAQQ"]
[Tue Apr 21 00:57:12.963321 2026] [:error] [pid 6928:tid 6941] [client 20.203.254.37:9972] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa6B3y7MHq1iB0qYrhoQAAAUs"]
[Tue Apr 21 00:57:13.153224 2026] [:error] [pid 6928:tid 6953] [client 20.203.254.37:10028] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa6R3y7MHq1iB0qYrhogAAAVc"]
[Tue Apr 21 00:57:13.434809 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9868] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa6QN8Z1-vktaI_tOA1gAAAFM"]
[Tue Apr 21 00:57:13.634762 2026] [:error] [pid 11441:tid 11458] [client 20.203.254.37:9928] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZa6cixByFUvmh319DVbQAAAM8"]
[Tue Apr 21 00:57:13.907946 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9892] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa6cgko5iFiE8YoyQquQAAAY8"]
[Tue Apr 21 00:57:14.111649 2026] [:error] [pid 11352:tid 11419] [client 20.203.254.37:9947] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa6ml10mhMSfJ7ir_7DgAAAIU"]
[Tue Apr 21 00:57:14.386938 2026] [:error] [pid 11494:tid 11500] [client 20.203.254.37:9891] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa6sgko5iFiE8YoyQquwAAAYQ"]
[Tue Apr 21 00:57:14.598541 2026] [:error] [pid 11494:tid 11505] [client 20.203.254.37:10035] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa6sgko5iFiE8YoyQqvwAAAYk"]
[Tue Apr 21 00:57:14.879722 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9902] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa6v4EoMBgOJuJnT0VhQAAAA0"]
[Tue Apr 21 00:57:15.072767 2026] [:error] [pid 11350:tid 11366] [client 20.203.254.37:9875] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa6_4EoMBgOJuJnT0ViAAAAAc"]
[Tue Apr 21 00:57:15.352169 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9966] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa6_4EoMBgOJuJnT0ViQAAABM"]
[Tue Apr 21 00:57:15.545051 2026] [:error] [pid 11494:tid 11499] [client 20.203.254.37:9961] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZa68gko5iFiE8YoyQqwgAAAYM"]
[Tue Apr 21 00:57:15.824669 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:9860] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa6_4EoMBgOJuJnT0VjAAAABg"]
[Tue Apr 21 00:57:16.016552 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:9872] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa7AN8Z1-vktaI_tOA3QAAAEo"]
[Tue Apr 21 00:57:16.298840 2026] [:error] [pid 11351:tid 11398] [client 20.203.254.37:9856] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa7AN8Z1-vktaI_tOA4AAAAEs"]
[Tue Apr 21 00:57:16.488849 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9866] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa7AN8Z1-vktaI_tOA4gAAAEU"]
[Tue Apr 21 00:57:16.783039 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:9859] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa7AN8Z1-vktaI_tOA5QAAAFU"]
[Tue Apr 21 00:57:16.989153 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9898] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa7AN8Z1-vktaI_tOA5wAAAEA"]
[Tue Apr 21 00:57:17.261314 2026] [:error] [pid 6928:tid 6944] [client 20.203.254.37:9881] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa7R3y7MHq1iB0qYrhowAAAU4"]
[Tue Apr 21 00:57:17.467046 2026] [:error] [pid 6928:tid 6934] [client 20.203.254.37:9937] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZa7R3y7MHq1iB0qYrhpQAAAUQ"]
[Tue Apr 21 00:57:17.733809 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:9824] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa7R3y7MHq1iB0qYrhqQAAAUw"]
[Tue Apr 21 00:57:17.956308 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9942] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa7QN8Z1-vktaI_tOA7gAAAEY"]
[Tue Apr 21 00:57:18.219892 2026] [:error] [pid 11494:tid 11501] [client 20.203.254.37:9977] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa7sgko5iFiE8YoyQqxQAAAYU"]
[Tue Apr 21 00:57:18.431695 2026] [:error] [pid 11441:tid 11453] [client 20.203.254.37:9908] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa7sixByFUvmh319DVcAAAAMo"]
[Tue Apr 21 00:57:18.692611 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:10062] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa7sgko5iFiE8YoyQqxwAAAYw"]
[Tue Apr 21 00:57:18.905748 2026] [:error] [pid 11494:tid 11502] [client 20.203.254.37:9952] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa7sgko5iFiE8YoyQqygAAAYY"]
[Tue Apr 21 00:57:19.233470 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9889] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa7wN8Z1-vktaI_tOA8AAAAEU"]
[Tue Apr 21 00:57:19.379741 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:9874] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZa7wN8Z1-vktaI_tOA8gAAAFU"]
[Tue Apr 21 00:57:19.714816 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9886] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa7wN8Z1-vktaI_tOA9AAAAEw"]
[Tue Apr 21 00:57:19.852606 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9981] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa7wN8Z1-vktaI_tOA9wAAAEE"]
[Tue Apr 21 00:57:20.188458 2026] [:error] [pid 6928:tid 6954] [client 20.203.254.37:9883] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa8B3y7MHq1iB0qYrhrwAAAVg"]
[Tue Apr 21 00:57:20.329905 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9884] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa8P4EoMBgOJuJnT0VjgAAAA0"]
[Tue Apr 21 00:57:20.672460 2026] [:error] [pid 42014:tid 42028] [client 20.203.254.37:9734] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa8Mek-00-ZI0f1Nql0wAAAQw"]
[Tue Apr 21 00:57:20.806609 2026] [:error] [pid 6928:tid 6949] [client 20.203.254.37:9800] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa8B3y7MHq1iB0qYrhtQAAAVM"]
[Tue Apr 21 00:57:21.160197 2026] [:error] [pid 6928:tid 6953] [client 20.203.254.37:9869] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa8R3y7MHq1iB0qYrhtwAAAVc"]
[Tue Apr 21 00:57:21.279702 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:9957] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZa8f4EoMBgOJuJnT0VkQAAAA4"]
[Tue Apr 21 00:57:21.643460 2026] [:error] [pid 11441:tid 11462] [client 20.203.254.37:10042] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa8cixByFUvmh319DVcgAAANM"]
[Tue Apr 21 00:57:21.749664 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9890] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa8f4EoMBgOJuJnT0VlQAAABc"]
[Tue Apr 21 00:57:22.124587 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:9815] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa8sgko5iFiE8YoyQqzwAAAY0"]
[Tue Apr 21 00:57:22.279948 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9806] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa8gN8Z1-vktaI_tOA_gAAAFQ"]
[Tue Apr 21 00:57:22.599452 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9885] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa8gN8Z1-vktaI_tOBAgAAAFM"]
[Tue Apr 21 00:57:22.754817 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:9833] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa8gN8Z1-vktaI_tOBBQAAAFA"]
[Tue Apr 21 00:57:23.085435 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9935] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa8wN8Z1-vktaI_tOBCQAAAFc"]
[Tue Apr 21 00:57:23.264679 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:9882] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aeZa8wN8Z1-vktaI_tOBDAAAAEM"]
[Tue Apr 21 00:57:23.596804 2026] [:error] [pid 11351:tid 11402] [client 20.203.254.37:9810] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa8wN8Z1-vktaI_tOBEQAAAE8"]
[Tue Apr 21 00:57:23.755113 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:9931] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa8wN8Z1-vktaI_tOBEwAAAE4"]
[Tue Apr 21 00:57:24.104651 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9967] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa9AN8Z1-vktaI_tOBFAAAAEY"]
[Tue Apr 21 00:57:24.292562 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9857] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa9AN8Z1-vktaI_tOBFgAAAEE"]
[Tue Apr 21 00:57:24.580920 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9920] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa9AN8Z1-vktaI_tOBGQAAAEU"]
[Tue Apr 21 00:57:24.763860 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9904] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa9AN8Z1-vktaI_tOBGwAAAFQ"]
[Tue Apr 21 00:57:25.080675 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:9809] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa9QN8Z1-vktaI_tOBHwAAAFI"]
[Tue Apr 21 00:57:25.242459 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:9917] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aeZa9f4EoMBgOJuJnT0VnAAAAAI"]
[Tue Apr 21 00:57:25.561089 2026] [:error] [pid 11352:tid 11426] [client 20.203.254.37:9903] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa9Wl10mhMSfJ7ir_7EQAAAIw"]
[Tue Apr 21 00:57:25.718561 2026] [:error] [pid 6928:tid 6937] [client 20.203.254.37:9854] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa9R3y7MHq1iB0qYrhuwAAAUc"]
[Tue Apr 21 00:57:26.085045 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:10031] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa9v4EoMBgOJuJnT0VnQAAAAk"]
[Tue Apr 21 00:57:26.203536 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:9864] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa9v4EoMBgOJuJnT0VngAAAAs"]
[Tue Apr 21 00:57:26.596265 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9829] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa9v4EoMBgOJuJnT0VoAAAAAA"]
[Tue Apr 21 00:57:26.688885 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:9878] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa9sgko5iFiE8YoyQq1wAAAZI"]
[Tue Apr 21 00:57:27.079500 2026] [:error] [pid 11350:tid 11371] [client 20.203.254.37:9888] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa9_4EoMBgOJuJnT0VowAAAAw"]
[Tue Apr 21 00:57:27.170781 2026] [:error] [pid 11494:tid 11499] [client 20.203.254.37:9830] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aeZa98gko5iFiE8YoyQq2QAAAYM"]
[Tue Apr 21 00:57:27.556786 2026] [:error] [pid 6928:tid 6932] [client 20.203.254.37:9971] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa9x3y7MHq1iB0qYrhvAAAAUI"]
[Tue Apr 21 00:57:27.646407 2026] [:error] [pid 11350:tid 11380] [client 20.203.254.37:9911] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa9_4EoMBgOJuJnT0VqAAAABU"]
[Tue Apr 21 00:57:28.034876 2026] [:error] [pid 11441:tid 11454] [client 20.203.254.37:9910] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa-MixByFUvmh319DVdAAAAMs"]
[Tue Apr 21 00:57:28.124768 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9838] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa-P4EoMBgOJuJnT0VqQAAAAQ"]
[Tue Apr 21 00:57:28.515924 2026] [:error] [pid 11352:tid 11416] [client 20.203.254.37:9795] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa-Gl10mhMSfJ7ir_7FwAAAII"]
[Tue Apr 21 00:57:28.600154 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9953] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa-P4EoMBgOJuJnT0VqgAAAAU"]
[Tue Apr 21 00:57:28.990014 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:9877] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa-P4EoMBgOJuJnT0VrQAAAAI"]
[Tue Apr 21 00:57:29.078364 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9907] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/6.php"] [unique_id "aeZa-QN8Z1-vktaI_tOBJQAAAFQ"]
[Tue Apr 21 00:57:29.481436 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:10047] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa-f4EoMBgOJuJnT0VrwAAABg"]
[Tue Apr 21 00:57:29.556334 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9879] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa-f4EoMBgOJuJnT0VsAAAAAk"]
[Tue Apr 21 00:57:29.953826 2026] [:error] [pid 11350:tid 11371] [client 20.203.254.37:9805] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa-f4EoMBgOJuJnT0VtQAAAAw"]
[Tue Apr 21 00:57:30.029204 2026] [:error] [pid 11494:tid 11507] [client 20.203.254.37:9969] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa-sgko5iFiE8YoyQq5wAAAYs"]
[Tue Apr 21 00:57:30.443053 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9973] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa-gN8Z1-vktaI_tOBLAAAAEE"]
[Tue Apr 21 00:57:30.511741 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:9933] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa-gN8Z1-vktaI_tOBLQAAAFU"]
[Tue Apr 21 00:57:30.915167 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:9858] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa-gN8Z1-vktaI_tOBNAAAAFE"]
[Tue Apr 21 00:57:30.985788 2026] [:error] [pid 42014:tid 42026] [client 20.203.254.37:9731] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/9.php"] [unique_id "aeZa-sek-00-ZI0f1Nql2QAAAQo"]
[Tue Apr 21 00:57:31.392326 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9897] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZa-wN8Z1-vktaI_tOBOgAAAEY"]
[Tue Apr 21 00:57:31.481809 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:9793] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa-wN8Z1-vktaI_tOBOwAAAEc"]
[Tue Apr 21 00:57:31.886143 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:9840] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZa-wN8Z1-vktaI_tOBQQAAAEo"]
[Tue Apr 21 00:57:31.964937 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9916] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa-wN8Z1-vktaI_tOBQwAAAEQ"]
[Tue Apr 21 00:57:32.372162 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9797] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZa_AN8Z1-vktaI_tOBSQAAAEA"]
[Tue Apr 21 00:57:32.456658 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9794] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa_AN8Z1-vktaI_tOBSgAAAEw"]
[Tue Apr 21 00:57:32.848107 2026] [:error] [pid 6928:tid 6949] [client 20.203.254.37:9796] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZa_B3y7MHq1iB0qYrhwAAAAVM"]
[Tue Apr 21 00:57:32.939218 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9783] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/10.php"] [unique_id "aeZa_P4EoMBgOJuJnT0VvgAAAAo"]
[Tue Apr 21 00:57:33.332728 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9826] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZa_QN8Z1-vktaI_tOBUAAAAFQ"]
[Tue Apr 21 00:57:33.416372 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:9801] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa_f4EoMBgOJuJnT0VwgAAABg"]
[Tue Apr 21 00:57:33.806608 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9792] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZa_QN8Z1-vktaI_tOBVwAAAFM"]
[Tue Apr 21 00:57:33.891597 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:10006] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa_QN8Z1-vktaI_tOBWAAAAE0"]
[Tue Apr 21 00:57:34.285297 2026] [:error] [pid 11494:tid 11496] [client 20.203.254.37:9900] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZa_sgko5iFiE8YoyQq-wAAAYA"]
[Tue Apr 21 00:57:34.376666 2026] [:error] [pid 11441:tid 11465] [client 20.203.254.37:9841] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa_sixByFUvmh319DVegAAANY"]
[Tue Apr 21 00:57:34.757026 2026] [:error] [pid 11350:tid 11371] [client 20.203.254.37:9748] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZa_v4EoMBgOJuJnT0VxgAAAAw"]
[Tue Apr 21 00:57:34.856109 2026] [:error] [pid 6928:tid 6950] [client 20.203.254.37:9827] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aeZa_h3y7MHq1iB0qYrhwwAAAVQ"]
[Tue Apr 21 00:57:35.232112 2026] [:error] [pid 11352:tid 11419] [client 20.203.254.37:9808] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZa_2l10mhMSfJ7ir_7HAAAAIU"]
[Tue Apr 21 00:57:35.330318 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:9865] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZa__4EoMBgOJuJnT0VyAAAAA4"]
[Tue Apr 21 00:57:35.716623 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:9752] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZa__4EoMBgOJuJnT0VygAAAAs"]
[Tue Apr 21 00:57:35.809747 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9804] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZa__4EoMBgOJuJnT0VzAAAABA"]
[Tue Apr 21 00:57:36.196453 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:9802] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZbAAN8Z1-vktaI_tOBaAAAAFg"]
[Tue Apr 21 00:57:36.287619 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:9871] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZbAAN8Z1-vktaI_tOBaQAAAFE"]
[Tue Apr 21 00:57:36.693939 2026] [:error] [pid 6928:tid 6940] [client 20.203.254.37:9962] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZbAB3y7MHq1iB0qYrhxgAAAUo"]
[Tue Apr 21 00:57:36.760699 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9776] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZbAAN8Z1-vktaI_tOBbQAAAEY"]
[Tue Apr 21 00:57:37.166637 2026] [:error] [pid 11352:tid 11436] [client 20.203.254.37:9777] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbAWl10mhMSfJ7ir_7IQAAAJY"]
[Tue Apr 21 00:57:37.240156 2026] [:error] [pid 6928:tid 6934] [client 20.203.254.37:9837] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZbAR3y7MHq1iB0qYrhxwAAAUQ"]
[Tue Apr 21 00:57:37.638973 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:9741] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbAR3y7MHq1iB0qYrhygAAAUw"]
[Tue Apr 21 00:57:37.713458 2026] [:error] [pid 42014:tid 42034] [client 20.203.254.37:9813] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZbAcek-00-ZI0f1Nql6AAAARI"]
[Tue Apr 21 00:57:38.121277 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9799] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbAv4EoMBgOJuJnT0V1AAAAAk"]
[Tue Apr 21 00:57:38.189000 2026] [:error] [pid 42014:tid 42025] [client 20.203.254.37:9822] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZbAsek-00-ZI0f1Nql6gAAAQk"]
[Tue Apr 21 00:57:38.596821 2026] [:error] [pid 11494:tid 11507] [client 20.203.254.37:9828] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbAsgko5iFiE8YoyQrBAAAAYs"]
[Tue Apr 21 00:57:38.671522 2026] [:error] [pid 11494:tid 11517] [client 20.203.254.37:9733] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35_S.php"] [unique_id "aeZbAsgko5iFiE8YoyQrBQAAAZU"]
[Tue Apr 21 00:57:39.071914 2026] [:error] [pid 11441:tid 11463] [client 20.203.254.37:9839] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbA8ixByFUvmh319DVewAAANQ"]
[Tue Apr 21 00:57:39.146328 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:9843] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZbAwN8Z1-vktaI_tOBdgAAAFA"]
[Tue Apr 21 00:57:39.549572 2026] [:error] [pid 11441:tid 11448] [client 20.203.254.37:9867] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbA8ixByFUvmh319DVfQAAAMU"]
[Tue Apr 21 00:57:39.624725 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9852] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZbAwN8Z1-vktaI_tOBdwAAAEE"]
[Tue Apr 21 00:57:40.030559 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9819] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbBAN8Z1-vktaI_tOBewAAAFc"]
[Tue Apr 21 00:57:40.096474 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9915] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZbBAN8Z1-vktaI_tOBfAAAAEw"]
[Tue Apr 21 00:57:40.507151 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:9749] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbBAN8Z1-vktaI_tOBgAAAAE4"]
[Tue Apr 21 00:57:40.575599 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9692] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aeZbBAN8Z1-vktaI_tOBgQAAAEQ"]
[Tue Apr 21 00:57:40.978740 2026] [:error] [pid 11441:tid 11443] [client 20.203.254.37:9812] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbBMixByFUvmh319DVfwAAAMA"]
[Tue Apr 21 00:57:41.055620 2026] [:error] [pid 11352:tid 11431] [client 20.203.254.37:9791] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbBWl10mhMSfJ7ir_7KwAAAJE"]
[Tue Apr 21 00:57:41.456274 2026] [:error] [pid 11494:tid 11505] [client 20.203.254.37:9845] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbBcgko5iFiE8YoyQrCQAAAYk"]
[Tue Apr 21 00:57:41.557052 2026] [:error] [pid 6928:tid 6941] [client 20.203.254.37:10143] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbBR3y7MHq1iB0qYrh1AAAAUs"]
[Tue Apr 21 00:57:41.929405 2026] [:error] [pid 11350:tid 11379] [client 20.203.254.37:9821] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbBf4EoMBgOJuJnT0V2AAAABQ"]
[Tue Apr 21 00:57:42.035318 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9761] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbBv4EoMBgOJuJnT0V2wAAAA0"]
[Tue Apr 21 00:57:42.408691 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9887] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbBv4EoMBgOJuJnT0V3AAAABc"]
[Tue Apr 21 00:57:42.517636 2026] [:error] [pid 11494:tid 11500] [client 20.203.254.37:9832] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZbBsgko5iFiE8YoyQrDwAAAYQ"]
[Tue Apr 21 00:57:42.892084 2026] [:error] [pid 42014:tid 42022] [client 20.203.254.37:9790] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbBsek-00-ZI0f1Nql7QAAAQY"]
[Tue Apr 21 00:57:43.043031 2026] [:error] [pid 11494:tid 11501] [client 20.203.254.37:9691] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbB8gko5iFiE8YoyQrEQAAAYU"]
[Tue Apr 21 00:57:43.365868 2026] [:error] [pid 11441:tid 11449] [client 20.203.254.37:9851] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbB8ixByFUvmh319DVhwAAAMY"]
[Tue Apr 21 00:57:43.519793 2026] [:error] [pid 11494:tid 11498] [client 20.203.254.37:9740] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbB8gko5iFiE8YoyQrFgAAAYI"]
[Tue Apr 21 00:57:43.842053 2026] [:error] [pid 11441:tid 11465] [client 20.203.254.37:9816] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbB8ixByFUvmh319DVigAAANY"]
[Tue Apr 21 00:57:44.002436 2026] [:error] [pid 11494:tid 11510] [client 20.203.254.37:9742] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbCMgko5iFiE8YoyQrGAAAAY4"]
[Tue Apr 21 00:57:44.321067 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:9738] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbCMgko5iFiE8YoyQrGQAAAY0"]
[Tue Apr 21 00:57:44.478510 2026] [:error] [pid 11441:tid 11459] [client 20.203.254.37:9694] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZbCMixByFUvmh319DVjgAAANA"]
[Tue Apr 21 00:57:44.793089 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9736] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbCMgko5iFiE8YoyQrHAAAAY8"]
[Tue Apr 21 00:57:44.955096 2026] [:error] [pid 6928:tid 6940] [client 20.203.254.37:9764] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbCB3y7MHq1iB0qYrh1wAAAUo"]
[Tue Apr 21 00:57:45.267024 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:9762] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbCcgko5iFiE8YoyQrHQAAAZQ"]
[Tue Apr 21 00:57:45.427689 2026] [:error] [pid 6928:tid 6945] [client 20.203.254.37:9763] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbCR3y7MHq1iB0qYrh2wAAAU8"]
[Tue Apr 21 00:57:45.749460 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:9894] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbCf4EoMBgOJuJnT0V3wAAAAI"]
[Tue Apr 21 00:57:45.900772 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9817] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbCcgko5iFiE8YoyQrHwAAAYE"]
[Tue Apr 21 00:57:46.220509 2026] [:error] [pid 11441:tid 11443] [client 20.203.254.37:9732] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbCsixByFUvmh319DVkQAAAMA"]
[Tue Apr 21 00:57:46.373555 2026] [:error] [pid 11441:tid 11444] [client 20.203.254.37:9905] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZbCsixByFUvmh319DVkwAAAME"]
[Tue Apr 21 00:57:46.692677 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9814] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbCsgko5iFiE8YoyQrIQAAAYc"]
[Tue Apr 21 00:57:46.847533 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9668] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbCgN8Z1-vktaI_tOBhgAAAEQ"]
[Tue Apr 21 00:57:47.167517 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:9896] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbC8gko5iFiE8YoyQrIwAAAZA"]
[Tue Apr 21 00:57:47.319297 2026] [:error] [pid 11494:tid 11519] [client 20.203.254.37:9849] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbC8gko5iFiE8YoyQrJQAAAZc"]
[Tue Apr 21 00:57:47.638330 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9789] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbCwN8Z1-vktaI_tOBjAAAAEA"]
[Tue Apr 21 00:57:47.793716 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9834] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbCwN8Z1-vktaI_tOBjwAAAFY"]
[Tue Apr 21 00:57:48.121518 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:9767] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbDAN8Z1-vktaI_tOBkgAAAFI"]
[Tue Apr 21 00:57:48.266874 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9708] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZbDAN8Z1-vktaI_tOBlAAAAEU"]
[Tue Apr 21 00:57:48.594172 2026] [:error] [pid 6928:tid 6943] [client 20.203.254.37:9831] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbDB3y7MHq1iB0qYrh3wAAAU0"]
[Tue Apr 21 00:57:48.749269 2026] [:error] [pid 11352:tid 11424] [client 20.203.254.37:9823] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbDGl10mhMSfJ7ir_7MgAAAIo"]
[Tue Apr 21 00:57:49.118007 2026] [:error] [pid 6928:tid 6947] [client 20.203.254.37:9766] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbDR3y7MHq1iB0qYrh4QAAAVE"]
[Tue Apr 21 00:57:49.220602 2026] [:error] [pid 42014:tid 42040] [client 20.203.254.37:9787] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbDcek-00-ZI0f1Nql7wAAARg"]
[Tue Apr 21 00:57:49.590429 2026] [:error] [pid 11494:tid 11507] [client 20.203.254.37:9914] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbDcgko5iFiE8YoyQrJwAAAYs"]
[Tue Apr 21 00:57:49.689588 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9811] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbDQN8Z1-vktaI_tOBnAAAAEQ"]
[Tue Apr 21 00:57:50.070022 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:9753] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbDgN8Z1-vktaI_tOBoAAAAEo"]
[Tue Apr 21 00:57:50.162668 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9666] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZbDgN8Z1-vktaI_tOBoQAAAEA"]
[Tue Apr 21 00:57:50.541355 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9747] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbDgN8Z1-vktaI_tOBpQAAAEg"]
[Tue Apr 21 00:57:50.635527 2026] [:error] [pid 11352:tid 11435] [client 20.203.254.37:9769] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbDml10mhMSfJ7ir_7MwAAAJU"]
[Tue Apr 21 00:57:51.016406 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9803] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbDwN8Z1-vktaI_tOBqgAAAEw"]
[Tue Apr 21 00:57:51.183996 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9673] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbDwN8Z1-vktaI_tOBrAAAAEI"]
[Tue Apr 21 00:57:51.492657 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9728] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbDwN8Z1-vktaI_tOBrwAAAFQ"]
[Tue Apr 21 00:57:51.658575 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9835] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbDwN8Z1-vktaI_tOBsQAAAEQ"]
[Tue Apr 21 00:57:51.972392 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9760] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbDwN8Z1-vktaI_tOBswAAAEA"]
[Tue Apr 21 00:57:52.148230 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9686] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZbEAN8Z1-vktaI_tOBtwAAAEg"]
[Tue Apr 21 00:57:52.444659 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9743] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbEAN8Z1-vktaI_tOBvAAAAEY"]
[Tue Apr 21 00:57:52.620276 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9671] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbEAN8Z1-vktaI_tOBvgAAAEI"]
[Tue Apr 21 00:57:52.930841 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:9836] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbEAN8Z1-vktaI_tOBwAAAAFU"]
[Tue Apr 21 00:57:53.090797 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:9848] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbEQN8Z1-vktaI_tOBwQAAAFE"]
[Tue Apr 21 00:57:53.404616 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:9688] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbEQN8Z1-vktaI_tOBxQAAAFg"]
[Tue Apr 21 00:57:53.562686 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9913] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbEQN8Z1-vktaI_tOByAAAAEA"]
[Tue Apr 21 00:57:53.877666 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9665] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbEQN8Z1-vktaI_tOBzQAAAEU"]
[Tue Apr 21 00:57:54.037675 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:9674] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZbEv4EoMBgOJuJnT0V4QAAAAg"]
[Tue Apr 21 00:57:54.351487 2026] [:error] [pid 11441:tid 11456] [client 20.203.254.37:9822] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZbEsixByFUvmh319DVmAAAAM0"]
[Tue Apr 21 00:57:54.516636 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:9807] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbEgN8Z1-vktaI_tOB1AAAAE4"]
[Tue Apr 21 00:57:54.824719 2026] [:error] [pid 11351:tid 11402] [client 20.203.254.37:9730] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZbEgN8Z1-vktaI_tOB1wAAAE8"]
[Tue Apr 21 00:57:54.989156 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9774] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbEgN8Z1-vktaI_tOB2gAAAFc"]
[Tue Apr 21 00:57:55.303605 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9719] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZbE_4EoMBgOJuJnT0V5AAAAA0"]
[Tue Apr 21 00:57:55.460789 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9765] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbEwN8Z1-vktaI_tOB3gAAAEY"]
[Tue Apr 21 00:57:55.775814 2026] [:error] [pid 11441:tid 11461] [client 20.203.254.37:9744] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZbE8ixByFUvmh319DVmgAAANI"]
[Tue Apr 21 00:57:55.933743 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:9729] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZbEwN8Z1-vktaI_tOB5AAAAE4"]
[Tue Apr 21 00:57:56.256024 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9735] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZbFAN8Z1-vktaI_tOB5wAAAFc"]
[Tue Apr 21 00:57:56.411425 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9844] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbFP4EoMBgOJuJnT0V5QAAABc"]
[Tue Apr 21 00:57:56.728124 2026] [:error] [pid 11352:tid 11436] [client 20.203.254.37:9842] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZbFGl10mhMSfJ7ir_7NgAAAJY"]
[Tue Apr 21 00:57:56.884091 2026] [:error] [pid 42014:tid 42033] [client 20.203.254.37:9818] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbFMek-00-ZI0f1Nql8wAAARE"]
[Tue Apr 21 00:57:57.213311 2026] [:error] [pid 11441:tid 11453] [client 20.203.254.37:9909] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZbFcixByFUvmh319DVnQAAAMo"]
[Tue Apr 21 00:57:57.431192 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9669] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbFcgko5iFiE8YoyQrKgAAAYc"]
[Tue Apr 21 00:57:57.689680 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:9682] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZbFcgko5iFiE8YoyQrLAAAAZA"]
[Tue Apr 21 00:57:57.905109 2026] [:error] [pid 11494:tid 11519] [client 20.203.254.37:9757] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZbFcgko5iFiE8YoyQrLgAAAZc"]
[Tue Apr 21 00:57:58.182080 2026] [proxy_fcgi:error] [pid 11350:tid 11360] [client 20.203.254.37:9720] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:58.382029 2026] [proxy_fcgi:error] [pid 11350:tid 11364] [client 20.203.254.37:9615] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:58.422977 2026] [proxy_fcgi:error] [pid 11350:tid 11374] [client 20.203.254.37:9720] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:58.622368 2026] [proxy_fcgi:error] [pid 11350:tid 11363] [client 20.203.254.37:9615] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:58.665548 2026] [proxy_fcgi:error] [pid 11350:tid 11361] [client 20.203.254.37:9720] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:58.862491 2026] [proxy_fcgi:error] [pid 11350:tid 11383] [client 20.203.254.37:9615] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:58.916073 2026] [proxy_fcgi:error] [pid 11350:tid 11377] [client 20.203.254.37:9720] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:59.105764 2026] [proxy_fcgi:error] [pid 11350:tid 11371] [client 20.203.254.37:9615] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:59.156012 2026] [proxy_fcgi:error] [pid 11350:tid 11376] [client 20.203.254.37:9720] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:59.349565 2026] [proxy_fcgi:error] [pid 11350:tid 11370] [client 20.203.254.37:9615] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:59.398534 2026] [proxy_fcgi:error] [pid 11350:tid 11367] [client 20.203.254.37:9720] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:57:59.586507 2026] [:error] [pid 11350:tid 11379] [client 20.203.254.37:9615] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZbF_4EoMBgOJuJnT0V-gAAABQ"]
[Tue Apr 21 00:57:59.635682 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9720] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbF_4EoMBgOJuJnT0V-wAAAAA"]
[Tue Apr 21 00:58:00.060161 2026] [:error] [pid 6928:tid 6945] [client 20.203.254.37:9681] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZbGB3y7MHq1iB0qYrh5gAAAU8"]
[Tue Apr 21 00:58:00.108161 2026] [:error] [pid 11494:tid 11515] [client 20.203.254.37:9709] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbGMgko5iFiE8YoyQrLwAAAZM"]
[Tue Apr 21 00:58:00.533841 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9770] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZbGAN8Z1-vktaI_tOB6wAAAEU"]
[Tue Apr 21 00:58:00.581473 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9608] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbGAN8Z1-vktaI_tOB7AAAAEY"]
[Tue Apr 21 00:58:01.011350 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:9853] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZbGf4EoMBgOJuJnT0WAAAAAAE"]
[Tue Apr 21 00:58:01.053514 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9758] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbGf4EoMBgOJuJnT0WAQAAAAU"]
[Tue Apr 21 00:58:01.484822 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:9705] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZbGQN8Z1-vktaI_tOB7wAAAE4"]
[Tue Apr 21 00:58:01.528670 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9846] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbGQN8Z1-vktaI_tOB8AAAAE0"]
[Tue Apr 21 00:58:01.955944 2026] [:error] [pid 11441:tid 11467] [client 20.203.254.37:9782] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZbGcixByFUvmh319DVoQAAANg"]
[Tue Apr 21 00:58:02.006231 2026] [:error] [pid 6928:tid 6938] [client 20.203.254.37:9786] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbGh3y7MHq1iB0qYrh6wAAAUg"]
[Tue Apr 21 00:58:02.433362 2026] [:error] [pid 11494:tid 11499] [client 20.203.254.37:9781] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZbGsgko5iFiE8YoyQrNAAAAYM"]
[Tue Apr 21 00:58:02.478752 2026] [:error] [pid 11352:tid 11429] [client 20.203.254.37:9667] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbGml10mhMSfJ7ir_7QAAAAI8"]
[Tue Apr 21 00:58:02.908626 2026] [:error] [pid 42014:tid 42024] [client 20.203.254.37:9600] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZbGsek-00-ZI0f1Nql_AAAAQg"]
[Tue Apr 21 00:58:02.954149 2026] [:error] [pid 42014:tid 42027] [client 20.203.254.37:9739] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbGsek-00-ZI0f1Nql_QAAAQs"]
[Tue Apr 21 00:58:03.381156 2026] [:error] [pid 42014:tid 42028] [client 20.203.254.37:9901] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeZbG8ek-00-ZI0f1NqmAAAAAQw"]
[Tue Apr 21 00:58:03.442499 2026] [:error] [pid 42014:tid 42017] [client 20.203.254.37:9873] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbG8ek-00-ZI0f1NqmAQAAAQE"]
[Tue Apr 21 00:58:03.854741 2026] [:error] [pid 11352:tid 11417] [client 20.203.254.37:9918] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeZbG2l10mhMSfJ7ir_7QgAAAIM"]
[Tue Apr 21 00:58:03.914843 2026] [:error] [pid 11441:tid 11451] [client 20.203.254.37:9693] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbG8ixByFUvmh319DVogAAAMg"]
[Tue Apr 21 00:58:04.329777 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9614] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeZbHP4EoMBgOJuJnT0WBwAAABA"]
[Tue Apr 21 00:58:04.386276 2026] [:error] [pid 42014:tid 42034] [client 20.203.254.37:9702] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbHMek-00-ZI0f1NqmBAAAARI"]
[Tue Apr 21 00:58:04.803845 2026] [:error] [pid 42014:tid 42025] [client 20.203.254.37:9646] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeZbHMek-00-ZI0f1NqmBwAAAQk"]
[Tue Apr 21 00:58:04.858766 2026] [:error] [pid 11441:tid 11465] [client 20.203.254.37:9771] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbHMixByFUvmh319DVowAAANY"]
[Tue Apr 21 00:58:05.277164 2026] [:error] [pid 11441:tid 11452] [client 20.203.254.37:9721] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbHcixByFUvmh319DVpAAAAMk"]
[Tue Apr 21 00:58:05.332188 2026] [:error] [pid 11352:tid 11433] [client 20.203.254.37:9606] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbHWl10mhMSfJ7ir_7RAAAAJM"]
[Tue Apr 21 00:58:05.749462 2026] [:error] [pid 11441:tid 11457] [client 20.203.254.37:9713] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbHcixByFUvmh319DVqAAAAM4"]
[Tue Apr 21 00:58:05.805035 2026] [:error] [pid 11441:tid 11446] [client 20.203.254.37:9696] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbHcixByFUvmh319DVqgAAAMM"]
[Tue Apr 21 00:58:06.220856 2026] [:error] [pid 11441:tid 11456] [client 20.203.254.37:9664] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbHsixByFUvmh319DVqwAAAM0"]
[Tue Apr 21 00:58:06.276422 2026] [:error] [pid 11441:tid 11443] [client 20.203.254.37:9701] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbHsixByFUvmh319DVrAAAAMA"]
[Tue Apr 21 00:58:06.693025 2026] [:error] [pid 11441:tid 11444] [client 20.203.254.37:9652] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aeZbHsixByFUvmh319DVsAAAAME"]
[Tue Apr 21 00:58:06.749801 2026] [:error] [pid 11441:tid 11445] [client 20.203.254.37:9642] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbHsixByFUvmh319DVsQAAAMI"]
[Tue Apr 21 00:58:07.166876 2026] [:error] [pid 6928:tid 6953] [client 20.203.254.37:9759] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbHx3y7MHq1iB0qYrh7wAAAVc"]
[Tue Apr 21 00:58:07.222796 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:9768] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbH8gko5iFiE8YoyQrNgAAAY0"]
[Tue Apr 21 00:58:07.643428 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9755] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbH_4EoMBgOJuJnT0WDgAAAAQ"]
[Tue Apr 21 00:58:07.697040 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9773] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbH8gko5iFiE8YoyQrOAAAAY8"]
[Tue Apr 21 00:58:08.115083 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:9604] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbIAN8Z1-vktaI_tOB9gAAAFA"]
[Tue Apr 21 00:58:08.168516 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9675] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbIAN8Z1-vktaI_tOB9wAAAEA"]
[Tue Apr 21 00:58:08.585413 2026] [:error] [pid 11441:tid 11466] [client 20.203.254.37:9609] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aeZbIMixByFUvmh319DVtQAAANc"]
[Tue Apr 21 00:58:08.641552 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9603] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbIP4EoMBgOJuJnT0WDwAAABE"]
[Tue Apr 21 00:58:09.056534 2026] [:error] [pid 11352:tid 11418] [client 20.203.254.37:9683] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbIWl10mhMSfJ7ir_7UgAAAIQ"]
[Tue Apr 21 00:58:09.116140 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:9699] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbIf4EoMBgOJuJnT0WEQAAAAs"]
[Tue Apr 21 00:58:09.533002 2026] [:error] [pid 11350:tid 11366] [client 20.203.254.37:9613] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbIf4EoMBgOJuJnT0WEgAAAAc"]
[Tue Apr 21 00:58:09.593588 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:9703] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbIf4EoMBgOJuJnT0WEwAAAAg"]
[Tue Apr 21 00:58:10.005330 2026] [:error] [pid 42014:tid 42033] [client 20.203.254.37:9775] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbIsek-00-ZI0f1NqmDQAAARE"]
[Tue Apr 21 00:58:10.064916 2026] [:error] [pid 11441:tid 11457] [client 20.203.254.37:9634] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbIsixByFUvmh319DVugAAAM4"]
[Tue Apr 21 00:58:10.483560 2026] [:error] [pid 11441:tid 11446] [client 20.203.254.37:9750] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aeZbIsixByFUvmh319DVuwAAAMM"]
[Tue Apr 21 00:58:10.535867 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9754] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbIgN8Z1-vktaI_tOB-gAAAEg"]
[Tue Apr 21 00:58:10.958086 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9778] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbIsgko5iFiE8YoyQrOgAAAYc"]
[Tue Apr 21 00:58:11.012184 2026] [:error] [pid 11350:tid 11362] [client 20.203.254.37:9678] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbI_4EoMBgOJuJnT0WGAAAAAM"]
[Tue Apr 21 00:58:11.429404 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9706] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbI_4EoMBgOJuJnT0WHAAAAAo"]
[Tue Apr 21 00:58:11.484905 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9772] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbI_4EoMBgOJuJnT0WHQAAAA8"]
[Tue Apr 21 00:58:11.901123 2026] [:error] [pid 6928:tid 6950] [client 20.203.254.37:9825] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbIx3y7MHq1iB0qYrh8AAAAVQ"]
[Tue Apr 21 00:58:11.956397 2026] [:error] [pid 11441:tid 11461] [client 20.203.254.37:9607] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbI8ixByFUvmh319DVwgAAANI"]
[Tue Apr 21 00:58:12.373335 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9700] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZbJP4EoMBgOJuJnT0WIwAAAAA"]
[Tue Apr 21 00:58:12.427250 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9912] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbJP4EoMBgOJuJnT0WJAAAAA0"]
[Tue Apr 21 00:58:12.856171 2026] [:error] [pid 11494:tid 11504] [client 20.203.254.37:9716] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbJMgko5iFiE8YoyQrPgAAAYg"]
[Tue Apr 21 00:58:12.901396 2026] [:error] [pid 6928:tid 6934] [client 20.203.254.37:9698] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbJB3y7MHq1iB0qYrh8wAAAUQ"]
[Tue Apr 21 00:58:13.327876 2026] [:error] [pid 11441:tid 11450] [client 20.203.254.37:9690] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbJcixByFUvmh319DVyQAAAMc"]
[Tue Apr 21 00:58:13.373362 2026] [:error] [pid 6928:tid 6935] [client 20.203.254.37:9855] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbJR3y7MHq1iB0qYrh9AAAAUU"]
[Tue Apr 21 00:58:13.799342 2026] [:error] [pid 42014:tid 42036] [client 20.203.254.37:9550] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbJcek-00-ZI0f1NqmEQAAARQ"]
[Tue Apr 21 00:58:13.845073 2026] [:error] [pid 42014:tid 42020] [client 20.203.254.37:9711] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbJcek-00-ZI0f1NqmEgAAAQQ"]
[Tue Apr 21 00:58:14.271940 2026] [:error] [pid 11441:tid 11444] [client 20.203.254.37:9648] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbJsixByFUvmh319DVzwAAAME"]
[Tue Apr 21 00:58:14.316540 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:9672] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbJsgko5iFiE8YoyQrSAAAAY0"]
[Tue Apr 21 00:58:14.748847 2026] [:error] [pid 11350:tid 11365] [client 20.203.254.37:9605] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbJv4EoMBgOJuJnT0WKAAAAAY"]
[Tue Apr 21 00:58:14.787754 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:9647] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbJsgko5iFiE8YoyQrSgAAAZI"]
[Tue Apr 21 00:58:15.220681 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9653] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbJwN8Z1-vktaI_tOB_wAAAFQ"]
[Tue Apr 21 00:58:15.258500 2026] [:error] [pid 6928:tid 6944] [client 20.203.254.37:9785] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbJx3y7MHq1iB0qYrh9QAAAU4"]
[Tue Apr 21 00:58:15.692800 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9780] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbJ8gko5iFiE8YoyQrUQAAAYE"]
[Tue Apr 21 00:58:15.735918 2026] [:error] [pid 11494:tid 11519] [client 20.203.254.37:9697] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbJ8gko5iFiE8YoyQrUgAAAZc"]
[Tue Apr 21 00:58:16.167492 2026] [:error] [pid 11350:tid 11362] [client 20.203.254.37:9737] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "aeZbKP4EoMBgOJuJnT0WLQAAAAM"]
[Tue Apr 21 00:58:16.207334 2026] [:error] [pid 11494:tid 11498] [client 20.203.254.37:9601] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbKMgko5iFiE8YoyQrVQAAAYI"]
[Tue Apr 21 00:58:16.639251 2026] [:error] [pid 42014:tid 42030] [client 20.203.254.37:9639] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbKMek-00-ZI0f1NqmEwAAAQ4"]
[Tue Apr 21 00:58:16.679397 2026] [:error] [pid 6928:tid 6945] [client 20.203.254.37:9658] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbKB3y7MHq1iB0qYrh9wAAAU8"]
[Tue Apr 21 00:58:17.114819 2026] [:error] [pid 6928:tid 6954] [client 20.203.254.37:9689] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbKR3y7MHq1iB0qYrh-AAAAVg"]
[Tue Apr 21 00:58:17.153994 2026] [:error] [pid 6928:tid 6937] [client 20.203.254.37:9746] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbKR3y7MHq1iB0qYrh-QAAAUc"]
[Tue Apr 21 00:58:17.586405 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9726] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbKf4EoMBgOJuJnT0WNQAAAAk"]
[Tue Apr 21 00:58:17.628123 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:9540] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbKf4EoMBgOJuJnT0WNgAAAA4"]
[Tue Apr 21 00:58:18.060311 2026] [:error] [pid 11494:tid 11515] [client 20.203.254.37:9635] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aeZbKsgko5iFiE8YoyQrZAAAAZM"]
[Tue Apr 21 00:58:18.103632 2026] [:error] [pid 11351:tid 11398] [client 20.203.254.37:9745] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbKgN8Z1-vktaI_tOCDAAAAEs"]
[Tue Apr 21 00:58:18.534199 2026] [:error] [pid 11494:tid 11506] [client 20.203.254.37:9649] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbKsgko5iFiE8YoyQrZwAAAYo"]
[Tue Apr 21 00:58:18.574996 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:9544] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbKsgko5iFiE8YoyQraQAAAZI"]
[Tue Apr 21 00:58:19.006084 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9725] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbK8gko5iFiE8YoyQrawAAAY8"]
[Tue Apr 21 00:58:19.045249 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:9679] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbK8gko5iFiE8YoyQrbAAAAZQ"]
[Tue Apr 21 00:58:19.478710 2026] [:error] [pid 42014:tid 42021] [client 20.203.254.37:9695] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbK8ek-00-ZI0f1NqmFQAAAQU"]
[Tue Apr 21 00:58:19.517379 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9557] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbK8gko5iFiE8YoyQrbwAAAYE"]
[Tue Apr 21 00:58:19.949984 2026] [:error] [pid 11352:tid 11435] [client 20.203.254.37:9610] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "aeZbK2l10mhMSfJ7ir_7XQAAAJU"]
[Tue Apr 21 00:58:19.992219 2026] [:error] [pid 11352:tid 11422] [client 20.203.254.37:9796] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbK2l10mhMSfJ7ir_7XgAAAIg"]
[Tue Apr 21 00:58:20.423508 2026] [:error] [pid 6928:tid 6932] [client 20.203.254.37:9622] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbLB3y7MHq1iB0qYrh_QAAAUI"]
[Tue Apr 21 00:58:20.468121 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9798] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbLP4EoMBgOJuJnT0WQAAAABA"]
[Tue Apr 21 00:58:20.897338 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9710] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbLAN8Z1-vktaI_tOCFQAAAEw"]
[Tue Apr 21 00:58:20.941875 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9704] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbLAN8Z1-vktaI_tOCFgAAAEE"]
[Tue Apr 21 00:58:21.370729 2026] [:error] [pid 6928:tid 6949] [client 20.203.254.37:9597] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbLR3y7MHq1iB0qYrh_wAAAVM"]
[Tue Apr 21 00:58:21.414660 2026] [:error] [pid 42014:tid 42031] [client 20.203.254.37:9756] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbLcek-00-ZI0f1NqmGgAAAQ8"]
[Tue Apr 21 00:58:21.842121 2026] [:error] [pid 42014:tid 42039] [client 20.203.254.37:9712] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aeZbLcek-00-ZI0f1NqmHgAAARc"]
[Tue Apr 21 00:58:21.888429 2026] [:error] [pid 11494:tid 11499] [client 20.203.254.37:9620] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbLcgko5iFiE8YoyQrcQAAAYM"]
[Tue Apr 21 00:58:22.314949 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9633] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbLsgko5iFiE8YoyQrcwAAAYc"]
[Tue Apr 21 00:58:22.365144 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:9631] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbLv4EoMBgOJuJnT0WQQAAAAI"]
[Tue Apr 21 00:58:22.786863 2026] [:error] [pid 11350:tid 11365] [client 20.203.254.37:9788] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbLv4EoMBgOJuJnT0WQgAAAAY"]
[Tue Apr 21 00:58:22.838197 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9632] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbLgN8Z1-vktaI_tOCHgAAAEA"]
[Tue Apr 21 00:58:23.278934 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9715] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbLwN8Z1-vktaI_tOCIAAAAFY"]
[Tue Apr 21 00:58:23.310738 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:9717] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbL_4EoMBgOJuJnT0WRgAAAAE"]
[Tue Apr 21 00:58:23.751538 2026] [:error] [pid 11494:tid 11501] [client 20.203.254.37:9541] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeZbL8gko5iFiE8YoyQreAAAAYU"]
[Tue Apr 21 00:58:23.784225 2026] [:error] [pid 11494:tid 11520] [client 20.203.254.37:9680] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbL8gko5iFiE8YoyQreQAAAZg"]
[Tue Apr 21 00:58:24.224066 2026] [:error] [pid 11441:tid 11450] [client 20.203.254.37:9564] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbMMixByFUvmh319DV1wAAAMc"]
[Tue Apr 21 00:58:24.257022 2026] [:error] [pid 11441:tid 11456] [client 20.203.254.37:9629] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbMMixByFUvmh319DV2AAAAM0"]
[Tue Apr 21 00:58:24.696533 2026] [:error] [pid 11352:tid 11425] [client 20.203.254.37:9684] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbMGl10mhMSfJ7ir_7YwAAAIs"]
[Tue Apr 21 00:58:24.727870 2026] [:error] [pid 11352:tid 11421] [client 20.203.254.37:9589] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbMGl10mhMSfJ7ir_7ZAAAAIc"]
[Tue Apr 21 00:58:25.169596 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9677] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbMQN8Z1-vktaI_tOCJQAAAFQ"]
[Tue Apr 21 00:58:25.199571 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9541] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbMf4EoMBgOJuJnT0WSgAAABA"]
[Tue Apr 21 00:58:25.643515 2026] [:error] [pid 11494:tid 11500] [client 20.203.254.37:9612] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZbMcgko5iFiE8YoyQrfgAAAYQ"]
[Tue Apr 21 00:58:25.670819 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9847] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbMcgko5iFiE8YoyQrfwAAAY8"]
[Tue Apr 21 00:58:26.120600 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9572] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbMgN8Z1-vktaI_tOCKAAAAEA"]
[Tue Apr 21 00:58:26.147226 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:9656] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbMgN8Z1-vktaI_tOCKQAAAFI"]
[Tue Apr 21 00:58:26.593250 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9636] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbMgN8Z1-vktaI_tOCLQAAAEQ"]
[Tue Apr 21 00:58:26.619890 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9559] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbMgN8Z1-vktaI_tOCLgAAAFc"]
[Tue Apr 21 00:58:27.064818 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9546] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbM8gko5iFiE8YoyQrgwAAAYc"]
[Tue Apr 21 00:58:27.092936 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:9964] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbM8gko5iFiE8YoyQrhAAAAYw"]
[Tue Apr 21 00:58:27.536932 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9638] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZbMwN8Z1-vktaI_tOCMwAAAEU"]
[Tue Apr 21 00:58:27.565457 2026] [:error] [pid 11352:tid 11430] [client 20.203.254.37:9567] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbM2l10mhMSfJ7ir_7ZgAAAJA"]
[Tue Apr 21 00:58:28.008683 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9624] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbNMgko5iFiE8YoyQrhgAAAYE"]
[Tue Apr 21 00:58:28.037078 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:9820] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbNMgko5iFiE8YoyQrhwAAAY0"]
[Tue Apr 21 00:58:28.480785 2026] [:error] [pid 11351:tid 11402] [client 20.203.254.37:9623] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbNAN8Z1-vktaI_tOCOAAAAE8"]
[Tue Apr 21 00:58:28.509415 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9587] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbNAN8Z1-vktaI_tOCOQAAAEI"]
[Tue Apr 21 00:58:28.953342 2026] [:error] [pid 11350:tid 11371] [client 20.203.254.37:9718] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbNP4EoMBgOJuJnT0WUwAAAAw"]
[Tue Apr 21 00:58:28.984143 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9779] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbNAN8Z1-vktaI_tOCOgAAAEA"]
[Tue Apr 21 00:58:29.429872 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9707] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbNQN8Z1-vktaI_tOCOwAAAEg"]
[Tue Apr 21 00:58:29.466980 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9592] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbNf4EoMBgOJuJnT0WVgAAAA8"]
[Tue Apr 21 00:58:29.902530 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:9536] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbNf4EoMBgOJuJnT0WWQAAAAs"]
[Tue Apr 21 00:58:29.940211 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9626] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbNf4EoMBgOJuJnT0WWgAAABA"]
[Tue Apr 21 00:58:30.382943 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:9444] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbNv4EoMBgOJuJnT0WXAAAAAI"]
[Tue Apr 21 00:58:30.412389 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9565] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbNv4EoMBgOJuJnT0WXQAAAAA"]
[Tue Apr 21 00:58:30.855440 2026] [:error] [pid 11352:tid 11433] [client 20.203.254.37:9727] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbNml10mhMSfJ7ir_7aQAAAJM"]
[Tue Apr 21 00:58:30.886086 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9751] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbNv4EoMBgOJuJnT0WYAAAAAo"]
[Tue Apr 21 00:58:31.326898 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9661] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZbNwN8Z1-vktaI_tOCQQAAAE0"]
[Tue Apr 21 00:58:31.363164 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9539] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbN_4EoMBgOJuJnT0WZQAAAAU"]
[Tue Apr 21 00:58:31.799303 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:9547] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbN_4EoMBgOJuJnT0WZwAAAAg"]
[Tue Apr 21 00:58:31.836403 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9616] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbN_4EoMBgOJuJnT0WaAAAAA8"]
[Tue Apr 21 00:58:32.282040 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:9545] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbOAN8Z1-vktaI_tOCRQAAAEo"]
[Tue Apr 21 00:58:32.307341 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9617] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbOAN8Z1-vktaI_tOCRgAAAEE"]
[Tue Apr 21 00:58:32.755139 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:9687] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbOAN8Z1-vktaI_tOCSQAAAFE"]
[Tue Apr 21 00:58:32.777982 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:9570] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbOAN8Z1-vktaI_tOCSgAAAEc"]
[Tue Apr 21 00:58:33.226769 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9625] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZbOQN8Z1-vktaI_tOCTAAAAEQ"]
[Tue Apr 21 00:58:33.251012 2026] [:error] [pid 11494:tid 11502] [client 20.203.254.37:9712] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbOcgko5iFiE8YoyQrjwAAAYY"]
[Tue Apr 21 00:58:33.698774 2026] [:error] [pid 42014:tid 42026] [client 20.203.254.37:9628] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbOcek-00-ZI0f1NqmIgAAAQo"]
[Tue Apr 21 00:58:33.722530 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:9555] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbOcgko5iFiE8YoyQrkAAAAZA"]
[Tue Apr 21 00:58:34.171336 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9504] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbOv4EoMBgOJuJnT0WbgAAAAA"]
[Tue Apr 21 00:58:34.194817 2026] [:error] [pid 11350:tid 11365] [client 20.203.254.37:9569] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbOv4EoMBgOJuJnT0WbwAAAAY"]
[Tue Apr 21 00:58:34.647586 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9621] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbOv4EoMBgOJuJnT0WcwAAAAU"]
[Tue Apr 21 00:58:34.667046 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9722] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbOv4EoMBgOJuJnT0WdAAAABc"]
[Tue Apr 21 00:58:35.118923 2026] [:error] [pid 11351:tid 11402] [client 20.203.254.37:9542] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZbOwN8Z1-vktaI_tOCUgAAAE8"]
[Tue Apr 21 00:58:35.139356 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9644] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbOwN8Z1-vktaI_tOCUwAAAEI"]
[Tue Apr 21 00:58:35.595663 2026] [:error] [pid 11441:tid 11448] [client 20.203.254.37:9594] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbO8ixByFUvmh319DV3gAAAMU"]
[Tue Apr 21 00:58:35.619402 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:9714] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbOwN8Z1-vktaI_tOCVAAAAFE"]
[Tue Apr 21 00:58:36.068173 2026] [:error] [pid 11350:tid 11379] [client 20.203.254.37:9578] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbPP4EoMBgOJuJnT0WeAAAABQ"]
[Tue Apr 21 00:58:36.090980 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:9640] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbPB3y7MHq1iB0qYriBAAAAUw"]
[Tue Apr 21 00:58:36.541138 2026] [:error] [pid 11494:tid 11505] [client 20.203.254.37:9670] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbPMgko5iFiE8YoyQrlgAAAYk"]
[Tue Apr 21 00:58:36.576335 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:9641] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbPAN8Z1-vktaI_tOCVwAAAFU"]
[Tue Apr 21 00:58:37.016960 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:9554] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZbPcgko5iFiE8YoyQrmQAAAZQ"]
[Tue Apr 21 00:58:37.051280 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:9476] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbPf4EoMBgOJuJnT0WegAAAAs"]
[Tue Apr 21 00:58:37.493616 2026] [:error] [pid 11350:tid 11365] [client 20.203.254.37:9663] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbPf4EoMBgOJuJnT0WewAAAAY"]
[Tue Apr 21 00:58:37.525209 2026] [:error] [pid 11494:tid 11504] [client 20.203.254.37:9650] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbPcgko5iFiE8YoyQrnAAAAYg"]
[Tue Apr 21 00:58:37.971128 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9585] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbPQN8Z1-vktaI_tOCWgAAAEU"]
[Tue Apr 21 00:58:38.002501 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9478] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbPgN8Z1-vktaI_tOCWwAAAE0"]
[Tue Apr 21 00:58:38.456046 2026] [:error] [pid 42014:tid 42017] [client 20.203.254.37:9543] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbPsek-00-ZI0f1NqmKwAAAQE"]
[Tue Apr 21 00:58:38.476507 2026] [:error] [pid 11441:tid 11464] [client 20.203.254.37:9655] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbPsixByFUvmh319DV4AAAANU"]
[Tue Apr 21 00:58:38.939633 2026] [:error] [pid 11441:tid 11465] [client 20.203.254.37:9490] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZbPsixByFUvmh319DV4QAAANY"]
[Tue Apr 21 00:58:38.949510 2026] [:error] [pid 42014:tid 42037] [client 20.203.254.37:9579] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbPsek-00-ZI0f1NqmLAAAARU"]
[Tue Apr 21 00:58:39.419910 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9724] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbP_4EoMBgOJuJnT0WgQAAABA"]
[Tue Apr 21 00:58:39.427577 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9552] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbPwN8Z1-vktaI_tOCXwAAAFc"]
[Tue Apr 21 00:58:39.891036 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9654] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbP_4EoMBgOJuJnT0WhgAAAAk"]
[Tue Apr 21 00:58:39.900718 2026] [:error] [pid 11352:tid 11419] [client 20.203.254.37:9619] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbP2l10mhMSfJ7ir_7bAAAAIU"]
[Tue Apr 21 00:58:40.362193 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:9558] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbQMgko5iFiE8YoyQrngAAAZA"]
[Tue Apr 21 00:58:40.371343 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9601] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbQMgko5iFiE8YoyQrnwAAAYE"]
[Tue Apr 21 00:58:40.833811 2026] [:error] [pid 6928:tid 6941] [client 20.203.254.37:9580] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZbQB3y7MHq1iB0qYriCgAAAUs"]
[Tue Apr 21 00:58:40.841310 2026] [:error] [pid 6928:tid 6931] [client 20.203.254.37:9651] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbQB3y7MHq1iB0qYriCwAAAUE"]
[Tue Apr 21 00:58:41.305584 2026] [:error] [pid 42014:tid 42034] [client 20.203.254.37:9573] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbQcek-00-ZI0f1NqmLgAAARI"]
[Tue Apr 21 00:58:41.316958 2026] [:error] [pid 42014:tid 42025] [client 20.203.254.37:9509] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbQcek-00-ZI0f1NqmLwAAAQk"]
[Tue Apr 21 00:58:41.777807 2026] [:error] [pid 11441:tid 11450] [client 20.203.254.37:9584] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbQcixByFUvmh319DV5gAAAMc"]
[Tue Apr 21 00:58:41.789282 2026] [:error] [pid 11441:tid 11456] [client 20.203.254.37:9561] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbQcixByFUvmh319DV5wAAAM0"]
[Tue Apr 21 00:58:42.249364 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9482] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbQv4EoMBgOJuJnT0WjwAAAA0"]
[Tue Apr 21 00:58:42.261965 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9630] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbQv4EoMBgOJuJnT0WkAAAABM"]
[Tue Apr 21 00:58:42.723141 2026] [:error] [pid 11350:tid 11370] [client 20.203.254.37:9659] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZbQv4EoMBgOJuJnT0WlQAAAAs"]
[Tue Apr 21 00:58:42.733919 2026] [:error] [pid 42014:tid 42036] [client 20.203.254.37:9481] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbQsek-00-ZI0f1NqmMwAAARQ"]
[Tue Apr 21 00:58:43.203346 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9487] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbQwN8Z1-vktaI_tOCZgAAAEU"]
[Tue Apr 21 00:58:43.211604 2026] [:error] [pid 11441:tid 11444] [client 20.203.254.37:9723] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbQ8ixByFUvmh319DV7AAAAME"]
[Tue Apr 21 00:58:43.684135 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9583] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbQ_4EoMBgOJuJnT0WmQAAAAU"]
[Tue Apr 21 00:58:43.694250 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9472] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbQ_4EoMBgOJuJnT0WmgAAAAo"]
[Tue Apr 21 00:58:44.156629 2026] [:error] [pid 6928:tid 6939] [client 20.203.254.37:9483] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbRB3y7MHq1iB0qYriEwAAAUk"]
[Tue Apr 21 00:58:44.165940 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9430] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbRP4EoMBgOJuJnT0WoAAAAA8"]
[Tue Apr 21 00:58:44.627925 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9784] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZbRAN8Z1-vktaI_tOCaQAAAFc"]
[Tue Apr 21 00:58:44.637682 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9611] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbRP4EoMBgOJuJnT0WogAAAA0"]
[Tue Apr 21 00:58:45.099629 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9548] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbRQN8Z1-vktaI_tOCbQAAAEY"]
[Tue Apr 21 00:58:45.109205 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:9503] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbRQN8Z1-vktaI_tOCbgAAAEM"]
[Tue Apr 21 00:58:45.571138 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:9489] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbRQN8Z1-vktaI_tOCcQAAAEc"]
[Tue Apr 21 00:58:45.579883 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9533] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbRQN8Z1-vktaI_tOCcgAAAEA"]
[Tue Apr 21 00:58:46.043644 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9548] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbRgN8Z1-vktaI_tOCdgAAAEQ"]
[Tue Apr 21 00:58:46.051676 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9551] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbRgN8Z1-vktaI_tOCdwAAAFY"]
[Tue Apr 21 00:58:46.515344 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9602] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZbRgN8Z1-vktaI_tOCegAAAFM"]
[Tue Apr 21 00:58:46.523713 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9549] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbRgN8Z1-vktaI_tOCewAAAEw"]
[Tue Apr 21 00:58:46.989847 2026] [:error] [pid 11352:tid 11434] [client 20.203.254.37:9576] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbRml10mhMSfJ7ir_7bgAAAJQ"]
[Tue Apr 21 00:58:46.997091 2026] [:error] [pid 11441:tid 11451] [client 20.203.254.37:9473] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbRsixByFUvmh319DV8AAAAMg"]
[Tue Apr 21 00:58:47.462292 2026] [:error] [pid 42014:tid 42027] [client 20.203.254.37:9963] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbR8ek-00-ZI0f1NqmOAAAAQs"]
[Tue Apr 21 00:58:47.469000 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:9645] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbRwN8Z1-vktaI_tOCfgAAAFI"]
[Tue Apr 21 00:58:47.933333 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:9657] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbRwN8Z1-vktaI_tOCggAAAFE"]
[Tue Apr 21 00:58:47.939785 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:9529] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbRwN8Z1-vktaI_tOChAAAAEc"]
[Tue Apr 21 00:58:48.407813 2026] [:error] [pid 42014:tid 42018] [client 20.203.254.37:9562] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZbSMek-00-ZI0f1NqmOQAAAQI"]
[Tue Apr 21 00:58:48.413867 2026] [:error] [pid 11352:tid 11428] [client 20.203.254.37:9410] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbSGl10mhMSfJ7ir_7cwAAAI4"]
[Tue Apr 21 00:58:48.880057 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9657] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbSP4EoMBgOJuJnT0WqgAAAAk"]
[Tue Apr 21 00:58:48.886016 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9577] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbSP4EoMBgOJuJnT0WqwAAAA8"]
[Tue Apr 21 00:58:49.359886 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9505] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbSQN8Z1-vktaI_tOCigAAAEw"]
[Tue Apr 21 00:58:49.359966 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9537] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbSf4EoMBgOJuJnT0WrgAAAA0"]
[Tue Apr 21 00:58:49.832186 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9571] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbSQN8Z1-vktaI_tOCiwAAAFc"]
[Tue Apr 21 00:58:49.832186 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9506] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbSf4EoMBgOJuJnT0WsgAAABE"]
[Tue Apr 21 00:58:50.306526 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9593] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbSsgko5iFiE8YoyQrpQAAAYc"]
[Tue Apr 21 00:58:50.306901 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:9599] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZbSsgko5iFiE8YoyQrpgAAAYw"]
[Tue Apr 21 00:58:50.778309 2026] [:error] [pid 11351:tid 11404] [client 20.203.254.37:9676] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbSgN8Z1-vktaI_tOCjQAAAFE"]
[Tue Apr 21 00:58:50.779010 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:9556] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbSgN8Z1-vktaI_tOCjgAAAEc"]
[Tue Apr 21 00:58:51.263395 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9477] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbSwN8Z1-vktaI_tOCkgAAAFY"]
[Tue Apr 21 00:58:51.264841 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9484] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbSwN8Z1-vktaI_tOCkwAAAEI"]
[Tue Apr 21 00:58:51.735408 2026] [:error] [pid 11441:tid 11460] [client 20.203.254.37:9485] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbS8ixByFUvmh319DV9gAAANE"]
[Tue Apr 21 00:58:51.736128 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:9685] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbS_4EoMBgOJuJnT0WvQAAAAE"]
[Tue Apr 21 00:58:52.211369 2026] [:error] [pid 11350:tid 11377] [client 20.203.254.37:9586] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbTP4EoMBgOJuJnT0WwAAAABI"]
[Tue Apr 21 00:58:52.213836 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9479] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZbTP4EoMBgOJuJnT0WwQAAABE"]
[Tue Apr 21 00:58:52.690709 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9525] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeZbTP4EoMBgOJuJnT0WxAAAABc"]
[Tue Apr 21 00:58:52.700441 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9475] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbTP4EoMBgOJuJnT0WxQAAABA"]
[Tue Apr 21 00:58:53.168269 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9595] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeZbTQN8Z1-vktaI_tOCmQAAAEA"]
[Tue Apr 21 00:58:53.193346 2026] [:error] [pid 11494:tid 11515] [client 20.203.254.37:9660] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbTcgko5iFiE8YoyQrqAAAAZM"]
[Tue Apr 21 00:58:53.664558 2026] [:error] [pid 11351:tid 11408] [client 20.203.254.37:9515] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeZbTQN8Z1-vktaI_tOCngAAAFU"]
[Tue Apr 21 00:58:53.686043 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9637] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbTcgko5iFiE8YoyQrqQAAAYE"]
[Tue Apr 21 00:58:54.145280 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9523] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeZbTgN8Z1-vktaI_tOCowAAAEU"]
[Tue Apr 21 00:58:54.191417 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:9488] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZbTgN8Z1-vktaI_tOCpAAAAEM"]
[Tue Apr 21 00:58:54.623329 2026] [:error] [pid 6928:tid 6944] [client 20.203.254.37:9566] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbTh3y7MHq1iB0qYriHgAAAU4"]
[Tue Apr 21 00:58:54.673547 2026] [:error] [pid 11351:tid 11397] [client 20.203.254.37:9530] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbTgN8Z1-vktaI_tOCpwAAAEo"]
[Tue Apr 21 00:58:55.100574 2026] [:error] [pid 11350:tid 11379] [client 20.203.254.37:9526] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbT_4EoMBgOJuJnT0WywAAABQ"]
[Tue Apr 21 00:58:55.146232 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:9512] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbT_4EoMBgOJuJnT0WzAAAAAg"]
[Tue Apr 21 00:58:55.578777 2026] [:error] [pid 42014:tid 42034] [client 20.203.254.37:9568] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbT8ek-00-ZI0f1NqmOwAAARI"]
[Tue Apr 21 00:58:55.622732 2026] [:error] [pid 11441:tid 11448] [client 20.203.254.37:9492] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbT8ixByFUvmh319DV-gAAAMU"]
[Tue Apr 21 00:58:56.052772 2026] [:error] [pid 11351:tid 11393] [client 20.203.254.37:9491] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbUAN8Z1-vktaI_tOCsAAAAEY"]
[Tue Apr 21 00:58:56.095591 2026] [:error] [pid 42014:tid 42025] [client 20.203.254.37:9514] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZbUMek-00-ZI0f1NqmPAAAAQk"]
[Tue Apr 21 00:58:56.530628 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9591] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeZbUP4EoMBgOJuJnT0W0wAAAA0"]
[Tue Apr 21 00:58:56.578740 2026] [:error] [pid 11350:tid 11371] [client 20.203.254.37:9598] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbUP4EoMBgOJuJnT0W1AAAAAw"]
[Tue Apr 21 00:58:57.001364 2026] [:error] [pid 11441:tid 11463] [client 20.203.254.37:9499] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeZbUcixByFUvmh319DV_wAAANQ"]
[Tue Apr 21 00:58:57.050520 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:9429] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbUQN8Z1-vktaI_tOCtAAAAFg"]
[Tue Apr 21 00:58:57.476403 2026] [:error] [pid 11352:tid 11433] [client 20.203.254.37:9409] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeZbUWl10mhMSfJ7ir_7dQAAAJM"]
[Tue Apr 21 00:58:57.524337 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9538] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbUQN8Z1-vktaI_tOCtQAAAEE"]
[Tue Apr 21 00:58:57.948027 2026] [:error] [pid 11352:tid 11414] [client 20.203.254.37:9349] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aeZbUWl10mhMSfJ7ir_7dgAAAIA"]
[Tue Apr 21 00:58:58.009097 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9425] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aeZbUgN8Z1-vktaI_tOCtgAAAEQ"]
[Tue Apr 21 00:58:58.419655 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9531] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZbUv4EoMBgOJuJnT0W4AAAAAQ"]
[Tue Apr 21 00:58:58.495504 2026] [:error] [pid 11350:tid 11365] [client 20.203.254.37:9433] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeZbUv4EoMBgOJuJnT0W4QAAAAY"]
[Tue Apr 21 00:58:58.890317 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9596] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZbUgN8Z1-vktaI_tOCuwAAAEw"]
[Tue Apr 21 00:58:58.970299 2026] [:error] [pid 42014:tid 42026] [client 20.203.254.37:9454] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aeZbUsek-00-ZI0f1NqmQQAAAQo"]
[Tue Apr 21 00:58:59.372495 2026] [proxy_fcgi:error] [pid 11350:tid 11369] [client 20.203.254.37:9398] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:58:59.454179 2026] [proxy_fcgi:error] [pid 11352:tid 11424] [client 20.203.254.37:9662] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:58:59.614425 2026] [proxy_fcgi:error] [pid 11350:tid 11359] [client 20.203.254.37:9398] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:58:59.694367 2026] [proxy_fcgi:error] [pid 11352:tid 11417] [client 20.203.254.37:9662] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:58:59.934841 2026] [proxy_fcgi:error] [pid 11352:tid 11419] [client 20.203.254.37:9662] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:59:00.095094 2026] [proxy_fcgi:error] [pid 11350:tid 11375] [client 20.203.254.37:9398] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:59:00.178676 2026] [proxy_fcgi:error] [pid 11352:tid 11435] [client 20.203.254.37:9662] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:59:00.338376 2026] [proxy_fcgi:error] [pid 11350:tid 11367] [client 20.203.254.37:9398] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:59:00.421140 2026] [proxy_fcgi:error] [pid 11352:tid 11422] [client 20.203.254.37:9662] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:59:00.579933 2026] [proxy_fcgi:error] [pid 11350:tid 11370] [client 20.203.254.37:9398] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 00:59:00.658338 2026] [:error] [pid 11352:tid 11420] [client 20.203.254.37:9662] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbVGl10mhMSfJ7ir_7fgAAAIY"]
[Tue Apr 21 00:59:00.816587 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:9398] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbVP4EoMBgOJuJnT0W6wAAABg"]
[Tue Apr 21 00:59:01.130564 2026] [:error] [pid 42014:tid 42027] [client 20.203.254.37:9500] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbVcek-00-ZI0f1NqmSQAAAQs"]
[Tue Apr 21 00:59:01.291203 2026] [:error] [pid 6928:tid 6949] [client 20.203.254.37:9563] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbVR3y7MHq1iB0qYriJgAAAVM"]
[Tue Apr 21 00:59:01.606792 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9501] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbVQN8Z1-vktaI_tOCxAAAAE0"]
[Tue Apr 21 00:59:01.763820 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9929] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbVf4EoMBgOJuJnT0W7AAAABM"]
[Tue Apr 21 00:59:02.078051 2026] [:error] [pid 11441:tid 11460] [client 20.203.254.37:9438] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbVsixByFUvmh319DWAwAAANE"]
[Tue Apr 21 00:59:02.240533 2026] [:error] [pid 11352:tid 11426] [client 20.203.254.37:9496] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbVml10mhMSfJ7ir_7gQAAAIw"]
[Tue Apr 21 00:59:02.570559 2026] [:error] [pid 42014:tid 42037] [client 20.203.254.37:9391] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeZbVsek-00-ZI0f1NqmSwAAARU"]
[Tue Apr 21 00:59:02.715030 2026] [:error] [pid 42014:tid 42031] [client 20.203.254.37:9441] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbVsek-00-ZI0f1NqmTAAAAQ8"]
[Tue Apr 21 00:59:03.042334 2026] [:error] [pid 6928:tid 6944] [client 20.203.254.37:9449] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeZbVx3y7MHq1iB0qYriKwAAAU4"]
[Tue Apr 21 00:59:03.197941 2026] [:error] [pid 6928:tid 6951] [client 20.203.254.37:9486] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbVx3y7MHq1iB0qYriLAAAAVU"]
[Tue Apr 21 00:59:03.515384 2026] [:error] [pid 11441:tid 11447] [client 20.203.254.37:9508] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeZbV8ixByFUvmh319DWBgAAAMQ"]
[Tue Apr 21 00:59:03.684726 2026] [:error] [pid 11441:tid 11461] [client 20.203.254.37:9426] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbV8ixByFUvmh319DWBwAAANI"]
[Tue Apr 21 00:59:03.989690 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:9704] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aeZbVx3y7MHq1iB0qYriLQAAAUw"]
[Tue Apr 21 00:59:04.165131 2026] [:error] [pid 11352:tid 11432] [client 20.203.254.37:9413] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbWGl10mhMSfJ7ir_7ggAAAJI"]
[Tue Apr 21 00:59:04.462272 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9502] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeZbWAN8Z1-vktaI_tOCzwAAAFY"]
[Tue Apr 21 00:59:04.639148 2026] [:error] [pid 11441:tid 11462] [client 20.203.254.37:9643] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbWMixByFUvmh319DWCQAAANM"]
[Tue Apr 21 00:59:04.933298 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:9575] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeZbWAN8Z1-vktaI_tOC0QAAAFI"]
[Tue Apr 21 00:59:05.111012 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9528] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbWf4EoMBgOJuJnT0W7wAAAAk"]
[Tue Apr 21 00:59:05.407863 2026] [:error] [pid 11441:tid 11466] [client 20.203.254.37:9452] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeZbWcixByFUvmh319DWDQAAANc"]
[Tue Apr 21 00:59:05.590055 2026] [:error] [pid 11494:tid 11517] [client 20.203.254.37:9423] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbWcgko5iFiE8YoyQrsAAAAZU"]
[Tue Apr 21 00:59:05.880556 2026] [:error] [pid 6928:tid 6954] [client 20.203.254.37:9588] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aeZbWR3y7MHq1iB0qYriMAAAAVg"]
[Tue Apr 21 00:59:06.069731 2026] [:error] [pid 11441:tid 11463] [client 20.203.254.37:9521] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbWsixByFUvmh319DWDwAAANQ"]
[Tue Apr 21 00:59:06.353964 2026] [:error] [pid 6928:tid 6933] [client 20.203.254.37:9534] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZbWh3y7MHq1iB0qYriMQAAAUM"]
[Tue Apr 21 00:59:06.542190 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9493] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbWgN8Z1-vktaI_tOC2AAAAFM"]
[Tue Apr 21 00:59:06.839530 2026] [:error] [pid 42014:tid 42036] [client 20.203.254.37:9518] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZbWsek-00-ZI0f1NqmTwAAARQ"]
[Tue Apr 21 00:59:07.014042 2026] [:error] [pid 6928:tid 6948] [client 20.203.254.37:9513] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbWx3y7MHq1iB0qYriMwAAAVI"]
[Tue Apr 21 00:59:07.313978 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9355] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZbW_4EoMBgOJuJnT0W8gAAABE"]
[Tue Apr 21 00:59:07.488282 2026] [:error] [pid 11494:tid 11496] [client 20.203.254.37:9415] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbW8gko5iFiE8YoyQrtgAAAYA"]
[Tue Apr 21 00:59:07.786636 2026] [:error] [pid 11350:tid 11365] [client 20.203.254.37:9408] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZbW_4EoMBgOJuJnT0W9wAAAAY"]
[Tue Apr 21 00:59:07.967859 2026] [:error] [pid 42014:tid 42028] [client 20.203.254.37:9532] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbW8ek-00-ZI0f1NqmUAAAAQw"]
[Tue Apr 21 00:59:08.265683 2026] [:error] [pid 11441:tid 11452] [client 20.203.254.37:9468] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbXMixByFUvmh319DWEQAAAMk"]
[Tue Apr 21 00:59:08.446161 2026] [:error] [pid 42014:tid 42022] [client 20.203.254.37:9573] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbXMek-00-ZI0f1NqmUQAAAQY"]
[Tue Apr 21 00:59:08.740577 2026] [:error] [pid 11352:tid 11430] [client 20.203.254.37:9376] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbXGl10mhMSfJ7ir_7hgAAAJA"]
[Tue Apr 21 00:59:08.934804 2026] [:error] [pid 6928:tid 6931] [client 20.203.254.37:9411] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbXB3y7MHq1iB0qYriNAAAAUE"]
[Tue Apr 21 00:59:09.225158 2026] [:error] [pid 6928:tid 6930] [client 20.203.254.37:9618] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbXR3y7MHq1iB0qYriNQAAAUA"]
[Tue Apr 21 00:59:09.412661 2026] [:error] [pid 11441:tid 11453] [client 20.203.254.37:9474] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbXcixByFUvmh319DWEwAAAMo"]
[Tue Apr 21 00:59:09.710955 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9451] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-michan.php"] [unique_id "aeZbXf4EoMBgOJuJnT0W-wAAABc"]
[Tue Apr 21 00:59:09.886032 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:9440] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbXf4EoMBgOJuJnT0W_QAAAAg"]
[Tue Apr 21 00:59:10.184320 2026] [:error] [pid 11352:tid 11427] [client 20.203.254.37:9422] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbXml10mhMSfJ7ir_7iAAAAI0"]
[Tue Apr 21 00:59:10.358102 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:9574] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbXv4EoMBgOJuJnT0XAAAAABg"]
[Tue Apr 21 00:59:10.659095 2026] [:error] [pid 11494:tid 11517] [client 20.203.254.37:9494] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbXsgko5iFiE8YoyQrvAAAAZU"]
[Tue Apr 21 00:59:10.830083 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9351] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbXsgko5iFiE8YoyQrwQAAAY8"]
[Tue Apr 21 00:59:11.153714 2026] [:error] [pid 6928:tid 6932] [client 20.203.254.37:9347] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbXx3y7MHq1iB0qYriOwAAAUI"]
[Tue Apr 21 00:59:11.311418 2026] [:error] [pid 6928:tid 6943] [client 20.203.254.37:9348] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbXx3y7MHq1iB0qYriPAAAAU0"]
[Tue Apr 21 00:59:11.625164 2026] [:error] [pid 42014:tid 42025] [client 20.203.254.37:9457] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZbX8ek-00-ZI0f1NqmVgAAAQk"]
[Tue Apr 21 00:59:11.787144 2026] [:error] [pid 11494:tid 11504] [client 20.203.254.37:9361] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbX8gko5iFiE8YoyQryAAAAYg"]
[Tue Apr 21 00:59:12.098664 2026] [:error] [pid 11441:tid 11455] [client 20.203.254.37:9510] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbYMixByFUvmh319DWGAAAAMw"]
[Tue Apr 21 00:59:12.259004 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:9511] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbYP4EoMBgOJuJnT0XBgAAAA4"]
[Tue Apr 21 00:59:12.575987 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9524] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbYP4EoMBgOJuJnT0XCgAAABM"]
[Tue Apr 21 00:59:12.737439 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:9590] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbYMgko5iFiE8YoyQrywAAAZI"]
[Tue Apr 21 00:59:13.068412 2026] [:error] [pid 11441:tid 11464] [client 20.203.254.37:9627] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbYcixByFUvmh319DWGwAAANU"]
[Tue Apr 21 00:59:13.212668 2026] [:error] [pid 11494:tid 11519] [client 20.203.254.37:9283] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbYcgko5iFiE8YoyQrzgAAAZc"]
[Tue Apr 21 00:59:13.562505 2026] [:error] [pid 11441:tid 11454] [client 20.203.254.37:9424] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZbYcixByFUvmh319DWIAAAAMs"]
[Tue Apr 21 00:59:13.685021 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9519] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbYcgko5iFiE8YoyQrzwAAAYc"]
[Tue Apr 21 00:59:14.038836 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:9522] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbYh3y7MHq1iB0qYriRAAAAUw"]
[Tue Apr 21 00:59:14.166577 2026] [:error] [pid 6928:tid 6939] [client 20.203.254.37:9381] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZbYh3y7MHq1iB0qYriRQAAAUk"]
[Tue Apr 21 00:59:14.521966 2026] [:error] [pid 11352:tid 11438] [client 20.203.254.37:9833] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbYml10mhMSfJ7ir_7jAAAAJg"]
[Tue Apr 21 00:59:14.652359 2026] [:error] [pid 11494:tid 11501] [client 20.203.254.37:9448] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZbYsgko5iFiE8YoyQr1wAAAYU"]
[Tue Apr 21 00:59:15.002621 2026] [:error] [pid 11441:tid 11455] [client 20.203.254.37:9467] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbY8ixByFUvmh319DWKwAAAMw"]
[Tue Apr 21 00:59:15.129722 2026] [:error] [pid 11441:tid 11458] [client 20.203.254.37:9420] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZbY8ixByFUvmh319DWLQAAAM8"]
[Tue Apr 21 00:59:15.490660 2026] [:error] [pid 6928:tid 6947] [client 20.203.254.37:9450] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZbYx3y7MHq1iB0qYriRgAAAVE"]
[Tue Apr 21 00:59:15.603696 2026] [:error] [pid 11441:tid 11454] [client 20.203.254.37:9520] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZbY8ixByFUvmh319DWMAAAAMs"]
[Tue Apr 21 00:59:15.978345 2026] [:error] [pid 42014:tid 42040] [client 20.203.254.37:10126] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbY8ek-00-ZI0f1NqmXAAAARg"]
[Tue Apr 21 00:59:16.074985 2026] [:error] [pid 42014:tid 42020] [client 20.203.254.37:9350] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbZMek-00-ZI0f1NqmXQAAAQQ"]
[Tue Apr 21 00:59:16.462547 2026] [:error] [pid 6928:tid 6937] [client 20.203.254.37:9582] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbZB3y7MHq1iB0qYriSAAAAUc"]
[Tue Apr 21 00:59:16.553438 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:9419] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbZMgko5iFiE8YoyQr3AAAAZQ"]
[Tue Apr 21 00:59:16.937189 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:9416] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbZMgko5iFiE8YoyQr4AAAAYc"]
[Tue Apr 21 00:59:17.042267 2026] [:error] [pid 11350:tid 11368] [client 20.203.254.37:9516] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbZf4EoMBgOJuJnT0XDQAAAAk"]
[Tue Apr 21 00:59:17.410432 2026] [:error] [pid 11494:tid 11505] [client 20.203.254.37:9393] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZbZcgko5iFiE8YoyQr4wAAAYk"]
[Tue Apr 21 00:59:17.515743 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:9432] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbZcgko5iFiE8YoyQr5QAAAZA"]
[Tue Apr 21 00:59:17.884104 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9363] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbZf4EoMBgOJuJnT0XEQAAAA8"]
[Tue Apr 21 00:59:17.997782 2026] [:error] [pid 11494:tid 11498] [client 20.203.254.37:9374] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbZcgko5iFiE8YoyQr6QAAAYI"]
[Tue Apr 21 00:59:18.387056 2026] [:error] [pid 11494:tid 11514] [client 20.203.254.37:9381] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbZsgko5iFiE8YoyQr7AAAAZI"]
[Tue Apr 21 00:59:18.481516 2026] [:error] [pid 11494:tid 11516] [client 20.203.254.37:9461] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbZsgko5iFiE8YoyQr7QAAAZQ"]
[Tue Apr 21 00:59:18.862870 2026] [:error] [pid 11494:tid 11500] [client 20.203.254.37:9460] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbZsgko5iFiE8YoyQr8wAAAYQ"]
[Tue Apr 21 00:59:18.952988 2026] [:error] [pid 11494:tid 11512] [client 20.203.254.37:9427] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbZsgko5iFiE8YoyQr9AAAAZA"]
[Tue Apr 21 00:59:19.398905 2026] [:error] [pid 6928:tid 6930] [client 20.203.254.37:9381] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZbZx3y7MHq1iB0qYriTQAAAUA"]
[Tue Apr 21 00:59:19.473929 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9377] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbZwN8Z1-vktaI_tOC3QAAAFc"]
[Tue Apr 21 00:59:19.879716 2026] [:error] [pid 42014:tid 42018] [client 20.203.254.37:9445] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbZ8ek-00-ZI0f1NqmYAAAAQI"]
[Tue Apr 21 00:59:19.955651 2026] [:error] [pid 42014:tid 42028] [client 20.203.254.37:9421] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbZ8ek-00-ZI0f1NqmYQAAAQw"]
[Tue Apr 21 00:59:20.382376 2026] [:error] [pid 11494:tid 11507] [client 20.203.254.37:9346] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbaMgko5iFiE8YoyQsAAAAAYs"]
[Tue Apr 21 00:59:20.437166 2026] [:error] [pid 11494:tid 11503] [client 20.203.254.37:10049] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbaMgko5iFiE8YoyQsAQAAAYc"]
[Tue Apr 21 00:59:20.862825 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9517] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbaP4EoMBgOJuJnT0XFgAAABA"]
[Tue Apr 21 00:59:20.915101 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:9911] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbaP4EoMBgOJuJnT0XFwAAAAE"]
[Tue Apr 21 00:59:21.358868 2026] [:error] [pid 11350:tid 11371] [client 20.203.254.37:9462] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZbaf4EoMBgOJuJnT0XGwAAAAw"]
[Tue Apr 21 00:59:21.402420 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9431] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbaf4EoMBgOJuJnT0XHAAAAAQ"]
[Tue Apr 21 00:59:21.839109 2026] [:error] [pid 11494:tid 11496] [client 20.203.254.37:9437] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZbacgko5iFiE8YoyQsCQAAAYA"]
[Tue Apr 21 00:59:21.897682 2026] [:error] [pid 42014:tid 42022] [client 20.203.254.37:9435] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZbacek-00-ZI0f1NqmYgAAAQY"]
[Tue Apr 21 00:59:22.326794 2026] [:error] [pid 6928:tid 6952] [client 20.203.254.37:9465] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZbah3y7MHq1iB0qYriVAAAAVY"]
[Tue Apr 21 00:59:22.421217 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:9397] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZbasgko5iFiE8YoyQsDAAAAY0"]
[Tue Apr 21 00:59:22.813740 2026] [:error] [pid 11494:tid 11506] [client 20.203.254.37:9446] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZbasgko5iFiE8YoyQsDgAAAYo"]
[Tue Apr 21 00:59:22.894844 2026] [:error] [pid 11441:tid 11453] [client 20.203.254.37:9357] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZbasixByFUvmh319DWNQAAAMo"]
[Tue Apr 21 00:59:23.403180 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9375] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZba_4EoMBgOJuJnT0XJAAAABc"]
[Tue Apr 21 00:59:23.413827 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9418] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZba_4EoMBgOJuJnT0XJQAAABM"]
[Tue Apr 21 00:59:23.879638 2026] [:error] [pid 11350:tid 11369] [client 20.203.254.37:9446] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZba_4EoMBgOJuJnT0XKAAAAAo"]
[Tue Apr 21 00:59:23.894025 2026] [:error] [pid 6928:tid 6937] [client 20.203.254.37:9495] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbax3y7MHq1iB0qYriVwAAAUc"]
[Tue Apr 21 00:59:24.357111 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:9360] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZbbP4EoMBgOJuJnT0XLAAAAAE"]
[Tue Apr 21 00:59:24.369172 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9385] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbbP4EoMBgOJuJnT0XLQAAABE"]
[Tue Apr 21 00:59:24.831392 2026] [:error] [pid 11350:tid 11380] [client 20.203.254.37:9296] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZbbP4EoMBgOJuJnT0XMQAAABU"]
[Tue Apr 21 00:59:24.840297 2026] [:error] [pid 11351:tid 11396] [client 20.203.254.37:9368] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbbAN8Z1-vktaI_tOC4gAAAEk"]
[Tue Apr 21 00:59:25.315340 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9392] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZbbcgko5iFiE8YoyQsEgAAAYE"]
[Tue Apr 21 00:59:25.315835 2026] [:error] [pid 11441:tid 11466] [client 20.203.254.37:9282] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZbbcixByFUvmh319DWOgAAANc"]
[Tue Apr 21 00:59:25.790571 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9442] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbbQN8Z1-vktaI_tOC5gAAAFY"]
[Tue Apr 21 00:59:25.793665 2026] [:error] [pid 11494:tid 11519] [client 20.203.254.37:9553] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbbcgko5iFiE8YoyQsFgAAAZc"]
[Tue Apr 21 00:59:26.262145 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9373] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbbgN8Z1-vktaI_tOC6QAAAEI"]
[Tue Apr 21 00:59:26.263799 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9469] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbbv4EoMBgOJuJnT0XNQAAAA8"]
[Tue Apr 21 00:59:26.745585 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9371] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbbgN8Z1-vktaI_tOC7gAAAEA"]
[Tue Apr 21 00:59:26.757547 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9305] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbbgN8Z1-vktaI_tOC7wAAAFM"]
[Tue Apr 21 00:59:27.239950 2026] [:error] [pid 11441:tid 11457] [client 20.203.254.37:9295] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZbb8ixByFUvmh319DWOwAAAM4"]
[Tue Apr 21 00:59:27.248542 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:9414] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbbwN8Z1-vktaI_tOC8AAAAFA"]
[Tue Apr 21 00:59:27.771115 2026] [:error] [pid 11494:tid 11505] [client 20.203.254.37:9471] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbb8gko5iFiE8YoyQsGwAAAYk"]
[Tue Apr 21 00:59:27.801591 2026] [:error] [pid 11441:tid 11459] [client 20.203.254.37:9456] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbb8ixByFUvmh319DWPQAAANA"]
[Tue Apr 21 00:59:28.262527 2026] [:error] [pid 11352:tid 11426] [client 20.203.254.37:9560] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbcGl10mhMSfJ7ir_7oAAAAIw"]
[Tue Apr 21 00:59:28.294699 2026] [:error] [pid 11441:tid 11462] [client 20.203.254.37:9535] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbcMixByFUvmh319DWQAAAANM"]
[Tue Apr 21 00:59:28.744740 2026] [:error] [pid 11494:tid 11518] [client 20.203.254.37:9362] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbcMgko5iFiE8YoyQsIAAAAZY"]
[Tue Apr 21 00:59:28.792898 2026] [:error] [pid 11441:tid 11464] [client 20.203.254.37:9365] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbcMixByFUvmh319DWRAAAANU"]
[Tue Apr 21 00:59:29.219842 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9383] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbcQN8Z1-vktaI_tOC8gAAAFc"]
[Tue Apr 21 00:59:29.267181 2026] [:error] [pid 6928:tid 6938] [client 20.203.254.37:9447] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZbcR3y7MHq1iB0qYriXAAAAUg"]
[Tue Apr 21 00:59:29.772546 2026] [:error] [pid 42014:tid 42023] [client 20.203.254.37:9443] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZbccek-00-ZI0f1NqmaQAAAQc"]
[Tue Apr 21 00:59:29.868855 2026] [:error] [pid 6928:tid 6944] [client 20.203.254.37:9464] [client 20.203.254.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZbcR3y7MHq1iB0qYriYQAAAU4"]
[Tue Apr 21 00:59:30.256921 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9290] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZbcsgko5iFiE8YoyQsJAAAAY8"]
[Tue Apr 21 00:59:30.359626 2026] [:error] [pid 6928:tid 6947] [client 20.203.254.37:9466] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeZbch3y7MHq1iB0qYriYgAAAVE"]
[Tue Apr 21 00:59:30.805177 2026] [:error] [pid 6928:tid 6942] [client 20.203.254.37:9480] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZbch3y7MHq1iB0qYriZgAAAUw"]
[Tue Apr 21 00:59:30.938271 2026] [:error] [pid 42014:tid 42035] [client 20.203.254.37:9281] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeZbcsek-00-ZI0f1NqmawAAARM"]
[Tue Apr 21 00:59:31.319001 2026] [:error] [pid 11441:tid 11449] [client 20.203.254.37:9344] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZbc8ixByFUvmh319DWSAAAAMY"]
[Tue Apr 21 00:59:31.435065 2026] [:error] [pid 11351:tid 11396] [client 20.203.254.37:9387] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeZbcwN8Z1-vktaI_tOC9gAAAEk"]
[Tue Apr 21 00:59:31.839636 2026] [:error] [pid 42014:tid 42018] [client 20.203.254.37:9399] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZbc8ek-00-ZI0f1NqmbwAAAQI"]
[Tue Apr 21 00:59:31.932662 2026] [:error] [pid 42014:tid 42022] [client 20.203.254.37:9378] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbc8ek-00-ZI0f1NqmcQAAAQY"]
[Tue Apr 21 00:59:32.353368 2026] [:error] [pid 6928:tid 6936] [client 20.203.254.37:9527] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZbdB3y7MHq1iB0qYriagAAAUY"]
[Tue Apr 21 00:59:32.429591 2026] [:error] [pid 42014:tid 42017] [client 20.203.254.37:9298] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbdMek-00-ZI0f1NqmcwAAAQE"]
[Tue Apr 21 00:59:32.928320 2026] [:error] [pid 11352:tid 11429] [client 20.203.254.37:9386] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZbdGl10mhMSfJ7ir_7qwAAAI8"]
[Tue Apr 21 00:59:32.930988 2026] [:error] [pid 11441:tid 11447] [client 20.203.254.37:9621] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbdMixByFUvmh319DWSgAAAMQ"]
[Tue Apr 21 00:59:33.428550 2026] [:error] [pid 11441:tid 11446] [client 20.203.254.37:9310] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZbdcixByFUvmh319DWTgAAAMM"]
[Tue Apr 21 00:59:33.461518 2026] [:error] [pid 6928:tid 6949] [client 20.203.254.37:9289] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbdR3y7MHq1iB0qYribwAAAVM"]
[Tue Apr 21 00:59:33.906792 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:9380] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbdQN8Z1-vktaI_tOC_AAAAEc"]
[Tue Apr 21 00:59:33.936176 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9387] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbdQN8Z1-vktaI_tOC_QAAAEg"]
[Tue Apr 21 00:59:34.383313 2026] [:error] [pid 11351:tid 11406] [client 20.203.254.37:9581] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbdgN8Z1-vktaI_tOC_wAAAFM"]
[Tue Apr 21 00:59:34.409934 2026] [:error] [pid 11494:tid 11502] [client 20.203.254.37:9280] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbdsgko5iFiE8YoyQsKgAAAYY"]
[Tue Apr 21 00:59:34.854413 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9407] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbdgN8Z1-vktaI_tODAgAAAEw"]
[Tue Apr 21 00:59:34.888123 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:9455] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbdgN8Z1-vktaI_tODBAAAAEM"]
[Tue Apr 21 00:59:35.328833 2026] [:error] [pid 11352:tid 11426] [client 20.203.254.37:9359] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZbd2l10mhMSfJ7ir_7sAAAAIw"]
[Tue Apr 21 00:59:35.360688 2026] [:error] [pid 11352:tid 11416] [client 20.203.254.37:9977] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbd2l10mhMSfJ7ir_7sQAAAII"]
[Tue Apr 21 00:59:35.822137 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9333] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbd8gko5iFiE8YoyQsKwAAAYE"]
[Tue Apr 21 00:59:35.841962 2026] [:error] [pid 6928:tid 6951] [client 20.203.254.37:9280] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbdx3y7MHq1iB0qYricwAAAVU"]
[Tue Apr 21 00:59:36.297084 2026] [:error] [pid 11494:tid 11518] [client 20.203.254.37:9335] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbeMgko5iFiE8YoyQsLQAAAZY"]
[Tue Apr 21 00:59:36.313175 2026] [:error] [pid 11494:tid 11496] [client 20.203.254.37:9459] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbeMgko5iFiE8YoyQsLgAAAYA"]
[Tue Apr 21 00:59:36.769254 2026] [:error] [pid 11352:tid 11431] [client 20.203.254.37:9406] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbeGl10mhMSfJ7ir_7tAAAAJE"]
[Tue Apr 21 00:59:36.784061 2026] [:error] [pid 11441:tid 11463] [client 20.203.254.37:9417] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbeMixByFUvmh319DWVQAAANQ"]
[Tue Apr 21 00:59:37.241699 2026] [:error] [pid 11351:tid 11411] [client 20.203.254.37:9412] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZbeQN8Z1-vktaI_tODDwAAAFg"]
[Tue Apr 21 00:59:37.257137 2026] [:error] [pid 11351:tid 11394] [client 20.203.254.37:9336] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbeQN8Z1-vktaI_tODEAAAAEc"]
[Tue Apr 21 00:59:37.718718 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9801] [client 20.203.254.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZbeQN8Z1-vktaI_tODEQAAAEg"]
[Tue Apr 21 00:59:37.731137 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9428] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbeQN8Z1-vktaI_tODEgAAAEA"]
[Tue Apr 21 00:59:38.192340 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9855] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeZbegN8Z1-vktaI_tODFAAAAEw"]
[Tue Apr 21 00:59:38.202734 2026] [:error] [pid 11441:tid 11449] [client 20.203.254.37:9439] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbesixByFUvmh319DWWAAAAMY"]
[Tue Apr 21 00:59:38.682847 2026] [:error] [pid 11494:tid 11504] [client 20.203.254.37:9326] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeZbesgko5iFiE8YoyQsNQAAAYg"]
[Tue Apr 21 00:59:38.693598 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:9800] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbesgko5iFiE8YoyQsNgAAAY0"]
[Tue Apr 21 00:59:39.162028 2026] [:error] [pid 6928:tid 6936] [client 20.203.254.37:9356] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aeZbex3y7MHq1iB0qYrieQAAAUY"]
[Tue Apr 21 00:59:39.164724 2026] [:error] [pid 11350:tid 11362] [client 20.203.254.37:9309] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbe_4EoMBgOJuJnT0XOgAAAAM"]
[Tue Apr 21 00:59:39.633743 2026] [:error] [pid 6928:tid 6949] [client 20.203.254.37:9498] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbex3y7MHq1iB0qYrifQAAAVM"]
[Tue Apr 21 00:59:39.635012 2026] [:error] [pid 11352:tid 11418] [client 20.203.254.37:9463] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbe2l10mhMSfJ7ir_7uAAAAIQ"]
[Tue Apr 21 00:59:40.105309 2026] [:error] [pid 11350:tid 11366] [client 20.203.254.37:9453] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbfP4EoMBgOJuJnT0XOwAAAAc"]
[Tue Apr 21 00:59:40.106061 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9507] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbfP4EoMBgOJuJnT0XPAAAAAA"]
[Tue Apr 21 00:59:40.578951 2026] [:error] [pid 42014:tid 42036] [client 20.203.254.37:9297] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbfMek-00-ZI0f1NqmgQAAARQ"]
[Tue Apr 21 00:59:40.579975 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9255] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbfP4EoMBgOJuJnT0XPQAAAA8"]
[Tue Apr 21 00:59:41.053150 2026] [:error] [pid 11441:tid 11467] [client 20.203.254.37:9358] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZbfcixByFUvmh319DWXwAAANg"]
[Tue Apr 21 00:59:41.055621 2026] [:error] [pid 11350:tid 11377] [client 20.203.254.37:9497] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbff4EoMBgOJuJnT0XPgAAABI"]
[Tue Apr 21 00:59:41.533847 2026] [:error] [pid 11494:tid 11510] [client 20.203.254.37:9287] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbfcgko5iFiE8YoyQsOQAAAY4"]
[Tue Apr 21 00:59:41.534619 2026] [:error] [pid 42014:tid 42022] [client 20.203.254.37:9300] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbfcek-00-ZI0f1NqmggAAAQY"]
[Tue Apr 21 00:59:42.004210 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9241] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbfgN8Z1-vktaI_tODJQAAAFQ"]
[Tue Apr 21 00:59:42.010608 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:9364] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbfgN8Z1-vktaI_tODJgAAAFI"]
[Tue Apr 21 00:59:42.476499 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9324] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbfgN8Z1-vktaI_tODKwAAAFY"]
[Tue Apr 21 00:59:42.481780 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9372] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbfgN8Z1-vktaI_tODLAAAAEE"]
[Tue Apr 21 00:59:42.950358 2026] [:error] [pid 11494:tid 11513] [client 20.203.254.37:9470] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZbfsgko5iFiE8YoyQsPgAAAZE"]
[Tue Apr 21 00:59:42.952516 2026] [:error] [pid 11494:tid 11520] [client 20.203.254.37:9345] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbfsgko5iFiE8YoyQsPwAAAZg"]
[Tue Apr 21 00:59:43.425202 2026] [:error] [pid 42014:tid 42039] [client 20.203.254.37:9302] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbf8ek-00-ZI0f1NqmiQAAARc"]
[Tue Apr 21 00:59:43.426152 2026] [:error] [pid 11350:tid 11367] [client 20.203.254.37:9367] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbf_4EoMBgOJuJnT0XQQAAAAg"]
[Tue Apr 21 00:59:43.903229 2026] [:error] [pid 6928:tid 6948] [client 20.203.254.37:9314] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbfx3y7MHq1iB0qYriiAAAAVI"]
[Tue Apr 21 00:59:43.903616 2026] [:error] [pid 42014:tid 42025] [client 20.203.254.37:9352] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbf8ek-00-ZI0f1NqmigAAAQk"]
[Tue Apr 21 00:59:44.375290 2026] [:error] [pid 11352:tid 11416] [client 20.203.254.37:9810] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbgGl10mhMSfJ7ir_7vAAAAII"]
[Tue Apr 21 00:59:44.376707 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:9327] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbgAN8Z1-vktaI_tODNgAAAFA"]
[Tue Apr 21 00:59:44.854175 2026] [:error] [pid 11351:tid 11396] [client 20.203.254.37:9436] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aeZbgAN8Z1-vktaI_tODOwAAAEk"]
[Tue Apr 21 00:59:44.867778 2026] [:error] [pid 11351:tid 11402] [client 20.203.254.37:9252] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbgAN8Z1-vktaI_tODPAAAAE8"]
[Tue Apr 21 00:59:45.329576 2026] [:error] [pid 11350:tid 11382] [client 20.203.254.37:9286] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbgf4EoMBgOJuJnT0XRQAAABc"]
[Tue Apr 21 00:59:45.339875 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9401] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbgf4EoMBgOJuJnT0XRgAAABA"]
[Tue Apr 21 00:59:45.803533 2026] [:error] [pid 11441:tid 11460] [client 20.203.254.37:9379] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbgcixByFUvmh319DWYwAAANE"]
[Tue Apr 21 00:59:45.809563 2026] [:error] [pid 11441:tid 11449] [client 20.203.254.37:9299] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbgcixByFUvmh319DWZAAAAMY"]
[Tue Apr 21 00:59:46.277182 2026] [:error] [pid 42014:tid 42020] [client 20.203.254.37:9217] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbgsek-00-ZI0f1NqmjAAAAQQ"]
[Tue Apr 21 00:59:46.285369 2026] [:error] [pid 42014:tid 42033] [client 20.203.254.37:10228] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbgsek-00-ZI0f1NqmjQAAARE"]
[Tue Apr 21 00:59:46.749739 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9315] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev.php"] [unique_id "aeZbggN8Z1-vktaI_tODQwAAAE0"]
[Tue Apr 21 00:59:46.758920 2026] [:error] [pid 11352:tid 11428] [client 20.203.254.37:9366] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbgml10mhMSfJ7ir_7vwAAAI4"]
[Tue Apr 21 00:59:47.235168 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:9234] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbg8gko5iFiE8YoyQsSAAAAYw"]
[Tue Apr 21 00:59:47.237061 2026] [:error] [pid 11494:tid 11504] [client 20.203.254.37:9260] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbg8gko5iFiE8YoyQsSQAAAYg"]
[Tue Apr 21 00:59:47.709314 2026] [:error] [pid 42014:tid 42028] [client 20.203.254.37:9294] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbg8ek-00-ZI0f1NqmkwAAAQw"]
[Tue Apr 21 00:59:47.710764 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9405] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbgwN8Z1-vktaI_tODRwAAAEg"]
[Tue Apr 21 00:59:48.195979 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9370] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbhP4EoMBgOJuJnT0XTwAAAA0"]
[Tue Apr 21 00:59:48.196453 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9311] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbhP4EoMBgOJuJnT0XUAAAAAQ"]
[Tue Apr 21 00:59:48.670610 2026] [:error] [pid 11350:tid 11362] [client 20.203.254.37:9226] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aeZbhP4EoMBgOJuJnT0XUgAAAAM"]
[Tue Apr 21 00:59:48.670663 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9288] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbhAN8Z1-vktaI_tODSgAAAEw"]
[Tue Apr 21 00:59:49.149604 2026] [:error] [pid 42014:tid 42027] [client 20.203.254.37:9301] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbhcek-00-ZI0f1NqmlQAAAQs"]
[Tue Apr 21 00:59:49.162821 2026] [:error] [pid 42014:tid 42031] [client 20.203.254.37:9382] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbhcek-00-ZI0f1NqmlgAAAQ8"]
[Tue Apr 21 00:59:49.622967 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:9540] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbhf4EoMBgOJuJnT0XWAAAAAI"]
[Tue Apr 21 00:59:49.635811 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9232] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbhQN8Z1-vktaI_tODTwAAAEE"]
[Tue Apr 21 00:59:50.095886 2026] [:error] [pid 11350:tid 11380] [client 20.203.254.37:9318] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbhv4EoMBgOJuJnT0XYQAAABU"]
[Tue Apr 21 00:59:50.107844 2026] [:error] [pid 11350:tid 11373] [client 20.203.254.37:9292] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbhv4EoMBgOJuJnT0XYgAAAA4"]
[Tue Apr 21 00:59:50.574001 2026] [:error] [pid 11352:tid 11433] [client 20.203.254.37:9308] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbhml10mhMSfJ7ir_7xwAAAJM"]
[Tue Apr 21 00:59:50.582085 2026] [:error] [pid 11352:tid 11414] [client 20.203.254.37:9338] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aeZbhml10mhMSfJ7ir_7yAAAAIA"]
[Tue Apr 21 00:59:51.062124 2026] [:error] [pid 11352:tid 11417] [client 20.203.254.37:9328] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbh2l10mhMSfJ7ir_7zAAAAIM"]
[Tue Apr 21 00:59:51.062764 2026] [:error] [pid 42014:tid 42039] [client 20.203.254.37:9404] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZbh8ek-00-ZI0f1NqmlwAAARc"]
[Tue Apr 21 00:59:51.534420 2026] [:error] [pid 11352:tid 11416] [client 20.203.254.37:9458] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbh2l10mhMSfJ7ir_70AAAAII"]
[Tue Apr 21 00:59:51.534443 2026] [:error] [pid 11352:tid 11426] [client 20.203.254.37:9313] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZbh2l10mhMSfJ7ir_7zwAAAIw"]
[Tue Apr 21 00:59:52.006485 2026] [:error] [pid 11352:tid 11420] [client 20.203.254.37:9323] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbiGl10mhMSfJ7ir_70QAAAIY"]
[Tue Apr 21 00:59:52.007179 2026] [:error] [pid 42014:tid 42038] [client 20.203.254.37:9247] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZbiMek-00-ZI0f1NqmmAAAARY"]
[Tue Apr 21 00:59:52.480710 2026] [:error] [pid 6928:tid 6954] [client 20.203.254.37:9321] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZbiB3y7MHq1iB0qYriiwAAAVg"]
[Tue Apr 21 00:59:52.480926 2026] [:error] [pid 11352:tid 11428] [client 20.203.254.37:9291] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aeZbiGl10mhMSfJ7ir_70wAAAI4"]
[Tue Apr 21 00:59:52.956379 2026] [:error] [pid 42014:tid 42026] [client 20.203.254.37:9354] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbiMek-00-ZI0f1NqmmwAAAQo"]
[Tue Apr 21 00:59:52.957762 2026] [:error] [pid 11352:tid 11430] [client 20.203.254.37:9222] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZbiGl10mhMSfJ7ir_71gAAAJA"]
[Tue Apr 21 00:59:53.457553 2026] [:error] [pid 11352:tid 11415] [client 20.203.254.37:9312] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZbiWl10mhMSfJ7ir_71wAAAIE"]
[Tue Apr 21 00:59:53.506340 2026] [:error] [pid 11352:tid 11429] [client 20.203.254.37:9284] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbiWl10mhMSfJ7ir_72AAAAI8"]
[Tue Apr 21 00:59:53.929284 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9403] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZbiQN8Z1-vktaI_tODWgAAAFQ"]
[Tue Apr 21 00:59:53.978935 2026] [:error] [pid 11441:tid 11460] [client 20.203.254.37:9395] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbicixByFUvmh319DWhQAAANE"]
[Tue Apr 21 00:59:54.419011 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9334] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZbigN8Z1-vktaI_tODXgAAAEI"]
[Tue Apr 21 00:59:54.451453 2026] [:error] [pid 11351:tid 11392] [client 20.203.254.37:9251] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZbigN8Z1-vktaI_tODXwAAAEU"]
[Tue Apr 21 00:59:54.894206 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9285] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZbigN8Z1-vktaI_tODYwAAAEQ"]
[Tue Apr 21 00:59:54.924230 2026] [:error] [pid 11351:tid 11401] [client 20.203.254.37:9329] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbigN8Z1-vktaI_tODZAAAAE4"]
[Tue Apr 21 00:59:55.366049 2026] [:error] [pid 11351:tid 11387] [client 20.203.254.37:9320] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZbiwN8Z1-vktaI_tODaAAAAEA"]
[Tue Apr 21 00:59:55.397488 2026] [:error] [pid 11350:tid 11360] [client 20.203.254.37:9391] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbi_4EoMBgOJuJnT0XaQAAAAE"]
[Tue Apr 21 00:59:55.838194 2026] [:error] [pid 11352:tid 11418] [client 20.203.254.37:9216] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZbi2l10mhMSfJ7ir_72gAAAIQ"]
[Tue Apr 21 00:59:55.872767 2026] [:error] [pid 11351:tid 11399] [client 20.203.254.37:9262] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbiwN8Z1-vktaI_tODawAAAEw"]
[Tue Apr 21 00:59:56.310690 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9394] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZbjAN8Z1-vktaI_tODbgAAAFc"]
[Tue Apr 21 00:59:56.346558 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9306] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aeZbjAN8Z1-vktaI_tODbwAAAFQ"]
[Tue Apr 21 00:59:56.786006 2026] [:error] [pid 11351:tid 11388] [client 20.203.254.37:9390] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZbjAN8Z1-vktaI_tODdAAAAEE"]
[Tue Apr 21 00:59:56.818297 2026] [:error] [pid 11351:tid 11389] [client 20.203.254.37:9330] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbjAN8Z1-vktaI_tODdQAAAEI"]
[Tue Apr 21 00:59:57.284749 2026] [:error] [pid 6928:tid 6930] [client 20.203.254.37:9250] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZbjR3y7MHq1iB0qYrilwAAAUA"]
[Tue Apr 21 00:59:57.290367 2026] [:error] [pid 6928:tid 6932] [client 20.203.254.37:9235] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbjR3y7MHq1iB0qYrimAAAAUI"]
[Tue Apr 21 00:59:57.758560 2026] [:error] [pid 11352:tid 11431] [client 20.203.254.37:9307] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZbjWl10mhMSfJ7ir_74gAAAJE"]
[Tue Apr 21 00:59:57.762114 2026] [:error] [pid 6928:tid 6953] [client 20.203.254.37:9256] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbjR3y7MHq1iB0qYrinAAAAVc"]
[Tue Apr 21 00:59:58.232273 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:9261] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZbjv4EoMBgOJuJnT0XbwAAAAA"]
[Tue Apr 21 00:59:58.234027 2026] [:error] [pid 11350:tid 11365] [client 20.203.254.37:9225] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZbjv4EoMBgOJuJnT0XcAAAAAY"]
[Tue Apr 21 00:59:58.707839 2026] [:error] [pid 11352:tid 11427] [client 20.203.254.37:9220] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZbjml10mhMSfJ7ir_74wAAAI0"]
[Tue Apr 21 00:59:58.708082 2026] [:error] [pid 42014:tid 42030] [client 20.203.254.37:9353] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeZbjsek-00-ZI0f1NqmoQAAAQ4"]
[Tue Apr 21 00:59:59.180453 2026] [:error] [pid 11350:tid 11383] [client 20.203.254.37:10020] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZbj_4EoMBgOJuJnT0XdQAAABg"]
[Tue Apr 21 00:59:59.180848 2026] [:error] [pid 11494:tid 11507] [client 20.203.254.37:9277] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeZbj8gko5iFiE8YoyQsVQAAAYs"]
[Tue Apr 21 00:59:59.654827 2026] [:error] [pid 11352:tid 11419] [client 20.203.254.37:9304] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeZbj2l10mhMSfJ7ir_75gAAAIU"]
[Tue Apr 21 00:59:59.665089 2026] [:error] [pid 11352:tid 11417] [client 20.203.254.37:10113] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZbj2l10mhMSfJ7ir_75wAAAIM"]
[Tue Apr 21 01:00:00.137820 2026] [proxy_fcgi:error] [pid 11350:tid 11364] [client 20.203.254.37:9257] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:00.141493 2026] [proxy_fcgi:error] [pid 11351:tid 11411] [client 20.203.254.37:9236] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:00.380426 2026] [proxy_fcgi:error] [pid 11350:tid 11374] [client 20.203.254.37:9257] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:00.381407 2026] [proxy_fcgi:error] [pid 11351:tid 11391] [client 20.203.254.37:9236] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:00.624901 2026] [proxy_fcgi:error] [pid 11351:tid 11397] [client 20.203.254.37:9236] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:00.863385 2026] [proxy_fcgi:error] [pid 11351:tid 11395] [client 20.203.254.37:9236] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:00.864614 2026] [proxy_fcgi:error] [pid 11350:tid 11373] [client 20.203.254.37:9257] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:01.102944 2026] [proxy_fcgi:error] [pid 11350:tid 11381] [client 20.203.254.37:9257] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:01.102944 2026] [proxy_fcgi:error] [pid 11351:tid 11406] [client 20.203.254.37:9236] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:01.342645 2026] [proxy_fcgi:error] [pid 11350:tid 11371] [client 20.203.254.37:9257] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:01.344343 2026] [proxy_fcgi:error] [pid 11351:tid 11399] [client 20.203.254.37:9236] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 01:00:01.578858 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9257] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbkf4EoMBgOJuJnT0XhQAAAAQ"]
[Tue Apr 21 01:00:01.581134 2026] [:error] [pid 11351:tid 11407] [client 20.203.254.37:9236] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbkQN8Z1-vktaI_tODgQAAAFQ"]
[Tue Apr 21 01:00:02.050796 2026] [:error] [pid 11350:tid 11377] [client 20.203.254.37:9337] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbkv4EoMBgOJuJnT0XhwAAABI"]
[Tue Apr 21 01:00:02.053573 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:9316] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbkv4EoMBgOJuJnT0XiAAAABM"]
[Tue Apr 21 01:00:02.523661 2026] [:error] [pid 11494:tid 11513] [client 20.203.254.37:9332] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbksgko5iFiE8YoyQsdQAAAZE"]
[Tue Apr 21 01:00:02.531564 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9254] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbkv4EoMBgOJuJnT0XjQAAAAU"]
[Tue Apr 21 01:00:03.006129 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9341] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZbkwN8Z1-vktaI_tODiQAAAE0"]
[Tue Apr 21 01:00:03.006368 2026] [:error] [pid 11441:tid 11443] [client 20.203.254.37:9240] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbk8ixByFUvmh319DWhgAAAMA"]
[Tue Apr 21 01:00:03.478408 2026] [:error] [pid 42014:tid 42026] [client 20.203.254.37:9384] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeZbk8ek-00-ZI0f1NqmqQAAAQo"]
[Tue Apr 21 01:00:03.478584 2026] [:error] [pid 42014:tid 42023] [client 20.203.254.37:9434] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZbk8ek-00-ZI0f1NqmqgAAAQc"]
[Tue Apr 21 01:00:03.950661 2026] [:error] [pid 11352:tid 11434] [client 20.203.254.37:9396] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeZbk2l10mhMSfJ7ir_77AAAAJQ"]
[Tue Apr 21 01:00:03.951113 2026] [:error] [pid 11351:tid 11395] [client 20.203.254.37:9219] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZbkwN8Z1-vktaI_tODiwAAAEg"]
[Tue Apr 21 01:00:04.422375 2026] [:error] [pid 6928:tid 6931] [client 20.203.254.37:9246] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeZblB3y7MHq1iB0qYripAAAAUE"]
[Tue Apr 21 01:00:04.423320 2026] [:error] [pid 6928:tid 6940] [client 20.203.254.37:9278] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZblB3y7MHq1iB0qYripQAAAUo"]
[Tue Apr 21 01:00:04.892797 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:9400] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aeZblMgko5iFiE8YoyQsfQAAAYw"]
[Tue Apr 21 01:00:04.894802 2026] [:error] [pid 11494:tid 11504] [client 20.203.254.37:9229] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZblMgko5iFiE8YoyQsfgAAAYg"]
[Tue Apr 21 01:00:05.371834 2026] [:error] [pid 11350:tid 11377] [client 20.203.254.37:9396] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeZblf4EoMBgOJuJnT0XlQAAABI"]
[Tue Apr 21 01:00:05.839709 2026] [:error] [pid 11350:tid 11374] [client 20.203.254.37:9402] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZblf4EoMBgOJuJnT0XlwAAAA8"]
[Tue Apr 21 01:00:05.848418 2026] [:error] [pid 11350:tid 11372] [client 20.203.254.37:9342] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeZblf4EoMBgOJuJnT0XmAAAAA0"]
[Tue Apr 21 01:00:06.332786 2026] [:error] [pid 11494:tid 11510] [client 20.203.254.37:9265] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeZblsgko5iFiE8YoyQsggAAAY4"]
[Tue Apr 21 01:00:06.807107 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9223] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ew.php"] [unique_id "aeZblv4EoMBgOJuJnT0XoQAAAAQ"]
[Tue Apr 21 01:00:06.924531 2026] [:error] [pid 11441:tid 11456] [client 20.203.254.37:9244] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZblsixByFUvmh319DWlAAAAM0"]
[Tue Apr 21 01:00:07.280597 2026] [:error] [pid 11352:tid 11415] [client 20.203.254.37:9274] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file21.php"] [unique_id "aeZbl2l10mhMSfJ7ir_78QAAAIE"]
[Tue Apr 21 01:00:07.751879 2026] [:error] [pid 11350:tid 11376] [client 20.203.254.37:9242] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file21.php"] [unique_id "aeZbl_4EoMBgOJuJnT0XrQAAABE"]
[Tue Apr 21 01:00:07.975115 2026] [:error] [pid 11350:tid 11375] [client 20.203.254.37:9369] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZbl_4EoMBgOJuJnT0XsAAAABA"]
[Tue Apr 21 01:00:08.232706 2026] [:error] [pid 11350:tid 11363] [client 20.203.254.37:9343] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file21.php"] [unique_id "aeZbmP4EoMBgOJuJnT0XtQAAAAQ"]
[Tue Apr 21 01:00:08.452251 2026] [:error] [pid 11350:tid 11377] [client 20.203.254.37:9268] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZbmP4EoMBgOJuJnT0XtwAAABI"]
[Tue Apr 21 01:00:08.724486 2026] [:error] [pid 42014:tid 42040] [client 20.203.254.37:9269] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file21.php"] [unique_id "aeZbmMek-00-ZI0f1NqmrAAAARg"]
[Tue Apr 21 01:00:08.927182 2026] [:error] [pid 6928:tid 6936] [client 20.203.254.37:10210] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZbmB3y7MHq1iB0qYritAAAAUY"]
[Tue Apr 21 01:00:09.228940 2026] [:error] [pid 6928:tid 6938] [client 20.203.254.37:9237] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbmR3y7MHq1iB0qYritwAAAUg"]
[Tue Apr 21 01:00:09.708120 2026] [:error] [pid 6928:tid 6953] [client 20.203.254.37:9273] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbmR3y7MHq1iB0qYriugAAAVc"]
[Tue Apr 21 01:00:10.047731 2026] [:error] [pid 11494:tid 11511] [client 20.203.254.37:9279] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZbmsgko5iFiE8YoyQshgAAAY8"]
[Tue Apr 21 01:00:10.191843 2026] [:error] [pid 11494:tid 11508] [client 20.203.254.37:9340] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbmsgko5iFiE8YoyQshwAAAYw"]
[Tue Apr 21 01:00:10.523937 2026] [:error] [pid 11351:tid 11402] [client 20.203.254.37:10209] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZbmgN8Z1-vktaI_tODjgAAAE8"]
[Tue Apr 21 01:00:10.677505 2026] [:error] [pid 11494:tid 11498] [client 20.203.254.37:9325] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "aeZbmsgko5iFiE8YoyQsigAAAYI"]
[Tue Apr 21 01:00:11.001953 2026] [:error] [pid 11351:tid 11400] [client 20.203.254.37:9224] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZbmwN8Z1-vktaI_tODkQAAAE0"]
[Tue Apr 21 01:00:11.157123 2026] [:error] [pid 11351:tid 11391] [client 20.203.254.37:9228] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZbmwN8Z1-vktaI_tODkgAAAEQ"]
[Tue Apr 21 01:00:11.646112 2026] [:error] [pid 11441:tid 11451] [client 20.203.254.37:10130] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZbm8ixByFUvmh319DWmQAAAMg"]
[Tue Apr 21 01:00:12.119485 2026] [:error] [pid 11494:tid 11515] [client 20.203.254.37:10132] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZbnMgko5iFiE8YoyQsjAAAAZM"]
[Tue Apr 21 01:00:12.142989 2026] [:error] [pid 11494:tid 11509] [client 20.203.254.37:10121] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZbnMgko5iFiE8YoyQsjQAAAY0"]
[Tue Apr 21 01:00:12.591194 2026] [:error] [pid 11351:tid 11390] [client 20.203.254.37:9331] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZbnAN8Z1-vktaI_tODmwAAAEM"]
[Tue Apr 21 01:00:12.615514 2026] [:error] [pid 11351:tid 11410] [client 20.203.254.37:9227] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "aeZbnAN8Z1-vktaI_tODnAAAAFc"]
[Tue Apr 21 01:00:13.068629 2026] [:error] [pid 11351:tid 11409] [client 20.203.254.37:9267] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZbnQN8Z1-vktaI_tODnwAAAFY"]
[Tue Apr 21 01:00:13.089520 2026] [:error] [pid 6928:tid 6936] [client 20.203.254.37:10186] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZbnR3y7MHq1iB0qYriwwAAAUY"]
[Tue Apr 21 01:00:13.551434 2026] [:error] [pid 11494:tid 11518] [client 20.203.254.37:9218] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZbncgko5iFiE8YoyQslQAAAZY"]
[Tue Apr 21 01:00:13.579072 2026] [:error] [pid 11494:tid 11497] [client 20.203.254.37:9259] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZbncgko5iFiE8YoyQslgAAAYE"]
[Tue Apr 21 01:00:14.053985 2026] [:error] [pid 11351:tid 11405] [client 20.203.254.37:9293] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZbngN8Z1-vktaI_tODowAAAFI"]
[Tue Apr 21 01:00:14.547489 2026] [:error] [pid 11350:tid 11361] [client 20.203.254.37:9350] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aeZbnv4EoMBgOJuJnT0XvgAAAAI"]
[Tue Apr 21 01:00:15.026722 2026] [:error] [pid 11350:tid 11359] [client 20.203.254.37:10187] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZbn_4EoMBgOJuJnT0XwgAAAAA"]
[Tue Apr 21 01:00:15.516374 2026] [:error] [pid 11352:tid 11420] [client 20.203.254.37:10138] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZbn2l10mhMSfJ7ir_7-gAAAIY"]
[Tue Apr 21 01:00:15.992368 2026] [:error] [pid 11350:tid 11378] [client 20.203.254.37:10202] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZbn_4EoMBgOJuJnT0XxQAAABM"]
[Tue Apr 21 01:00:16.522368 2026] [:error] [pid 11351:tid 11403] [client 20.203.254.37:9319] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZboAN8Z1-vktaI_tODrQAAAFA"]
[Tue Apr 21 01:00:16.993956 2026] [:error] [pid 11350:tid 11362] [client 20.203.254.37:10212] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZboP4EoMBgOJuJnT0XywAAAAM"]
[Tue Apr 21 01:00:17.471989 2026] [:error] [pid 11350:tid 11364] [client 20.203.254.37:9270] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZbof4EoMBgOJuJnT0X0AAAAAU"]
[Tue Apr 21 01:00:17.945866 2026] [:error] [pid 11352:tid 11434] [client 20.203.254.37:10190] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZboWl10mhMSfJ7ir_7-wAAAJQ"]
[Tue Apr 21 01:00:18.429713 2026] [:error] [pid 11351:tid 11398] [client 20.203.254.37:9339] [client 20.203.254.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aeZbogN8Z1-vktaI_tODsQAAAEs"]
[Tue Apr 21 03:05:25.426925 2026] [proxy_fcgi:error] [pid 11350:tid 11371] [client 72.146.19.182:4241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:05:25.666610 2026] [proxy_fcgi:error] [pid 11350:tid 11375] [client 72.146.19.182:4241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:05:27.855034 2026] [proxy_fcgi:error] [pid 11350:tid 11366] [client 72.146.19.182:4241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:05:28.091975 2026] [proxy_fcgi:error] [pid 11350:tid 11378] [client 72.146.19.182:4241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:05:28.328992 2026] [proxy_fcgi:error] [pid 11350:tid 11373] [client 72.146.19.182:4241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:05:28.566119 2026] [proxy_fcgi:error] [pid 11350:tid 11360] [client 72.146.19.182:4241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:05:28.799872 2026] [:error] [pid 11350:tid 11367] [client 72.146.19.182:4241] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ4-P4EoMBgOJuJnT1W7QAAAAg"]
[Tue Apr 21 03:05:29.833133 2026] [:error] [pid 11351:tid 11410] [client 72.146.19.182:58047] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ4-QN8Z1-vktaI_tPVzQAAAFc"]
[Tue Apr 21 03:05:30.443695 2026] [:error] [pid 11441:tid 11462] [client 72.146.19.182:57994] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ4-sixByFUvmh319D8YAAAANM"]
[Tue Apr 21 03:05:31.115871 2026] [:error] [pid 11350:tid 11361] [client 72.146.19.182:57999] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ4-_4EoMBgOJuJnT1W7gAAAAI"]
[Tue Apr 21 03:05:31.692899 2026] [:error] [pid 11350:tid 11365] [client 72.146.19.182:58627] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ4-_4EoMBgOJuJnT1W8AAAAAY"]
[Tue Apr 21 03:05:32.203474 2026] [:error] [pid 11352:tid 11415] [client 72.146.19.182:57996] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ4_Gl10mhMSfJ7ir8UNAAAAIE"]
[Tue Apr 21 03:05:32.745490 2026] [:error] [pid 11352:tid 11430] [client 72.146.19.182:4773] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ4_Gl10mhMSfJ7ir8UNQAAAJA"]
[Tue Apr 21 03:05:33.395124 2026] [:error] [pid 11350:tid 11369] [client 72.146.19.182:58043] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ4_f4EoMBgOJuJnT1W8gAAAAo"]
[Tue Apr 21 03:05:34.190987 2026] [:error] [pid 11352:tid 11414] [client 72.146.19.182:4770] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ4_ml10mhMSfJ7ir8UNgAAAIA"]
[Tue Apr 21 03:05:34.980162 2026] [:error] [pid 11351:tid 11392] [client 72.146.19.182:58637] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ4_gN8Z1-vktaI_tPV5QAAAEU"]
[Tue Apr 21 03:05:35.749076 2026] [:error] [pid 11441:tid 11447] [client 72.146.19.182:53670] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ4_8ixByFUvmh319D8bwAAAMQ"]
[Tue Apr 21 03:05:36.354646 2026] [:error] [pid 6928:tid 6947] [client 72.146.19.182:61207] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ5AB3y7MHq1iB0qYoCIwAAAVE"]
[Tue Apr 21 03:05:36.983658 2026] [:error] [pid 11351:tid 11404] [client 72.146.19.182:53645] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ5AAN8Z1-vktaI_tPV6wAAAFE"]
[Tue Apr 21 03:05:37.639557 2026] [:error] [pid 11350:tid 11379] [client 72.146.19.182:4765] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ5Af4EoMBgOJuJnT1W9AAAABQ"]
[Tue Apr 21 03:05:38.383809 2026] [:error] [pid 6928:tid 6941] [client 72.146.19.182:58668] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ5Ah3y7MHq1iB0qYoCJAAAAUs"]
[Tue Apr 21 03:05:39.054594 2026] [:error] [pid 11441:tid 11445] [client 72.146.19.182:58002] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ5A8ixByFUvmh319D8cwAAAMI"]
[Tue Apr 21 03:05:40.038020 2026] [:error] [pid 6928:tid 6936] [client 72.146.19.182:58645] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZ5BB3y7MHq1iB0qYoCJQAAAUY"]
[Tue Apr 21 03:05:40.771700 2026] [:error] [pid 11352:tid 11423] [client 72.146.19.182:4758] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZ5BGl10mhMSfJ7ir8UOAAAAIk"]
[Tue Apr 21 03:05:41.842840 2026] [:error] [pid 11351:tid 11394] [client 72.146.19.182:57530] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZ5BQN8Z1-vktaI_tPV8QAAAEc"]
[Tue Apr 21 03:05:42.711519 2026] [:error] [pid 11351:tid 11396] [client 72.146.19.182:57474] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aeZ5BgN8Z1-vktaI_tPV8wAAAEk"]
[Tue Apr 21 03:05:43.435052 2026] [:error] [pid 11350:tid 11377] [client 72.146.19.182:4780] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZ5B_4EoMBgOJuJnT1W9wAAABI"]
[Tue Apr 21 03:05:44.012313 2026] [:error] [pid 11351:tid 11393] [client 72.146.19.182:49272] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZ5CAN8Z1-vktaI_tPV9wAAAEY"]
[Tue Apr 21 03:05:45.302160 2026] [:error] [pid 11351:tid 11410] [client 72.146.19.182:4737] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZ5CQN8Z1-vktaI_tPV-AAAAFc"]
[Tue Apr 21 03:05:46.514516 2026] [:error] [pid 11494:tid 11517] [client 72.146.19.182:4748] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aeZ5Csgko5iFiE8YoyRdvwAAAZU"]
[Tue Apr 21 03:05:48.551307 2026] [:error] [pid 11494:tid 11506] [client 72.146.19.182:4750] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZ5DMgko5iFiE8YoyRdwwAAAYo"]
[Tue Apr 21 03:05:49.687933 2026] [:error] [pid 11494:tid 11508] [client 72.146.19.182:53658] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZ5Dcgko5iFiE8YoyRdxwAAAYw"]
[Tue Apr 21 03:05:50.917467 2026] [:error] [pid 11494:tid 11496] [client 72.146.19.182:58680] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZ5Dsgko5iFiE8YoyRdywAAAYA"]
[Tue Apr 21 03:05:51.968903 2026] [:error] [pid 11441:tid 11461] [client 72.146.19.182:64364] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "aeZ5D8ixByFUvmh319D8fgAAANI"]
[Tue Apr 21 03:05:52.831082 2026] [:error] [pid 11350:tid 11380] [client 72.146.19.182:64375] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ5EP4EoMBgOJuJnT1W-QAAABU"]
[Tue Apr 21 03:05:53.766852 2026] [:error] [pid 42014:tid 42033] [client 72.146.19.182:58003] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ5Ecek-00-ZI0f1NrCXAAAARE"]
[Tue Apr 21 03:05:54.693295 2026] [:error] [pid 42014:tid 42039] [client 72.146.19.182:4740] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ5Esek-00-ZI0f1NrCXwAAARc"]
[Tue Apr 21 03:05:55.499626 2026] [:error] [pid 11351:tid 11408] [client 72.146.19.182:57489] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ5EwN8Z1-vktaI_tPV-wAAAFU"]
[Tue Apr 21 03:05:56.496703 2026] [:error] [pid 11494:tid 11513] [client 72.146.19.182:53684] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZ5FMgko5iFiE8YoyRdzQAAAZE"]
[Tue Apr 21 03:05:57.786433 2026] [:error] [pid 11494:tid 11514] [client 72.146.19.182:58016] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZ5Fcgko5iFiE8YoyRdzgAAAZI"]
[Tue Apr 21 03:05:58.578434 2026] [:error] [pid 11494:tid 11502] [client 72.146.19.182:64338] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZ5Fsgko5iFiE8YoyRd0gAAAYY"]
[Tue Apr 21 03:05:59.228741 2026] [:error] [pid 11351:tid 11395] [client 72.146.19.182:61194] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "aeZ5FwN8Z1-vktaI_tPWBAAAAEg"]
[Tue Apr 21 03:05:59.899369 2026] [:error] [pid 11351:tid 11403] [client 72.146.19.182:58021] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZ5FwN8Z1-vktaI_tPWBgAAAFA"]
[Tue Apr 21 03:06:00.690954 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:58684] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZ5GAN8Z1-vktaI_tPWDAAAAEM"]
[Tue Apr 21 03:06:02.516872 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:58660] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZ5GgN8Z1-vktaI_tPWEAAAAFM"]
[Tue Apr 21 03:06:03.753433 2026] [:error] [pid 11351:tid 11393] [client 72.146.19.182:57490] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ref.php"] [unique_id "aeZ5GwN8Z1-vktaI_tPWFQAAAEY"]
[Tue Apr 21 03:06:05.265566 2026] [:error] [pid 6928:tid 6935] [client 72.146.19.182:61202] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ5HR3y7MHq1iB0qYoCNgAAAUU"]
[Tue Apr 21 03:06:06.912191 2026] [:error] [pid 11352:tid 11428] [client 72.146.19.182:61208] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ5Hml10mhMSfJ7ir8UQQAAAI4"]
[Tue Apr 21 03:06:08.861429 2026] [:error] [pid 42014:tid 42020] [client 72.146.19.182:4796] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ5IMek-00-ZI0f1NrCYgAAAQQ"]
[Tue Apr 21 03:06:11.006153 2026] [:error] [pid 11350:tid 11363] [client 72.146.19.182:57521] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ5I_4EoMBgOJuJnT1XCAAAAAQ"]
[Tue Apr 21 03:06:12.023578 2026] [:error] [pid 6928:tid 6943] [client 72.146.19.182:4230] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZ5JB3y7MHq1iB0qYoCOgAAAU0"]
[Tue Apr 21 03:06:13.494144 2026] [:error] [pid 11494:tid 11511] [client 72.146.19.182:58031] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZ5Jcgko5iFiE8YoyRd4gAAAY8"]
[Tue Apr 21 03:06:14.128370 2026] [:error] [pid 11441:tid 11462] [client 72.146.19.182:61229] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZ5JsixByFUvmh319D8jwAAANM"]
[Tue Apr 21 03:06:14.686546 2026] [:error] [pid 6928:tid 6947] [client 72.146.19.182:58032] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminer.php"] [unique_id "aeZ5Jh3y7MHq1iB0qYoCOwAAAVE"]
[Tue Apr 21 03:06:15.584748 2026] [:error] [pid 11494:tid 11505] [client 72.146.19.182:53692] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZ5J8gko5iFiE8YoyRd5AAAAYk"]
[Tue Apr 21 03:06:16.791516 2026] [:error] [pid 11351:tid 11389] [client 72.146.19.182:53642] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZ5KAN8Z1-vktaI_tPWGgAAAEI"]
[Tue Apr 21 03:06:17.769393 2026] [:error] [pid 11494:tid 11516] [client 72.146.19.182:58022] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZ5Kcgko5iFiE8YoyRd5gAAAZQ"]
[Tue Apr 21 03:06:18.633005 2026] [:error] [pid 11494:tid 11508] [client 72.146.19.182:57534] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ktfow.php"] [unique_id "aeZ5Ksgko5iFiE8YoyRd6AAAAYw"]
[Tue Apr 21 03:06:19.242667 2026] [:error] [pid 6928:tid 6939] [client 72.146.19.182:57523] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZ5Kx3y7MHq1iB0qYoCQgAAAUk"]
[Tue Apr 21 03:06:20.461905 2026] [:error] [pid 11351:tid 11395] [client 72.146.19.182:58004] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZ5LAN8Z1-vktaI_tPWHwAAAEg"]
[Tue Apr 21 03:06:21.118929 2026] [:error] [pid 11441:tid 11445] [client 72.146.19.182:49183] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZ5LcixByFUvmh319D8kwAAAMI"]
[Tue Apr 21 03:06:22.088673 2026] [:error] [pid 11494:tid 11503] [client 72.146.19.182:57499] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mode.php"] [unique_id "aeZ5Lsgko5iFiE8YoyRd7AAAAYc"]
[Tue Apr 21 03:06:23.035673 2026] [:error] [pid 11441:tid 11455] [client 72.146.19.182:4747] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZ5L8ixByFUvmh319D8lwAAAMw"]
[Tue Apr 21 03:06:24.690709 2026] [:error] [pid 11441:tid 11452] [client 72.146.19.182:4264] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZ5MMixByFUvmh319D8nAAAAMk"]
[Tue Apr 21 03:06:25.744587 2026] [:error] [pid 11350:tid 11382] [client 72.146.19.182:57517] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZ5Mf4EoMBgOJuJnT1XEQAAABc"]
[Tue Apr 21 03:06:26.811644 2026] [:error] [pid 11494:tid 11505] [client 72.146.19.182:61225] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Xx.php"] [unique_id "aeZ5Msgko5iFiE8YoyRd7QAAAYk"]
[Tue Apr 21 03:06:27.526059 2026] [:error] [pid 11352:tid 11418] [client 72.146.19.182:53646] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmini.php"] [unique_id "aeZ5M2l10mhMSfJ7ir8UUAAAAIQ"]
[Tue Apr 21 03:06:28.841535 2026] [proxy_fcgi:error] [pid 6928:tid 6947] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:29.079252 2026] [proxy_fcgi:error] [pid 6928:tid 6944] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:29.555132 2026] [proxy_fcgi:error] [pid 6928:tid 6951] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:29.793073 2026] [proxy_fcgi:error] [pid 6928:tid 6931] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:30.079540 2026] [proxy_fcgi:error] [pid 6928:tid 6936] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:30.318759 2026] [proxy_fcgi:error] [pid 6928:tid 6930] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:30.571593 2026] [proxy_fcgi:error] [pid 6928:tid 6949] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:31.241348 2026] [proxy_fcgi:error] [pid 6928:tid 6945] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:31.504984 2026] [proxy_fcgi:error] [pid 6928:tid 6939] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:31.845411 2026] [proxy_fcgi:error] [pid 6928:tid 6952] [client 72.146.19.182:57505] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:06:32.099810 2026] [:error] [pid 6928:tid 6934] [client 72.146.19.182:57505] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZ5OB3y7MHq1iB0qYoCXAAAAUQ"]
[Tue Apr 21 03:06:36.236618 2026] [:error] [pid 11351:tid 11411] [client 72.146.19.182:53666] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZ5PAN8Z1-vktaI_tPWMgAAAFg"]
[Tue Apr 21 03:06:36.938458 2026] [:error] [pid 11351:tid 11409] [client 72.146.19.182:57477] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZ5PAN8Z1-vktaI_tPWOQAAAFY"]
[Tue Apr 21 03:06:37.635505 2026] [:error] [pid 11350:tid 11376] [client 72.146.19.182:53656] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aeZ5Pf4EoMBgOJuJnT1XGAAAABE"]
[Tue Apr 21 03:06:38.960497 2026] [:error] [pid 11351:tid 11408] [client 72.146.19.182:58687] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeZ5PgN8Z1-vktaI_tPWRAAAAFU"]
[Tue Apr 21 03:06:41.227746 2026] [:error] [pid 11351:tid 11397] [client 72.146.19.182:58648] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeZ5QQN8Z1-vktaI_tPWVQAAAEo"]
[Tue Apr 21 03:06:42.315753 2026] [:error] [pid 6928:tid 6947] [client 72.146.19.182:57506] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeZ5Qh3y7MHq1iB0qYoCYwAAAVE"]
[Tue Apr 21 03:06:43.333138 2026] [:error] [pid 6928:tid 6936] [client 72.146.19.182:4240] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aeZ5Qx3y7MHq1iB0qYoCZQAAAUY"]
[Tue Apr 21 03:06:44.021877 2026] [:error] [pid 11350:tid 11377] [client 72.146.19.182:53640] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeZ5RP4EoMBgOJuJnT1XGwAAABI"]
[Tue Apr 21 03:06:45.036306 2026] [:error] [pid 11350:tid 11369] [client 72.146.19.182:49237] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeZ5Rf4EoMBgOJuJnT1XIAAAAAo"]
[Tue Apr 21 03:06:45.783999 2026] [:error] [pid 11352:tid 11428] [client 72.146.19.182:4279] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeZ5RWl10mhMSfJ7ir8UXwAAAI4"]
[Tue Apr 21 03:06:46.603037 2026] [:error] [pid 11494:tid 11520] [client 72.146.19.182:53679] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aeZ5Rsgko5iFiE8YoyRd9wAAAZg"]
[Tue Apr 21 03:06:47.215988 2026] [:error] [pid 42014:tid 42019] [client 72.146.19.182:53695] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeZ5R8ek-00-ZI0f1NrCewAAAQM"]
[Tue Apr 21 03:06:48.136154 2026] [:error] [pid 11441:tid 11449] [client 72.146.19.182:4235] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeZ5SMixByFUvmh319D8vAAAAMY"]
[Tue Apr 21 03:06:49.186359 2026] [:error] [pid 11352:tid 11435] [client 72.146.19.182:57514] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeZ5SWl10mhMSfJ7ir8UYgAAAJU"]
[Tue Apr 21 03:06:49.951973 2026] [:error] [pid 11494:tid 11510] [client 72.146.19.182:58629] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aeZ5Scgko5iFiE8YoyRd_gAAAY4"]
[Tue Apr 21 03:06:50.751529 2026] [:error] [pid 11494:tid 11503] [client 72.146.19.182:61223] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZ5Ssgko5iFiE8YoyReAgAAAYc"]
[Tue Apr 21 03:06:51.324002 2026] [:error] [pid 11494:tid 11498] [client 72.146.19.182:61188] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZ5S8gko5iFiE8YoyReBAAAAYI"]
[Tue Apr 21 03:06:52.457825 2026] [:error] [pid 11351:tid 11393] [client 72.146.19.182:58658] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZ5TAN8Z1-vktaI_tPWXwAAAEY"]
[Tue Apr 21 03:06:53.062679 2026] [:error] [pid 11351:tid 11404] [client 72.146.19.182:49211] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aeZ5TQN8Z1-vktaI_tPWYAAAAFE"]
[Tue Apr 21 03:06:53.775935 2026] [:error] [pid 11350:tid 11372] [client 72.146.19.182:61228] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZ5Tf4EoMBgOJuJnT1XKAAAAA0"]
[Tue Apr 21 03:06:54.511387 2026] [:error] [pid 11441:tid 11443] [client 72.146.19.182:58000] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZ5TsixByFUvmh319D8wQAAAMA"]
[Tue Apr 21 03:06:55.569027 2026] [:error] [pid 11350:tid 11383] [client 72.146.19.182:61196] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZ5T_4EoMBgOJuJnT1XKgAAABg"]
[Tue Apr 21 03:06:56.103414 2026] [:error] [pid 11494:tid 11499] [client 72.146.19.182:53685] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aeZ5UMgko5iFiE8YoyReCAAAAYM"]
[Tue Apr 21 03:06:56.867052 2026] [:error] [pid 11494:tid 11511] [client 72.146.19.182:53643] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZ5UMgko5iFiE8YoyReDAAAAY8"]
[Tue Apr 21 03:06:57.548831 2026] [:error] [pid 11350:tid 11377] [client 72.146.19.182:61246] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZ5Uf4EoMBgOJuJnT1XLwAAABI"]
[Tue Apr 21 03:06:58.385902 2026] [:error] [pid 11350:tid 11360] [client 72.146.19.182:4798] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZ5Uv4EoMBgOJuJnT1XMAAAAAE"]
[Tue Apr 21 03:06:59.037695 2026] [:error] [pid 11351:tid 11409] [client 72.146.19.182:57984] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aeZ5UwN8Z1-vktaI_tPWaAAAAFY"]
[Tue Apr 21 03:07:00.060209 2026] [:error] [pid 11350:tid 11370] [client 72.146.19.182:4751] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ5VP4EoMBgOJuJnT1XNAAAAAs"]
[Tue Apr 21 03:07:00.610911 2026] [:error] [pid 11351:tid 11395] [client 72.146.19.182:57492] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ5VAN8Z1-vktaI_tPWcAAAAEg"]
[Tue Apr 21 03:07:01.408942 2026] [:error] [pid 11352:tid 11416] [client 72.146.19.182:4755] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ5VWl10mhMSfJ7ir8UagAAAII"]
[Tue Apr 21 03:07:01.955362 2026] [:error] [pid 11350:tid 11364] [client 72.146.19.182:4746] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ5Vf4EoMBgOJuJnT1XOQAAAAU"]
[Tue Apr 21 03:07:02.494909 2026] [:error] [pid 11350:tid 11371] [client 72.146.19.182:4760] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZ5Vv4EoMBgOJuJnT1XPAAAAAw"]
[Tue Apr 21 03:07:03.026559 2026] [:error] [pid 11351:tid 11411] [client 72.146.19.182:58657] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZ5VwN8Z1-vktaI_tPWcwAAAFg"]
[Tue Apr 21 03:07:03.735136 2026] [:error] [pid 11350:tid 11378] [client 72.146.19.182:57990] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZ5V_4EoMBgOJuJnT1XQwAAABM"]
[Tue Apr 21 03:07:05.906883 2026] [:error] [pid 11494:tid 11508] [client 72.146.19.182:58681] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aeZ5Wcgko5iFiE8YoyReDgAAAYw"]
[Tue Apr 21 03:07:06.756080 2026] [:error] [pid 11351:tid 11410] [client 72.146.19.182:4799] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZ5WgN8Z1-vktaI_tPWfwAAAFc"]
[Tue Apr 21 03:07:07.500370 2026] [:error] [pid 11351:tid 11394] [client 72.146.19.182:61191] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZ5WwN8Z1-vktaI_tPWggAAAEc"]
[Tue Apr 21 03:07:08.332586 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:53688] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZ5XAN8Z1-vktaI_tPWhgAAAE4"]
[Tue Apr 21 03:07:10.271431 2026] [:error] [pid 11351:tid 11408] [client 72.146.19.182:61241] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aeZ5XgN8Z1-vktaI_tPWjAAAAFU"]
[Tue Apr 21 03:07:11.251495 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:58671] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZ5XwN8Z1-vktaI_tPWkAAAAE4"]
[Tue Apr 21 03:07:12.220324 2026] [:error] [pid 11494:tid 11500] [client 72.146.19.182:4791] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZ5YMgko5iFiE8YoyReEQAAAYQ"]
[Tue Apr 21 03:07:13.014743 2026] [:error] [pid 11350:tid 11366] [client 72.146.19.182:53682] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZ5Yf4EoMBgOJuJnT1XSwAAAAc"]
[Tue Apr 21 03:07:14.139454 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:4759] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tea.php"] [unique_id "aeZ5YgN8Z1-vktaI_tPWlgAAAFQ"]
[Tue Apr 21 03:07:15.348963 2026] [:error] [pid 11350:tid 11383] [client 72.146.19.182:61228] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZ5Y_4EoMBgOJuJnT1XVgAAABg"]
[Tue Apr 21 03:07:16.268647 2026] [:error] [pid 11351:tid 11398] [client 72.146.19.182:58001] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZ5ZAN8Z1-vktaI_tPWlwAAAEs"]
[Tue Apr 21 03:07:17.114231 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:53662] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZ5ZQN8Z1-vktaI_tPWmwAAAFM"]
[Tue Apr 21 03:07:17.993024 2026] [:error] [pid 11350:tid 11375] [client 72.146.19.182:4795] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aeZ5Zf4EoMBgOJuJnT1XXAAAABA"]
[Tue Apr 21 03:07:18.690452 2026] [:error] [pid 11350:tid 11371] [client 72.146.19.182:57986] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZ5Zv4EoMBgOJuJnT1XXwAAAAw"]
[Tue Apr 21 03:07:19.408192 2026] [:error] [pid 11350:tid 11373] [client 72.146.19.182:4259] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZ5Z_4EoMBgOJuJnT1XZAAAAA4"]
[Tue Apr 21 03:07:20.095476 2026] [:error] [pid 11352:tid 11427] [client 72.146.19.182:4741] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZ5aGl10mhMSfJ7ir8UcgAAAI0"]
[Tue Apr 21 03:07:20.707216 2026] [:error] [pid 11352:tid 11431] [client 72.146.19.182:64379] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aeZ5aGl10mhMSfJ7ir8UdAAAAJE"]
[Tue Apr 21 03:07:21.359366 2026] [:error] [pid 11494:tid 11513] [client 72.146.19.182:4229] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZ5acgko5iFiE8YoyReHAAAAZE"]
[Tue Apr 21 03:07:22.323686 2026] [:error] [pid 11494:tid 11514] [client 72.146.19.182:57478] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZ5asgko5iFiE8YoyReIAAAAZI"]
[Tue Apr 21 03:07:23.484285 2026] [:error] [pid 11494:tid 11501] [client 72.146.19.182:58626] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZ5a8gko5iFiE8YoyReIQAAAYU"]
[Tue Apr 21 03:07:24.367637 2026] [:error] [pid 11494:tid 11520] [client 72.146.19.182:4261] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aeZ5bMgko5iFiE8YoyReIwAAAZg"]
[Tue Apr 21 03:07:25.456537 2026] [:error] [pid 11352:tid 11432] [client 72.146.19.182:53678] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZ5bWl10mhMSfJ7ir8UewAAAJI"]
[Tue Apr 21 03:07:26.218847 2026] [:error] [pid 11352:tid 11436] [client 72.146.19.182:4749] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZ5bml10mhMSfJ7ir8UfgAAAJY"]
[Tue Apr 21 03:07:26.778544 2026] [:error] [pid 11350:tid 11383] [client 72.146.19.182:4237] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZ5bv4EoMBgOJuJnT1XeQAAABg"]
[Tue Apr 21 03:07:27.493401 2026] [:error] [pid 11350:tid 11377] [client 72.146.19.182:61227] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aeZ5b_4EoMBgOJuJnT1XfAAAABI"]
[Tue Apr 21 03:07:28.269047 2026] [:error] [pid 11441:tid 11467] [client 72.146.19.182:4790] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZ5cMixByFUvmh319D81gAAANg"]
[Tue Apr 21 03:07:29.678787 2026] [:error] [pid 11350:tid 11381] [client 72.146.19.182:58662] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZ5cf4EoMBgOJuJnT1XgAAAABY"]
[Tue Apr 21 03:07:30.453070 2026] [:error] [pid 11350:tid 11365] [client 72.146.19.182:49263] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aeZ5cv4EoMBgOJuJnT1XgQAAAAY"]
[Tue Apr 21 03:07:31.434730 2026] [proxy_fcgi:error] [pid 11441:tid 11444] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:31.672326 2026] [proxy_fcgi:error] [pid 11441:tid 11445] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:32.045824 2026] [proxy_fcgi:error] [pid 11441:tid 11447] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:32.453708 2026] [proxy_fcgi:error] [pid 11441:tid 11460] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:32.691044 2026] [proxy_fcgi:error] [pid 11441:tid 11454] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:32.930530 2026] [proxy_fcgi:error] [pid 11441:tid 11461] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:33.180631 2026] [proxy_fcgi:error] [pid 11441:tid 11453] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:33.418966 2026] [proxy_fcgi:error] [pid 11441:tid 11443] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:33.657431 2026] [proxy_fcgi:error] [pid 11441:tid 11466] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:33.894448 2026] [proxy_fcgi:error] [pid 11441:tid 11462] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:34.202353 2026] [proxy_fcgi:error] [pid 11441:tid 11458] [client 72.146.19.182:4225] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:07:34.448715 2026] [:error] [pid 11441:tid 11463] [client 72.146.19.182:4225] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZ5dsixByFUvmh319D86gAAANQ"]
[Tue Apr 21 03:07:35.389729 2026] [:error] [pid 11352:tid 11438] [client 72.146.19.182:4754] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZ5d2l10mhMSfJ7ir8UgQAAAJg"]
[Tue Apr 21 03:07:37.160571 2026] [:error] [pid 11350:tid 11371] [client 72.146.19.182:57484] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZ5ef4EoMBgOJuJnT1XkQAAAAw"]
[Tue Apr 21 03:07:38.201885 2026] [:error] [pid 11350:tid 11362] [client 72.146.19.182:4253] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/111.php"] [unique_id "aeZ5ev4EoMBgOJuJnT1XlQAAAAM"]
[Tue Apr 21 03:07:39.303929 2026] [:error] [pid 11494:tid 11511] [client 72.146.19.182:61238] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZ5e8gko5iFiE8YoyReQAAAAY8"]
[Tue Apr 21 03:07:39.834643 2026] [:error] [pid 6928:tid 6932] [client 72.146.19.182:53649] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZ5ex3y7MHq1iB0qYoCgQAAAUI"]
[Tue Apr 21 03:07:41.014717 2026] [:error] [pid 11494:tid 11501] [client 72.146.19.182:58025] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZ5fcgko5iFiE8YoyReRQAAAYU"]
[Tue Apr 21 03:07:42.066629 2026] [:error] [pid 42014:tid 42028] [client 72.146.19.182:53686] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "aeZ5fsek-00-ZI0f1NrCigAAAQw"]
[Tue Apr 21 03:07:43.680747 2026] [:error] [pid 11494:tid 11510] [client 72.146.19.182:58676] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZ5f8gko5iFiE8YoyReSgAAAY4"]
[Tue Apr 21 03:07:44.670111 2026] [:error] [pid 6928:tid 6944] [client 72.146.19.182:49229] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZ5gB3y7MHq1iB0qYoChAAAAU4"]
[Tue Apr 21 03:07:45.616834 2026] [:error] [pid 11441:tid 11457] [client 72.146.19.182:57495] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZ5gcixByFUvmh319D88gAAAM4"]
[Tue Apr 21 03:07:46.449985 2026] [:error] [pid 42014:tid 42037] [client 72.146.19.182:4776] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aeZ5gsek-00-ZI0f1NrCkAAAARU"]
[Tue Apr 21 03:07:47.387245 2026] [:error] [pid 11441:tid 11449] [client 72.146.19.182:61203] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZ5g8ixByFUvmh319D89QAAAMY"]
[Tue Apr 21 03:07:48.441041 2026] [:error] [pid 6928:tid 6937] [client 72.146.19.182:58655] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZ5hB3y7MHq1iB0qYoChwAAAUc"]
[Tue Apr 21 03:07:49.148068 2026] [:error] [pid 11352:tid 11432] [client 72.146.19.182:53654] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZ5hWl10mhMSfJ7ir8UmgAAAJI"]
[Tue Apr 21 03:07:50.682588 2026] [:error] [pid 11441:tid 11454] [client 72.146.19.182:4276] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aeZ5hsixByFUvmh319D89gAAAMs"]
[Tue Apr 21 03:07:52.584665 2026] [:error] [pid 11494:tid 11499] [client 72.146.19.182:61213] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZ5iMgko5iFiE8YoyReUQAAAYM"]
[Tue Apr 21 03:07:53.753039 2026] [:error] [pid 11351:tid 11400] [client 72.146.19.182:61244] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZ5iQN8Z1-vktaI_tPWrgAAAE0"]
[Tue Apr 21 03:07:54.454349 2026] [:error] [pid 11494:tid 11520] [client 72.146.19.182:58682] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZ5isgko5iFiE8YoyReUgAAAZg"]
[Tue Apr 21 03:07:56.195052 2026] [:error] [pid 11494:tid 11497] [client 72.146.19.182:61235] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aeZ5jMgko5iFiE8YoyReVgAAAYE"]
[Tue Apr 21 03:07:57.255807 2026] [:error] [pid 11494:tid 11506] [client 72.146.19.182:61232] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZ5jcgko5iFiE8YoyReWQAAAYo"]
[Tue Apr 21 03:07:58.510576 2026] [:error] [pid 11494:tid 11509] [client 72.146.19.182:4793] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZ5jsgko5iFiE8YoyReWgAAAY0"]
[Tue Apr 21 03:07:59.484134 2026] [:error] [pid 11494:tid 11504] [client 72.146.19.182:57533] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZ5j8gko5iFiE8YoyReXAAAAYg"]
[Tue Apr 21 03:08:00.048339 2026] [:error] [pid 6928:tid 6941] [client 72.146.19.182:57476] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aeZ5kB3y7MHq1iB0qYoClAAAAUs"]
[Tue Apr 21 03:08:00.880225 2026] [:error] [pid 11494:tid 11519] [client 72.146.19.182:64339] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZ5kMgko5iFiE8YoyReYAAAAZc"]
[Tue Apr 21 03:08:01.427723 2026] [:error] [pid 11351:tid 11397] [client 72.146.19.182:4753] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZ5kQN8Z1-vktaI_tPWtAAAAEo"]
[Tue Apr 21 03:08:01.938348 2026] [:error] [pid 11351:tid 11388] [client 72.146.19.182:57513] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZ5kQN8Z1-vktaI_tPWtgAAAEE"]
[Tue Apr 21 03:08:02.684347 2026] [:error] [pid 42014:tid 42029] [client 72.146.19.182:58035] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aeZ5ksek-00-ZI0f1NrCnwAAAQ0"]
[Tue Apr 21 03:08:03.837018 2026] [:error] [pid 11351:tid 11392] [client 72.146.19.182:58008] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZ5kwN8Z1-vktaI_tPWuwAAAEU"]
[Tue Apr 21 03:08:04.919180 2026] [:error] [pid 42014:tid 42023] [client 72.146.19.182:57498] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZ5lMek-00-ZI0f1NrCogAAAQc"]
[Tue Apr 21 03:08:06.016266 2026] [:error] [pid 6928:tid 6941] [client 72.146.19.182:58019] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZ5lh3y7MHq1iB0qYoCnAAAAUs"]
[Tue Apr 21 03:08:06.604227 2026] [:error] [pid 11350:tid 11364] [client 72.146.19.182:58007] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aeZ5lv4EoMBgOJuJnT1XyQAAAAU"]
[Tue Apr 21 03:08:07.280853 2026] [:error] [pid 42014:tid 42019] [client 72.146.19.182:61233] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZ5l8ek-00-ZI0f1NrCpQAAAQM"]
[Tue Apr 21 03:08:08.163016 2026] [:error] [pid 6928:tid 6938] [client 72.146.19.182:61187] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZ5mB3y7MHq1iB0qYoCnwAAAUg"]
[Tue Apr 21 03:08:08.786397 2026] [:error] [pid 42014:tid 42036] [client 72.146.19.182:4277] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZ5mMek-00-ZI0f1NrCqgAAARQ"]
[Tue Apr 21 03:08:09.347565 2026] [:error] [pid 6928:tid 6950] [client 72.146.19.182:4782] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aeZ5mR3y7MHq1iB0qYoCogAAAVQ"]
[Tue Apr 21 03:08:09.878720 2026] [:error] [pid 11350:tid 11359] [client 72.146.19.182:58632] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ5mf4EoMBgOJuJnT1X3AAAAAA"]
[Tue Apr 21 03:08:10.605350 2026] [:error] [pid 11351:tid 11411] [client 72.146.19.182:4263] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ5mgN8Z1-vktaI_tPWwQAAAFg"]
[Tue Apr 21 03:08:11.393288 2026] [:error] [pid 11441:tid 11451] [client 72.146.19.182:4761] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ5m8ixByFUvmh319D9CAAAAMg"]
[Tue Apr 21 03:08:12.104598 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:58665] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ5nAN8Z1-vktaI_tPWxAAAAFM"]
[Tue Apr 21 03:08:13.329544 2026] [:error] [pid 11351:tid 11403] [client 72.146.19.182:64337] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZ5nQN8Z1-vktaI_tPWyAAAAFA"]
[Tue Apr 21 03:08:13.908288 2026] [:error] [pid 11351:tid 11397] [client 72.146.19.182:4265] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZ5nQN8Z1-vktaI_tPWygAAAEo"]
[Tue Apr 21 03:08:14.485139 2026] [:error] [pid 11441:tid 11453] [client 72.146.19.182:58012] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZ5nsixByFUvmh319D9CgAAAMo"]
[Tue Apr 21 03:08:15.268352 2026] [:error] [pid 11351:tid 11396] [client 72.146.19.182:4238] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aeZ5nwN8Z1-vktaI_tPW0gAAAEk"]
[Tue Apr 21 03:08:15.913483 2026] [:error] [pid 11351:tid 11398] [client 72.146.19.182:58642] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeZ5nwN8Z1-vktaI_tPW1gAAAEs"]
[Tue Apr 21 03:08:16.985114 2026] [:error] [pid 11350:tid 11364] [client 72.146.19.182:57485] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeZ5oP4EoMBgOJuJnT1YEAAAAAU"]
[Tue Apr 21 03:08:17.730702 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:49168] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeZ5oQN8Z1-vktaI_tPW3AAAAE4"]
[Tue Apr 21 03:08:18.315715 2026] [:error] [pid 11350:tid 11368] [client 72.146.19.182:53637] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aeZ5ov4EoMBgOJuJnT1YHQAAAAk"]
[Tue Apr 21 03:08:18.917869 2026] [:error] [pid 11441:tid 11459] [client 72.146.19.182:49193] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeZ5osixByFUvmh319D9DQAAANA"]
[Tue Apr 21 03:08:19.605910 2026] [:error] [pid 11441:tid 11460] [client 72.146.19.182:57507] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeZ5o8ixByFUvmh319D9EQAAANE"]
[Tue Apr 21 03:08:20.231157 2026] [:error] [pid 11441:tid 11461] [client 72.146.19.182:57988] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeZ5pMixByFUvmh319D9FQAAANI"]
[Tue Apr 21 03:08:20.975132 2026] [:error] [pid 11351:tid 11389] [client 72.146.19.182:53687] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aeZ5pAN8Z1-vktaI_tPW5AAAAEI"]
[Tue Apr 21 03:08:21.517989 2026] [:error] [pid 11351:tid 11411] [client 72.146.19.182:4243] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ5pQN8Z1-vktaI_tPW6AAAAFg"]
[Tue Apr 21 03:08:22.084999 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:53025] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ5pgN8Z1-vktaI_tPW6wAAAFM"]
[Tue Apr 21 03:08:23.062340 2026] [:error] [pid 11350:tid 11362] [client 72.146.19.182:58654] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ5p_4EoMBgOJuJnT1YSQAAAAM"]
[Tue Apr 21 03:08:23.859763 2026] [:error] [pid 11351:tid 11393] [client 72.146.19.182:61211] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ5pwN8Z1-vktaI_tPW7gAAAEY"]
[Tue Apr 21 03:08:24.706549 2026] [:error] [pid 11351:tid 11409] [client 72.146.19.182:57497] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZ5qAN8Z1-vktaI_tPW9AAAAFY"]
[Tue Apr 21 03:08:25.935303 2026] [:error] [pid 11351:tid 11403] [client 72.146.19.182:49162] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZ5qQN8Z1-vktaI_tPW-wAAAFA"]
[Tue Apr 21 03:08:27.436532 2026] [:error] [pid 11352:tid 11419] [client 72.146.19.182:58649] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZ5q2l10mhMSfJ7ir8VBQAAAIU"]
[Tue Apr 21 03:08:28.192921 2026] [:error] [pid 11351:tid 11403] [client 72.146.19.182:58046] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aeZ5rAN8Z1-vktaI_tPXCQAAAFA"]
[Tue Apr 21 03:08:29.243738 2026] [:error] [pid 11351:tid 11388] [client 72.146.19.182:49213] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZ5rQN8Z1-vktaI_tPXDwAAAEE"]
[Tue Apr 21 03:08:30.091046 2026] [:error] [pid 11351:tid 11394] [client 72.146.19.182:4650] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZ5rgN8Z1-vktaI_tPXFQAAAEc"]
[Tue Apr 21 03:08:30.911986 2026] [:error] [pid 11441:tid 11451] [client 72.146.19.182:64321] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZ5rsixByFUvmh319D9HQAAAMg"]
[Tue Apr 21 03:08:31.496059 2026] [:error] [pid 11352:tid 11435] [client 72.146.19.182:49156] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aeZ5r2l10mhMSfJ7ir8VBwAAAJU"]
[Tue Apr 21 03:08:32.449034 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:60630] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeZ5sAN8Z1-vktaI_tPXHAAAAFQ"]
[Tue Apr 21 03:08:33.138356 2026] [:error] [pid 11441:tid 11462] [client 72.146.19.182:64347] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeZ5scixByFUvmh319D9HwAAANM"]
[Tue Apr 21 03:08:33.779963 2026] [:error] [pid 42014:tid 42028] [client 72.146.19.182:61193] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aeZ5scek-00-ZI0f1NrCsgAAAQw"]
[Tue Apr 21 03:08:34.328541 2026] [proxy_fcgi:error] [pid 11441:tid 11467] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:34.565451 2026] [proxy_fcgi:error] [pid 11441:tid 11456] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:34.802281 2026] [proxy_fcgi:error] [pid 11441:tid 11458] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:35.039164 2026] [proxy_fcgi:error] [pid 11441:tid 11455] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:35.276106 2026] [proxy_fcgi:error] [pid 11441:tid 11452] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:35.791220 2026] [proxy_fcgi:error] [pid 11441:tid 11461] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:36.034892 2026] [proxy_fcgi:error] [pid 11441:tid 11451] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:36.280376 2026] [proxy_fcgi:error] [pid 11441:tid 11445] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:36.520726 2026] [proxy_fcgi:error] [pid 11441:tid 11462] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:36.786991 2026] [proxy_fcgi:error] [pid 11441:tid 11448] [client 72.146.19.182:61210] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:08:37.066902 2026] [:error] [pid 11441:tid 11453] [client 72.146.19.182:61210] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZ5tcixByFUvmh319D9OAAAAMo"]
[Tue Apr 21 03:08:37.717032 2026] [:error] [pid 11351:tid 11411] [client 72.146.19.182:58045] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZ5tQN8Z1-vktaI_tPXLgAAAFg"]
[Tue Apr 21 03:08:38.413444 2026] [:error] [pid 11351:tid 11402] [client 72.146.19.182:4257] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZ5tgN8Z1-vktaI_tPXNQAAAE8"]
[Tue Apr 21 03:08:39.515661 2026] [:error] [pid 11494:tid 11499] [client 72.146.19.182:53672] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aeZ5t8gko5iFiE8YoyRebgAAAYM"]
[Tue Apr 21 03:08:40.163491 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:4781] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZ5uAN8Z1-vktaI_tPXQQAAAE4"]
[Tue Apr 21 03:08:40.847682 2026] [:error] [pid 42014:tid 42023] [client 72.146.19.182:57487] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZ5uMek-00-ZI0f1NrCswAAAQc"]
[Tue Apr 21 03:08:41.451882 2026] [:error] [pid 11351:tid 11405] [client 72.146.19.182:57995] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZ5uQN8Z1-vktaI_tPXRwAAAFI"]
[Tue Apr 21 03:08:42.376582 2026] [:error] [pid 11494:tid 11498] [client 72.146.19.182:4247] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aeZ5usgko5iFiE8YoyRecAAAAYI"]
[Tue Apr 21 03:08:43.007578 2026] [:error] [pid 11350:tid 11366] [client 72.146.19.182:49178] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ5u_4EoMBgOJuJnT1YqgAAAAc"]
[Tue Apr 21 03:08:43.599412 2026] [:error] [pid 11441:tid 11452] [client 72.146.19.182:58027] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ5u8ixByFUvmh319D9PAAAAMk"]
[Tue Apr 21 03:08:44.414438 2026] [:error] [pid 6928:tid 6940] [client 72.146.19.182:61243] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ5vB3y7MHq1iB0qYoCsgAAAUo"]
[Tue Apr 21 03:08:44.992188 2026] [:error] [pid 11351:tid 11397] [client 72.146.19.182:58631] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ5vAN8Z1-vktaI_tPXWwAAAEo"]
[Tue Apr 21 03:08:45.721778 2026] [:error] [pid 42014:tid 42040] [client 72.146.19.182:4772] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ5vcek-00-ZI0f1NrCtQAAARg"]
[Tue Apr 21 03:08:46.259597 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:57482] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ5vgN8Z1-vktaI_tPXZgAAAFQ"]
[Tue Apr 21 03:08:46.892604 2026] [:error] [pid 11351:tid 11400] [client 72.146.19.182:58686] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ5vgN8Z1-vktaI_tPXbAAAAE0"]
[Tue Apr 21 03:08:47.500982 2026] [:error] [pid 42014:tid 42021] [client 72.146.19.182:57501] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ5v8ek-00-ZI0f1NrCtgAAAQU"]
[Tue Apr 21 03:08:48.747893 2026] [:error] [pid 11351:tid 11389] [client 72.146.19.182:61206] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZ5wAN8Z1-vktaI_tPXbgAAAEI"]
[Tue Apr 21 03:08:49.611627 2026] [:error] [pid 11441:tid 11463] [client 72.146.19.182:58017] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZ5wcixByFUvmh319D9PQAAANQ"]
[Tue Apr 21 03:08:50.223212 2026] [:error] [pid 11494:tid 11502] [client 72.146.19.182:57512] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZ5wsgko5iFiE8YoyRedwAAAYY"]
[Tue Apr 21 03:08:51.088666 2026] [:error] [pid 11351:tid 11402] [client 72.146.19.182:58647] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aeZ5wwN8Z1-vktaI_tPXcwAAAE8"]
[Tue Apr 21 03:08:51.954719 2026] [:error] [pid 11352:tid 11418] [client 72.146.19.182:4778] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZ5w2l10mhMSfJ7ir8VEgAAAIQ"]
[Tue Apr 21 03:08:52.521901 2026] [:error] [pid 42014:tid 42030] [client 72.146.19.182:60619] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZ5xMek-00-ZI0f1NrCvwAAAQ4"]
[Tue Apr 21 03:08:53.350839 2026] [:error] [pid 11441:tid 11449] [client 72.146.19.182:4752] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZ5xcixByFUvmh319D9PgAAAMY"]
[Tue Apr 21 03:08:54.132170 2026] [:error] [pid 11441:tid 11444] [client 72.146.19.182:58014] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aeZ5xsixByFUvmh319D9QQAAAME"]
[Tue Apr 21 03:08:54.966437 2026] [:error] [pid 6928:tid 6940] [client 72.146.19.182:61247] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZ5xh3y7MHq1iB0qYoCwQAAAUo"]
[Tue Apr 21 03:08:56.232009 2026] [:error] [pid 6928:tid 6935] [client 72.146.19.182:4262] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZ5yB3y7MHq1iB0qYoCxAAAAUU"]
[Tue Apr 21 03:08:57.013402 2026] [:error] [pid 11352:tid 11425] [client 72.146.19.182:61237] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZ5yWl10mhMSfJ7ir8VFgAAAIs"]
[Tue Apr 21 03:08:57.930150 2026] [:error] [pid 6928:tid 6932] [client 72.146.19.182:4664] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aeZ5yR3y7MHq1iB0qYoCygAAAUI"]
[Tue Apr 21 03:08:58.898947 2026] [:error] [pid 42014:tid 42016] [client 72.146.19.182:64374] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZ5ysek-00-ZI0f1NrCygAAAQA"]
[Tue Apr 21 03:08:59.712520 2026] [:error] [pid 6928:tid 6943] [client 72.146.19.182:58677] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZ5yx3y7MHq1iB0qYoCzQAAAU0"]
[Tue Apr 21 03:09:00.660038 2026] [:error] [pid 42014:tid 42022] [client 72.146.19.182:57481] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZ5zMek-00-ZI0f1NrC0AAAAQY"]
[Tue Apr 21 03:09:01.317609 2026] [:error] [pid 6928:tid 6933] [client 72.146.19.182:58636] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aeZ5zR3y7MHq1iB0qYoC1AAAAUM"]
[Tue Apr 21 03:09:02.128342 2026] [:error] [pid 11352:tid 11424] [client 72.146.19.182:58638] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ5zml10mhMSfJ7ir8VHAAAAIo"]
[Tue Apr 21 03:09:02.711285 2026] [:error] [pid 11351:tid 11392] [client 72.146.19.182:58028] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ5zgN8Z1-vktaI_tPXeAAAAEU"]
[Tue Apr 21 03:09:03.658402 2026] [:error] [pid 6928:tid 6933] [client 72.146.19.182:58024] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ5zx3y7MHq1iB0qYoC3AAAAUM"]
[Tue Apr 21 03:09:04.585167 2026] [:error] [pid 11494:tid 11514] [client 72.146.19.182:61236] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ50Mgko5iFiE8YoyRehQAAAZI"]
[Tue Apr 21 03:09:05.285015 2026] [:error] [pid 11441:tid 11448] [client 72.146.19.182:58674] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ50cixByFUvmh319D9UQAAAMU"]
[Tue Apr 21 03:09:06.056911 2026] [:error] [pid 11441:tid 11459] [client 72.146.19.182:57503] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ50sixByFUvmh319D9VAAAANA"]
[Tue Apr 21 03:09:06.724070 2026] [:error] [pid 6928:tid 6940] [client 72.146.19.182:64381] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ50h3y7MHq1iB0qYoC4gAAAUo"]
[Tue Apr 21 03:09:07.414189 2026] [:error] [pid 6928:tid 6942] [client 72.146.19.182:58651] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ50x3y7MHq1iB0qYoC5QAAAUw"]
[Tue Apr 21 03:09:08.352049 2026] [:error] [pid 11350:tid 11374] [client 72.146.19.182:64358] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ51P4EoMBgOJuJnT1YvQAAAA8"]
[Tue Apr 21 03:09:09.821878 2026] [:error] [pid 11441:tid 11455] [client 72.146.19.182:61195] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ51cixByFUvmh319D9WAAAAMw"]
[Tue Apr 21 03:09:10.564637 2026] [:error] [pid 11494:tid 11501] [client 72.146.19.182:57496] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ51sgko5iFiE8YoyReiAAAAYU"]
[Tue Apr 21 03:09:11.740695 2026] [:error] [pid 11494:tid 11517] [client 72.146.19.182:53641] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ518gko5iFiE8YoyReiQAAAZU"]
[Tue Apr 21 03:09:13.040589 2026] [:error] [pid 6928:tid 6951] [client 72.146.19.182:57502] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZ52R3y7MHq1iB0qYoC7gAAAVU"]
[Tue Apr 21 03:09:13.995795 2026] [:error] [pid 11352:tid 11414] [client 72.146.19.182:57520] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZ52Wl10mhMSfJ7ir8VIQAAAIA"]
[Tue Apr 21 03:09:14.798862 2026] [:error] [pid 11350:tid 11380] [client 72.146.19.182:57520] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZ52v4EoMBgOJuJnT1Y2gAAABU"]
[Tue Apr 21 03:09:15.776837 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:61201] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "aeZ52wN8Z1-vktaI_tPXewAAAFM"]
[Tue Apr 21 03:09:16.942850 2026] [:error] [pid 11352:tid 11437] [client 72.146.19.182:4744] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZ53Gl10mhMSfJ7ir8VIgAAAJc"]
[Tue Apr 21 03:09:17.496158 2026] [:error] [pid 11350:tid 11365] [client 72.146.19.182:49215] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZ53f4EoMBgOJuJnT1Y4AAAAAY"]
[Tue Apr 21 03:09:18.151582 2026] [:error] [pid 11351:tid 11396] [client 72.146.19.182:4771] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZ53gN8Z1-vktaI_tPXgAAAAEk"]
[Tue Apr 21 03:09:18.695629 2026] [:error] [pid 11352:tid 11422] [client 72.146.19.182:49201] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aeZ53ml10mhMSfJ7ir8VJAAAAIg"]
[Tue Apr 21 03:09:19.206816 2026] [:error] [pid 11494:tid 11516] [client 72.146.19.182:57533] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZ538gko5iFiE8YoyRekAAAAZQ"]
[Tue Apr 21 03:09:19.879389 2026] [:error] [pid 42014:tid 42038] [client 72.146.19.182:57518] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZ538ek-00-ZI0f1NrC6AAAARY"]
[Tue Apr 21 03:09:20.422751 2026] [:error] [pid 11494:tid 11496] [client 72.146.19.182:4231] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZ54Mgko5iFiE8YoyRelgAAAYA"]
[Tue Apr 21 03:09:21.229938 2026] [:error] [pid 11441:tid 11461] [client 72.146.19.182:58652] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aeZ54cixByFUvmh319D9ZgAAANI"]
[Tue Apr 21 03:09:22.080250 2026] [:error] [pid 11352:tid 11424] [client 72.146.19.182:49191] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ54ml10mhMSfJ7ir8VJgAAAIo"]
[Tue Apr 21 03:09:23.128387 2026] [:error] [pid 42014:tid 42040] [client 72.146.19.182:53663] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ548ek-00-ZI0f1NrC7AAAARg"]
[Tue Apr 21 03:09:24.047855 2026] [:error] [pid 11350:tid 11367] [client 72.146.19.182:57508] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ55P4EoMBgOJuJnT1Y7QAAAAg"]
[Tue Apr 21 03:09:25.257912 2026] [:error] [pid 11350:tid 11372] [client 72.146.19.182:4784] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ55f4EoMBgOJuJnT1Y7wAAAA0"]
[Tue Apr 21 03:09:26.422423 2026] [:error] [pid 11494:tid 11508] [client 72.146.19.182:58013] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ55sgko5iFiE8YoyRepAAAAYw"]
[Tue Apr 21 03:09:27.322970 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:57488] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ55wN8Z1-vktaI_tPXogAAAFQ"]
[Tue Apr 21 03:09:28.369505 2026] [:error] [pid 11350:tid 11360] [client 72.146.19.182:49225] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ56P4EoMBgOJuJnT1Y9gAAAAE"]
[Tue Apr 21 03:09:29.292962 2026] [:error] [pid 11351:tid 11399] [client 72.146.19.182:49155] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ56QN8Z1-vktaI_tPXpQAAAEw"]
[Tue Apr 21 03:09:31.023298 2026] [:error] [pid 11441:tid 11459] [client 72.146.19.182:4615] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ568ixByFUvmh319D9awAAANA"]
[Tue Apr 21 03:09:32.529152 2026] [:error] [pid 11494:tid 11519] [client 72.146.19.182:58639] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ57Mgko5iFiE8YoyResAAAAZc"]
[Tue Apr 21 03:09:34.558736 2026] [:error] [pid 11494:tid 11504] [client 72.146.19.182:53044] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ57sgko5iFiE8YoyRetQAAAYg"]
[Tue Apr 21 03:09:35.580055 2026] [:error] [pid 11350:tid 11369] [client 72.146.19.182:57515] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ57_4EoMBgOJuJnT1ZCwAAAAo"]
[Tue Apr 21 03:09:36.733111 2026] [proxy_fcgi:error] [pid 11441:tid 11452] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:36.970298 2026] [proxy_fcgi:error] [pid 11441:tid 11464] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:38.841942 2026] [proxy_fcgi:error] [pid 11441:tid 11444] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:39.087450 2026] [proxy_fcgi:error] [pid 11441:tid 11447] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:39.339637 2026] [proxy_fcgi:error] [pid 11441:tid 11443] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:39.579349 2026] [proxy_fcgi:error] [pid 11441:tid 11445] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:40.053313 2026] [proxy_fcgi:error] [pid 11441:tid 11446] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:40.303441 2026] [proxy_fcgi:error] [pid 11441:tid 11466] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:40.540890 2026] [proxy_fcgi:error] [pid 11441:tid 11448] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:40.829790 2026] [proxy_fcgi:error] [pid 11441:tid 11467] [client 72.146.19.182:61222] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:09:41.066296 2026] [:error] [pid 11441:tid 11454] [client 72.146.19.182:61222] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZ59cixByFUvmh319D9egAAAMs"]
[Tue Apr 21 03:09:41.999670 2026] [:error] [pid 42014:tid 42017] [client 72.146.19.182:4234] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZ59cek-00-ZI0f1NrDHgAAAQE"]
[Tue Apr 21 03:09:42.587860 2026] [:error] [pid 11350:tid 11374] [client 72.146.19.182:4743] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZ59v4EoMBgOJuJnT1ZHgAAAA8"]
[Tue Apr 21 03:09:43.580416 2026] [:error] [pid 11351:tid 11387] [client 72.146.19.182:4273] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "aeZ59wN8Z1-vktaI_tPXvgAAAEA"]
[Tue Apr 21 03:09:44.539134 2026] [:error] [pid 6928:tid 6949] [client 72.146.19.182:58037] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ5-B3y7MHq1iB0qYoDAwAAAVM"]
[Tue Apr 21 03:09:45.945926 2026] [:error] [pid 11350:tid 11370] [client 72.146.19.182:64367] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ5-f4EoMBgOJuJnT1ZLQAAAAs"]
[Tue Apr 21 03:09:46.815472 2026] [:error] [pid 11350:tid 11369] [client 72.146.19.182:61230] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ5-v4EoMBgOJuJnT1ZNgAAAAo"]
[Tue Apr 21 03:09:47.976853 2026] [:error] [pid 11351:tid 11396] [client 72.146.19.182:4233] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ5-wN8Z1-vktaI_tPXxwAAAEk"]
[Tue Apr 21 03:09:49.111489 2026] [:error] [pid 11351:tid 11408] [client 72.146.19.182:61217] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ5_QN8Z1-vktaI_tPXzQAAAFU"]
[Tue Apr 21 03:09:50.485484 2026] [:error] [pid 11350:tid 11378] [client 72.146.19.182:61192] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ5_v4EoMBgOJuJnT1ZRQAAABM"]
[Tue Apr 21 03:09:51.483428 2026] [:error] [pid 11351:tid 11399] [client 72.146.19.182:61221] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ5_wN8Z1-vktaI_tPX4gAAAEw"]
[Tue Apr 21 03:09:53.706895 2026] [:error] [pid 6928:tid 6948] [client 72.146.19.182:4621] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ6AR3y7MHq1iB0qYoDBQAAAVI"]
[Tue Apr 21 03:09:54.774494 2026] [:error] [pid 11351:tid 11394] [client 72.146.19.182:4797] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ6AgN8Z1-vktaI_tPX-AAAAEc"]
[Tue Apr 21 03:09:55.791792 2026] [:error] [pid 11351:tid 11393] [client 72.146.19.182:61190] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ6AwN8Z1-vktaI_tPYAwAAAEY"]
[Tue Apr 21 03:09:56.801543 2026] [:error] [pid 11351:tid 11387] [client 72.146.19.182:58667] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ6BAN8Z1-vktaI_tPYFgAAAEA"]
[Tue Apr 21 03:09:57.626657 2026] [:error] [pid 11351:tid 11397] [client 72.146.19.182:49218] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ6BQN8Z1-vktaI_tPYJwAAAEo"]
[Tue Apr 21 03:09:58.464659 2026] [:error] [pid 11441:tid 11443] [client 72.146.19.182:4286] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ6BsixByFUvmh319D9gAAAAMA"]
[Tue Apr 21 03:09:59.412104 2026] [:error] [pid 42014:tid 42024] [client 72.146.19.182:4748] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ6B8ek-00-ZI0f1NrDIwAAAQg"]
[Tue Apr 21 03:10:00.517074 2026] [:error] [pid 11494:tid 11496] [client 72.146.19.182:57535] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ6CMgko5iFiE8YoyRe3QAAAYA"]
[Tue Apr 21 03:10:01.353454 2026] [:error] [pid 6928:tid 6932] [client 72.146.19.182:61212] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ6CR3y7MHq1iB0qYoDDAAAAUI"]
[Tue Apr 21 03:10:02.139022 2026] [:error] [pid 11494:tid 11509] [client 72.146.19.182:58036] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZ6Csgko5iFiE8YoyRe4QAAAY0"]
[Tue Apr 21 03:10:02.729452 2026] [:error] [pid 42014:tid 42029] [client 72.146.19.182:58659] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZ6Csek-00-ZI0f1NrDLAAAAQ0"]
[Tue Apr 21 03:10:03.494085 2026] [:error] [pid 42014:tid 42030] [client 72.146.19.182:61231] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZ6C8ek-00-ZI0f1NrDMgAAAQ4"]
[Tue Apr 21 03:10:04.205703 2026] [:error] [pid 42014:tid 42036] [client 72.146.19.182:4785] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "aeZ6DMek-00-ZI0f1NrDOAAAARQ"]
[Tue Apr 21 03:10:04.892531 2026] [:error] [pid 6928:tid 6949] [client 72.146.19.182:58627] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6DB3y7MHq1iB0qYoDEAAAAVM"]
[Tue Apr 21 03:10:06.269375 2026] [:error] [pid 11494:tid 11518] [client 72.146.19.182:58646] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6Dsgko5iFiE8YoyRe7AAAAZY"]
[Tue Apr 21 03:10:07.689016 2026] [:error] [pid 11494:tid 11503] [client 72.146.19.182:4745] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6D8gko5iFiE8YoyRe7gAAAYc"]
[Tue Apr 21 03:10:08.589846 2026] [:error] [pid 6928:tid 6952] [client 72.146.19.182:4251] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6EB3y7MHq1iB0qYoDGwAAAVY"]
[Tue Apr 21 03:10:09.388555 2026] [:error] [pid 11494:tid 11496] [client 72.146.19.182:61204] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ6Ecgko5iFiE8YoyRe8QAAAYA"]
[Tue Apr 21 03:10:10.213963 2026] [:error] [pid 11494:tid 11514] [client 72.146.19.182:4775] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ6Esgko5iFiE8YoyRe8gAAAZI"]
[Tue Apr 21 03:10:11.311821 2026] [:error] [pid 42014:tid 42017] [client 72.146.19.182:58009] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ6E8ek-00-ZI0f1NrDTAAAAQE"]
[Tue Apr 21 03:10:13.325983 2026] [:error] [pid 11494:tid 11502] [client 72.146.19.182:4258] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aeZ6Fcgko5iFiE8YoyRe-AAAAYY"]
[Tue Apr 21 03:10:15.856833 2026] [:error] [pid 11494:tid 11504] [client 72.146.19.182:4763] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ6F8gko5iFiE8YoyRfFgAAAYg"]
[Tue Apr 21 03:10:16.768280 2026] [:error] [pid 11441:tid 11450] [client 72.146.19.182:57472] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ6GMixByFUvmh319D97AAAAMc"]
[Tue Apr 21 03:10:17.505867 2026] [:error] [pid 11350:tid 11362] [client 72.146.19.182:53645] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ6Gf4EoMBgOJuJnT1ZVQAAAAM"]
[Tue Apr 21 03:10:18.447896 2026] [:error] [pid 6928:tid 6943] [client 72.146.19.182:49153] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ6Gh3y7MHq1iB0qYoDLQAAAU0"]
[Tue Apr 21 03:10:19.681216 2026] [:error] [pid 11350:tid 11378] [client 72.146.19.182:53660] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ6G_4EoMBgOJuJnT1ZXwAAABM"]
[Tue Apr 21 03:10:20.674936 2026] [:error] [pid 11352:tid 11417] [client 72.146.19.182:49206] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ6HGl10mhMSfJ7ir8VQQAAAIM"]
[Tue Apr 21 03:10:21.977796 2026] [:error] [pid 11441:tid 11443] [client 72.146.19.182:58680] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ6HcixByFUvmh319D-FwAAAMA"]
[Tue Apr 21 03:10:22.966990 2026] [:error] [pid 11352:tid 11421] [client 72.146.19.182:49212] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aeZ6Hml10mhMSfJ7ir8VSgAAAIc"]
[Tue Apr 21 03:10:24.195256 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:64366] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZ6IAN8Z1-vktaI_tPYUAAAAEM"]
[Tue Apr 21 03:10:24.839592 2026] [:error] [pid 11350:tid 11361] [client 72.146.19.182:58032] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZ6IP4EoMBgOJuJnT1ZgwAAAAI"]
[Tue Apr 21 03:10:25.539364 2026] [:error] [pid 11494:tid 11507] [client 72.146.19.182:64341] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZ6Icgko5iFiE8YoyRfNgAAAYs"]
[Tue Apr 21 03:10:27.261005 2026] [:error] [pid 11351:tid 11403] [client 72.146.19.182:62403] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aeZ6IwN8Z1-vktaI_tPYYgAAAFA"]
[Tue Apr 21 03:10:28.256663 2026] [:error] [pid 42014:tid 42030] [client 72.146.19.182:58033] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZ6JMek-00-ZI0f1NrDewAAAQ4"]
[Tue Apr 21 03:10:29.353835 2026] [:error] [pid 11350:tid 11369] [client 72.146.19.182:56798] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZ6Jf4EoMBgOJuJnT1ZkwAAAAo"]
[Tue Apr 21 03:10:31.779718 2026] [:error] [pid 42014:tid 42021] [client 72.146.19.182:62462] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZ6J8ek-00-ZI0f1NrDfwAAAQU"]
[Tue Apr 21 03:10:33.438353 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:31552] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aeZ6KQN8Z1-vktaI_tPYfgAAAFQ"]
[Tue Apr 21 03:10:34.816799 2026] [:error] [pid 11350:tid 11380] [client 72.146.19.182:54358] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZ6Kv4EoMBgOJuJnT1ZwwAAABU"]
[Tue Apr 21 03:10:36.006372 2026] [:error] [pid 11350:tid 11362] [client 72.146.19.182:4292] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZ6LP4EoMBgOJuJnT1Z0AAAAAM"]
[Tue Apr 21 03:10:37.015136 2026] [:error] [pid 11350:tid 11366] [client 72.146.19.182:55023] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZ6Lf4EoMBgOJuJnT1Z3AAAAAc"]
[Tue Apr 21 03:10:38.098988 2026] [:error] [pid 11351:tid 11391] [client 72.146.19.182:56719] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aeZ6LgN8Z1-vktaI_tPYkwAAAEQ"]
[Tue Apr 21 03:10:39.211105 2026] [:error] [pid 11494:tid 11511] [client 72.146.19.182:54977] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aeZ6L8gko5iFiE8YoyRfRgAAAY8"]
[Tue Apr 21 03:10:43.162641 2026] [:error] [pid 6928:tid 6949] [client 72.146.19.182:56856] [client 72.146.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZ6Mx3y7MHq1iB0qYoDRAAAAVM"]
[Tue Apr 21 03:10:44.143253 2026] [proxy_fcgi:error] [pid 11351:tid 11407] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:44.957476 2026] [proxy_fcgi:error] [pid 11351:tid 11394] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:45.194049 2026] [proxy_fcgi:error] [pid 11351:tid 11393] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:45.433715 2026] [proxy_fcgi:error] [pid 11351:tid 11399] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:45.671887 2026] [proxy_fcgi:error] [pid 11351:tid 11404] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:45.909526 2026] [proxy_fcgi:error] [pid 11351:tid 11403] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:46.150201 2026] [proxy_fcgi:error] [pid 11351:tid 11395] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:46.408623 2026] [proxy_fcgi:error] [pid 11351:tid 11409] [client 72.146.19.182:4808] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:10:46.643745 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:4808] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ6NgN8Z1-vktaI_tPYswAAAFM"]
[Tue Apr 21 03:10:48.029581 2026] [:error] [pid 11352:tid 11422] [client 72.146.19.182:54950] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ6OGl10mhMSfJ7ir8VaQAAAIg"]
[Tue Apr 21 03:10:52.619853 2026] [:error] [pid 6928:tid 6949] [client 72.146.19.182:63223] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ6PB3y7MHq1iB0qYoDTwAAAVM"]
[Tue Apr 21 03:10:53.648751 2026] [:error] [pid 11350:tid 11367] [client 72.146.19.182:58657] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ6Pf4EoMBgOJuJnT1aJQAAAAg"]
[Tue Apr 21 03:10:57.474228 2026] [:error] [pid 11350:tid 11381] [client 72.146.19.182:52356] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZ6Qf4EoMBgOJuJnT1aLgAAABY"]
[Tue Apr 21 03:10:59.645140 2026] [:error] [pid 11441:tid 11444] [client 72.146.19.182:4597] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZ6Q8ixByFUvmh319D-bwAAAME"]
[Tue Apr 21 03:11:02.604573 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:4556] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZ6RgN8Z1-vktaI_tPY1QAAAE4"]
[Tue Apr 21 03:11:05.751484 2026] [:error] [pid 11351:tid 11397] [client 72.146.19.182:53718] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aeZ6SQN8Z1-vktaI_tPY4wAAAEo"]
[Tue Apr 21 03:11:06.899288 2026] [:error] [pid 11350:tid 11366] [client 72.146.19.182:4455] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZ6Sv4EoMBgOJuJnT1aWgAAAAc"]
[Tue Apr 21 03:11:09.629996 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:53727] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZ6TQN8Z1-vktaI_tPY_wAAAEM"]
[Tue Apr 21 03:11:11.018688 2026] [:error] [pid 6928:tid 6941] [client 72.146.19.182:53728] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZ6Tx3y7MHq1iB0qYoDbwAAAUs"]
[Tue Apr 21 03:11:12.359156 2026] [:error] [pid 11350:tid 11362] [client 72.146.19.182:4577] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aeZ6UP4EoMBgOJuJnT1aZgAAAAM"]
[Tue Apr 21 03:11:18.907519 2026] [:error] [pid 11351:tid 11394] [client 72.146.19.182:53698] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZ6VgN8Z1-vktaI_tPZDwAAAEc"]
[Tue Apr 21 03:11:19.784875 2026] [:error] [pid 11350:tid 11365] [client 72.146.19.182:4470] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZ6V_4EoMBgOJuJnT1adwAAAAY"]
[Tue Apr 21 03:11:21.090071 2026] [:error] [pid 6928:tid 6946] [client 72.146.19.182:53731] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZ6WR3y7MHq1iB0qYoDfwAAAVA"]
[Tue Apr 21 03:11:22.632279 2026] [:error] [pid 11494:tid 11505] [client 72.146.19.182:4569] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aeZ6Wsgko5iFiE8YoyRfwAAAAYk"]
[Tue Apr 21 03:11:23.802301 2026] [:error] [pid 11351:tid 11392] [client 72.146.19.182:63149] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZ6WwN8Z1-vktaI_tPZFwAAAEU"]
[Tue Apr 21 03:11:24.793170 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:4555] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZ6XAN8Z1-vktaI_tPZIAAAAFQ"]
[Tue Apr 21 03:11:25.780761 2026] [:error] [pid 42014:tid 42030] [client 72.146.19.182:4575] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZ6Xcek-00-ZI0f1NrDuQAAAQ4"]
[Tue Apr 21 03:11:26.454847 2026] [:error] [pid 6928:tid 6939] [client 72.146.19.182:4417] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aeZ6Xh3y7MHq1iB0qYoDjgAAAUk"]
[Tue Apr 21 03:11:27.923918 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:4878] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeZ6XwN8Z1-vktaI_tPZNQAAAEM"]
[Tue Apr 21 03:11:28.862526 2026] [:error] [pid 11350:tid 11379] [client 72.146.19.182:53751] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeZ6YP4EoMBgOJuJnT1akgAAABQ"]
[Tue Apr 21 03:11:29.877919 2026] [:error] [pid 6928:tid 6931] [client 72.146.19.182:53700] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeZ6YR3y7MHq1iB0qYoDlwAAAUE"]
[Tue Apr 21 03:11:30.640099 2026] [:error] [pid 42014:tid 42031] [client 72.146.19.182:4428] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aeZ6Ysek-00-ZI0f1NrDxwAAAQ8"]
[Tue Apr 21 03:11:32.055554 2026] [:error] [pid 42014:tid 42034] [client 72.146.19.182:53720] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeZ6ZMek-00-ZI0f1NrD0gAAARI"]
[Tue Apr 21 03:11:33.327477 2026] [:error] [pid 11350:tid 11375] [client 72.146.19.182:4874] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeZ6Zf4EoMBgOJuJnT1amwAAABA"]
[Tue Apr 21 03:11:38.891086 2026] [:error] [pid 11350:tid 11362] [client 72.146.19.182:53736] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeZ6av4EoMBgOJuJnT1aowAAAAM"]
[Tue Apr 21 03:11:40.018418 2026] [:error] [pid 11351:tid 11396] [client 72.146.19.182:63175] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/g.php"] [unique_id "aeZ6bAN8Z1-vktaI_tPZVwAAAEk"]
[Tue Apr 21 03:11:44.129986 2026] [:error] [pid 11441:tid 11447] [client 72.146.19.182:4715] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aeZ6cMixByFUvmh319D-5QAAAMQ"]
[Tue Apr 21 03:11:46.784618 2026] [proxy_fcgi:error] [pid 11350:tid 11370] [client 72.146.19.182:64896] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:11:47.023511 2026] [proxy_fcgi:error] [pid 11350:tid 11369] [client 72.146.19.182:64896] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:11:47.262720 2026] [proxy_fcgi:error] [pid 11350:tid 11376] [client 72.146.19.182:64896] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:11:47.538716 2026] [proxy_fcgi:error] [pid 11350:tid 11363] [client 72.146.19.182:64896] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:11:47.833989 2026] [proxy_fcgi:error] [pid 11350:tid 11365] [client 72.146.19.182:64896] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:11:48.070186 2026] [proxy_fcgi:error] [pid 11350:tid 11373] [client 72.146.19.182:64896] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 03:11:48.544812 2026] [proxy_fcgi:error] [pid 11350:tid 11376] [client 72.146.19.182:64896] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 04:00:21.906197 2026] [:error] [pid 35322:tid 35369] [client 185.194.178.7:32211] [client 185.194.178.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.7, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1aPoAfV40BTfVKxofAAAAIw"]
[Tue Apr 21 04:00:21.955576 2026] [proxy_fcgi:error] [pid 35322:tid 35369] [client 185.194.178.7:32211] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 09:36:11.129488 2026] [:error] [pid 5377:tid 5402] [client 137.59.155.147:51653] [client 137.59.155.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.59.155.147, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aebUi7BKychFlrHBdvtaUgAAAdA"]
[Tue Apr 21 09:36:11.131807 2026] [:error] [pid 4823:tid 4861] [client 137.59.155.147:51652] [client 137.59.155.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.59.155.147, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aebUi_c8mke3PfHqsxH1tgAAAYg"]
[Tue Apr 21 09:36:11.142427 2026] [proxy_fcgi:error] [pid 5377:tid 5402] [client 137.59.155.147:51653] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 09:36:11.143148 2026] [proxy_fcgi:error] [pid 4823:tid 4861] [client 137.59.155.147:51652] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 14:35:27.651584 2026] [:error] [pid 4822:tid 4830] [client 18.185.22.122:42172] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aecaryAteFQFwS_23Jl3MQAAAUQ"]
[Tue Apr 21 14:35:28.849945 2026] [:error] [pid 4822:tid 4840] [client 18.185.22.122:55336] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aecasCAteFQFwS_23Jl3PgAAAU4"]
[Tue Apr 21 14:35:29.800578 2026] [:error] [pid 4822:tid 4845] [client 18.185.22.122:55364] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "aecasSAteFQFwS_23Jl3SQAAAVM"]
[Tue Apr 21 14:35:30.760248 2026] [:error] [pid 4822:tid 4838] [client 18.185.22.122:55390] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "aecasiAteFQFwS_23Jl3TQAAAUw"]
[Tue Apr 21 14:35:31.713331 2026] [:error] [pid 4777:tid 4805] [client 18.185.22.122:55406] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "aecas6xXur6bykKyLZRuKgAAARE"]
[Tue Apr 21 14:35:32.667123 2026] [:error] [pid 4823:tid 4875] [client 18.185.22.122:55422] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.development"] [unique_id "aecatPc8mke3PfHqsxF-xwAAAZY"]
[Tue Apr 21 14:35:33.620021 2026] [:error] [pid 5377:tid 5386] [client 18.185.22.122:55442] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.test"] [unique_id "aecatbBKychFlrHBdvu2zQAAAcA"]
[Tue Apr 21 14:35:34.571468 2026] [:error] [pid 5377:tid 5400] [client 18.185.22.122:55452] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.remote"] [unique_id "aecatrBKychFlrHBdvu21gAAAc4"]
[Tue Apr 21 14:35:35.531801 2026] [:error] [pid 35320:tid 35340] [client 18.185.22.122:55460] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "aecat4JW6fdXWO6agMH60QAAAAo"]
[Tue Apr 21 14:35:36.482089 2026] [:error] [pid 4777:tid 4805] [client 18.185.22.122:55474] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "aecauKxXur6bykKyLZRuNwAAARE"]
[Tue Apr 21 14:35:37.435157 2026] [:error] [pid 4822:tid 4841] [client 18.185.22.122:55504] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.save"] [unique_id "aecauSAteFQFwS_23Jl3ZwAAAU8"]
[Tue Apr 21 14:35:38.389378 2026] [:error] [pid 4777:tid 4811] [client 18.185.22.122:55070] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.old"] [unique_id "aecauqxXur6bykKyLZRuOwAAARc"]
[Tue Apr 21 14:35:39.344298 2026] [:error] [pid 35415:tid 35444] [client 18.185.22.122:55102] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "aecau0iqDinI4_22zzhA6QAAANE"]
[Tue Apr 21 14:35:40.291905 2026] [:error] [pid 35322:tid 35369] [client 18.185.22.122:55116] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.example"] [unique_id "aecavKPoAfV40BTfVKyuNwAAAIw"]
[Tue Apr 21 14:35:41.247878 2026] [:error] [pid 35322:tid 35381] [client 18.185.22.122:55134] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "aecavaPoAfV40BTfVKyuPQAAAJg"]
[Tue Apr 21 14:35:42.195805 2026] [:error] [pid 4822:tid 4846] [client 18.185.22.122:55138] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "aecaviAteFQFwS_23Jl3iwAAAVQ"]
[Tue Apr 21 14:35:43.157281 2026] [:error] [pid 5377:tid 5387] [client 18.185.22.122:55158] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.stage"] [unique_id "aecav7BKychFlrHBdvu26gAAAcE"]
[Tue Apr 21 14:35:44.116297 2026] [:error] [pid 4822:tid 4842] [client 18.185.22.122:55180] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.ci"] [unique_id "aecawCAteFQFwS_23Jl3kwAAAVA"]
[Tue Apr 21 14:35:45.063434 2026] [:error] [pid 4822:tid 4838] [client 18.185.22.122:55198] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.docker"] [unique_id "aecawSAteFQFwS_23Jl3nQAAAUw"]
[Tue Apr 21 14:35:46.013771 2026] [:error] [pid 4823:tid 4871] [client 18.185.22.122:55222] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.live"] [unique_id "aecawvc8mke3PfHqsxF-6gAAAZI"]
[Tue Apr 21 14:35:46.972790 2026] [:error] [pid 4823:tid 4873] [client 18.185.22.122:55238] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.preprod"] [unique_id "aecawvc8mke3PfHqsxF-8gAAAZQ"]
[Tue Apr 21 14:35:47.926403 2026] [:error] [pid 4823:tid 4861] [client 18.185.22.122:40352] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.uat"] [unique_id "aecaw_c8mke3PfHqsxF_AAAAAYg"]
[Tue Apr 21 14:35:48.881491 2026] [:error] [pid 4823:tid 4864] [client 18.185.22.122:40362] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "aecaxPc8mke3PfHqsxF_CgAAAYs"]
[Tue Apr 21 14:35:49.840931 2026] [:error] [pid 4777:tid 4804] [client 18.185.22.122:40384] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "aecaxaxXur6bykKyLZRuTAAAARA"]
[Tue Apr 21 14:35:50.798622 2026] [:error] [pid 4822:tid 4829] [client 18.185.22.122:40400] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env~"] [unique_id "aecaxiAteFQFwS_23Jl3tQAAAUM"]
[Tue Apr 21 14:35:51.747742 2026] [:error] [pid 5377:tid 5410] [client 18.185.22.122:40420] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "aecax7BKychFlrHBdvu29QAAAdg"]
[Tue Apr 21 14:35:52.709183 2026] [:error] [pid 4823:tid 4875] [client 18.185.22.122:40448] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/apps/.env"] [unique_id "aecayPc8mke3PfHqsxF_IAAAAZY"]
[Tue Apr 21 14:35:53.668091 2026] [:error] [pid 35415:tid 35429] [client 18.185.22.122:40460] [client 18.185.22.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "aecayUiqDinI4_22zzhBaQAAAMI"]
[Tue Apr 21 14:45:30.575076 2026] [:error] [pid 5377:tid 5388] [client 54.183.206.134:36620] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aecdCrBKychFlrHBdvu-tgAAAcI"]
[Tue Apr 21 14:45:31.406283 2026] [:error] [pid 4822:tid 4833] [client 54.183.206.134:36646] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "aecdCyAteFQFwS_23JmF4QAAAUc"]
[Tue Apr 21 14:45:32.066980 2026] [:error] [pid 35320:tid 35344] [client 54.183.206.134:36658] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.local"] [unique_id "aecdDIJW6fdXWO6agMH_tgAAAA4"]
[Tue Apr 21 14:45:32.730200 2026] [:error] [pid 35415:tid 35428] [client 54.183.206.134:36672] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.production"] [unique_id "aecdDEiqDinI4_22zzhEVQAAAME"]
[Tue Apr 21 14:45:33.394878 2026] [:error] [pid 4822:tid 4827] [client 54.183.206.134:36688] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "aecdDSAteFQFwS_23JmF-QAAAUE"]
[Tue Apr 21 14:45:34.060442 2026] [:error] [pid 4823:tid 4876] [client 54.183.206.134:44962] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.test"] [unique_id "aecdDvc8mke3PfHqsxGIgAAAAZc"]
[Tue Apr 21 14:45:34.724623 2026] [:error] [pid 4822:tid 4846] [client 54.183.206.134:44990] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.remote"] [unique_id "aecdDiAteFQFwS_23JmGCgAAAVQ"]
[Tue Apr 21 14:45:35.383687 2026] [:error] [pid 5377:tid 5402] [client 54.183.206.134:45002] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "aecdD7BKychFlrHBdvu-xQAAAdA"]
[Tue Apr 21 14:45:36.046440 2026] [:error] [pid 4777:tid 4812] [client 54.183.206.134:45024] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "aecdEKxXur6bykKyLZRxRAAAARg"]
[Tue Apr 21 14:45:36.707368 2026] [:error] [pid 4822:tid 4829] [client 54.183.206.134:45056] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.save"] [unique_id "aecdECAteFQFwS_23JmGFwAAAUM"]
[Tue Apr 21 14:45:37.362400 2026] [:error] [pid 4822:tid 4831] [client 54.183.206.134:45068] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.old"] [unique_id "aecdESAteFQFwS_23JmGGwAAAUU"]
[Tue Apr 21 14:45:38.028053 2026] [:error] [pid 4822:tid 4850] [client 54.183.206.134:45088] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "aecdEiAteFQFwS_23JmGIAAAAVg"]
[Tue Apr 21 14:45:38.690005 2026] [:error] [pid 4822:tid 4836] [client 54.183.206.134:45112] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.example"] [unique_id "aecdEiAteFQFwS_23JmGJgAAAUo"]
[Tue Apr 21 14:45:39.353046 2026] [:error] [pid 35320:tid 35354] [client 54.183.206.134:45128] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "aecdE4JW6fdXWO6agMH_xAAAABg"]
[Tue Apr 21 14:45:40.012541 2026] [:error] [pid 35320:tid 35352] [client 54.183.206.134:45148] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "aecdFIJW6fdXWO6agMH_xQAAABY"]
[Tue Apr 21 14:45:40.681414 2026] [:error] [pid 5377:tid 5404] [client 54.183.206.134:45156] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.stage"] [unique_id "aecdFLBKychFlrHBdvu-8QAAAdI"]
[Tue Apr 21 14:45:41.345342 2026] [:error] [pid 4822:tid 4836] [client 54.183.206.134:45164] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.ci"] [unique_id "aecdFSAteFQFwS_23JmGYQAAAUo"]
[Tue Apr 21 14:45:42.004699 2026] [:error] [pid 4822:tid 4826] [client 54.183.206.134:45184] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.docker"] [unique_id "aecdFiAteFQFwS_23JmGaAAAAUA"]
[Tue Apr 21 14:45:42.661885 2026] [:error] [pid 5377:tid 5410] [client 54.183.206.134:45212] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.live"] [unique_id "aecdFrBKychFlrHBdvu--gAAAdg"]
[Tue Apr 21 14:45:43.323381 2026] [:error] [pid 4822:tid 4839] [client 54.183.206.134:45234] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.preprod"] [unique_id "aecdFyAteFQFwS_23JmGcwAAAU0"]
[Tue Apr 21 14:45:43.988363 2026] [:error] [pid 4822:tid 4828] [client 54.183.206.134:51722] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.uat"] [unique_id "aecdFyAteFQFwS_23JmGewAAAUI"]
[Tue Apr 21 14:45:44.650856 2026] [:error] [pid 35320:tid 35330] [client 54.183.206.134:51740] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "aecdGIJW6fdXWO6agMH_1wAAAAA"]
[Tue Apr 21 14:45:45.309878 2026] [:error] [pid 4822:tid 4828] [client 54.183.206.134:51758] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "aecdGSAteFQFwS_23JmGigAAAUI"]
[Tue Apr 21 14:45:45.969949 2026] [:error] [pid 4823:tid 4854] [client 54.183.206.134:51764] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env~"] [unique_id "aecdGfc8mke3PfHqsxGI3AAAAYE"]
[Tue Apr 21 14:45:46.628657 2026] [:error] [pid 4823:tid 4872] [client 54.183.206.134:51782] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/app/.env"] [unique_id "aecdGvc8mke3PfHqsxGI5wAAAZM"]
[Tue Apr 21 14:45:47.291809 2026] [:error] [pid 4823:tid 4873] [client 54.183.206.134:51806] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/apps/.env"] [unique_id "aecdG_c8mke3PfHqsxGI6gAAAZQ"]
[Tue Apr 21 14:45:47.946351 2026] [:error] [pid 4823:tid 4864] [client 54.183.206.134:51832] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/api/.env"] [unique_id "aecdG_c8mke3PfHqsxGI8QAAAYs"]
[Tue Apr 21 14:45:48.611102 2026] [:error] [pid 4822:tid 4833] [client 54.183.206.134:51848] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/site/.env"] [unique_id "aecdHCAteFQFwS_23JmGrgAAAUc"]
[Tue Apr 21 14:45:49.274286 2026] [:error] [pid 35322:tid 35377] [client 54.183.206.134:51864] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/public/.env"] [unique_id "aecdHaPoAfV40BTfVKywzgAAAJQ"]
[Tue Apr 21 14:45:49.931407 2026] [:error] [pid 35322:tid 35365] [client 54.183.206.134:51884] [client 54.183.206.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/admin/.env"] [unique_id "aecdHaPoAfV40BTfVKyw0AAAAIg"]
[Tue Apr 21 15:35:26.028504 2026] [proxy_fcgi:error] [pid 4823:tid 4859] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:26.316271 2026] [proxy_fcgi:error] [pid 4823:tid 4860] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:26.595415 2026] [proxy_fcgi:error] [pid 4823:tid 4856] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:26.872427 2026] [proxy_fcgi:error] [pid 4823:tid 4854] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:27.164381 2026] [proxy_fcgi:error] [pid 4823:tid 4865] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:27.452016 2026] [proxy_fcgi:error] [pid 4823:tid 4866] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:27.745319 2026] [proxy_fcgi:error] [pid 4823:tid 4858] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:28.037312 2026] [proxy_fcgi:error] [pid 4823:tid 4862] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:28.316383 2026] [proxy_fcgi:error] [pid 4823:tid 4865] [client 45.86.200.239:43837] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:28.604738 2026] [:error] [pid 4823:tid 4860] [client 45.86.200.239:43837] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aecowPc8mke3PfHqsxG1swAAAYc"]
[Tue Apr 21 15:35:29.173616 2026] [proxy_fcgi:error] [pid 53978:tid 54001] [client 185.82.72.182:33333] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:29.446577 2026] [:error] [pid 53978:tid 54000] [client 185.82.72.182:33333] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "aecowZ1ivsR4hcOSQbatIwAAApQ"]
[Tue Apr 21 15:35:30.030312 2026] [proxy_fcgi:error] [pid 4823:tid 4877] [client 45.86.200.229:26337] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:30.334321 2026] [proxy_fcgi:error] [pid 4823:tid 4866] [client 45.86.200.229:26337] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:30.700358 2026] [proxy_fcgi:error] [pid 4823:tid 4867] [client 45.86.200.229:26337] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:31.004310 2026] [proxy_fcgi:error] [pid 4823:tid 4862] [client 45.86.200.229:26337] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:31.317361 2026] [proxy_fcgi:error] [pid 4823:tid 4860] [client 45.86.200.229:26337] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:31.623865 2026] [:error] [pid 4823:tid 4870] [client 45.86.200.229:26337] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aecow_c8mke3PfHqsxG11AAAAZE"]
[Tue Apr 21 15:35:32.187305 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 45.86.200.238:53467] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:32.496289 2026] [proxy_fcgi:error] [pid 35320:tid 35348] [client 45.86.200.238:53467] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:32.776301 2026] [proxy_fcgi:error] [pid 35320:tid 35347] [client 45.86.200.238:53467] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:33.071287 2026] [proxy_fcgi:error] [pid 35320:tid 35352] [client 45.86.200.238:53467] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:33.362481 2026] [proxy_fcgi:error] [pid 35320:tid 35335] [client 45.86.200.238:53467] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:33.658298 2026] [proxy_fcgi:error] [pid 35320:tid 35346] [client 45.86.200.238:53467] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:33.969963 2026] [proxy_fcgi:error] [pid 35320:tid 35350] [client 45.86.200.238:53467] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:34.246490 2026] [:error] [pid 35320:tid 35349] [client 45.86.200.238:53467] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecoxoJW6fdXWO6agMEZBwAAABM"]
[Tue Apr 21 15:35:34.798308 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:35.077437 2026] [proxy_fcgi:error] [pid 35321:tid 35401] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:35.364298 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:35.670331 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:35.952205 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:36.228333 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:36.525311 2026] [proxy_fcgi:error] [pid 35321:tid 35406] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:36.812288 2026] [proxy_fcgi:error] [pid 35321:tid 35407] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:37.096160 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:37.386318 2026] [proxy_fcgi:error] [pid 35321:tid 35407] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:37.943540 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:38.216368 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:38.504469 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:38.780645 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:39.068289 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:39.347343 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 185.82.72.9:51019] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:39.623774 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.9:51019] [client 185.82.72.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hehe.php"] [unique_id "aecoyzeHLhVUuu8cVXyh8gAAAEs"]
[Tue Apr 21 15:35:40.174807 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:40.466704 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:40.771351 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:41.056281 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:41.332832 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:41.620564 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:41.958372 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:42.254716 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:43.022357 2026] [proxy_fcgi:error] [pid 35321:tid 35404] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:43.299302 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:43.594324 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:43.874613 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:44.189583 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:44.474590 2026] [proxy_fcgi:error] [pid 35321:tid 35408] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:44.754361 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:45.039321 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:45.329609 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:45.611444 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:45.906320 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:46.221310 2026] [proxy_fcgi:error] [pid 35321:tid 35384] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:46.501294 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:46.787665 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:47.100309 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:47.386367 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:47.722427 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:48.011308 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:48.295365 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:48.574343 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:48.850538 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:49.129080 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:49.420326 2026] [proxy_fcgi:error] [pid 35321:tid 35396] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:49.695392 2026] [proxy_fcgi:error] [pid 35321:tid 35399] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:49.983412 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:50.261636 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:50.554303 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:50.872309 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:51.162325 2026] [proxy_fcgi:error] [pid 35321:tid 35404] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:51.460622 2026] [proxy_fcgi:error] [pid 35321:tid 35399] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:51.741296 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:52.027296 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:52.323669 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:52.618284 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:52.903309 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:53.196308 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:53.469392 2026] [proxy_fcgi:error] [pid 35321:tid 35394] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:53.759332 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.041348 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.346307 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.661295 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:54.964552 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.258293 2026] [proxy_fcgi:error] [pid 35321:tid 35394] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.541314 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:55.841604 2026] [proxy_fcgi:error] [pid 35321:tid 35399] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.179009 2026] [proxy_fcgi:error] [pid 35321:tid 35397] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.463529 2026] [proxy_fcgi:error] [pid 35321:tid 35399] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:56.739269 2026] [proxy_fcgi:error] [pid 35321:tid 35394] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.022341 2026] [proxy_fcgi:error] [pid 35321:tid 35403] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.316308 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.608662 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:57.891323 2026] [proxy_fcgi:error] [pid 35321:tid 35388] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:58.208630 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:58.779893 2026] [proxy_fcgi:error] [pid 35321:tid 35388] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:59.132308 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:59.430035 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:35:59.721929 2026] [proxy_fcgi:error] [pid 35321:tid 35398] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:02.075593 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:02.374344 2026] [proxy_fcgi:error] [pid 35321:tid 35406] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:02.706356 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:02.998051 2026] [proxy_fcgi:error] [pid 35321:tid 35398] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:03.291713 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:03.591355 2026] [proxy_fcgi:error] [pid 35321:tid 35388] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:04.183038 2026] [proxy_fcgi:error] [pid 35321:tid 35399] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:04.485835 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:05.053870 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:05.338810 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:05.646323 2026] [proxy_fcgi:error] [pid 35321:tid 35394] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:17.017682 2026] [:error] [pid 35415:tid 35430] [client 45.86.200.237:30265] [client 45.86.200.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/content-management/"] [unique_id "aeco8UiqDinI4_22zzhVCgAAAMM"]
[Tue Apr 21 15:36:17.391991 2026] [proxy_fcgi:error] [pid 4823:tid 4870] [client 45.86.200.248:20241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:17.693057 2026] [proxy_fcgi:error] [pid 4823:tid 4864] [client 45.86.200.248:20241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:18.055838 2026] [proxy_fcgi:error] [pid 4823:tid 4857] [client 45.86.200.248:20241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:18.372594 2026] [proxy_fcgi:error] [pid 4823:tid 4873] [client 45.86.200.248:20241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:22.365307 2026] [proxy_fcgi:error] [pid 35321:tid 35389] [client 45.86.200.214:56083] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:26.220291 2026] [proxy_fcgi:error] [pid 53978:tid 54004] [client 45.86.200.243:49169] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:29.938297 2026] [proxy_fcgi:error] [pid 4823:tid 4876] [client 45.86.200.248:20241] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:37.906384 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.86.200.237:25681] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 15:36:47.784564 2026] [:error] [pid 35321:tid 35390] [client 45.86.200.237:25681] [client 45.86.200.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aecpDzeHLhVUuu8cVXynSwAAAEY"]
[Tue Apr 21 15:37:11.909854 2026] [:error] [pid 35321:tid 35407] [client 185.82.72.10:24645] [client 185.82.72.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/"] [unique_id "aecpJzeHLhVUuu8cVXypvgAAAFc"]
[Tue Apr 21 15:37:15.938324 2026] [:error] [pid 53832:tid 53857] [client 45.86.200.214:24813] [client 45.86.200.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uploads/"] [unique_id "aecpK9zkuxsE_OhM9UIVtwAAAlY"]
[Tue Apr 21 15:37:47.837949 2026] [:error] [pid 35415:tid 35445] [client 185.82.72.107:57883] [client 185.82.72.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/elementor/modules/floating-buttons/classes/render/"] [unique_id "aecpS0iqDinI4_22zzhXyQAAANI"]
[Tue Apr 21 15:37:48.381999 2026] [:error] [pid 53832:tid 53841] [client 185.82.72.107:46491] [client 185.82.72.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/elementor/modules/floating-buttons/classes/render/"] [unique_id "aecpTNzkuxsE_OhM9UIXygAAAkY"]
[Tue Apr 21 16:27:06.858159 2026] [:error] [pid 35320:tid 35345] [client 164.92.188.93:54414] [client 164.92.188.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.188.93, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aec02oJW6fdXWO6agME6EAAAAA8"]
[Tue Apr 21 16:27:06.867808 2026] [proxy_fcgi:error] [pid 35320:tid 35345] [client 164.92.188.93:54414] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 18:52:07.575160 2026] [:error] [pid 54080:tid 54087] [client 68.183.168.98:60290] [client 68.183.168.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.168.98, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aedW14zEbQHHxtmWbaaZIwAAAsU"]
[Tue Apr 21 18:52:07.584561 2026] [proxy_fcgi:error] [pid 54080:tid 54087] [client 68.183.168.98:60290] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 22:24:34.839999 2026] [:error] [pid 53731:tid 53750] [client 18.136.78.124:24536] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.136.78.124, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeeIol2I9THUR-bRVGyIpAAAAg8"]
[Tue Apr 21 22:24:34.840025 2026] [:error] [pid 53731:tid 53746] [client 18.136.78.124:24542] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.78.124, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aeeIol2I9THUR-bRVGyIowAAAgs"]
[Tue Apr 21 22:24:34.849868 2026] [proxy_fcgi:error] [pid 53731:tid 53746] [client 18.136.78.124:24542] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 22:24:34.850968 2026] [proxy_fcgi:error] [pid 53731:tid 53750] [client 18.136.78.124:24536] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 22:24:52.378129 2026] [:error] [pid 53731:tid 53754] [client 199.203.54.15:47392] [client 199.203.54.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.203.54.15, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aeeItF2I9THUR-bRVGyIwAAAAhI"]
[Tue Apr 21 22:24:52.389990 2026] [proxy_fcgi:error] [pid 53731:tid 53754] [client 199.203.54.15:47392] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 22:25:09.354397 2026] [:error] [pid 35322:tid 35367] [client 199.203.54.15:45274] [client 199.203.54.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 199.203.54.15, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeeIxaPoAfV40BTfVKzh0AAAAIo"]
[Tue Apr 21 22:25:09.363964 2026] [proxy_fcgi:error] [pid 35322:tid 35367] [client 199.203.54.15:45274] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:00:44.140877 2026] [:error] [pid 54080:tid 54085] [client 49.207.62.197:10766] [client 49.207.62.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.62.197, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aeetPIzEbQHHxtmWbab01gAAAsM"]
[Wed Apr 22 01:00:44.153474 2026] [proxy_fcgi:error] [pid 54080:tid 54085] [client 49.207.62.197:10766] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 02:46:28.942426 2026] [:error] [pid 35320:tid 35341] [client 201.234.96.36:64306] [client 201.234.96.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.234.96.36, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aefGBIJW6fdXWO6agMGhdgAAAAs"]
[Wed Apr 22 02:46:28.952686 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 201.234.96.36:64306] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:04.996948 2026] [proxy_fcgi:error] [pid 21683:tid 21764] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:05.241842 2026] [proxy_fcgi:error] [pid 21683:tid 21768] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:05.884713 2026] [proxy_fcgi:error] [pid 21683:tid 21763] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:06.168911 2026] [proxy_fcgi:error] [pid 21683:tid 21757] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:06.416043 2026] [proxy_fcgi:error] [pid 21683:tid 21759] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:06.678079 2026] [proxy_fcgi:error] [pid 21683:tid 21750] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:06.992560 2026] [proxy_fcgi:error] [pid 21683:tid 21770] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:07.265049 2026] [proxy_fcgi:error] [pid 21683:tid 21766] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:07.510974 2026] [proxy_fcgi:error] [pid 21683:tid 21761] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:07.757557 2026] [proxy_fcgi:error] [pid 21683:tid 21752] [client 158.158.50.41:54016] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:48:08.017842 2026] [:error] [pid 21683:tid 21767] [client 158.158.50.41:54016] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aefiiFZBWT-0diZyYyZqdgAAAJE"]
[Wed Apr 22 04:48:10.713333 2026] [:error] [pid 21682:tid 21743] [client 158.158.50.41:12567] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aefiiplXWQZUlmPHS3rfUQAAAFQ"]
[Wed Apr 22 04:48:21.513742 2026] [:error] [pid 21683:tid 21756] [client 158.158.50.41:54045] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/nwflm.php"] [unique_id "aefilVZBWT-0diZyYyZqsgAAAIY"]
[Wed Apr 22 04:48:25.528569 2026] [:error] [pid 21788:tid 21797] [client 158.158.50.41:54036] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aefimX7OM27rzVpef25XGgAAAMc"]
[Wed Apr 22 04:48:27.356072 2026] [:error] [pid 21788:tid 21804] [client 158.158.50.41:12557] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aefim37OM27rzVpef25XJwAAAM4"]
[Wed Apr 22 04:48:29.871863 2026] [:error] [pid 23041:tid 23044] [client 158.158.50.41:54063] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aefinUTXx_lUa7xwAb6dngAAAQA"]
[Wed Apr 22 04:48:31.693294 2026] [:error] [pid 21683:tid 21765] [client 158.158.50.41:54021] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aefin1ZBWT-0diZyYyZq1AAAAI8"]
[Wed Apr 22 04:48:33.389661 2026] [:error] [pid 21681:tid 21704] [client 158.158.50.41:12582] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aefiod5LmJziq-yZYawcvwAAAA4"]
[Wed Apr 22 04:48:34.756608 2026] [:error] [pid 21683:tid 21763] [client 158.158.50.41:54041] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aefiolZBWT-0diZyYyZq5wAAAI0"]
[Wed Apr 22 04:48:35.923704 2026] [:error] [pid 21788:tid 21803] [client 158.158.50.41:12565] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aefio37OM27rzVpef25XOgAAAM0"]
[Wed Apr 22 04:48:37.299909 2026] [:error] [pid 21788:tid 21811] [client 158.158.50.41:12545] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aefipX7OM27rzVpef25XPAAAANU"]
[Wed Apr 22 04:48:38.402308 2026] [:error] [pid 21788:tid 21792] [client 158.158.50.41:12602] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aefipn7OM27rzVpef25XQgAAAMI"]
[Wed Apr 22 04:48:40.183929 2026] [:error] [pid 21788:tid 21798] [client 158.158.50.41:12570] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aefiqH7OM27rzVpef25XRwAAAMg"]
[Wed Apr 22 04:48:41.769665 2026] [:error] [pid 21682:tid 21729] [client 158.158.50.41:54046] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aefiqZlXWQZUlmPHS3rfcwAAAEY"]
[Wed Apr 22 04:48:44.206890 2026] [:error] [pid 21683:tid 21773] [client 158.158.50.41:54073] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aefirFZBWT-0diZyYyZrCwAAAJc"]
[Wed Apr 22 04:48:47.114751 2026] [:error] [pid 21788:tid 21808] [client 158.158.50.41:12547] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aefir37OM27rzVpef25XXQAAANI"]
[Wed Apr 22 04:48:55.380949 2026] [:error] [pid 21788:tid 21792] [client 158.158.50.41:12569] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aefit37OM27rzVpef25XbgAAAMI"]
[Wed Apr 22 04:48:57.410422 2026] [:error] [pid 21682:tid 21728] [client 158.158.50.41:12606] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aefiuZlXWQZUlmPHS3rfggAAAEU"]
[Wed Apr 22 04:48:59.508703 2026] [:error] [pid 21682:tid 21740] [client 158.158.50.41:12605] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aefiu5lXWQZUlmPHS3rfgwAAAFE"]
[Wed Apr 22 04:49:00.415977 2026] [:error] [pid 21683:tid 21772] [client 158.158.50.41:51720] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aefivFZBWT-0diZyYyZrHAAAAJY"]
[Wed Apr 22 04:49:02.011744 2026] [:error] [pid 21681:tid 21711] [client 158.158.50.41:54051] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aefivt5LmJziq-yZYawdGwAAABU"]
[Wed Apr 22 04:49:03.157395 2026] [:error] [pid 21788:tid 21804] [client 158.158.50.41:48712] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aefiv37OM27rzVpef25XhwAAAM4"]
[Wed Apr 22 04:49:05.048931 2026] [:error] [pid 21788:tid 21808] [client 158.158.50.41:54042] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aefiwX7OM27rzVpef25XjQAAANI"]
[Wed Apr 22 04:49:07.395304 2026] [proxy_fcgi:error] [pid 23041:tid 23067] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:07.642409 2026] [proxy_fcgi:error] [pid 23041:tid 23057] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:07.907481 2026] [proxy_fcgi:error] [pid 23041:tid 23050] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:09.480362 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:09.995248 2026] [proxy_fcgi:error] [pid 23041:tid 23063] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:10.275683 2026] [proxy_fcgi:error] [pid 23041:tid 23065] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:10.884069 2026] [proxy_fcgi:error] [pid 23041:tid 23060] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:11.131022 2026] [proxy_fcgi:error] [pid 23041:tid 23049] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:11.377754 2026] [proxy_fcgi:error] [pid 23041:tid 23059] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:11.633737 2026] [proxy_fcgi:error] [pid 23041:tid 23052] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:11.878960 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 158.158.50.41:54028] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:49:12.120924 2026] [:error] [pid 23041:tid 23051] [client 158.158.50.41:54028] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aefiyETXx_lUa7xwAb6d7gAAAQc"]
[Wed Apr 22 04:49:13.908150 2026] [:error] [pid 21683:tid 21756] [client 158.158.50.41:54048] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aefiyVZBWT-0diZyYyZrKgAAAIY"]
[Wed Apr 22 04:49:15.246595 2026] [:error] [pid 21681:tid 21706] [client 158.158.50.41:54064] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aefiy95LmJziq-yZYawdOwAAABA"]
[Wed Apr 22 04:49:16.295475 2026] [:error] [pid 21682:tid 21738] [client 158.158.50.41:51766] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aefizJlXWQZUlmPHS3rflAAAAE8"]
[Wed Apr 22 04:49:16.959990 2026] [:error] [pid 21788:tid 21799] [client 158.158.50.41:54029] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aefizH7OM27rzVpef25XqwAAAMk"]
[Wed Apr 22 04:49:18.451443 2026] [:error] [pid 21682:tid 21736] [client 158.158.50.41:54054] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aefizplXWQZUlmPHS3rfmQAAAE0"]
[Wed Apr 22 04:49:20.152575 2026] [:error] [pid 21788:tid 21810] [client 158.158.50.41:54059] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aefi0H7OM27rzVpef25XyAAAANQ"]
[Wed Apr 22 04:49:21.958866 2026] [:error] [pid 21683:tid 21754] [client 158.158.50.41:12561] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "aefi0VZBWT-0diZyYyZrNwAAAIQ"]
[Wed Apr 22 04:49:23.563312 2026] [:error] [pid 23041:tid 23047] [client 158.158.50.41:12578] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aefi00TXx_lUa7xwAb6d-gAAAQM"]
[Wed Apr 22 04:49:30.267902 2026] [:error] [pid 21682:tid 21734] [client 158.158.50.41:12585] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aefi2plXWQZUlmPHS3rfqQAAAEs"]
[Wed Apr 22 04:49:34.374137 2026] [:error] [pid 21683:tid 21758] [client 158.158.50.41:54044] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "aefi3lZBWT-0diZyYyZrTwAAAIg"]
[Wed Apr 22 04:49:38.636896 2026] [:error] [pid 23041:tid 23051] [client 158.158.50.41:54040] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aefi4kTXx_lUa7xwAb6ePAAAAQc"]
[Wed Apr 22 04:49:41.677095 2026] [:error] [pid 21682:tid 21724] [client 158.158.50.41:12551] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aefi5ZlXWQZUlmPHS3rfvAAAAEE"]
[Wed Apr 22 04:49:43.585600 2026] [:error] [pid 21682:tid 21729] [client 158.158.50.41:51775] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aefi55lXWQZUlmPHS3rfwQAAAEY"]
[Wed Apr 22 04:49:45.960662 2026] [:error] [pid 21788:tid 21806] [client 158.158.50.41:12599] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "aefi6X7OM27rzVpef25YLQAAANA"]
[Wed Apr 22 04:49:49.136858 2026] [:error] [pid 21788:tid 21814] [client 158.158.50.41:12591] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aefi7X7OM27rzVpef25YNQAAANg"]
[Wed Apr 22 04:49:53.275026 2026] [:error] [pid 23041:tid 23060] [client 158.158.50.41:51747] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aefi8UTXx_lUa7xwAb6eVAAAARA"]
[Wed Apr 22 04:49:57.345598 2026] [:error] [pid 23041:tid 23068] [client 158.158.50.41:54022] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aefi9UTXx_lUa7xwAb6eXQAAARg"]
[Wed Apr 22 04:49:59.396598 2026] [:error] [pid 21788:tid 21808] [client 158.158.50.41:54024] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aefi937OM27rzVpef25YUQAAANI"]
[Wed Apr 22 04:50:00.204343 2026] [:error] [pid 21788:tid 21796] [client 158.158.50.41:12595] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aefi-H7OM27rzVpef25YVQAAAMY"]
[Wed Apr 22 04:50:01.299759 2026] [:error] [pid 23041:tid 23054] [client 158.158.50.41:54039] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aefi-UTXx_lUa7xwAb6eaQAAAQo"]
[Wed Apr 22 04:50:02.401288 2026] [:error] [pid 23041:tid 23067] [client 158.158.50.41:54069] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aefi-kTXx_lUa7xwAb6ebwAAARc"]
[Wed Apr 22 04:50:03.959591 2026] [:error] [pid 21682:tid 21726] [client 158.158.50.41:51719] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3.php"] [unique_id "aefi-5lXWQZUlmPHS3rf1AAAAEM"]
[Wed Apr 22 04:50:04.799531 2026] [:error] [pid 21681:tid 21702] [client 158.158.50.41:54018] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aefi_N5LmJziq-yZYawdpQAAAAw"]
[Wed Apr 22 04:50:05.783013 2026] [:error] [pid 21682:tid 21738] [client 158.158.50.41:51759] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aefi_ZlXWQZUlmPHS3rf2QAAAE8"]
[Wed Apr 22 04:50:06.412135 2026] [:error] [pid 23041:tid 23061] [client 158.158.50.41:54049] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aefi_kTXx_lUa7xwAb6ehwAAARE"]
[Wed Apr 22 04:50:07.108462 2026] [:error] [pid 21682:tid 21734] [client 158.158.50.41:12548] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/4.php"] [unique_id "aefi_5lXWQZUlmPHS3rf4AAAAEs"]
[Wed Apr 22 04:50:07.780633 2026] [:error] [pid 21788:tid 21793] [client 158.158.50.41:12603] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aefi_37OM27rzVpef25YWQAAAMM"]
[Wed Apr 22 04:50:08.556593 2026] [:error] [pid 21788:tid 21794] [client 158.158.50.41:12597] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aefjAH7OM27rzVpef25YXAAAAMQ"]
[Wed Apr 22 04:50:09.738960 2026] [:error] [pid 21788:tid 21804] [client 158.158.50.41:12552] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/5.php"] [unique_id "aefjAX7OM27rzVpef25YYAAAAM4"]
[Wed Apr 22 04:50:11.156044 2026] [proxy_fcgi:error] [pid 23041:tid 23046] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:11.432478 2026] [proxy_fcgi:error] [pid 23041:tid 23051] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:11.724813 2026] [proxy_fcgi:error] [pid 23041:tid 23052] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:12.013004 2026] [proxy_fcgi:error] [pid 23041:tid 23068] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:12.273761 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:12.982512 2026] [proxy_fcgi:error] [pid 23041:tid 23061] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:13.247783 2026] [proxy_fcgi:error] [pid 23041:tid 23053] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:13.514721 2026] [proxy_fcgi:error] [pid 23041:tid 23051] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:13.784031 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:14.058901 2026] [proxy_fcgi:error] [pid 23041:tid 23065] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:14.320728 2026] [proxy_fcgi:error] [pid 23041:tid 23052] [client 158.158.50.41:12544] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:50:14.599035 2026] [:error] [pid 23041:tid 23048] [client 158.158.50.41:12544] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aefjBkTXx_lUa7xwAb6etgAAAQQ"]
[Wed Apr 22 04:50:21.874099 2026] [:error] [pid 23041:tid 23066] [client 158.158.50.41:12584] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aefjDUTXx_lUa7xwAb6e1AAAARY"]
[Wed Apr 22 04:50:27.374299 2026] [:error] [pid 21788:tid 21810] [client 158.158.50.41:54034] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aligk.php"] [unique_id "aefjE37OM27rzVpef25YgQAAANQ"]
[Wed Apr 22 04:50:32.435640 2026] [:error] [pid 21788:tid 21806] [client 158.158.50.41:12593] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aefjGH7OM27rzVpef25YkwAAANA"]
[Wed Apr 22 04:50:33.792508 2026] [:error] [pid 21683:tid 21766] [client 158.158.50.41:54050] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aefjGVZBWT-0diZyYyZrwAAAAJA"]
[Wed Apr 22 04:50:36.127740 2026] [:error] [pid 21788:tid 21809] [client 158.158.50.41:54043] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aefjHH7OM27rzVpef25YsAAAANM"]
[Wed Apr 22 04:50:39.347250 2026] [:error] [pid 21788:tid 21814] [client 158.158.50.41:51750] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byrgo.php"] [unique_id "aefjH37OM27rzVpef25YwQAAANg"]
[Wed Apr 22 04:50:40.839932 2026] [:error] [pid 21682:tid 21730] [client 158.158.50.41:12581] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aefjIJlXWQZUlmPHS3rf8wAAAEc"]
[Wed Apr 22 04:50:42.165559 2026] [:error] [pid 21681:tid 21696] [client 158.158.50.41:51736] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aefjIt5LmJziq-yZYawd0AAAAAY"]
[Wed Apr 22 04:50:44.274582 2026] [:error] [pid 23041:tid 23062] [client 158.158.50.41:54065] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aefjJETXx_lUa7xwAb6fEwAAARI"]
[Wed Apr 22 04:50:58.675493 2026] [:error] [pid 23041:tid 23063] [client 158.158.50.41:12590] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aefjMkTXx_lUa7xwAb6fXQAAARM"]
[Wed Apr 22 04:51:02.431860 2026] [:error] [pid 23041:tid 23047] [client 158.158.50.41:12564] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aefjNkTXx_lUa7xwAb6fcQAAAQM"]
[Wed Apr 22 04:51:04.406557 2026] [:error] [pid 23041:tid 23056] [client 158.158.50.41:54038] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aefjOETXx_lUa7xwAb6feAAAAQw"]
[Wed Apr 22 04:51:08.260184 2026] [:error] [pid 21788:tid 21793] [client 158.158.50.41:12596] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aefjPH7OM27rzVpef25ZZQAAAMM"]
[Wed Apr 22 04:51:11.458009 2026] [:error] [pid 23041:tid 23051] [client 158.158.50.41:12559] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aefjP0TXx_lUa7xwAb6fjQAAAQc"]
[Wed Apr 22 04:51:12.363665 2026] [:error] [pid 21681:tid 21705] [client 158.158.50.41:54061] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aefjQN5LmJziq-yZYawd3gAAAA8"]
[Wed Apr 22 04:51:13.616062 2026] [:error] [pid 21788:tid 21803] [client 158.158.50.41:51727] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aefjQX7OM27rzVpef25ZeQAAAM0"]
[Wed Apr 22 04:51:14.596039 2026] [proxy_fcgi:error] [pid 21788:tid 21802] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:14.840543 2026] [proxy_fcgi:error] [pid 21788:tid 21812] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:15.175201 2026] [proxy_fcgi:error] [pid 21788:tid 21813] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:15.420172 2026] [proxy_fcgi:error] [pid 21788:tid 21807] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:15.665054 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:16.003960 2026] [proxy_fcgi:error] [pid 21788:tid 21803] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:16.889894 2026] [proxy_fcgi:error] [pid 21788:tid 21801] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:17.135471 2026] [proxy_fcgi:error] [pid 21788:tid 21790] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:17.380734 2026] [proxy_fcgi:error] [pid 21788:tid 21798] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:17.625426 2026] [proxy_fcgi:error] [pid 21788:tid 21796] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:17.892705 2026] [proxy_fcgi:error] [pid 21788:tid 21792] [client 158.158.50.41:12579] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:51:18.133747 2026] [:error] [pid 21788:tid 21800] [client 158.158.50.41:12579] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aefjRn7OM27rzVpef25ZjgAAAMo"]
[Wed Apr 22 04:51:20.329178 2026] [:error] [pid 21681:tid 21695] [client 158.158.50.41:48721] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aefjSN5LmJziq-yZYawd6QAAAAU"]
[Wed Apr 22 04:51:23.362574 2026] [:error] [pid 21788:tid 21800] [client 158.158.50.41:51726] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aefjS37OM27rzVpef25ZlwAAAMo"]
[Wed Apr 22 04:51:33.280138 2026] [:error] [pid 21682:tid 21731] [client 158.158.50.41:12573] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aefjVZlXWQZUlmPHS3rgMQAAAEg"]
[Wed Apr 22 04:51:36.507498 2026] [:error] [pid 23041:tid 23064] [client 158.158.50.41:54066] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aefjWETXx_lUa7xwAb6fvwAAARQ"]
[Wed Apr 22 04:51:38.842847 2026] [:error] [pid 21683:tid 21752] [client 158.158.50.41:54072] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aefjWlZBWT-0diZyYyZsFQAAAII"]
[Wed Apr 22 04:51:46.588388 2026] [:error] [pid 21788:tid 21805] [client 158.158.50.41:48716] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aefjYn7OM27rzVpef25Z3gAAAM8"]
[Wed Apr 22 04:51:53.725724 2026] [:error] [pid 21683:tid 21766] [client 158.158.50.41:51713] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aefjaVZBWT-0diZyYyZsJQAAAJA"]
[Wed Apr 22 04:51:56.534032 2026] [:error] [pid 23041:tid 23054] [client 158.158.50.41:51729] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aefjbETXx_lUa7xwAb6gCAAAAQo"]
[Wed Apr 22 04:51:58.691434 2026] [:error] [pid 21788:tid 21794] [client 158.158.50.41:54027] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aefjbn7OM27rzVpef25aMgAAAMQ"]
[Wed Apr 22 04:52:00.580513 2026] [:error] [pid 21788:tid 21793] [client 158.158.50.41:51771] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aefjcH7OM27rzVpef25aOgAAAMM"]
[Wed Apr 22 04:52:01.570532 2026] [:error] [pid 21788:tid 21810] [client 158.158.50.41:51723] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aefjcX7OM27rzVpef25aPQAAANQ"]
[Wed Apr 22 04:52:02.608318 2026] [:error] [pid 21788:tid 21798] [client 158.158.50.41:54030] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aefjcn7OM27rzVpef25aQAAAAMg"]
[Wed Apr 22 04:52:05.791685 2026] [:error] [pid 23041:tid 23059] [client 158.158.50.41:12604] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aefjdUTXx_lUa7xwAb6gJAAAAQ8"]
[Wed Apr 22 04:52:06.792721 2026] [:error] [pid 23041:tid 23047] [client 158.158.50.41:12568] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "aefjdkTXx_lUa7xwAb6gKAAAAQM"]
[Wed Apr 22 04:52:09.621122 2026] [:error] [pid 21683:tid 21760] [client 158.158.50.41:54071] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aefjeVZBWT-0diZyYyZsOwAAAIo"]
[Wed Apr 22 04:52:14.374111 2026] [:error] [pid 21788:tid 21813] [client 158.158.50.41:51724] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aefjfn7OM27rzVpef25aTgAAANc"]
[Wed Apr 22 04:52:18.058118 2026] [proxy_fcgi:error] [pid 21788:tid 21810] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:18.324185 2026] [proxy_fcgi:error] [pid 21788:tid 21791] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:18.852758 2026] [proxy_fcgi:error] [pid 21788:tid 21810] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:20.245372 2026] [proxy_fcgi:error] [pid 21788:tid 21790] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:20.530821 2026] [proxy_fcgi:error] [pid 21788:tid 21791] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:20.795642 2026] [proxy_fcgi:error] [pid 21788:tid 21808] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:21.149924 2026] [proxy_fcgi:error] [pid 21788:tid 21804] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:21.418391 2026] [proxy_fcgi:error] [pid 21788:tid 21799] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:21.809585 2026] [proxy_fcgi:error] [pid 21788:tid 21792] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:22.075891 2026] [proxy_fcgi:error] [pid 21788:tid 21812] [client 158.158.50.41:54031] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:52:23.795724 2026] [:error] [pid 21788:tid 21804] [client 158.158.50.41:54031] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefjh37OM27rzVpef25aogAAAM4"]
[Wed Apr 22 04:52:25.285215 2026] [:error] [pid 21788:tid 21796] [client 158.158.50.41:12550] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefjiX7OM27rzVpef25aqwAAAMY"]
[Wed Apr 22 04:52:27.830696 2026] [:error] [pid 21682:tid 21738] [client 158.158.50.41:48411] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefji5lXWQZUlmPHS3rgVQAAAE8"]
[Wed Apr 22 04:52:29.446553 2026] [:error] [pid 21788:tid 21805] [client 158.158.50.41:51759] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefjjX7OM27rzVpef25asAAAAM8"]
[Wed Apr 22 04:52:31.422660 2026] [:error] [pid 21682:tid 21728] [client 158.158.50.41:51772] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aefjj5lXWQZUlmPHS3rgWQAAAEU"]
[Wed Apr 22 04:52:34.611486 2026] [:error] [pid 23041:tid 23056] [client 158.158.50.41:12592] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aefjkkTXx_lUa7xwAb6gigAAAQw"]
[Wed Apr 22 04:52:38.429767 2026] [:error] [pid 21788:tid 21813] [client 158.158.50.41:48711] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aefjln7OM27rzVpef25awwAAANc"]
[Wed Apr 22 04:52:41.125448 2026] [:error] [pid 21683:tid 21771] [client 158.158.50.41:51768] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless4.php"] [unique_id "aefjmVZBWT-0diZyYyZsbgAAAJU"]
[Wed Apr 22 04:52:44.389686 2026] [:error] [pid 23041:tid 23044] [client 158.158.50.41:54058] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aefjnETXx_lUa7xwAb6grwAAAQA"]
[Wed Apr 22 04:52:46.862333 2026] [:error] [pid 21683:tid 21767] [client 158.158.50.41:51765] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aefjnlZBWT-0diZyYyZsdAAAAJE"]
[Wed Apr 22 04:52:48.155749 2026] [:error] [pid 21683:tid 21765] [client 158.158.50.41:12558] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aefjoFZBWT-0diZyYyZsdgAAAI8"]
[Wed Apr 22 04:52:49.648568 2026] [:error] [pid 21788:tid 21808] [client 158.158.50.41:54023] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aefjoX7OM27rzVpef25a5QAAANI"]
[Wed Apr 22 04:52:51.031292 2026] [:error] [pid 21683:tid 21773] [client 158.158.50.41:12594] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aefjo1ZBWT-0diZyYyZsdwAAAJc"]
[Wed Apr 22 04:52:51.952147 2026] [:error] [pid 21682:tid 21736] [client 158.158.50.41:51743] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aefjo5lXWQZUlmPHS3rgbAAAAE0"]
[Wed Apr 22 04:52:53.061544 2026] [:error] [pid 21788:tid 21811] [client 158.158.50.41:12570] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aefjpX7OM27rzVpef25a8gAAANU"]
[Wed Apr 22 04:52:54.304772 2026] [:error] [pid 23041:tid 23045] [client 158.158.50.41:12587] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "aefjpkTXx_lUa7xwAb6gwAAAAQE"]
[Wed Apr 22 04:52:55.245146 2026] [:error] [pid 23041:tid 23054] [client 158.158.50.41:54026] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aefjp0TXx_lUa7xwAb6gxgAAAQo"]
[Wed Apr 22 04:52:56.194651 2026] [:error] [pid 21788:tid 21791] [client 158.158.50.41:54053] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aefjqH7OM27rzVpef25a_wAAAME"]
[Wed Apr 22 04:52:57.087669 2026] [:error] [pid 21788:tid 21790] [client 158.158.50.41:51741] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aefjqX7OM27rzVpef25bAwAAAMA"]
[Wed Apr 22 04:52:58.292656 2026] [:error] [pid 23041:tid 23045] [client 158.158.50.41:12588] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plss3.php"] [unique_id "aefjqkTXx_lUa7xwAb6gzgAAAQE"]
[Wed Apr 22 04:52:59.191353 2026] [:error] [pid 23041:tid 23052] [client 158.158.50.41:48392] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aefjq0TXx_lUa7xwAb6g0gAAAQg"]
[Wed Apr 22 04:53:00.386382 2026] [:error] [pid 23041:tid 23061] [client 158.158.50.41:54047] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aefjrETXx_lUa7xwAb6g0wAAARE"]
[Wed Apr 22 04:53:01.210981 2026] [:error] [pid 23041:tid 23060] [client 158.158.50.41:12547] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aefjrUTXx_lUa7xwAb6g1QAAARA"]
[Wed Apr 22 04:53:02.335105 2026] [:error] [pid 21788:tid 21813] [client 158.158.50.41:51715] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "aefjrn7OM27rzVpef25bGgAAANc"]
[Wed Apr 22 04:53:03.158147 2026] [:error] [pid 21788:tid 21802] [client 158.158.50.41:12546] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aefjr37OM27rzVpef25bHgAAAMw"]
[Wed Apr 22 04:53:05.376147 2026] [:error] [pid 23041:tid 23055] [client 158.158.50.41:51716] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aefjsUTXx_lUa7xwAb6g3AAAAQs"]
[Wed Apr 22 04:53:07.004037 2026] [:error] [pid 23041:tid 23066] [client 158.158.50.41:54020] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aefjs0TXx_lUa7xwAb6g4QAAARY"]
[Wed Apr 22 04:53:09.077268 2026] [:error] [pid 21683:tid 21758] [client 158.158.50.41:12556] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aefjtVZBWT-0diZyYyZsggAAAIg"]
[Wed Apr 22 04:53:11.096040 2026] [:error] [pid 21683:tid 21756] [client 158.158.50.41:12572] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefjt1ZBWT-0diZyYyZsiQAAAIY"]
[Wed Apr 22 04:53:12.966454 2026] [:error] [pid 21681:tid 21695] [client 158.158.50.41:12577] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefjuN5LmJziq-yZYaweZgAAAAU"]
[Wed Apr 22 04:53:15.430661 2026] [:error] [pid 23041:tid 23055] [client 158.158.50.41:12605] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefju0TXx_lUa7xwAb6g6gAAAQs"]
[Wed Apr 22 04:53:16.467163 2026] [:error] [pid 23041:tid 23052] [client 158.158.50.41:12554] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefjvETXx_lUa7xwAb6g7QAAAQg"]
[Wed Apr 22 04:53:19.498461 2026] [:error] [pid 21682:tid 21724] [client 158.158.50.41:54063] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aefjv5lXWQZUlmPHS3rgdgAAAEE"]
[Wed Apr 22 04:53:22.180616 2026] [proxy_fcgi:error] [pid 21788:tid 21799] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:22.426981 2026] [proxy_fcgi:error] [pid 21788:tid 21810] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:22.686268 2026] [proxy_fcgi:error] [pid 21788:tid 21814] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:22.950483 2026] [proxy_fcgi:error] [pid 21788:tid 21794] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:24.136888 2026] [proxy_fcgi:error] [pid 21788:tid 21796] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:24.409958 2026] [proxy_fcgi:error] [pid 21788:tid 21794] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:24.669077 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:24.931926 2026] [proxy_fcgi:error] [pid 21788:tid 21809] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:25.185592 2026] [proxy_fcgi:error] [pid 21788:tid 21805] [client 158.158.50.41:12574] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:53:25.426902 2026] [:error] [pid 21788:tid 21806] [client 158.158.50.41:12574] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefjxX7OM27rzVpef25bggAAANA"]
[Wed Apr 22 04:53:28.423183 2026] [:error] [pid 21683:tid 21753] [client 158.158.50.41:12598] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefjyFZBWT-0diZyYyZsnQAAAIM"]
[Wed Apr 22 04:53:30.290353 2026] [:error] [pid 21683:tid 21765] [client 158.158.50.41:54019] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefjylZBWT-0diZyYyZsngAAAI8"]
[Wed Apr 22 04:53:31.514121 2026] [:error] [pid 23041:tid 23054] [client 158.158.50.41:54074] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aefjy0TXx_lUa7xwAb6g_wAAAQo"]
[Wed Apr 22 04:53:33.155739 2026] [:error] [pid 21788:tid 21795] [client 158.158.50.41:12566] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aefjzX7OM27rzVpef25bxQAAAMU"]
[Wed Apr 22 04:53:34.379747 2026] [:error] [pid 21788:tid 21810] [client 158.158.50.41:12545] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aefjzn7OM27rzVpef25b1QAAANQ"]
[Wed Apr 22 04:53:36.187176 2026] [:error] [pid 21788:tid 21813] [client 158.158.50.41:48719] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aefj0H7OM27rzVpef25b7AAAANc"]
[Wed Apr 22 04:53:37.460247 2026] [:error] [pid 21682:tid 21734] [client 158.158.50.41:12567] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aefj0ZlXWQZUlmPHS3rgfQAAAEs"]
[Wed Apr 22 04:53:38.558986 2026] [:error] [pid 21788:tid 21807] [client 158.158.50.41:12578] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aefj0n7OM27rzVpef25b_wAAANE"]
[Wed Apr 22 04:53:40.296020 2026] [:error] [pid 23041:tid 23063] [client 158.158.50.41:54025] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aefj1ETXx_lUa7xwAb6hBwAAARM"]
[Wed Apr 22 04:53:41.237771 2026] [:error] [pid 21788:tid 21790] [client 158.158.50.41:54045] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aefj1X7OM27rzVpef25cDQAAAMA"]
[Wed Apr 22 04:53:41.947594 2026] [:error] [pid 21788:tid 21812] [client 158.158.50.41:12565] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aefj1X7OM27rzVpef25cEwAAANY"]
[Wed Apr 22 04:53:45.137921 2026] [:error] [pid 21682:tid 21728] [client 158.158.50.41:12582] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aefj2ZlXWQZUlmPHS3rgkQAAAEU"]
[Wed Apr 22 04:53:47.241904 2026] [:error] [pid 21788:tid 21808] [client 158.158.50.41:54021] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aefj237OM27rzVpef25cLgAAANI"]
[Wed Apr 22 04:53:49.467029 2026] [:error] [pid 21683:tid 21751] [client 158.158.50.41:48720] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aefj3VZBWT-0diZyYyZsqQAAAIE"]
[Wed Apr 22 04:53:52.033337 2026] [:error] [pid 21682:tid 21726] [client 158.158.50.41:51738] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we.php"] [unique_id "aefj4JlXWQZUlmPHS3rgoQAAAEM"]
[Wed Apr 22 04:53:55.745959 2026] [:error] [pid 21788:tid 21813] [client 158.158.50.41:54044] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aefj437OM27rzVpef25cWgAAANc"]
[Wed Apr 22 04:54:02.262486 2026] [:error] [pid 21788:tid 21807] [client 158.158.50.41:54067] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aefj6n7OM27rzVpef25cZwAAANE"]
[Wed Apr 22 04:54:06.474128 2026] [:error] [pid 23041:tid 23058] [client 158.158.50.41:54037] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "aefj7kTXx_lUa7xwAb6hMQAAAQ4"]
[Wed Apr 22 04:54:14.808738 2026] [:error] [pid 21788:tid 21810] [client 158.158.50.41:54069] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aefj9n7OM27rzVpef25ciwAAANQ"]
[Wed Apr 22 04:54:19.237322 2026] [:error] [pid 23041:tid 23044] [client 158.158.50.41:54048] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "aefj-0TXx_lUa7xwAb6hOAAAAQA"]
[Wed Apr 22 04:54:28.296083 2026] [proxy_fcgi:error] [pid 21681:tid 21709] [client 158.158.50.41:48738] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:54:28.540893 2026] [proxy_fcgi:error] [pid 21681:tid 21708] [client 158.158.50.41:48738] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:54:28.967857 2026] [proxy_fcgi:error] [pid 21681:tid 21693] [client 158.158.50.41:48738] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:54:29.461821 2026] [proxy_fcgi:error] [pid 21681:tid 21695] [client 158.158.50.41:48738] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:54:30.528677 2026] [proxy_fcgi:error] [pid 21681:tid 21705] [client 158.158.50.41:48738] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:54:30.774026 2026] [proxy_fcgi:error] [pid 21681:tid 21702] [client 158.158.50.41:48738] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:54:31.289219 2026] [proxy_fcgi:error] [pid 21681:tid 21691] [client 158.158.50.41:48738] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:54:32.376756 2026] [:error] [pid 21681:tid 21701] [client 158.158.50.41:48738] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aefkCN5LmJziq-yZYaweiwAAAAs"]
[Wed Apr 22 04:54:34.482052 2026] [:error] [pid 21681:tid 21706] [client 158.158.50.41:48429] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aefkCt5LmJziq-yZYawejQAAABA"]
[Wed Apr 22 04:54:36.324784 2026] [:error] [pid 21683:tid 21762] [client 158.158.50.41:12544] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aefkDFZBWT-0diZyYyZszgAAAIw"]
[Wed Apr 22 04:54:39.497756 2026] [:error] [pid 23041:tid 23045] [client 158.158.50.41:48747] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aefkD0TXx_lUa7xwAb6hUwAAAQE"]
[Wed Apr 22 04:54:42.070930 2026] [:error] [pid 21788:tid 21795] [client 158.158.50.41:12584] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aefkEn7OM27rzVpef25crAAAAMU"]
[Wed Apr 22 04:54:50.891789 2026] [:error] [pid 21683:tid 21759] [client 158.158.50.41:48705] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aefkGlZBWT-0diZyYyZs-QAAAIk"]
[Wed Apr 22 04:54:57.265741 2026] [:error] [pid 21683:tid 21761] [client 158.158.50.41:51719] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aefkIVZBWT-0diZyYyZtAAAAAIs"]
[Wed Apr 22 04:54:59.726911 2026] [:error] [pid 23041:tid 23066] [client 158.158.50.41:54017] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aefkI0TXx_lUa7xwAb6hdgAAARY"]
[Wed Apr 22 04:55:02.379520 2026] [:error] [pid 21788:tid 21800] [client 158.158.50.41:12563] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aefkJn7OM27rzVpef25czwAAAMo"]
[Wed Apr 22 04:55:05.230262 2026] [:error] [pid 21683:tid 21755] [client 158.158.50.41:51725] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aefkKVZBWT-0diZyYyZtCQAAAIU"]
[Wed Apr 22 04:55:10.254474 2026] [:error] [pid 21683:tid 21755] [client 158.158.50.41:12580] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aefkLlZBWT-0diZyYyZtFgAAAIU"]
[Wed Apr 22 04:55:13.574926 2026] [:error] [pid 21682:tid 21741] [client 158.158.50.41:51728] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aefkMZlXWQZUlmPHS3rg5AAAAFI"]
[Wed Apr 22 04:55:18.678917 2026] [:error] [pid 23041:tid 23068] [client 158.158.50.41:51742] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aefkNkTXx_lUa7xwAb6hjgAAARg"]
[Wed Apr 22 04:55:20.496649 2026] [:error] [pid 21682:tid 21731] [client 158.158.50.41:54043] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aefkOJlXWQZUlmPHS3rg6wAAAEg"]
[Wed Apr 22 04:55:21.356004 2026] [:error] [pid 21682:tid 21742] [client 158.158.50.41:54032] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aefkOZlXWQZUlmPHS3rg7QAAAFM"]
[Wed Apr 22 04:55:22.773180 2026] [:error] [pid 21683:tid 21753] [client 158.158.50.41:54029] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aefkOlZBWT-0diZyYyZtIAAAAIM"]
[Wed Apr 22 04:55:24.479501 2026] [:error] [pid 21683:tid 21768] [client 158.158.50.41:12596] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aefkPFZBWT-0diZyYyZtIgAAAJI"]
[Wed Apr 22 04:55:25.409949 2026] [:error] [pid 21682:tid 21741] [client 158.158.50.41:54060] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aefkPZlXWQZUlmPHS3rg9QAAAFI"]
[Wed Apr 22 04:55:26.401342 2026] [:error] [pid 21681:tid 21713] [client 158.158.50.41:12597] [client 158.158.50.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aefkPt5LmJziq-yZYawerwAAABc"]
[Wed Apr 22 04:55:27.357521 2026] [:error] [pid 21681:tid 21701] [client 158.158.50.41:12550] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aefkP95LmJziq-yZYawetAAAAAs"]
[Wed Apr 22 04:55:27.997963 2026] [:error] [pid 21683:tid 21756] [client 158.158.50.41:54040] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aefkP1ZBWT-0diZyYyZtJQAAAIY"]
[Wed Apr 22 04:55:29.130348 2026] [:error] [pid 21788:tid 21794] [client 158.158.50.41:51721] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aefkQX7OM27rzVpef25c8gAAAMQ"]
[Wed Apr 22 04:55:30.458607 2026] [:error] [pid 23041:tid 23047] [client 158.158.50.41:54024] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aefkQkTXx_lUa7xwAb6hlgAAAQM"]
[Wed Apr 22 04:55:33.982231 2026] [proxy_fcgi:error] [pid 21682:tid 21724] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:34.236295 2026] [proxy_fcgi:error] [pid 21682:tid 21747] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:34.481222 2026] [proxy_fcgi:error] [pid 21682:tid 21742] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:34.773475 2026] [proxy_fcgi:error] [pid 21682:tid 21738] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:35.024847 2026] [proxy_fcgi:error] [pid 21682:tid 21745] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:35.623204 2026] [proxy_fcgi:error] [pid 21682:tid 21739] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:36.199044 2026] [proxy_fcgi:error] [pid 21682:tid 21737] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:36.442762 2026] [proxy_fcgi:error] [pid 21682:tid 21743] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:36.701164 2026] [proxy_fcgi:error] [pid 21682:tid 21726] [client 158.158.50.41:51747] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:55:36.943349 2026] [:error] [pid 21682:tid 21740] [client 158.158.50.41:51747] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefkSJlXWQZUlmPHS3rhEgAAAFE"]
[Wed Apr 22 04:55:41.760639 2026] [:error] [pid 23041:tid 23052] [client 158.158.50.41:54028] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefkTUTXx_lUa7xwAb6htAAAAQg"]
[Wed Apr 22 04:55:44.892934 2026] [:error] [pid 21681:tid 21714] [client 158.158.50.41:54035] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefkUN5LmJziq-yZYaweywAAABg"]
[Wed Apr 22 04:55:50.121001 2026] [:error] [pid 21682:tid 21745] [client 158.158.50.41:12607] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefkVplXWQZUlmPHS3rhGwAAAFY"]
[Wed Apr 22 04:55:58.204596 2026] [:error] [pid 21681:tid 21698] [client 158.158.50.41:51732] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aefkXt5LmJziq-yZYawe0wAAAAg"]
[Wed Apr 22 04:56:01.091229 2026] [:error] [pid 23041:tid 23048] [client 158.158.50.41:12564] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aefkYUTXx_lUa7xwAb6iBgAAAQQ"]
[Wed Apr 22 04:56:03.048183 2026] [:error] [pid 21683:tid 21767] [client 158.158.50.41:12575] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aefkY1ZBWT-0diZyYyZtYwAAAJE"]
[Wed Apr 22 04:56:03.724833 2026] [:error] [pid 21682:tid 21726] [client 158.158.50.41:12602] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aefkY5lXWQZUlmPHS3rhLwAAAEM"]
[Wed Apr 22 04:56:05.500448 2026] [:error] [pid 21683:tid 21758] [client 158.158.50.41:51713] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aefkZVZBWT-0diZyYyZtZgAAAIg"]
[Wed Apr 22 04:56:07.391527 2026] [:error] [pid 21682:tid 21725] [client 158.158.50.41:48404] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aefkZ5lXWQZUlmPHS3rhMwAAAEI"]
[Wed Apr 22 04:56:09.491677 2026] [:error] [pid 21682:tid 21742] [client 158.158.50.41:12585] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aefkaZlXWQZUlmPHS3rhOgAAAFM"]
[Wed Apr 22 04:56:13.514316 2026] [:error] [pid 21682:tid 21742] [client 158.158.50.41:54056] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfashell.php"] [unique_id "aefkbZlXWQZUlmPHS3rhSQAAAFM"]
[Wed Apr 22 04:56:24.833999 2026] [:error] [pid 21683:tid 21757] [client 158.158.50.41:54061] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aefkeFZBWT-0diZyYyZtjwAAAIc"]
[Wed Apr 22 04:56:34.603363 2026] [:error] [pid 21788:tid 21793] [client 158.158.50.41:12586] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aefkgn7OM27rzVpef25dZQAAAMM"]
[Wed Apr 22 04:56:43.605635 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:43.872827 2026] [proxy_fcgi:error] [pid 21788:tid 21792] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:44.138783 2026] [proxy_fcgi:error] [pid 21788:tid 21803] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:44.692861 2026] [proxy_fcgi:error] [pid 21788:tid 21795] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:44.960056 2026] [proxy_fcgi:error] [pid 21788:tid 21800] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:45.225408 2026] [proxy_fcgi:error] [pid 21788:tid 21799] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:45.496122 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:45.767089 2026] [proxy_fcgi:error] [pid 21788:tid 21792] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:47.455492 2026] [proxy_fcgi:error] [pid 21788:tid 21806] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:50.164175 2026] [proxy_fcgi:error] [pid 21788:tid 21797] [client 158.158.50.41:54041] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 04:56:50.425963 2026] [:error] [pid 21788:tid 21814] [client 158.158.50.41:54041] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aefkkn7OM27rzVpef25dogAAANg"]
[Wed Apr 22 04:56:55.409628 2026] [:error] [pid 21683:tid 21759] [client 158.158.50.41:54071] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aefkl1ZBWT-0diZyYyZuDwAAAIk"]
[Wed Apr 22 04:56:57.433161 2026] [:error] [pid 21681:tid 21701] [client 158.158.50.41:51744] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aefkmd5LmJziq-yZYawfDAAAAAs"]
[Wed Apr 22 04:57:01.117862 2026] [:error] [pid 23041:tid 23057] [client 158.158.50.41:54072] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cabs.php"] [unique_id "aefknUTXx_lUa7xwAb6ibAAAAQ0"]
[Wed Apr 22 04:57:05.587206 2026] [:error] [pid 21683:tid 21771] [client 158.158.50.41:12573] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aefkoVZBWT-0diZyYyZuMQAAAJU"]
[Wed Apr 22 04:57:09.851868 2026] [:error] [pid 21683:tid 21760] [client 158.158.50.41:54018] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aefkpVZBWT-0diZyYyZuMwAAAIo"]
[Wed Apr 22 04:57:11.327871 2026] [:error] [pid 21681:tid 21692] [client 158.158.50.41:51723] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aefkp95LmJziq-yZYawfKAAAAAI"]
[Wed Apr 22 04:57:14.262948 2026] [:error] [pid 23041:tid 23044] [client 158.158.50.41:48710] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "aefkqkTXx_lUa7xwAb6ingAAAQA"]
[Wed Apr 22 04:57:17.506324 2026] [:error] [pid 21682:tid 21729] [client 158.158.50.41:54031] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aefkrZlXWQZUlmPHS3rhsAAAAEY"]
[Wed Apr 22 04:57:21.312694 2026] [:error] [pid 21683:tid 21762] [client 158.158.50.41:51729] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aefksVZBWT-0diZyYyZuQQAAAIw"]
[Wed Apr 22 04:57:23.543600 2026] [:error] [pid 21788:tid 21798] [client 158.158.50.41:12593] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aefks37OM27rzVpef25ejAAAAMg"]
[Wed Apr 22 04:57:31.021538 2026] [:error] [pid 21683:tid 21755] [client 158.158.50.41:51712] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x1da.php"] [unique_id "aefku1ZBWT-0diZyYyZuWAAAAIU"]
[Wed Apr 22 04:57:35.786621 2026] [:error] [pid 23041:tid 23049] [client 158.158.50.41:12548] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aefkv0TXx_lUa7xwAb6i1QAAAQU"]
[Wed Apr 22 04:57:43.168148 2026] [:error] [pid 21682:tid 21729] [client 158.158.50.41:54058] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aefkx5lXWQZUlmPHS3rhywAAAEY"]
[Wed Apr 22 04:57:44.913600 2026] [:error] [pid 21788:tid 21801] [client 158.158.50.41:12604] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jp.php"] [unique_id "aefkyH7OM27rzVpef25e0gAAAMs"]
[Wed Apr 22 04:57:47.200288 2026] [:error] [pid 21683:tid 21771] [client 158.158.50.41:54075] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aefky1ZBWT-0diZyYyZukgAAAJU"]
[Wed Apr 22 04:57:49.261005 2026] [:error] [pid 21682:tid 21734] [client 158.158.50.41:51755] [client 158.158.50.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aefkzZlXWQZUlmPHS3rh0QAAAEs"]
[Wed Apr 22 04:57:50.954076 2026] [proxy_fcgi:error] [pid 21683:tid 21756] [client 158.158.50.41:12578] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 13:47:21.148491 2026] [:error] [pid 6250:tid 6274] [client 20.199.191.31:27243] [client 20.199.191.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aehg6Q-iZeQkqmQVfj6gmwAAAFQ"]
[Wed Apr 22 13:47:22.214042 2026] [:error] [pid 9085:tid 9093] [client 20.199.191.31:23356] [client 20.199.191.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aehg6t-_-or9vQnlWnpdpAAAAUY"]
[Wed Apr 22 13:47:23.746495 2026] [:error] [pid 9085:tid 9109] [client 20.199.191.31:33893] [client 20.199.191.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aehg69-_-or9vQnlWnpdrgAAAVY"]
[Wed Apr 22 13:47:24.361482 2026] [:error] [pid 6344:tid 6354] [client 20.199.191.31:31780] [client 20.199.191.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aehg7EDOTF-pkQnDeUlkPwAAAAU"]
[Wed Apr 22 22:53:16.052478 2026] [:error] [pid 6384:tid 6406] [client 45.150.174.91:56618] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "aejg3D58M3t15ICeWHWGNQAAANM"]
[Wed Apr 22 22:53:16.085631 2026] [proxy_fcgi:error] [pid 6384:tid 6406] [client 45.150.174.91:56618] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:33.794540 2026] [proxy_fcgi:error] [pid 9085:tid 9104] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:34.058057 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:34.321415 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:34.705074 2026] [proxy_fcgi:error] [pid 9085:tid 9096] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:34.973749 2026] [proxy_fcgi:error] [pid 9085:tid 9100] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:35.236861 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:35.629480 2026] [proxy_fcgi:error] [pid 9085:tid 9092] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:35.893186 2026] [proxy_fcgi:error] [pid 9085:tid 9107] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:36.162956 2026] [proxy_fcgi:error] [pid 9085:tid 9106] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:36.425809 2026] [proxy_fcgi:error] [pid 9085:tid 9099] [client 4.235.1.40:5009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:56:36.685741 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:5009] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s1.php"] [unique_id "aekL1N-_-or9vQnlWno5cQAAAVA"]
[Thu Apr 23 01:56:37.441141 2026] [:error] [pid 23776:tid 23798] [client 4.235.1.40:5061] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s1.php"] [unique_id "aekL1bRExf-1pAbSeJtiWAAAAZQ"]
[Thu Apr 23 01:56:38.217625 2026] [:error] [pid 6250:tid 6255] [client 4.235.1.40:5072] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s1.php"] [unique_id "aekL1g-iZeQkqmQVfj5M0AAAAEE"]
[Thu Apr 23 01:56:39.548312 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:5062] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/s1.php"] [unique_id "aekL19-_-or9vQnlWno5dAAAAVU"]
[Thu Apr 23 01:56:42.002719 2026] [:error] [pid 6344:tid 6360] [client 4.235.1.40:4996] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aekL2kDOTF-pkQnDeUlB_gAAAAs"]
[Thu Apr 23 01:56:43.951270 2026] [:error] [pid 6252:tid 6331] [client 4.235.1.40:5069] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aekL2-tGYuiYb1nWBpSEmgAAARM"]
[Thu Apr 23 01:56:44.925460 2026] [:error] [pid 6384:tid 6389] [client 4.235.1.40:5117] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aekL3D58M3t15ICeWHXVqQAAAMI"]
[Thu Apr 23 01:56:46.847408 2026] [:error] [pid 6251:tid 6298] [client 4.235.1.40:5105] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "aekL3isFAzbyObL-SQ6s2gAAAI0"]
[Thu Apr 23 01:56:47.920385 2026] [:error] [pid 23776:tid 23800] [client 4.235.1.40:5104] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aekL37RExf-1pAbSeJtiZAAAAZY"]
[Thu Apr 23 01:56:49.019804 2026] [:error] [pid 9085:tid 9107] [client 4.235.1.40:5107] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aekL4d-_-or9vQnlWno5iAAAAVQ"]
[Thu Apr 23 01:56:51.114134 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:5100] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aekL49-_-or9vQnlWno5jwAAAVU"]
[Thu Apr 23 01:56:52.610628 2026] [:error] [pid 6251:tid 6302] [client 4.235.1.40:5063] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "aekL5CsFAzbyObL-SQ6s3gAAAJE"]
[Thu Apr 23 01:56:54.264309 2026] [:error] [pid 6384:tid 6399] [client 4.235.1.40:4998] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aekL5j58M3t15ICeWHXVswAAAMw"]
[Thu Apr 23 01:56:55.179197 2026] [:error] [pid 6384:tid 6402] [client 4.235.1.40:5060] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aekL5z58M3t15ICeWHXVtAAAAM8"]
[Thu Apr 23 01:56:55.985356 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:5074] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aekL59-_-or9vQnlWno5lgAAAVc"]
[Thu Apr 23 01:56:57.099700 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:4995] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aekL6d-_-or9vQnlWno5mwAAAUM"]
[Thu Apr 23 01:56:57.943877 2026] [:error] [pid 9085:tid 9101] [client 4.235.1.40:5005] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aekL6d-_-or9vQnlWno5ngAAAU4"]
[Thu Apr 23 01:56:59.769722 2026] [:error] [pid 23776:tid 23788] [client 4.235.1.40:5090] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aekL67RExf-1pAbSeJtifwAAAYo"]
[Thu Apr 23 01:57:02.537569 2026] [:error] [pid 6344:tid 6368] [client 4.235.1.40:5010] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aekL7kDOTF-pkQnDeUlCPAAAABM"]
[Thu Apr 23 01:57:04.196854 2026] [:error] [pid 6344:tid 6365] [client 4.235.1.40:5025] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aekL8EDOTF-pkQnDeUlCQgAAABA"]
[Thu Apr 23 01:57:05.688078 2026] [:error] [pid 23776:tid 23786] [client 4.235.1.40:5003] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aekL8bRExf-1pAbSeJtiggAAAYg"]
[Thu Apr 23 01:57:07.281202 2026] [:error] [pid 6384:tid 6408] [client 4.235.1.40:5057] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aekL8z58M3t15ICeWHXVvgAAANU"]
[Thu Apr 23 01:57:09.152361 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:5115] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aekL9d-_-or9vQnlWno5wwAAAUs"]
[Thu Apr 23 01:57:10.950468 2026] [:error] [pid 6251:tid 6309] [client 4.235.1.40:5113] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "aekL9isFAzbyObL-SQ6s8QAAAJg"]
[Thu Apr 23 01:57:14.066405 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:5102] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekL-t-_-or9vQnlWno50gAAAVc"]
[Thu Apr 23 01:57:15.004969 2026] [:error] [pid 9085:tid 9105] [client 4.235.1.40:4992] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekL-9-_-or9vQnlWno52wAAAVI"]
[Thu Apr 23 01:57:15.732129 2026] [:error] [pid 9085:tid 9096] [client 4.235.1.40:4949] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekL-9-_-or9vQnlWno53wAAAUk"]
[Thu Apr 23 01:57:16.554667 2026] [:error] [pid 6344:tid 6352] [client 4.235.1.40:5024] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekL_EDOTF-pkQnDeUlCVwAAAAM"]
[Thu Apr 23 01:57:17.629683 2026] [:error] [pid 6251:tid 6292] [client 4.235.1.40:4999] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekL_SsFAzbyObL-SQ6s9AAAAIc"]
[Thu Apr 23 01:57:18.644283 2026] [:error] [pid 6384:tid 6408] [client 4.235.1.40:4993] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekL_j58M3t15ICeWHXVywAAANU"]
[Thu Apr 23 01:57:19.328394 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:4994] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekL_9-_-or9vQnlWno55gAAAUs"]
[Thu Apr 23 01:57:20.339312 2026] [:error] [pid 6344:tid 6360] [client 4.235.1.40:5116] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekMAEDOTF-pkQnDeUlCWgAAAAs"]
[Thu Apr 23 01:57:21.495548 2026] [:error] [pid 6252:tid 6318] [client 4.235.1.40:5006] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ganja.php"] [unique_id "aekMAetGYuiYb1nWBpSEtAAAAQY"]
[Thu Apr 23 01:57:22.378033 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:5095] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ganja.php"] [unique_id "aekMAt-_-or9vQnlWno57QAAAUM"]
[Thu Apr 23 01:57:23.636065 2026] [:error] [pid 6251:tid 6299] [client 4.235.1.40:5030] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ganja.php"] [unique_id "aekMAysFAzbyObL-SQ6s-AAAAI4"]
[Thu Apr 23 01:57:24.747247 2026] [:error] [pid 6384:tid 6405] [client 4.235.1.40:5070] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ganja.php"] [unique_id "aekMBD58M3t15ICeWHXV1gAAANI"]
[Thu Apr 23 01:57:25.649846 2026] [:error] [pid 6251:tid 6288] [client 4.235.1.40:5001] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMBSsFAzbyObL-SQ6s-wAAAIM"]
[Thu Apr 23 01:57:26.323969 2026] [:error] [pid 6250:tid 6271] [client 4.235.1.40:5092] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMBg-iZeQkqmQVfj5M7QAAAFE"]
[Thu Apr 23 01:57:27.216373 2026] [:error] [pid 9085:tid 9106] [client 4.235.1.40:5088] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMB9-_-or9vQnlWno58gAAAVM"]
[Thu Apr 23 01:57:27.999984 2026] [:error] [pid 9085:tid 9093] [client 4.235.1.40:4997] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMB9-_-or9vQnlWno59AAAAUY"]
[Thu Apr 23 01:57:28.974158 2026] [:error] [pid 6384:tid 6393] [client 4.235.1.40:5053] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad821.php"] [unique_id "aekMCD58M3t15ICeWHXV3wAAAMY"]
[Thu Apr 23 01:57:30.014896 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:5011] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad821.php"] [unique_id "aekMCt-_-or9vQnlWno5-AAAAVc"]
[Thu Apr 23 01:57:31.272072 2026] [:error] [pid 9085:tid 9091] [client 4.235.1.40:5094] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad821.php"] [unique_id "aekMC9-_-or9vQnlWno5_gAAAUQ"]
[Thu Apr 23 01:57:32.460798 2026] [:error] [pid 6250:tid 6261] [client 4.235.1.40:5032] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad821.php"] [unique_id "aekMDA-iZeQkqmQVfj5M8QAAAEc"]
[Thu Apr 23 01:57:33.474691 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:4961] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad8210.php"] [unique_id "aekMDd-_-or9vQnlWno6FAAAAUs"]
[Thu Apr 23 01:57:34.221883 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:5114] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad8210.php"] [unique_id "aekMDt-_-or9vQnlWno6GQAAAU8"]
[Thu Apr 23 01:57:35.241595 2026] [:error] [pid 23776:tid 23782] [client 4.235.1.40:4887] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad8210.php"] [unique_id "aekMD7RExf-1pAbSeJtirAAAAYQ"]
[Thu Apr 23 01:57:35.942292 2026] [:error] [pid 6344:tid 6360] [client 4.235.1.40:5108] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sad8210.php"] [unique_id "aekMD0DOTF-pkQnDeUlCewAAAAs"]
[Thu Apr 23 01:57:36.856917 2026] [proxy_fcgi:error] [pid 9085:tid 9108] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:37.119572 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:37.538750 2026] [proxy_fcgi:error] [pid 9085:tid 9103] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:37.878339 2026] [proxy_fcgi:error] [pid 9085:tid 9099] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:38.157706 2026] [proxy_fcgi:error] [pid 9085:tid 9100] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:38.424177 2026] [proxy_fcgi:error] [pid 9085:tid 9091] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:38.787979 2026] [proxy_fcgi:error] [pid 9085:tid 9087] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:39.051067 2026] [proxy_fcgi:error] [pid 9085:tid 9111] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:39.406103 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:39.669714 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:39.942355 2026] [proxy_fcgi:error] [pid 9085:tid 9107] [client 4.235.1.40:5004] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:57:40.333936 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:5004] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aekMFN-_-or9vQnlWno6MwAAAUc"]
[Thu Apr 23 01:57:41.040873 2026] [:error] [pid 6250:tid 6276] [client 4.235.1.40:5082] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aekMFQ-iZeQkqmQVfj5NAQAAAFY"]
[Thu Apr 23 01:57:41.780996 2026] [:error] [pid 23776:tid 23795] [client 4.235.1.40:5106] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aekMFbRExf-1pAbSeJtiugAAAZE"]
[Thu Apr 23 01:57:42.645173 2026] [:error] [pid 6251:tid 6302] [client 4.235.1.40:4950] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "aekMFisFAzbyObL-SQ6tBwAAAJE"]
[Thu Apr 23 01:57:43.985676 2026] [:error] [pid 6251:tid 6287] [client 4.235.1.40:5012] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aekMFysFAzbyObL-SQ6tDgAAAII"]
[Thu Apr 23 01:57:45.018171 2026] [:error] [pid 6251:tid 6304] [client 4.235.1.40:5000] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aekMGSsFAzbyObL-SQ6tFAAAAJM"]
[Thu Apr 23 01:57:46.159186 2026] [:error] [pid 6251:tid 6302] [client 4.235.1.40:5015] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aekMGisFAzbyObL-SQ6tGQAAAJE"]
[Thu Apr 23 01:57:47.190463 2026] [:error] [pid 6384:tid 6408] [client 4.235.1.40:5034] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "aekMGz58M3t15ICeWHXV6AAAANU"]
[Thu Apr 23 01:57:48.357374 2026] [:error] [pid 23776:tid 23792] [client 4.235.1.40:5019] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aekMHLRExf-1pAbSeJtivwAAAY4"]
[Thu Apr 23 01:57:50.095325 2026] [:error] [pid 6384:tid 6402] [client 4.235.1.40:5096] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aekMHj58M3t15ICeWHXV7wAAAM8"]
[Thu Apr 23 01:57:50.723865 2026] [:error] [pid 6250:tid 6272] [client 4.235.1.40:5111] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aekMHg-iZeQkqmQVfj5NDwAAAFI"]
[Thu Apr 23 01:57:51.646918 2026] [:error] [pid 6384:tid 6403] [client 4.235.1.40:4974] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r2.php"] [unique_id "aekMHz58M3t15ICeWHXV9QAAANA"]
[Thu Apr 23 01:57:52.668128 2026] [:error] [pid 6344:tid 6361] [client 4.235.1.40:5007] [client 4.235.1.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "aekMIEDOTF-pkQnDeUlChQAAAAw"]
[Thu Apr 23 01:57:53.778481 2026] [:error] [pid 6250:tid 6260] [client 4.235.1.40:5008] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aekMIQ-iZeQkqmQVfj5NFAAAAEY"]
[Thu Apr 23 01:57:54.497157 2026] [:error] [pid 23776:tid 23786] [client 4.235.1.40:4940] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aekMIrRExf-1pAbSeJtiwwAAAYg"]
[Thu Apr 23 01:57:55.473023 2026] [:error] [pid 6250:tid 6271] [client 4.235.1.40:5047] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aekMIw-iZeQkqmQVfj5NFQAAAFE"]
[Thu Apr 23 01:57:56.487149 2026] [:error] [pid 6252:tid 6313] [client 4.235.1.40:4952] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "aekMJOtGYuiYb1nWBpSEyQAAAQE"]
[Thu Apr 23 01:57:57.348216 2026] [:error] [pid 6252:tid 6319] [client 4.235.1.40:5048] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekMJetGYuiYb1nWBpSEygAAAQc"]
[Thu Apr 23 01:57:58.523465 2026] [:error] [pid 6251:tid 6287] [client 4.235.1.40:4934] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekMJisFAzbyObL-SQ6tJwAAAII"]
[Thu Apr 23 01:57:59.412547 2026] [:error] [pid 6384:tid 6399] [client 4.235.1.40:5020] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekMJz58M3t15ICeWHXV_gAAAMw"]
[Thu Apr 23 01:58:00.150571 2026] [:error] [pid 6344:tid 6353] [client 4.235.1.40:5035] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekMKEDOTF-pkQnDeUlCigAAAAQ"]
[Thu Apr 23 01:58:01.041719 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:5023] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aekMKd-_-or9vQnlWno6OQAAAUc"]
[Thu Apr 23 01:58:02.205099 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:5083] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aekMKt-_-or9vQnlWno6PQAAAUU"]
[Thu Apr 23 01:58:03.349413 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:5031] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aekMK9-_-or9vQnlWno6QwAAAVU"]
[Thu Apr 23 01:58:04.077914 2026] [:error] [pid 9085:tid 9089] [client 4.235.1.40:5080] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "aekMLN-_-or9vQnlWno6RgAAAUI"]
[Thu Apr 23 01:58:05.980949 2026] [:error] [pid 6252:tid 6325] [client 4.235.1.40:5118] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aekMLetGYuiYb1nWBpSE0QAAAQ0"]
[Thu Apr 23 01:58:07.175964 2026] [:error] [pid 6384:tid 6399] [client 4.235.1.40:4936] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aekMLz58M3t15ICeWHXWBgAAAMw"]
[Thu Apr 23 01:58:08.152297 2026] [:error] [pid 9085:tid 9107] [client 4.235.1.40:5084] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aekMMN-_-or9vQnlWno6VQAAAVQ"]
[Thu Apr 23 01:58:09.147889 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:5027] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "aekMMd-_-or9vQnlWno6XQAAAUA"]
[Thu Apr 23 01:58:10.024900 2026] [:error] [pid 6344:tid 6359] [client 4.235.1.40:5081] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aekMMkDOTF-pkQnDeUlCjgAAAAo"]
[Thu Apr 23 01:58:11.127750 2026] [:error] [pid 9085:tid 9093] [client 4.235.1.40:4937] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aekMM9-_-or9vQnlWno6YgAAAUY"]
[Thu Apr 23 01:58:12.637717 2026] [:error] [pid 6344:tid 6366] [client 4.235.1.40:5097] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aekMNEDOTF-pkQnDeUlClAAAABE"]
[Thu Apr 23 01:58:13.617193 2026] [:error] [pid 6251:tid 6296] [client 4.235.1.40:4964] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aekMNSsFAzbyObL-SQ6tLwAAAIs"]
[Thu Apr 23 01:58:16.293864 2026] [:error] [pid 6252:tid 6315] [client 4.235.1.40:5021] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aekMOOtGYuiYb1nWBpSE2wAAAQM"]
[Thu Apr 23 01:58:17.330296 2026] [:error] [pid 6344:tid 6358] [client 4.235.1.40:5044] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aekMOUDOTF-pkQnDeUlCnwAAAAk"]
[Thu Apr 23 01:58:18.269009 2026] [:error] [pid 6250:tid 6267] [client 4.235.1.40:5017] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aekMOg-iZeQkqmQVfj5NIQAAAE0"]
[Thu Apr 23 01:58:19.474744 2026] [:error] [pid 6384:tid 6387] [client 4.235.1.40:4966] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "aekMOz58M3t15ICeWHXWFgAAAMA"]
[Thu Apr 23 01:58:21.145361 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:5075] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aekMPT58M3t15ICeWHXWJgAAAMc"]
[Thu Apr 23 01:58:22.127644 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:4944] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aekMPt-_-or9vQnlWno6eAAAAUs"]
[Thu Apr 23 01:58:23.632318 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:4873] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aekMP9-_-or9vQnlWno6hAAAAUs"]
[Thu Apr 23 01:58:24.620735 2026] [:error] [pid 9085:tid 9088] [client 4.235.1.40:4932] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aekMQN-_-or9vQnlWno6igAAAUE"]
[Thu Apr 23 01:58:25.627017 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:4962] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aekMQd-_-or9vQnlWno6jgAAAVc"]
[Thu Apr 23 01:58:26.491490 2026] [:error] [pid 23776:tid 23793] [client 4.235.1.40:5037] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aekMQrRExf-1pAbSeJti5gAAAY8"]
[Thu Apr 23 01:58:27.348659 2026] [:error] [pid 6344:tid 6371] [client 4.235.1.40:5018] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aekMQ0DOTF-pkQnDeUlCsAAAABY"]
[Thu Apr 23 01:58:28.124889 2026] [:error] [pid 6384:tid 6387] [client 4.235.1.40:5050] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "aekMRD58M3t15ICeWHXWUQAAAMA"]
[Thu Apr 23 01:58:29.817796 2026] [:error] [pid 6384:tid 6407] [client 4.235.1.40:4965] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekMRT58M3t15ICeWHXWWgAAANQ"]
[Thu Apr 23 01:58:31.115463 2026] [:error] [pid 9085:tid 9093] [client 4.235.1.40:4980] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekMR9-_-or9vQnlWno6pQAAAUY"]
[Thu Apr 23 01:58:32.534602 2026] [:error] [pid 6250:tid 6270] [client 4.235.1.40:5093] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekMSA-iZeQkqmQVfj5NOgAAAFA"]
[Thu Apr 23 01:58:34.064820 2026] [:error] [pid 9085:tid 9101] [client 4.235.1.40:4881] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekMSt-_-or9vQnlWno6swAAAU4"]
[Thu Apr 23 01:58:35.008123 2026] [:error] [pid 6344:tid 6371] [client 4.235.1.40:5073] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aekMS0DOTF-pkQnDeUlCuAAAABY"]
[Thu Apr 23 01:58:35.827137 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:4978] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aekMS9-_-or9vQnlWno6uQAAAUM"]
[Thu Apr 23 01:58:37.017208 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:5058] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aekMTd-_-or9vQnlWno6vAAAAUo"]
[Thu Apr 23 01:58:37.874758 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:4825] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aekMTd-_-or9vQnlWno6vgAAAVg"]
[Thu Apr 23 01:58:39.356480 2026] [proxy_fcgi:error] [pid 6384:tid 6393] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:39.621437 2026] [proxy_fcgi:error] [pid 6384:tid 6402] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:39.886640 2026] [proxy_fcgi:error] [pid 6384:tid 6396] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:40.149887 2026] [proxy_fcgi:error] [pid 6384:tid 6390] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:40.810449 2026] [proxy_fcgi:error] [pid 6384:tid 6395] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:41.074986 2026] [proxy_fcgi:error] [pid 6384:tid 6394] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:41.338658 2026] [proxy_fcgi:error] [pid 6384:tid 6399] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:41.918935 2026] [proxy_fcgi:error] [pid 6384:tid 6408] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:42.203891 2026] [proxy_fcgi:error] [pid 6384:tid 6388] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:42.478991 2026] [proxy_fcgi:error] [pid 6384:tid 6402] [client 4.235.1.40:5041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:58:42.738743 2026] [:error] [pid 6384:tid 6396] [client 4.235.1.40:5041] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aekMUj58M3t15ICeWHXWowAAAMk"]
[Thu Apr 23 01:58:43.713750 2026] [:error] [pid 9085:tid 9106] [client 4.235.1.40:4908] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aekMU9-_-or9vQnlWno61AAAAVM"]
[Thu Apr 23 01:58:45.239126 2026] [:error] [pid 23776:tid 23792] [client 4.235.1.40:5008] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aekMVbRExf-1pAbSeJtjAQAAAY4"]
[Thu Apr 23 01:58:46.614291 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:4969] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aekMVt-_-or9vQnlWno65gAAAVA"]
[Thu Apr 23 01:58:48.821392 2026] [:error] [pid 6250:tid 6268] [client 4.235.1.40:5086] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aekMWA-iZeQkqmQVfj5NQAAAAE4"]
[Thu Apr 23 01:58:50.300985 2026] [:error] [pid 6384:tid 6400] [client 4.235.1.40:5064] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aekMWj58M3t15ICeWHXWuQAAAM0"]
[Thu Apr 23 01:58:53.271326 2026] [:error] [pid 6344:tid 6365] [client 4.235.1.40:4946] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aekMXUDOTF-pkQnDeUlCyAAAABA"]
[Thu Apr 23 01:58:56.194489 2026] [:error] [pid 6252:tid 6335] [client 4.235.1.40:5109] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aekMYOtGYuiYb1nWBpSE9QAAARc"]
[Thu Apr 23 01:58:57.938180 2026] [:error] [pid 23776:tid 23783] [client 4.235.1.40:5028] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMYbRExf-1pAbSeJtjDQAAAYU"]
[Thu Apr 23 01:58:58.897154 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:5066] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMYt-_-or9vQnlWno7NAAAAU8"]
[Thu Apr 23 01:59:02.361775 2026] [:error] [pid 6384:tid 6409] [client 4.235.1.40:5036] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMZj58M3t15ICeWHXWxAAAANY"]
[Thu Apr 23 01:59:03.421519 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:4960] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "aekMZz58M3t15ICeWHXWxwAAAMc"]
[Thu Apr 23 01:59:04.328326 2026] [:error] [pid 23776:tid 23799] [client 4.235.1.40:4970] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aekMaLRExf-1pAbSeJtjFgAAAZU"]
[Thu Apr 23 01:59:06.025133 2026] [:error] [pid 6344:tid 6361] [client 4.235.1.40:5101] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aekMakDOTF-pkQnDeUlC0QAAAAw"]
[Thu Apr 23 01:59:08.963827 2026] [:error] [pid 23776:tid 23787] [client 4.235.1.40:5002] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aekMbLRExf-1pAbSeJtjFwAAAYk"]
[Thu Apr 23 01:59:10.296083 2026] [:error] [pid 6384:tid 6406] [client 4.235.1.40:5099] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "aekMbj58M3t15ICeWHXWzgAAANM"]
[Thu Apr 23 01:59:12.119868 2026] [:error] [pid 6344:tid 6354] [client 4.235.1.40:5119] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aekMcEDOTF-pkQnDeUlC0wAAAAU"]
[Thu Apr 23 01:59:14.723788 2026] [:error] [pid 9085:tid 9104] [client 4.235.1.40:5059] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aekMct-_-or9vQnlWno7SAAAAVE"]
[Thu Apr 23 01:59:18.331452 2026] [:error] [pid 6344:tid 6350] [client 4.235.1.40:4918] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aekMdkDOTF-pkQnDeUlC2wAAAAE"]
[Thu Apr 23 01:59:20.915985 2026] [:error] [pid 6251:tid 6308] [client 4.235.1.40:5016] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "aekMeCsFAzbyObL-SQ6tgwAAAJc"]
[Thu Apr 23 01:59:21.981606 2026] [:error] [pid 6252:tid 6334] [client 4.235.1.40:4955] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aekMeetGYuiYb1nWBpSFGgAAARY"]
[Thu Apr 23 01:59:23.036951 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:4869] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aekMe9-_-or9vQnlWno7YgAAAUo"]
[Thu Apr 23 01:59:24.597988 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:5079] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aekMfN-_-or9vQnlWno7cwAAAVg"]
[Thu Apr 23 01:59:26.809155 2026] [:error] [pid 6384:tid 6391] [client 4.235.1.40:5068] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelio1.php"] [unique_id "aekMfj58M3t15ICeWHXW-wAAAMQ"]
[Thu Apr 23 01:59:29.662104 2026] [:error] [pid 6344:tid 6359] [client 4.235.1.40:5033] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aekMgUDOTF-pkQnDeUlC5AAAAAo"]
[Thu Apr 23 01:59:30.602065 2026] [:error] [pid 23776:tid 23794] [client 4.235.1.40:4954] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aekMgrRExf-1pAbSeJtjRAAAAZA"]
[Thu Apr 23 01:59:31.627804 2026] [:error] [pid 23776:tid 23783] [client 4.235.1.40:4943] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aekMg7RExf-1pAbSeJtjRgAAAYU"]
[Thu Apr 23 01:59:32.326951 2026] [:error] [pid 6250:tid 6271] [client 4.235.1.40:5056] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aekMhA-iZeQkqmQVfj5NZAAAAFE"]
[Thu Apr 23 01:59:34.477095 2026] [:error] [pid 6384:tid 6388] [client 4.235.1.40:4956] [client 4.235.1.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aekMhj58M3t15ICeWHXXCwAAAME"]
[Thu Apr 23 01:59:35.774144 2026] [:error] [pid 6384:tid 6402] [client 4.235.1.40:4912] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aekMhz58M3t15ICeWHXXEgAAAM8"]
[Thu Apr 23 01:59:36.985067 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:4967] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aekMiN-_-or9vQnlWno7iQAAAUc"]
[Thu Apr 23 01:59:37.922117 2026] [:error] [pid 6344:tid 6349] [client 4.235.1.40:4809] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aekMiUDOTF-pkQnDeUlC8QAAAAA"]
[Thu Apr 23 01:59:39.628366 2026] [:error] [pid 6344:tid 6355] [client 4.235.1.40:5078] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "aekMi0DOTF-pkQnDeUlC9QAAAAY"]
[Thu Apr 23 01:59:44.346705 2026] [proxy_fcgi:error] [pid 6384:tid 6403] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:44.609934 2026] [proxy_fcgi:error] [pid 6384:tid 6402] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:44.897299 2026] [proxy_fcgi:error] [pid 6384:tid 6401] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:45.183126 2026] [proxy_fcgi:error] [pid 6384:tid 6387] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:45.654540 2026] [proxy_fcgi:error] [pid 6384:tid 6389] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:46.029770 2026] [proxy_fcgi:error] [pid 6384:tid 6406] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:46.292909 2026] [proxy_fcgi:error] [pid 6384:tid 6394] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:46.554887 2026] [proxy_fcgi:error] [pid 6384:tid 6391] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:47.326595 2026] [proxy_fcgi:error] [pid 6384:tid 6408] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:47.607195 2026] [proxy_fcgi:error] [pid 6384:tid 6411] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:47.888270 2026] [proxy_fcgi:error] [pid 6384:tid 6400] [client 4.235.1.40:5071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:59:48.424027 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:5071] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aekMlD58M3t15ICeWHXXPgAAAMo"]
[Thu Apr 23 01:59:50.047184 2026] [:error] [pid 23776:tid 23801] [client 4.235.1.40:4985] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aekMlrRExf-1pAbSeJtjWQAAAZc"]
[Thu Apr 23 01:59:56.873487 2026] [:error] [pid 6252:tid 6330] [client 4.235.1.40:4874] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aekMnOtGYuiYb1nWBpSFLwAAARI"]
[Thu Apr 23 01:59:59.308495 2026] [:error] [pid 9085:tid 9104] [client 4.235.1.40:4953] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "aekMn9-_-or9vQnlWno7tQAAAVE"]
[Thu Apr 23 02:00:01.855718 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:4977] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aekMod-_-or9vQnlWno7wAAAAVA"]
[Thu Apr 23 02:00:03.332968 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:5042] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aekMo9-_-or9vQnlWno7xQAAAUc"]
[Thu Apr 23 02:00:06.629389 2026] [:error] [pid 23776:tid 23787] [client 4.235.1.40:4866] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aekMprRExf-1pAbSeJtjdAAAAYk"]
[Thu Apr 23 02:00:07.754622 2026] [:error] [pid 6384:tid 6395] [client 4.235.1.40:5055] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "aekMpz58M3t15ICeWHXXWgAAAMg"]
[Thu Apr 23 02:00:09.518153 2026] [:error] [pid 6252:tid 6331] [client 4.235.1.40:5089] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aekMqetGYuiYb1nWBpSFNwAAARM"]
[Thu Apr 23 02:00:13.234073 2026] [:error] [pid 6384:tid 6409] [client 4.235.1.40:4928] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aekMrT58M3t15ICeWHXXXgAAANY"]
[Thu Apr 23 02:00:14.452853 2026] [:error] [pid 23776:tid 23785] [client 4.235.1.40:4991] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aekMrrRExf-1pAbSeJtjfAAAAYc"]
[Thu Apr 23 02:00:15.517670 2026] [:error] [pid 6252:tid 6315] [client 4.235.1.40:4984] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "aekMr-tGYuiYb1nWBpSFPAAAAQM"]
[Thu Apr 23 02:00:17.304948 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:5039] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aekMsd-_-or9vQnlWno78gAAAU8"]
[Thu Apr 23 02:00:19.557228 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:4865] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aekMs9-_-or9vQnlWno7_wAAAUo"]
[Thu Apr 23 02:00:20.572156 2026] [:error] [pid 6384:tid 6399] [client 4.235.1.40:5087] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aekMtD58M3t15ICeWHXXYwAAAMw"]
[Thu Apr 23 02:00:22.507109 2026] [:error] [pid 9085:tid 9091] [client 4.235.1.40:5098] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/maxro.php"] [unique_id "aekMtt-_-or9vQnlWno8DgAAAUQ"]
[Thu Apr 23 02:00:23.428779 2026] [:error] [pid 9085:tid 9101] [client 4.235.1.40:5051] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aekMt9-_-or9vQnlWno8FQAAAU4"]
[Thu Apr 23 02:00:24.543999 2026] [:error] [pid 6250:tid 6278] [client 4.235.1.40:4883] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aekMuA-iZeQkqmQVfj5NmwAAAFg"]
[Thu Apr 23 02:00:25.251973 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:5043] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aekMud-_-or9vQnlWno8HAAAAUA"]
[Thu Apr 23 02:00:26.680508 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:4931] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "aekMut-_-or9vQnlWno8IgAAAVg"]
[Thu Apr 23 02:00:27.984480 2026] [:error] [pid 23776:tid 23784] [client 4.235.1.40:4925] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aekMu7RExf-1pAbSeJtjhgAAAYY"]
[Thu Apr 23 02:00:28.684389 2026] [:error] [pid 23776:tid 23785] [client 4.235.1.40:4835] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aekMvLRExf-1pAbSeJtjiAAAAYc"]
[Thu Apr 23 02:00:30.429660 2026] [:error] [pid 9085:tid 9095] [client 4.235.1.40:4979] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aekMvt-_-or9vQnlWno8LAAAAUg"]
[Thu Apr 23 02:00:32.458932 2026] [:error] [pid 6252:tid 6332] [client 4.235.1.40:5091] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-block.php"] [unique_id "aekMwOtGYuiYb1nWBpSFRQAAARQ"]
[Thu Apr 23 02:00:39.014628 2026] [:error] [pid 6251:tid 6297] [client 4.235.1.40:4975] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aekMxysFAzbyObL-SQ6tsAAAAIw"]
[Thu Apr 23 02:00:40.639640 2026] [:error] [pid 9085:tid 9101] [client 4.235.1.40:4972] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aekMyN-_-or9vQnlWno8NQAAAU4"]
[Thu Apr 23 02:00:42.885388 2026] [:error] [pid 6250:tid 6266] [client 4.235.1.40:4897] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aekMyg-iZeQkqmQVfj5NqQAAAEw"]
[Thu Apr 23 02:00:44.359688 2026] [:error] [pid 6344:tid 6350] [client 4.235.1.40:5052] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aekMzEDOTF-pkQnDeUlDOQAAAAE"]
[Thu Apr 23 02:00:45.531883 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:4933] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aekMzT58M3t15ICeWHXXeAAAAMo"]
[Thu Apr 23 02:00:46.447781 2026] [:error] [pid 6251:tid 6290] [client 4.235.1.40:4987] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/areak1.php"] [unique_id "aekMzisFAzbyObL-SQ6ttAAAAIU"]
[Thu Apr 23 02:00:48.236128 2026] [proxy_fcgi:error] [pid 6250:tid 6275] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:48.520857 2026] [proxy_fcgi:error] [pid 6250:tid 6278] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:49.159201 2026] [proxy_fcgi:error] [pid 6250:tid 6254] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:49.704741 2026] [proxy_fcgi:error] [pid 6250:tid 6268] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:49.992183 2026] [proxy_fcgi:error] [pid 6250:tid 6265] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:50.274892 2026] [proxy_fcgi:error] [pid 6250:tid 6259] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:50.538835 2026] [proxy_fcgi:error] [pid 6250:tid 6257] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:50.804774 2026] [proxy_fcgi:error] [pid 6250:tid 6255] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:51.135750 2026] [proxy_fcgi:error] [pid 6250:tid 6274] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:51.399035 2026] [proxy_fcgi:error] [pid 6250:tid 6277] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:51.670778 2026] [proxy_fcgi:error] [pid 6250:tid 6266] [client 4.235.1.40:4951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:00:51.932460 2026] [:error] [pid 6250:tid 6263] [client 4.235.1.40:4951] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "aekM0w-iZeQkqmQVfj5NuQAAAEk"]
[Thu Apr 23 02:00:54.561638 2026] [:error] [pid 6384:tid 6406] [client 4.235.1.40:4989] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "aekM1j58M3t15ICeWHXXkQAAANM"]
[Thu Apr 23 02:00:56.390097 2026] [:error] [pid 6384:tid 6399] [client 4.235.1.40:4905] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "aekM2D58M3t15ICeWHXXmgAAAMw"]
[Thu Apr 23 02:00:58.330523 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:5029] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "aekM2j58M3t15ICeWHXXpQAAAMc"]
[Thu Apr 23 02:00:59.217431 2026] [:error] [pid 6384:tid 6409] [client 4.235.1.40:5077] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aekM2z58M3t15ICeWHXXqgAAANY"]
[Thu Apr 23 02:01:01.492615 2026] [:error] [pid 6344:tid 6367] [client 4.235.1.40:4935] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aekM3UDOTF-pkQnDeUlDSwAAABI"]
[Thu Apr 23 02:01:11.972405 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:5076] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aekM5z58M3t15ICeWHXXxgAAAMo"]
[Thu Apr 23 02:01:13.083780 2026] [:error] [pid 23776:tid 23794] [client 4.235.1.40:4898] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aekM6bRExf-1pAbSeJtjywAAAZA"]
[Thu Apr 23 02:01:16.224161 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:5063] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekM7N-_-or9vQnlWno8ZgAAAU8"]
[Thu Apr 23 02:01:18.993489 2026] [:error] [pid 6344:tid 6366] [client 4.235.1.40:4915] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekM7kDOTF-pkQnDeUlDTwAAABE"]
[Thu Apr 23 02:01:20.102060 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:4886] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekM8N-_-or9vQnlWno8bwAAAUM"]
[Thu Apr 23 02:01:21.702184 2026] [:error] [pid 23776:tid 23793] [client 4.235.1.40:5040] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekM8bRExf-1pAbSeJtj0QAAAY8"]
[Thu Apr 23 02:01:24.060554 2026] [:error] [pid 6252:tid 6335] [client 4.235.1.40:5025] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "aekM9OtGYuiYb1nWBpSFYQAAARc"]
[Thu Apr 23 02:01:25.155050 2026] [:error] [pid 6251:tid 6294] [client 4.235.1.40:5045] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "aekM9SsFAzbyObL-SQ6tuwAAAIk"]
[Thu Apr 23 02:01:27.118941 2026] [:error] [pid 6384:tid 6388] [client 4.235.1.40:4942] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "aekM9z58M3t15ICeWHXX1AAAAME"]
[Thu Apr 23 02:01:28.314655 2026] [:error] [pid 6384:tid 6411] [client 4.235.1.40:4993] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws84.php"] [unique_id "aekM-D58M3t15ICeWHXX1gAAANg"]
[Thu Apr 23 02:01:29.830777 2026] [:error] [pid 9085:tid 9088] [client 4.235.1.40:4999] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aekM-d-_-or9vQnlWno8jwAAAUE"]
[Thu Apr 23 02:01:31.307203 2026] [:error] [pid 6251:tid 6302] [client 4.235.1.40:5057] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aekM-ysFAzbyObL-SQ6tvAAAAJE"]
[Thu Apr 23 02:01:34.179280 2026] [:error] [pid 6384:tid 6392] [client 4.235.1.40:5061] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aekM_j58M3t15ICeWHXX6AAAAMU"]
[Thu Apr 23 02:01:40.307118 2026] [:error] [pid 9085:tid 9089] [client 4.235.1.40:5017] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws61.php"] [unique_id "aekNBN-_-or9vQnlWno8qgAAAUI"]
[Thu Apr 23 02:01:51.844923 2026] [proxy_fcgi:error] [pid 23776:tid 23791] [client 4.235.1.40:5094] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:26.492610 2026] [proxy_fcgi:error] [pid 6250:tid 6268] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:26.847635 2026] [proxy_fcgi:error] [pid 6250:tid 6254] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:27.120433 2026] [proxy_fcgi:error] [pid 6250:tid 6264] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:27.392860 2026] [proxy_fcgi:error] [pid 6250:tid 6261] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:27.672222 2026] [proxy_fcgi:error] [pid 6250:tid 6257] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:27.943844 2026] [proxy_fcgi:error] [pid 6250:tid 6256] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:29.716163 2026] [proxy_fcgi:error] [pid 6250:tid 6275] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:30.017639 2026] [proxy_fcgi:error] [pid 6250:tid 6272] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:30.288431 2026] [proxy_fcgi:error] [pid 6250:tid 6276] [client 172.161.3.137:63290] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:50:30.556449 2026] [:error] [pid 6250:tid 6255] [client 172.161.3.137:63290] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aekYdg-iZeQkqmQVfj5VGwAAAEE"]
[Thu Apr 23 02:50:31.576320 2026] [:error] [pid 6250:tid 6271] [client 172.161.3.137:45223] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aekYdw-iZeQkqmQVfj5VHgAAAFE"]
[Thu Apr 23 02:50:33.072442 2026] [:error] [pid 9085:tid 9110] [client 172.161.3.137:57262] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aekYed-_-or9vQnlWnpVNQAAAVc"]
[Thu Apr 23 02:50:34.162042 2026] [:error] [pid 6344:tid 6358] [client 172.161.3.137:63246] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aekYekDOTF-pkQnDeUlOYgAAAAk"]
[Thu Apr 23 02:50:35.992862 2026] [:error] [pid 9085:tid 9093] [client 172.161.3.137:60315] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aekYe9-_-or9vQnlWnpVPwAAAUY"]
[Thu Apr 23 02:50:36.920860 2026] [:error] [pid 6250:tid 6258] [client 172.161.3.137:57249] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aekYfA-iZeQkqmQVfj5VIQAAAEQ"]
[Thu Apr 23 02:50:39.168752 2026] [:error] [pid 9085:tid 9099] [client 172.161.3.137:60304] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aekYf9-_-or9vQnlWnpVQAAAAUw"]
[Thu Apr 23 02:50:40.300445 2026] [:error] [pid 9085:tid 9101] [client 172.161.3.137:60338] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aekYgN-_-or9vQnlWnpVQgAAAU4"]
[Thu Apr 23 02:50:41.573770 2026] [:error] [pid 6250:tid 6261] [client 172.161.3.137:51233] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aekYgQ-iZeQkqmQVfj5VIgAAAEc"]
[Thu Apr 23 02:50:43.194707 2026] [:error] [pid 6250:tid 6273] [client 172.161.3.137:45184] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aekYgw-iZeQkqmQVfj5VIwAAAFM"]
[Thu Apr 23 02:50:44.816515 2026] [:error] [pid 9085:tid 9100] [client 172.161.3.137:59341] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aekYhN-_-or9vQnlWnpVRAAAAU0"]
[Thu Apr 23 02:50:46.014894 2026] [:error] [pid 23776:tid 23784] [client 172.161.3.137:34727] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aekYhrRExf-1pAbSeJtxWAAAAYY"]
[Thu Apr 23 02:50:47.062734 2026] [:error] [pid 6344:tid 6353] [client 172.161.3.137:43633] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aekYh0DOTF-pkQnDeUlObQAAAAQ"]
[Thu Apr 23 02:50:49.898310 2026] [:error] [pid 6344:tid 6359] [client 172.161.3.137:4098] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aekYiUDOTF-pkQnDeUlOcAAAAAo"]
[Thu Apr 23 02:50:51.157218 2026] [:error] [pid 6250:tid 6266] [client 172.161.3.137:4142] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aekYiw-iZeQkqmQVfj5VKQAAAEw"]
[Thu Apr 23 02:50:52.586017 2026] [:error] [pid 23776:tid 23796] [client 172.161.3.137:49507] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aekYjLRExf-1pAbSeJtxYAAAAZI"]
[Thu Apr 23 02:50:54.406128 2026] [:error] [pid 23776:tid 23800] [client 172.161.3.137:43595] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aekYjrRExf-1pAbSeJtxZAAAAZY"]
[Thu Apr 23 02:50:55.356429 2026] [:error] [pid 6344:tid 6372] [client 172.161.3.137:52006] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aekYj0DOTF-pkQnDeUlOcgAAABc"]
[Thu Apr 23 02:50:56.523720 2026] [:error] [pid 6251:tid 6291] [client 172.161.3.137:51988] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aekYkCsFAzbyObL-SQ6y8QAAAIY"]
[Thu Apr 23 02:50:57.605882 2026] [:error] [pid 6250:tid 6270] [client 172.161.3.137:49520] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aekYkQ-iZeQkqmQVfj5VLgAAAFA"]
[Thu Apr 23 02:50:58.990336 2026] [:error] [pid 9085:tid 9095] [client 172.161.3.137:57239] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/66.php"] [unique_id "aekYkt-_-or9vQnlWnpVSgAAAUg"]
[Thu Apr 23 02:51:08.523758 2026] [:error] [pid 9085:tid 9096] [client 172.161.3.137:4698] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/66.php"] [unique_id "aekYnN-_-or9vQnlWnpVVgAAAUk"]
[Thu Apr 23 02:51:10.532114 2026] [:error] [pid 23776:tid 23783] [client 172.161.3.137:52018] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/66.php"] [unique_id "aekYnrRExf-1pAbSeJtxaAAAAYU"]
[Thu Apr 23 02:51:15.702524 2026] [:error] [pid 9085:tid 9102] [client 172.161.3.137:49416] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aekYo9-_-or9vQnlWnpVXwAAAU8"]
[Thu Apr 23 02:51:16.687537 2026] [:error] [pid 6251:tid 6303] [client 172.161.3.137:62747] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aekYpCsFAzbyObL-SQ6zBQAAAJI"]
[Thu Apr 23 02:51:18.302990 2026] [:error] [pid 6251:tid 6286] [client 172.161.3.137:42535] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aekYpisFAzbyObL-SQ6zBwAAAIE"]
[Thu Apr 23 02:51:20.675711 2026] [:error] [pid 9085:tid 9089] [client 172.161.3.137:35752] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aekYqN-_-or9vQnlWnpVYQAAAUI"]
[Thu Apr 23 02:51:21.479998 2026] [:error] [pid 9085:tid 9103] [client 172.161.3.137:62767] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aekYqd-_-or9vQnlWnpVaAAAAVA"]
[Thu Apr 23 02:51:23.782854 2026] [:error] [pid 23776:tid 23794] [client 172.161.3.137:32280] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aekYq7RExf-1pAbSeJtxbQAAAZA"]
[Thu Apr 23 02:51:25.612688 2026] [:error] [pid 9085:tid 9098] [client 172.161.3.137:47648] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aekYrd-_-or9vQnlWnpVbwAAAUs"]
[Thu Apr 23 02:51:26.533613 2026] [:error] [pid 23776:tid 23784] [client 172.161.3.137:36753] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aekYrrRExf-1pAbSeJtxcwAAAYY"]
[Thu Apr 23 02:51:28.414540 2026] [:error] [pid 23776:tid 23778] [client 172.161.3.137:47641] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blog-header.php"] [unique_id "aekYsLRExf-1pAbSeJtxeAAAAYA"]
[Thu Apr 23 02:51:29.883324 2026] [:error] [pid 6384:tid 6405] [client 172.161.3.137:30589] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-blog-header.php"] [unique_id "aekYsT58M3t15ICeWHXqiQAAANI"]
[Thu Apr 23 02:51:30.925832 2026] [proxy_fcgi:error] [pid 23776:tid 23802] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:31.164994 2026] [proxy_fcgi:error] [pid 23776:tid 23799] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:31.403750 2026] [proxy_fcgi:error] [pid 23776:tid 23791] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:31.913785 2026] [proxy_fcgi:error] [pid 23776:tid 23789] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:32.153398 2026] [proxy_fcgi:error] [pid 23776:tid 23801] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:32.392723 2026] [proxy_fcgi:error] [pid 23776:tid 23797] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:33.010077 2026] [proxy_fcgi:error] [pid 23776:tid 23778] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:33.252479 2026] [proxy_fcgi:error] [pid 23776:tid 23783] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:33.492641 2026] [proxy_fcgi:error] [pid 23776:tid 23781] [client 172.161.3.137:48977] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:51:33.728117 2026] [:error] [pid 23776:tid 23795] [client 172.161.3.137:48977] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new.php"] [unique_id "aekYtbRExf-1pAbSeJtxiQAAAZE"]
[Thu Apr 23 02:51:34.917161 2026] [:error] [pid 9085:tid 9103] [client 172.161.3.137:41415] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new.php"] [unique_id "aekYtt-_-or9vQnlWnpVcQAAAVA"]
[Thu Apr 23 02:51:36.571101 2026] [:error] [pid 9085:tid 9095] [client 172.161.3.137:57949] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new.php"] [unique_id "aekYuN-_-or9vQnlWnpVcwAAAUg"]
[Thu Apr 23 02:51:37.594290 2026] [:error] [pid 6252:tid 6320] [client 172.161.3.137:56005] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new.php"] [unique_id "aekYuetGYuiYb1nWBpSLfgAAAQg"]
[Thu Apr 23 02:51:40.507576 2026] [:error] [pid 9085:tid 9108] [client 172.161.3.137:29073] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aekYvN-_-or9vQnlWnpVeQAAAVU"]
[Thu Apr 23 02:51:42.719173 2026] [:error] [pid 23776:tid 23795] [client 172.161.3.137:58718] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aekYvrRExf-1pAbSeJtxkgAAAZE"]
[Thu Apr 23 02:51:46.732066 2026] [:error] [pid 6251:tid 6296] [client 172.161.3.137:4644] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aekYwisFAzbyObL-SQ6zDAAAAIs"]
[Thu Apr 23 02:51:48.023723 2026] [:error] [pid 6251:tid 6295] [client 172.161.3.137:57880] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aekYxCsFAzbyObL-SQ6zDQAAAIo"]
[Thu Apr 23 02:51:49.031862 2026] [:error] [pid 6344:tid 6355] [client 172.161.3.137:38846] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aekYxUDOTF-pkQnDeUlOkwAAAAY"]
[Thu Apr 23 02:51:53.928873 2026] [:error] [pid 6384:tid 6387] [client 172.161.3.137:33680] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aekYyT58M3t15ICeWHXqqAAAAMA"]
[Thu Apr 23 02:51:55.624478 2026] [:error] [pid 6251:tid 6305] [client 172.161.3.137:38349] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aekYyysFAzbyObL-SQ6zDwAAAJQ"]
[Thu Apr 23 02:51:58.644712 2026] [:error] [pid 9085:tid 9091] [client 172.161.3.137:29838] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws48.php"] [unique_id "aekYzt-_-or9vQnlWnpVlAAAAUQ"]
[Thu Apr 23 02:52:00.590181 2026] [:error] [pid 6384:tid 6394] [client 172.161.3.137:44357] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "aekY0D58M3t15ICeWHXqrwAAAMc"]
[Thu Apr 23 02:52:03.351386 2026] [:error] [pid 6251:tid 6288] [client 172.161.3.137:36237] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "aekY0ysFAzbyObL-SQ6zEAAAAIM"]
[Thu Apr 23 02:52:06.083620 2026] [:error] [pid 6384:tid 6408] [client 172.161.3.137:37347] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "aekY1j58M3t15ICeWHXqswAAANU"]
[Thu Apr 23 02:52:07.695468 2026] [:error] [pid 9085:tid 9103] [client 172.161.3.137:38338] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8.php"] [unique_id "aekY19-_-or9vQnlWnpVngAAAVA"]
[Thu Apr 23 02:52:09.162881 2026] [:error] [pid 9085:tid 9102] [client 172.161.3.137:39374] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aekY2d-_-or9vQnlWnpVowAAAU8"]
[Thu Apr 23 02:52:14.169477 2026] [:error] [pid 6384:tid 6389] [client 172.161.3.137:35327] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aekY3j58M3t15ICeWHXqvAAAAMI"]
[Thu Apr 23 02:52:16.325246 2026] [:error] [pid 9085:tid 9089] [client 172.161.3.137:38842] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aekY4N-_-or9vQnlWnpVrwAAAUI"]
[Thu Apr 23 02:52:17.819143 2026] [:error] [pid 6384:tid 6405] [client 172.161.3.137:39361] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dass.php"] [unique_id "aekY4T58M3t15ICeWHXqwAAAANI"]
[Thu Apr 23 02:52:20.752684 2026] [:error] [pid 6384:tid 6391] [client 172.161.3.137:57859] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aekY5D58M3t15ICeWHXqxwAAAMQ"]
[Thu Apr 23 02:52:22.832747 2026] [:error] [pid 6250:tid 6277] [client 172.161.3.137:33687] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aekY5g-iZeQkqmQVfj5VSQAAAFc"]
[Thu Apr 23 02:52:26.757030 2026] [:error] [pid 6384:tid 6392] [client 172.161.3.137:45786] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aekY6j58M3t15ICeWHXq2gAAAMU"]
[Thu Apr 23 02:52:27.856840 2026] [:error] [pid 6384:tid 6390] [client 172.161.3.137:58640] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aekY6z58M3t15ICeWHXq3gAAAMM"]
[Thu Apr 23 02:52:28.757754 2026] [:error] [pid 9085:tid 9095] [client 172.161.3.137:4261] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aekY7N-_-or9vQnlWnpVtgAAAUg"]
[Thu Apr 23 02:52:29.481742 2026] [:error] [pid 6250:tid 6272] [client 172.161.3.137:58725] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aekY7Q-iZeQkqmQVfj5VTgAAAFI"]
[Thu Apr 23 02:52:30.838071 2026] [:error] [pid 9085:tid 9104] [client 172.161.3.137:4248] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aekY7t-_-or9vQnlWnpVwwAAAVE"]
[Thu Apr 23 02:52:32.794186 2026] [:error] [pid 6344:tid 6350] [client 172.161.3.137:44333] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ok.php"] [unique_id "aekY8EDOTF-pkQnDeUlOrwAAAAE"]
[Thu Apr 23 02:52:33.442737 2026] [proxy_fcgi:error] [pid 23776:tid 23796] [client 172.161.3.137:58704] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:52:33.716990 2026] [proxy_fcgi:error] [pid 23776:tid 23779] [client 172.161.3.137:58704] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:52:34.059346 2026] [proxy_fcgi:error] [pid 23776:tid 23797] [client 172.161.3.137:58704] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:52:34.331450 2026] [proxy_fcgi:error] [pid 23776:tid 23786] [client 172.161.3.137:58704] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:52:34.604970 2026] [proxy_fcgi:error] [pid 23776:tid 23791] [client 172.161.3.137:58704] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:52:34.877289 2026] [proxy_fcgi:error] [pid 23776:tid 23783] [client 172.161.3.137:58704] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:52:35.150369 2026] [:error] [pid 23776:tid 23781] [client 172.161.3.137:58704] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aekY87RExf-1pAbSeJtxvAAAAYM"]
[Thu Apr 23 02:52:36.473503 2026] [:error] [pid 23776:tid 23798] [client 172.161.3.137:44724] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aekY9LRExf-1pAbSeJtxvwAAAZQ"]
[Thu Apr 23 02:52:37.268476 2026] [:error] [pid 6384:tid 6398] [client 172.161.3.137:48619] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aekY9T58M3t15ICeWHXq-QAAAMs"]
[Thu Apr 23 02:52:38.472406 2026] [:error] [pid 9085:tid 9092] [client 172.161.3.137:40884] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aekY9t-_-or9vQnlWnpVzgAAAUU"]
[Thu Apr 23 02:52:39.326298 2026] [:error] [pid 6344:tid 6354] [client 172.161.3.137:44707] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aekY90DOTF-pkQnDeUlOwgAAAAU"]
[Thu Apr 23 02:52:40.083574 2026] [:error] [pid 6344:tid 6373] [client 172.161.3.137:48980] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aekY-EDOTF-pkQnDeUlOxAAAABg"]
[Thu Apr 23 02:52:40.629432 2026] [:error] [pid 6384:tid 6410] [client 172.161.3.137:32052] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aekY-D58M3t15ICeWHXrBgAAANc"]
[Thu Apr 23 02:52:41.681701 2026] [:error] [pid 6344:tid 6362] [client 172.161.3.137:48164] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aekY-UDOTF-pkQnDeUlOxwAAAA0"]
[Thu Apr 23 02:52:43.321798 2026] [:error] [pid 6344:tid 6361] [client 172.161.3.137:48979] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aekY-0DOTF-pkQnDeUlOyQAAAAw"]
[Thu Apr 23 02:52:44.331897 2026] [:error] [pid 6251:tid 6290] [client 172.161.3.137:48634] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aekY_CsFAzbyObL-SQ6zHwAAAIU"]
[Thu Apr 23 02:52:45.578196 2026] [:error] [pid 9085:tid 9107] [client 172.161.3.137:44685] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aekY_d-_-or9vQnlWnpV0wAAAVQ"]
[Thu Apr 23 02:52:47.572843 2026] [:error] [pid 9085:tid 9108] [client 172.161.3.137:41465] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aekY_9-_-or9vQnlWnpV1QAAAVU"]
[Thu Apr 23 02:52:49.289309 2026] [:error] [pid 23776:tid 23782] [client 172.161.3.137:59288] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aekZAbRExf-1pAbSeJtxzAAAAYQ"]
[Thu Apr 23 02:52:50.499727 2026] [:error] [pid 9085:tid 9100] [client 172.161.3.137:41430] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aekZAt-_-or9vQnlWnpV3QAAAU0"]
[Thu Apr 23 02:52:53.586432 2026] [:error] [pid 9085:tid 9104] [client 172.161.3.137:30082] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aekZBd-_-or9vQnlWnpV5gAAAVE"]
[Thu Apr 23 02:52:54.341191 2026] [:error] [pid 9085:tid 9103] [client 172.161.3.137:59271] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aekZBt-_-or9vQnlWnpV5wAAAVA"]
[Thu Apr 23 02:52:57.961977 2026] [:error] [pid 6250:tid 6257] [client 172.161.3.137:63983] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aekZCQ-iZeQkqmQVfj5VUwAAAEM"]
[Thu Apr 23 02:53:02.788999 2026] [:error] [pid 9085:tid 9101] [client 172.161.3.137:60408] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aekZDt-_-or9vQnlWnpV8wAAAU4"]
[Thu Apr 23 02:53:06.038186 2026] [:error] [pid 9085:tid 9093] [client 172.161.3.137:60401] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aekZEt-_-or9vQnlWnpV_AAAAUY"]
[Thu Apr 23 02:53:07.816518 2026] [:error] [pid 6384:tid 6391] [client 172.161.3.137:34283] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aekZEz58M3t15ICeWHXrMAAAAMQ"]
[Thu Apr 23 02:53:08.630436 2026] [:error] [pid 6344:tid 6358] [client 172.161.3.137:32371] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aekZFEDOTF-pkQnDeUlO3QAAAAk"]
[Thu Apr 23 02:53:11.132538 2026] [:error] [pid 6384:tid 6403] [client 172.161.3.137:4399] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aekZFz58M3t15ICeWHXrNQAAANA"]
[Thu Apr 23 02:53:12.211758 2026] [:error] [pid 6344:tid 6366] [client 172.161.3.137:41374] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aekZGEDOTF-pkQnDeUlO4QAAABE"]
[Thu Apr 23 02:53:15.829666 2026] [:error] [pid 23776:tid 23785] [client 172.161.3.137:4468] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aekZG7RExf-1pAbSeJtyCAAAAYc"]
[Thu Apr 23 02:53:28.469106 2026] [:error] [pid 23776:tid 23798] [client 172.161.3.137:48236] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "aekZKLRExf-1pAbSeJtyHwAAAZQ"]
[Thu Apr 23 02:53:29.428504 2026] [:error] [pid 6251:tid 6304] [client 172.161.3.137:48207] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "aekZKSsFAzbyObL-SQ6zNQAAAJM"]
[Thu Apr 23 02:53:30.512776 2026] [:error] [pid 6384:tid 6393] [client 172.161.3.137:30483] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bnm.php"] [unique_id "aekZKj58M3t15ICeWHXrYAAAAMY"]
[Thu Apr 23 02:53:31.266992 2026] [:error] [pid 6384:tid 6396] [client 172.161.3.137:61070] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekZKz58M3t15ICeWHXrYQAAAMk"]
[Thu Apr 23 02:53:31.988291 2026] [:error] [pid 9085:tid 9103] [client 172.161.3.137:30509] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekZK9-_-or9vQnlWnpWKAAAAVA"]
[Thu Apr 23 02:53:33.218845 2026] [:error] [pid 6384:tid 6388] [client 172.161.3.137:49936] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekZLT58M3t15ICeWHXraQAAAME"]
[Thu Apr 23 02:53:34.275838 2026] [:error] [pid 6384:tid 6387] [client 172.161.3.137:55369] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws80.php"] [unique_id "aekZLj58M3t15ICeWHXrbQAAAMA"]
[Thu Apr 23 02:53:36.650808 2026] [proxy_fcgi:error] [pid 6250:tid 6263] [client 172.161.3.137:50741] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:53:36.922038 2026] [proxy_fcgi:error] [pid 6250:tid 6273] [client 172.161.3.137:50741] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:53:37.179300 2026] [proxy_fcgi:error] [pid 6250:tid 6261] [client 172.161.3.137:50741] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:53:37.433968 2026] [:error] [pid 6250:tid 6277] [client 172.161.3.137:50741] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aekZMQ-iZeQkqmQVfj5VaQAAAFc"]
[Thu Apr 23 02:53:38.545875 2026] [:error] [pid 6252:tid 6322] [client 172.161.3.137:4918] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aekZMutGYuiYb1nWBpSMCQAAAQo"]
[Thu Apr 23 02:53:40.501316 2026] [:error] [pid 6250:tid 6272] [client 172.161.3.137:52504] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aekZNA-iZeQkqmQVfj5VbQAAAFI"]
[Thu Apr 23 02:53:43.879794 2026] [:error] [pid 23776:tid 23793] [client 172.161.3.137:52596] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "aekZN7RExf-1pAbSeJtyOQAAAY8"]
[Thu Apr 23 02:53:45.141316 2026] [:error] [pid 6250:tid 6260] [client 172.161.3.137:38876] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms.php"] [unique_id "aekZOQ-iZeQkqmQVfj5VcAAAAEY"]
[Thu Apr 23 02:53:48.155932 2026] [:error] [pid 6251:tid 6305] [client 172.161.3.137:43058] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms.php"] [unique_id "aekZPCsFAzbyObL-SQ6zRQAAAJQ"]
[Thu Apr 23 02:53:48.762512 2026] [:error] [pid 6250:tid 6264] [client 172.161.3.137:52588] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms.php"] [unique_id "aekZPA-iZeQkqmQVfj5VdgAAAEo"]
[Thu Apr 23 02:53:50.060768 2026] [:error] [pid 6384:tid 6389] [client 172.161.3.137:52588] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms.php"] [unique_id "aekZPj58M3t15ICeWHXrhwAAAMI"]
[Thu Apr 23 02:53:52.247655 2026] [:error] [pid 6384:tid 6410] [client 172.161.3.137:38877] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "aekZQD58M3t15ICeWHXriwAAANc"]
[Thu Apr 23 02:53:53.224010 2026] [:error] [pid 6252:tid 6333] [client 172.161.3.137:52034] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "aekZQetGYuiYb1nWBpSMFQAAARU"]
[Thu Apr 23 02:53:54.730137 2026] [:error] [pid 6252:tid 6334] [client 172.161.3.137:4886] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "aekZQutGYuiYb1nWBpSMGQAAARY"]
[Thu Apr 23 02:53:56.850219 2026] [:error] [pid 9085:tid 9108] [client 172.161.3.137:43042] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "aekZRN-_-or9vQnlWnpWVgAAAVU"]
[Thu Apr 23 02:53:58.332865 2026] [:error] [pid 6384:tid 6401] [client 172.161.3.137:36225] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-atom.php"] [unique_id "aekZRj58M3t15ICeWHXrlgAAAM4"]
[Thu Apr 23 02:54:02.455808 2026] [:error] [pid 6384:tid 6399] [client 172.161.3.137:49960] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-atom.php"] [unique_id "aekZSj58M3t15ICeWHXrmQAAAMw"]
[Thu Apr 23 02:54:03.523927 2026] [:error] [pid 23776:tid 23799] [client 172.161.3.137:43060] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-atom.php"] [unique_id "aekZS7RExf-1pAbSeJtyUQAAAZU"]
[Thu Apr 23 02:54:04.235431 2026] [:error] [pid 6384:tid 6393] [client 172.161.3.137:38890] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-class-atom.php"] [unique_id "aekZTD58M3t15ICeWHXrnQAAAMY"]
[Thu Apr 23 02:54:05.389133 2026] [:error] [pid 23776:tid 23789] [client 172.161.3.137:59950] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aekZTbRExf-1pAbSeJtyVQAAAYs"]
[Thu Apr 23 02:54:06.402108 2026] [:error] [pid 9085:tid 9095] [client 172.161.3.137:29940] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aekZTt-_-or9vQnlWnpWZQAAAUg"]
[Thu Apr 23 02:54:07.604497 2026] [:error] [pid 6250:tid 6263] [client 172.161.3.137:37785] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aekZTw-iZeQkqmQVfj5ViwAAAEk"]
[Thu Apr 23 02:54:08.949731 2026] [:error] [pid 6250:tid 6271] [client 172.161.3.137:49932] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aekZUA-iZeQkqmQVfj5VjQAAAFE"]
[Thu Apr 23 02:54:09.765840 2026] [:error] [pid 9085:tid 9100] [client 172.161.3.137:37788] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aekZUd-_-or9vQnlWnpWdwAAAU0"]
[Thu Apr 23 02:54:10.740677 2026] [:error] [pid 6251:tid 6290] [client 172.161.3.137:4870] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aekZUisFAzbyObL-SQ6zUQAAAIU"]
[Thu Apr 23 02:54:11.543482 2026] [:error] [pid 23776:tid 23802] [client 172.161.3.137:29893] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aekZU7RExf-1pAbSeJtyWQAAAZg"]
[Thu Apr 23 02:54:12.933250 2026] [:error] [pid 23776:tid 23789] [client 172.161.3.137:4824] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aekZVLRExf-1pAbSeJtyXgAAAYs"]
[Thu Apr 23 02:54:13.724975 2026] [:error] [pid 6384:tid 6406] [client 172.161.3.137:4824] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aekZVT58M3t15ICeWHXrogAAANM"]
[Thu Apr 23 02:54:16.538850 2026] [:error] [pid 6344:tid 6364] [client 172.161.3.137:43050] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aekZWEDOTF-pkQnDeUlPEQAAAA8"]
[Thu Apr 23 02:54:17.371499 2026] [:error] [pid 6252:tid 6313] [client 172.161.3.137:33175] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aekZWetGYuiYb1nWBpSMKwAAAQE"]
[Thu Apr 23 02:54:19.785231 2026] [:error] [pid 9085:tid 9102] [client 172.161.3.137:4191] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aekZW9-_-or9vQnlWnpWfwAAAU8"]
[Thu Apr 23 02:54:21.193498 2026] [:error] [pid 23776:tid 23787] [client 172.161.3.137:43065] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekZXbRExf-1pAbSeJtybAAAAYk"]
[Thu Apr 23 02:54:22.736588 2026] [:error] [pid 23776:tid 23779] [client 172.161.3.137:61125] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekZXrRExf-1pAbSeJtycAAAAYE"]
[Thu Apr 23 02:54:23.975003 2026] [:error] [pid 6250:tid 6269] [client 172.161.3.137:59930] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekZXw-iZeQkqmQVfj5VoQAAAE8"]
[Thu Apr 23 02:54:25.226875 2026] [:error] [pid 6251:tid 6306] [client 172.161.3.137:32321] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekZYSsFAzbyObL-SQ6zXAAAAJU"]
[Thu Apr 23 02:54:26.120905 2026] [:error] [pid 23776:tid 23801] [client 172.161.3.137:38867] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jk.php"] [unique_id "aekZYrRExf-1pAbSeJtydgAAAZc"]
[Thu Apr 23 02:54:27.562666 2026] [:error] [pid 23776:tid 23784] [client 172.161.3.137:29933] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jk.php"] [unique_id "aekZY7RExf-1pAbSeJtyfwAAAYY"]
[Thu Apr 23 02:54:28.321732 2026] [:error] [pid 23776:tid 23788] [client 172.161.3.137:36858] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jk.php"] [unique_id "aekZZLRExf-1pAbSeJtyhgAAAYo"]
[Thu Apr 23 02:54:29.199377 2026] [:error] [pid 23776:tid 23784] [client 172.161.3.137:4183] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jk.php"] [unique_id "aekZZbRExf-1pAbSeJtykQAAAYY"]
[Thu Apr 23 02:54:31.943396 2026] [:error] [pid 9085:tid 9094] [client 172.161.3.137:33195] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekZZ9-_-or9vQnlWnpWnQAAAUc"]
[Thu Apr 23 02:54:33.456850 2026] [:error] [pid 6252:tid 6326] [client 172.161.3.137:29351] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekZaetGYuiYb1nWBpSMLgAAAQ4"]
[Thu Apr 23 02:54:34.937575 2026] [:error] [pid 9085:tid 9088] [client 172.161.3.137:36812] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekZat-_-or9vQnlWnpWpgAAAUE"]
[Thu Apr 23 02:54:36.011736 2026] [:error] [pid 6384:tid 6408] [client 172.161.3.137:61160] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aekZbD58M3t15ICeWHXruwAAANU"]
[Thu Apr 23 02:54:36.890751 2026] [:error] [pid 6384:tid 6411] [client 172.161.3.137:4505] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aa.php"] [unique_id "aekZbD58M3t15ICeWHXrvwAAANg"]
[Thu Apr 23 02:54:38.041485 2026] [proxy_fcgi:error] [pid 6344:tid 6365] [client 172.161.3.137:36822] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:54:38.280844 2026] [proxy_fcgi:error] [pid 6344:tid 6350] [client 172.161.3.137:36822] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:54:38.521599 2026] [proxy_fcgi:error] [pid 6344:tid 6372] [client 172.161.3.137:36822] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:54:38.761021 2026] [proxy_fcgi:error] [pid 6344:tid 6359] [client 172.161.3.137:36822] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:54:39.020019 2026] [proxy_fcgi:error] [pid 6344:tid 6370] [client 172.161.3.137:36822] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:54:39.260065 2026] [proxy_fcgi:error] [pid 6344:tid 6368] [client 172.161.3.137:36822] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:54:39.495954 2026] [:error] [pid 6344:tid 6356] [client 172.161.3.137:36822] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aekZb0DOTF-pkQnDeUlPGgAAAAc"]
[Thu Apr 23 02:54:40.609007 2026] [:error] [pid 6384:tid 6401] [client 172.161.3.137:43525] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aekZcD58M3t15ICeWHXrwQAAAM4"]
[Thu Apr 23 02:54:41.991561 2026] [:error] [pid 23776:tid 23784] [client 172.161.3.137:4480] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aekZcbRExf-1pAbSeJtyowAAAYY"]
[Thu Apr 23 02:54:42.869439 2026] [:error] [pid 9085:tid 9091] [client 172.161.3.137:54022] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws88.php"] [unique_id "aekZct-_-or9vQnlWnpWugAAAUQ"]
[Thu Apr 23 02:54:43.680560 2026] [:error] [pid 23776:tid 23793] [client 172.161.3.137:54067] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "aekZc7RExf-1pAbSeJtypwAAAY8"]
[Thu Apr 23 02:54:44.595271 2026] [:error] [pid 6344:tid 6354] [client 172.161.3.137:29644] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "aekZdEDOTF-pkQnDeUlPHQAAAAU"]
[Thu Apr 23 02:54:45.550281 2026] [:error] [pid 23776:tid 23788] [client 172.161.3.137:36839] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "aekZdbRExf-1pAbSeJtyqQAAAYo"]
[Thu Apr 23 02:54:46.224795 2026] [:error] [pid 6251:tid 6302] [client 172.161.3.137:42562] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "aekZdisFAzbyObL-SQ6zZQAAAJE"]
[Thu Apr 23 02:54:47.558710 2026] [:error] [pid 6344:tid 6349] [client 172.161.3.137:4781] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "aekZd0DOTF-pkQnDeUlPJAAAAAA"]
[Thu Apr 23 02:54:48.374927 2026] [:error] [pid 9085:tid 9093] [client 172.161.3.137:4736] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "aekZeN-_-or9vQnlWnpWzwAAAUY"]
[Thu Apr 23 02:54:49.315596 2026] [:error] [pid 6250:tid 6262] [client 172.161.3.137:31279] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "aekZeQ-iZeQkqmQVfj5VsAAAAEg"]
[Thu Apr 23 02:54:50.216197 2026] [:error] [pid 9085:tid 9109] [client 172.161.3.137:31234] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "aekZet-_-or9vQnlWnpW0gAAAVY"]
[Thu Apr 23 02:54:51.178661 2026] [:error] [pid 9085:tid 9104] [client 172.161.3.137:33176] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aekZe9-_-or9vQnlWnpW1wAAAVE"]
[Thu Apr 23 02:54:52.039820 2026] [:error] [pid 9085:tid 9101] [client 172.161.3.137:33174] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aekZfN-_-or9vQnlWnpW3QAAAU4"]
[Thu Apr 23 02:54:53.097862 2026] [:error] [pid 6251:tid 6305] [client 172.161.3.137:4790] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aekZfSsFAzbyObL-SQ6zawAAAJQ"]
[Thu Apr 23 02:54:53.871284 2026] [:error] [pid 6251:tid 6291] [client 172.161.3.137:31273] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aekZfSsFAzbyObL-SQ6zbQAAAIY"]
[Thu Apr 23 02:54:54.663944 2026] [:error] [pid 23776:tid 23779] [client 172.161.3.137:33680] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aekZfrRExf-1pAbSeJtytQAAAYE"]
[Thu Apr 23 02:54:55.407502 2026] [:error] [pid 6384:tid 6410] [client 172.161.3.137:29688] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aekZfz58M3t15ICeWHXr0QAAANc"]
[Thu Apr 23 02:54:56.174636 2026] [:error] [pid 6250:tid 6271] [client 172.161.3.137:42615] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aekZgA-iZeQkqmQVfj5VuwAAAFE"]
[Thu Apr 23 02:54:58.077067 2026] [:error] [pid 6344:tid 6357] [client 172.161.3.137:31243] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aekZgkDOTF-pkQnDeUlPLgAAAAg"]
[Thu Apr 23 02:54:58.836411 2026] [:error] [pid 6344:tid 6358] [client 172.161.3.137:4318] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t.php"] [unique_id "aekZgkDOTF-pkQnDeUlPMgAAAAk"]
[Thu Apr 23 02:55:01.221435 2026] [:error] [pid 23776:tid 23794] [client 172.161.3.137:33187] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t.php"] [unique_id "aekZhbRExf-1pAbSeJtyuAAAAZA"]
[Thu Apr 23 02:55:02.518033 2026] [:error] [pid 6384:tid 6401] [client 172.161.3.137:42571] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t.php"] [unique_id "aekZhj58M3t15ICeWHXr2AAAAM4"]
[Thu Apr 23 02:55:03.467310 2026] [:error] [pid 6384:tid 6390] [client 172.161.3.137:43557] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t.php"] [unique_id "aekZhz58M3t15ICeWHXr2QAAAMM"]
[Thu Apr 23 02:55:04.292819 2026] [:error] [pid 9085:tid 9107] [client 172.161.3.137:29636] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aekZiN-_-or9vQnlWnpW6QAAAVQ"]
[Thu Apr 23 02:55:05.500965 2026] [:error] [pid 6252:tid 6320] [client 172.161.3.137:43542] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aekZietGYuiYb1nWBpSMSwAAAQg"]
[Thu Apr 23 02:55:06.851759 2026] [:error] [pid 9085:tid 9104] [client 172.161.3.137:54054] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aekZit-_-or9vQnlWnpW7AAAAVE"]
[Thu Apr 23 02:55:07.881216 2026] [:error] [pid 23776:tid 23786] [client 172.161.3.137:29672] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aekZi7RExf-1pAbSeJtyvAAAAYg"]
[Thu Apr 23 02:55:09.538840 2026] [:error] [pid 6384:tid 6392] [client 172.161.3.137:4491] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aekZjT58M3t15ICeWHXr4QAAAMU"]
[Thu Apr 23 02:55:10.742114 2026] [:error] [pid 6250:tid 6259] [client 172.161.3.137:31290] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aekZjg-iZeQkqmQVfj5VywAAAEU"]
[Thu Apr 23 02:55:11.862884 2026] [:error] [pid 23776:tid 23779] [client 172.161.3.137:55968] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aekZj7RExf-1pAbSeJtywQAAAYE"]
[Thu Apr 23 02:55:13.331967 2026] [:error] [pid 6252:tid 6316] [client 172.161.3.137:29138] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aekZketGYuiYb1nWBpSMTAAAAQQ"]
[Thu Apr 23 02:55:14.460377 2026] [:error] [pid 9085:tid 9100] [client 172.161.3.137:55952] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aekZkt-_-or9vQnlWnpXAAAAAU0"]
[Thu Apr 23 02:55:15.459576 2026] [:error] [pid 23776:tid 23789] [client 172.161.3.137:42581] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aekZk7RExf-1pAbSeJtyxAAAAYs"]
[Thu Apr 23 02:55:16.726707 2026] [:error] [pid 9085:tid 9092] [client 172.161.3.137:55981] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aekZlN-_-or9vQnlWnpXEgAAAUU"]
[Thu Apr 23 02:55:17.578540 2026] [:error] [pid 9085:tid 9091] [client 172.161.3.137:49488] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aekZld-_-or9vQnlWnpXFgAAAUQ"]
[Thu Apr 23 02:55:20.082843 2026] [:error] [pid 6251:tid 6288] [client 172.161.3.137:33263] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aekZmCsFAzbyObL-SQ6zkwAAAIM"]
[Thu Apr 23 02:55:22.985873 2026] [:error] [pid 6384:tid 6392] [client 172.161.3.137:49502] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aekZmj58M3t15ICeWHXr7gAAAMU"]
[Thu Apr 23 02:55:26.915713 2026] [:error] [pid 6252:tid 6322] [client 172.161.3.137:32111] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aekZnutGYuiYb1nWBpSMUgAAAQo"]
[Thu Apr 23 02:55:28.636250 2026] [:error] [pid 9085:tid 9110] [client 172.161.3.137:54687] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aekZoN-_-or9vQnlWnpXQgAAAVc"]
[Thu Apr 23 02:55:30.673155 2026] [:error] [pid 9085:tid 9093] [client 172.161.3.137:32068] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aekZot-_-or9vQnlWnpXVAAAAUY"]
[Thu Apr 23 02:55:32.616905 2026] [:error] [pid 6384:tid 6395] [client 172.161.3.137:40925] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aekZpD58M3t15ICeWHXr-gAAAMg"]
[Thu Apr 23 02:55:34.163680 2026] [:error] [pid 9085:tid 9100] [client 172.161.3.137:43120] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aekZpt-_-or9vQnlWnpXZwAAAU0"]
[Thu Apr 23 02:55:35.775869 2026] [:error] [pid 6384:tid 6408] [client 172.161.3.137:45703] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aekZpz58M3t15ICeWHXsAAAAANU"]
[Thu Apr 23 02:55:37.881635 2026] [:error] [pid 6251:tid 6296] [client 172.161.3.137:40923] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ws82.php"] [unique_id "aekZqSsFAzbyObL-SQ6zlQAAAIs"]
[Thu Apr 23 02:55:39.595312 2026] [proxy_fcgi:error] [pid 6384:tid 6395] [client 172.161.3.137:30144] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:55:39.837920 2026] [proxy_fcgi:error] [pid 6384:tid 6399] [client 172.161.3.137:30144] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:55:40.394293 2026] [proxy_fcgi:error] [pid 6384:tid 6390] [client 172.161.3.137:30144] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:55:40.636941 2026] [proxy_fcgi:error] [pid 6384:tid 6405] [client 172.161.3.137:30144] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:55:40.892960 2026] [:error] [pid 6384:tid 6409] [client 172.161.3.137:30144] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aekZrD58M3t15ICeWHXsDAAAANY"]
[Thu Apr 23 02:55:42.212792 2026] [:error] [pid 6344:tid 6371] [client 172.161.3.137:54667] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aekZrkDOTF-pkQnDeUlPSgAAABY"]
[Thu Apr 23 02:55:42.965124 2026] [:error] [pid 9085:tid 9092] [client 172.161.3.137:54704] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aekZrt-_-or9vQnlWnpXlgAAAUU"]
[Thu Apr 23 02:55:43.679250 2026] [:error] [pid 6344:tid 6349] [client 172.161.3.137:4127] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aekZr0DOTF-pkQnDeUlPUAAAAAA"]
[Thu Apr 23 02:55:44.727501 2026] [:error] [pid 6251:tid 6303] [client 172.161.3.137:52023] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aekZsCsFAzbyObL-SQ6zoAAAAJI"]
[Thu Apr 23 02:55:45.857109 2026] [:error] [pid 6344:tid 6356] [client 172.161.3.137:42544] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aekZsUDOTF-pkQnDeUlPWQAAAAc"]
[Thu Apr 23 02:55:47.413244 2026] [:error] [pid 9085:tid 9107] [client 172.161.3.137:57217] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aekZs9-_-or9vQnlWnpXnQAAAVQ"]
[Thu Apr 23 02:55:48.166979 2026] [:error] [pid 9085:tid 9092] [client 172.161.3.137:30169] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "aekZtN-_-or9vQnlWnpXnwAAAUU"]
[Thu Apr 23 02:55:48.919905 2026] [:error] [pid 23776:tid 23793] [client 172.161.3.137:63203] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "aekZtLRExf-1pAbSeJty6QAAAY8"]
[Thu Apr 23 02:55:49.639966 2026] [:error] [pid 9085:tid 9087] [client 172.161.3.137:63217] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "aekZtd-_-or9vQnlWnpXpgAAAUA"]
[Thu Apr 23 02:55:50.985766 2026] [:error] [pid 9085:tid 9100] [client 172.161.3.137:42528] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "aekZtt-_-or9vQnlWnpXqQAAAU0"]
[Thu Apr 23 02:55:51.766648 2026] [:error] [pid 23776:tid 23779] [client 172.161.3.137:30203] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "aekZt7RExf-1pAbSeJty6gAAAYE"]
[Thu Apr 23 02:55:52.830282 2026] [:error] [pid 23776:tid 23789] [client 172.161.3.137:4132] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mk.php"] [unique_id "aekZuLRExf-1pAbSeJty7AAAAYs"]
[Thu Apr 23 02:55:53.637490 2026] [:error] [pid 9085:tid 9096] [client 172.161.3.137:52022] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mk.php"] [unique_id "aekZud-_-or9vQnlWnpXuAAAAUk"]
[Thu Apr 23 02:55:54.678117 2026] [:error] [pid 9085:tid 9102] [client 172.161.3.137:43073] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mk.php"] [unique_id "aekZut-_-or9vQnlWnpXuwAAAU8"]
[Thu Apr 23 02:55:55.252141 2026] [:error] [pid 23776:tid 23792] [client 172.161.3.137:5089] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mk.php"] [unique_id "aekZu7RExf-1pAbSeJty7QAAAY4"]
[Thu Apr 23 02:55:55.879367 2026] [:error] [pid 6384:tid 6401] [client 172.161.3.137:54706] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aekZuz58M3t15ICeWHXsFQAAAM4"]
[Thu Apr 23 02:55:56.788733 2026] [:error] [pid 9085:tid 9106] [client 172.161.3.137:42526] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aekZvN-_-or9vQnlWnpXyAAAAVM"]
[Thu Apr 23 02:55:57.488563 2026] [:error] [pid 9085:tid 9102] [client 172.161.3.137:4134] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aekZvd-_-or9vQnlWnpXywAAAU8"]
[Thu Apr 23 02:55:59.236021 2026] [:error] [pid 6344:tid 6352] [client 172.161.3.137:41896] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aekZv0DOTF-pkQnDeUlPcwAAAAM"]
[Thu Apr 23 02:56:04.333327 2026] [:error] [pid 9085:tid 9088] [client 172.161.3.137:40942] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aekZxN-_-or9vQnlWnpX4AAAAUE"]
[Thu Apr 23 02:56:05.355200 2026] [:error] [pid 23776:tid 23794] [client 172.161.3.137:43105] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aekZxbRExf-1pAbSeJtzAQAAAZA"]
[Thu Apr 23 02:56:06.198306 2026] [:error] [pid 6344:tid 6369] [client 172.161.3.137:51217] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aekZxkDOTF-pkQnDeUlPdAAAABQ"]
[Thu Apr 23 02:56:07.848628 2026] [:error] [pid 6344:tid 6362] [client 172.161.3.137:5076] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/a4.php"] [unique_id "aekZx0DOTF-pkQnDeUlPeAAAAA0"]
[Thu Apr 23 02:56:08.905865 2026] [:error] [pid 23776:tid 23785] [client 172.161.3.137:5092] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aekZyLRExf-1pAbSeJtzCgAAAYc"]
[Thu Apr 23 02:56:15.191298 2026] [:error] [pid 6344:tid 6370] [client 172.161.3.137:5110] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aekZz0DOTF-pkQnDeUlPfwAAABU"]
[Thu Apr 23 02:56:17.438094 2026] [:error] [pid 9085:tid 9091] [client 172.161.3.137:30197] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aekZ0d-_-or9vQnlWnpYCQAAAUQ"]
[Thu Apr 23 02:56:19.237302 2026] [:error] [pid 6344:tid 6359] [client 172.161.3.137:45716] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aekZ00DOTF-pkQnDeUlPhQAAAAo"]
[Thu Apr 23 02:56:20.319436 2026] [:error] [pid 9085:tid 9109] [client 172.161.3.137:45704] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aekZ1N-_-or9vQnlWnpYFQAAAVY"]
[Thu Apr 23 02:56:21.189297 2026] [:error] [pid 9085:tid 9097] [client 172.161.3.137:40948] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aekZ1d-_-or9vQnlWnpYGQAAAUo"]
[Thu Apr 23 02:56:24.228478 2026] [:error] [pid 6384:tid 6409] [client 172.161.3.137:39316] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aekZ2D58M3t15ICeWHXsNAAAANY"]
[Thu Apr 23 02:56:25.653954 2026] [:error] [pid 6252:tid 6316] [client 172.161.3.137:38827] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aekZ2etGYuiYb1nWBpSMawAAAQQ"]
[Thu Apr 23 02:56:27.570684 2026] [:error] [pid 23776:tid 23792] [client 172.161.3.137:38828] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aekZ27RExf-1pAbSeJtzHgAAAY4"]
[Thu Apr 23 02:56:28.362051 2026] [:error] [pid 6250:tid 6255] [client 172.161.3.137:44005] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aekZ3A-iZeQkqmQVfj5V9wAAAEE"]
[Thu Apr 23 02:56:29.034749 2026] [:error] [pid 6384:tid 6389] [client 172.161.3.137:62658] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aekZ3T58M3t15ICeWHXsOgAAAMI"]
[Thu Apr 23 02:56:30.061832 2026] [:error] [pid 23776:tid 23797] [client 172.161.3.137:31686] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aekZ3rRExf-1pAbSeJtzJwAAAZM"]
[Thu Apr 23 02:56:32.791775 2026] [:error] [pid 6384:tid 6406] [client 172.161.3.137:53589] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aekZ4D58M3t15ICeWHXsQQAAANM"]
[Thu Apr 23 02:56:36.335854 2026] [:error] [pid 9085:tid 9102] [client 172.161.3.137:38819] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aekZ5N-_-or9vQnlWnpYLwAAAU8"]
[Thu Apr 23 02:56:38.089839 2026] [:error] [pid 23776:tid 23791] [client 172.161.3.137:33696] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aekZ5rRExf-1pAbSeJtzMQAAAY0"]
[Thu Apr 23 02:56:39.733206 2026] [:error] [pid 6384:tid 6401] [client 172.161.3.137:54134] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aekZ5z58M3t15ICeWHXsVwAAAM4"]
[Thu Apr 23 02:56:41.410146 2026] [proxy_fcgi:error] [pid 9085:tid 9094] [client 172.161.3.137:39324] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:56:41.743164 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 172.161.3.137:39324] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:56:42.015223 2026] [proxy_fcgi:error] [pid 9085:tid 9111] [client 172.161.3.137:39324] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:56:42.285987 2026] [proxy_fcgi:error] [pid 9085:tid 9092] [client 172.161.3.137:39324] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:56:42.560422 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 172.161.3.137:39324] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:56:42.920508 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 172.161.3.137:39324] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 02:56:43.252679 2026] [:error] [pid 9085:tid 9090] [client 172.161.3.137:39324] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aekZ69-_-or9vQnlWnpYTwAAAUM"]
[Thu Apr 23 02:56:44.593439 2026] [:error] [pid 23776:tid 23786] [client 172.161.3.137:62664] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aekZ7LRExf-1pAbSeJtzNAAAAYg"]
[Thu Apr 23 02:56:45.423305 2026] [:error] [pid 6384:tid 6391] [client 172.161.3.137:43907] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aekZ7T58M3t15ICeWHXsWwAAAMQ"]
[Thu Apr 23 02:56:46.100783 2026] [:error] [pid 9085:tid 9100] [client 172.161.3.137:4146] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aekZ7t-_-or9vQnlWnpYVAAAAU0"]
[Thu Apr 23 02:56:47.322873 2026] [:error] [pid 6344:tid 6368] [client 172.161.3.137:37348] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aekZ70DOTF-pkQnDeUlPmAAAABM"]
[Thu Apr 23 02:56:48.105159 2026] [:error] [pid 9085:tid 9108] [client 172.161.3.137:30166] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aekZ8N-_-or9vQnlWnpYXQAAAVU"]
[Thu Apr 23 02:56:49.358253 2026] [:error] [pid 9085:tid 9102] [client 172.161.3.137:4726] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aekZ8d-_-or9vQnlWnpYYwAAAU8"]
[Thu Apr 23 02:56:50.230081 2026] [:error] [pid 6384:tid 6398] [client 172.161.3.137:45705] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gifclass.php"] [unique_id "aekZ8j58M3t15ICeWHXsYAAAAMs"]
[Thu Apr 23 02:56:51.042870 2026] [:error] [pid 6251:tid 6286] [client 172.161.3.137:63198] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aekZ8ysFAzbyObL-SQ6zuAAAAIE"]
[Thu Apr 23 02:56:52.120040 2026] [:error] [pid 9085:tid 9104] [client 172.161.3.137:4704] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aekZ9N-_-or9vQnlWnpYZwAAAVE"]
[Thu Apr 23 02:56:53.091283 2026] [:error] [pid 9085:tid 9106] [client 172.161.3.137:59349] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aekZ9d-_-or9vQnlWnpYagAAAVM"]
[Thu Apr 23 02:56:54.424510 2026] [:error] [pid 6250:tid 6270] [client 172.161.3.137:60288] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ccs.php"] [unique_id "aekZ9g-iZeQkqmQVfj5V-wAAAFA"]
[Thu Apr 23 02:56:55.746061 2026] [:error] [pid 6252:tid 6332] [client 172.161.3.137:44775] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/first.php"] [unique_id "aekZ9-tGYuiYb1nWBpSMdwAAARQ"]
[Thu Apr 23 02:56:56.731467 2026] [:error] [pid 6384:tid 6403] [client 172.161.3.137:4325] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/first.php"] [unique_id "aekZ-D58M3t15ICeWHXscQAAANA"]
[Thu Apr 23 02:56:58.335028 2026] [:error] [pid 9085:tid 9098] [client 172.161.3.137:4202] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/first.php"] [unique_id "aekZ-t-_-or9vQnlWnpYcwAAAUs"]
[Thu Apr 23 02:57:01.464106 2026] [:error] [pid 9085:tid 9093] [client 172.161.3.137:52047] [client 172.161.3.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/first.php"] [unique_id "aekZ_d-_-or9vQnlWnpYfgAAAUY"]
[Thu Apr 23 05:59:38.421887 2026] [:error] [pid 25635:tid 25659] [client 155.248.183.67:54040] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEysRxv6UsgRGKB3KbkAAAARQ"]
[Thu Apr 23 07:20:53.778297 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:54.096306 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:54.440380 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:54.903315 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:55.217304 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:55.567904 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:55.856596 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:56.188653 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 89.251.0.131:38321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:56.870710 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.131:38321] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core.php"] [unique_id "aelX2JXyGZJFeAIDWtlLUQAAAUE"]
[Thu Apr 23 07:20:57.588401 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:57.903674 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:58.226401 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:59.056660 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:59.397341 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:20:59.729403 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:00.107980 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:00.444405 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:00.975309 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:01.286290 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 89.251.0.129:24721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:06.665915 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.129:24721] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelX4pXyGZJFeAIDWtlL1AAAAUE"]
[Thu Apr 23 07:21:08.525114 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.132:20543] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelX5DC5hrvNXosL83K7wQAAANQ"]
[Thu Apr 23 07:21:10.842298 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 89.251.0.150:20617] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:11.809564 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.150:20617] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelX526I0QqmmmLTHE3PwgAAAIw"]
[Thu Apr 23 07:21:12.954598 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 89.251.0.138:44055] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:13.288345 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 89.251.0.138:44055] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:13.628667 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.138:44055] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelX6TC5hrvNXosL83K76AAAAMw"]
[Thu Apr 23 07:21:15.325336 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 89.251.0.135:24321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:17.030711 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.135:24321] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelX7ZXyGZJFeAIDWtlMQQAAAU8"]
[Thu Apr 23 07:21:18.110993 2026] [:error] [pid 42973:tid 43052] [client 89.251.0.127:63301] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelX7m6I0QqmmmLTHE3P-wAAAIk"]
[Thu Apr 23 07:21:18.759642 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.117:45391] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelX7r6vRb9j6psK2ZZ9mAAAAgA"]
[Thu Apr 23 07:21:19.399824 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.131:36379] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelX75XyGZJFeAIDWtlMWAAAAUw"]
[Thu Apr 23 07:21:20.015577 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.136:28425] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelX8IAV4GfOOdX8QzoFMQAAAZU"]
[Thu Apr 23 07:21:20.620839 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.125:28243] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelX8L6vRb9j6psK2ZZ90AAAAgE"]
[Thu Apr 23 07:21:21.586602 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.125:52187] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelX8cRxv6UsgRGKB3LWdAAAARU"]
[Thu Apr 23 07:21:22.175320 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 89.251.0.115:45635] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:22.887769 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.115:45635] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aelX8r6vRb9j6psK2ZZ-EQAAAhM"]
[Thu Apr 23 07:21:23.535492 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 89.251.0.141:61005] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:23.888675 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 89.251.0.141:61005] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:24.259588 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.141:61005] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelX9L6vRb9j6psK2ZZ-OwAAAhA"]
[Thu Apr 23 07:21:25.275943 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.139:60329] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelX9b6vRb9j6psK2ZZ-VQAAAhI"]
[Thu Apr 23 07:21:26.038024 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 89.251.0.136:48355] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:26.380673 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.136:48355] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelX9jEP2_5RswrH8bGb7wAAAAk"]
[Thu Apr 23 07:21:27.110588 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 89.251.0.136:41241] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:28.242318 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 89.251.0.136:41241] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:29.247477 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.136:41241] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelX-b6vRb9j6psK2ZZ-wgAAAhg"]
[Thu Apr 23 07:21:30.022782 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 89.251.0.126:48515] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:30.350083 2026] [:error] [pid 59700:tid 59716] [client 89.251.0.126:48515] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelX-pXyGZJFeAIDWtlMwwAAAU4"]
[Thu Apr 23 07:21:31.712295 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 89.251.0.125:55405] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:32.867309 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.125:55405] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelX_L6vRb9j6psK2ZZ_GgAAAhE"]
[Thu Apr 23 07:21:33.845334 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.139:50993] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelX_YV5EysYcTLjmwjl9gAAAdI"]
[Thu Apr 23 07:21:34.900312 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 89.251.0.137:55939] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:35.230320 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 89.251.0.137:55939] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:21:35.894719 2026] [:error] [pid 25635:tid 25653] [client 89.251.0.137:55939] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelX_8Rxv6UsgRGKB3LW4gAAAQ4"]
[Thu Apr 23 07:21:36.956535 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.119:65259] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYADC5hrvNXosL83K8yQAAAMA"]
[Thu Apr 23 07:21:37.891696 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.124:54649] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYATEP2_5RswrH8bGccgAAAAo"]
[Thu Apr 23 07:22:05.443681 2026] [autoindex:error] [pid 25635:tid 25644] [client 89.251.0.116:41577] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:22:30.329971 2026] [autoindex:error] [pid 25635:tid 25662] [client 89.251.0.116:41577] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:22:50.274321 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 89.251.0.142:22303] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:50.629281 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 89.251.0.142:22303] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:50.961321 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 89.251.0.142:22303] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:51.303300 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 89.251.0.142:22303] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:22:51.633099 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 89.251.0.142:22303] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:03.768345 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 89.251.0.142:22303] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:23:15.495871 2026] [autoindex:error] [pid 25635:tid 25644] [client 89.251.0.127:32401] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:23:29.822905 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.127:32401] [client 89.251.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/"] [unique_id "aelYccRxv6UsgRGKB3LbSQAAAQY"]
[Thu Apr 23 07:23:48.808056 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.141:56873] [client 89.251.0.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aelYhL6vRb9j6psK2ZaLWgAAAgs"]
[Thu Apr 23 07:23:51.052168 2026] [autoindex:error] [pid 65000:tid 65050] [client 89.251.0.128:34741] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:23:56.882757 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.128:34741] [client 89.251.0.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aelYjL6vRb9j6psK2ZaMSQAAAgg"]
[Thu Apr 23 07:24:27.198402 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.120:26177] [client 89.251.0.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-content/uploads/2021/"] [unique_id "aelYq76vRb9j6psK2ZaPDgAAAgM"]
[Thu Apr 23 09:51:27.853305 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:31.049284 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:31.323304 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:31.596293 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:31.880325 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:32.155285 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:32.427392 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:32.721294 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:33.290289 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:33.588076 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:33.885285 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:34.160295 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:34.444307 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:34.715305 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:34.990932 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:35.262442 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:35.535305 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:35.803329 2026] [proxy_fcgi:error] [pid 43083:tid 43095] [client 185.192.71.29:51317] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:39.788687 2026] [:error] [pid 43083:tid 43097] [client 185.192.71.29:51317] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael7KzC5hrvNXosL83IMqAAAAMw"]
[Thu Apr 23 09:51:41.216807 2026] [:error] [pid 25635:tid 25650] [client 91.230.225.196:49775] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael7LcRxv6UsgRGKB3LzeAAAAQs"]
[Thu Apr 23 09:51:42.686286 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 185.92.25.114:61953] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:43.547488 2026] [:error] [pid 42971:tid 43006] [client 185.92.25.114:61953] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael7LzEP2_5RswrH8bHSRgAAABQ"]
[Thu Apr 23 09:51:44.370311 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 91.230.225.207:44843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:44.670303 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 91.230.225.207:44843] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:44.940058 2026] [:error] [pid 42973:tid 43063] [client 91.230.225.207:44843] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael7MG6I0QqmmmLTHE3qZQAAAJQ"]
[Thu Apr 23 09:51:45.782315 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 91.230.225.16:30259] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:47.234299 2026] [:error] [pid 43083:tid 43096] [client 91.230.225.16:30259] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael7MzC5hrvNXosL83INFQAAAMs"]
[Thu Apr 23 09:51:48.880096 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.39:64731] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael7NIV5EysYcTLjmwhsnQAAAcM"]
[Thu Apr 23 09:51:52.486838 2026] [:error] [pid 59700:tid 59708] [client 91.230.225.199:34125] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael7OJXyGZJFeAIDWtmLHQAAAUY"]
[Thu Apr 23 09:51:53.071577 2026] [:error] [pid 65000:tid 65050] [client 185.192.71.23:43473] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael7Ob6vRb9j6psK2Zbz9QAAAhE"]
[Thu Apr 23 09:51:53.619530 2026] [:error] [pid 65000:tid 65046] [client 91.230.225.15:45675] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael7Ob6vRb9j6psK2Zbz_gAAAg0"]
[Thu Apr 23 09:51:54.161230 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.33:46377] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael7OpXyGZJFeAIDWtmLOQAAAUA"]
[Thu Apr 23 09:51:55.419414 2026] [:error] [pid 43083:tid 43089] [client 185.192.71.31:40119] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael7OzC5hrvNXosL83INlgAAAMQ"]
[Thu Apr 23 09:51:56.082307 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 185.192.71.38:54327] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:56.645735 2026] [:error] [pid 42972:tid 43021] [client 185.192.71.38:54327] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "ael7PMOAb-3sOknsk4c7fwAAAEU"]
[Thu Apr 23 09:51:57.210565 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 91.230.225.10:60507] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:57.520315 2026] [proxy_fcgi:error] [pid 64967:tid 64976] [client 91.230.225.10:60507] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:57.804839 2026] [:error] [pid 64967:tid 64980] [client 91.230.225.10:60507] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael7PYAV4GfOOdX8QzopCQAAAYs"]
[Thu Apr 23 09:51:58.632796 2026] [:error] [pid 65000:tid 65031] [client 185.192.71.36:34591] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael7Pr6vRb9j6psK2Zb0QwAAAgI"]
[Thu Apr 23 09:51:59.197601 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 91.230.225.22:33321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:59.474791 2026] [:error] [pid 59700:tid 59707] [client 91.230.225.22:33321] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael7P5XyGZJFeAIDWtmLcgAAAUU"]
[Thu Apr 23 09:52:00.029313 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 91.230.225.11:50497] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:00.917322 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 91.230.225.11:50497] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:01.767873 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.11:50497] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael7Qb6vRb9j6psK2Zb0agAAAhE"]
[Thu Apr 23 09:52:02.350516 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 185.192.71.34:20503] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:02.651428 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.34:20503] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael7QsOAb-3sOknsk4c7nAAAAFE"]
[Thu Apr 23 09:52:03.204858 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 185.192.71.36:20033] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:03.806695 2026] [:error] [pid 59700:tid 59705] [client 185.192.71.36:20033] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael7Q5XyGZJFeAIDWtmLkQAAAUM"]
[Thu Apr 23 09:52:04.643402 2026] [:error] [pid 59700:tid 59713] [client 185.192.71.21:38133] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael7RJXyGZJFeAIDWtmLpwAAAUs"]
[Thu Apr 23 09:52:06.014398 2026] [proxy_fcgi:error] [pid 25635:tid 25646] [client 91.230.225.198:21537] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:06.299297 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 91.230.225.198:21537] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:06.995069 2026] [:error] [pid 25635:tid 25652] [client 91.230.225.198:21537] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael7RsRxv6UsgRGKB3Lz8gAAAQ0"]
[Thu Apr 23 09:52:07.845901 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.35:45917] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael7R5XyGZJFeAIDWtmLzgAAAUk"]
[Thu Apr 23 09:52:08.709909 2026] [:error] [pid 59700:tid 59704] [client 185.192.71.39:25611] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael7SJXyGZJFeAIDWtmL3AAAAUI"]
[Thu Apr 23 09:52:09.297896 2026] [:error] [pid 42971:tid 42986] [client 185.192.71.22:55155] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael7STEP2_5RswrH8bHTGQAAAAA"]
[Thu Apr 23 09:52:09.848581 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.207:32087] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael7SYV5EysYcTLjmwhtjQAAAc4"]
[Thu Apr 23 09:52:17.233313 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 91.230.225.196:35195] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:17.501437 2026] [:error] [pid 59700:tid 59714] [client 91.230.225.196:35195] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael7UZXyGZJFeAIDWtmMIgAAAUw"]
[Thu Apr 23 09:52:18.066713 2026] [:error] [pid 65000:tid 65032] [client 185.192.71.38:45117] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael7Ur6vRb9j6psK2Zb09wAAAgM"]
[Thu Apr 23 09:52:18.610701 2026] [:error] [pid 42973:tid 43051] [client 185.192.71.28:38711] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael7Um6I0QqmmmLTHE3rMQAAAIg"]
[Thu Apr 23 09:52:19.742389 2026] [proxy_fcgi:error] [pid 25635:tid 25657] [client 185.192.71.22:52789] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:20.326324 2026] [proxy_fcgi:error] [pid 25635:tid 25659] [client 185.192.71.22:52789] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:20.605757 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 185.192.71.22:52789] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:21.479523 2026] [:error] [pid 25635:tid 25646] [client 185.192.71.22:52789] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael7VcRxv6UsgRGKB3L0agAAAQc"]
[Thu Apr 23 09:52:22.930880 2026] [:error] [pid 43083:tid 43102] [client 91.230.225.195:32777] [client 91.230.225.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.195, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael7VjC5hrvNXosL83IOlAAAANE"]
[Thu Apr 23 09:52:23.226358 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 91.230.225.195:32777] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:24.844325 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 91.230.225.195:32777] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:25.205265 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 91.230.225.195:32777] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:27.025050 2026] [:error] [pid 43083:tid 43085] [client 91.230.225.195:32777] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael7WjC5hrvNXosL83IOuQAAAMA"]
[Thu Apr 23 09:52:27.900613 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 91.230.225.201:63193] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:28.193198 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.201:63193] [client 91.230.225.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.201, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael7XIV5EysYcTLjmwhupAAAAco"]
[Thu Apr 23 09:52:28.798509 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.201:63193] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael7XIV5EysYcTLjmwhusAAAAcs"]
[Thu Apr 23 09:52:29.660291 2026] [proxy_fcgi:error] [pid 25635:tid 25645] [client 91.230.225.204:20041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:30.541313 2026] [proxy_fcgi:error] [pid 25635:tid 25656] [client 91.230.225.204:20041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:31.132288 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 91.230.225.204:20041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:31.731276 2026] [:error] [pid 25635:tid 25642] [client 91.230.225.204:20041] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael7X8Rxv6UsgRGKB3L0qgAAAQM"]
[Thu Apr 23 09:52:32.282898 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 185.192.71.26:35219] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:36.277306 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 185.192.71.26:35219] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:36.869773 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 185.192.71.26:35219] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:37.416290 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 185.192.71.26:35219] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:37.711394 2026] [:error] [pid 42972:tid 43036] [client 185.192.71.26:35219] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael7ZcOAb-3sOknsk4c9IgAAAFQ"]
[Thu Apr 23 09:52:38.266875 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 185.192.71.32:50201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:38.549296 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 185.192.71.32:50201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:38.838805 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.32:50201] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael7ZoV5EysYcTLjmwhvVAAAAdc"]
[Thu Apr 23 09:52:39.699711 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 91.230.225.11:20631] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:40.273168 2026] [:error] [pid 64998:tid 65019] [client 91.230.225.11:20631] [client 91.230.225.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.11, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael7aIV5EysYcTLjmwhvfgAAAdE"]
[Thu Apr 23 09:52:40.560496 2026] [:error] [pid 64998:tid 65002] [client 91.230.225.11:20631] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael7aIV5EysYcTLjmwhviAAAAcA"]
[Thu Apr 23 09:52:44.056503 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 91.230.225.200:23693] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:45.268300 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 91.230.225.200:23693] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:45.872352 2026] [proxy_fcgi:error] [pid 42973:tid 43050] [client 91.230.225.200:23693] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:46.158680 2026] [:error] [pid 42973:tid 43051] [client 91.230.225.200:23693] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael7bm6I0QqmmmLTHE3r8wAAAIg"]
[Thu Apr 23 09:52:46.806329 2026] [proxy_fcgi:error] [pid 64967:tid 64989] [client 185.92.25.113:52627] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:47.702498 2026] [:error] [pid 64967:tid 64976] [client 185.92.25.113:52627] [client 185.92.25.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.113, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael7b4AV4GfOOdX8QzoqkQAAAYc"]
[Thu Apr 23 09:52:47.994319 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 185.92.25.113:52627] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:48.272287 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 185.92.25.113:52627] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:48.550121 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 185.92.25.113:52627] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:48.832331 2026] [:error] [pid 64967:tid 64987] [client 185.92.25.113:52627] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael7cIAV4GfOOdX8QzoqmgAAAZI"]
[Thu Apr 23 09:52:49.408361 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 185.192.71.21:43455] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:49.695776 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.21:43455] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael7cYV5EysYcTLjmwhwFwAAAdI"]
[Thu Apr 23 09:52:50.571298 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 185.92.25.113:50713] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:50.851301 2026] [:error] [pid 25635:tid 25661] [client 185.92.25.113:50713] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael7csRxv6UsgRGKB3L1FQAAARY"]
[Thu Apr 23 09:52:51.989290 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 185.192.71.32:22009] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:55.250740 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.32:22009] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael7d4V5EysYcTLjmwhwhAAAAcw"]
[Thu Apr 23 09:52:55.914696 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.197:45665] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael7d4V5EysYcTLjmwhwlwAAAcg"]
[Thu Apr 23 09:52:56.522341 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 91.230.225.24:26131] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:56.815308 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 91.230.225.24:26131] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:58.007615 2026] [:error] [pid 59700:tid 59709] [client 91.230.225.24:26131] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael7epXyGZJFeAIDWtmN3wAAAUc"]
[Thu Apr 23 09:52:58.852795 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.29:49259] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael7ejEP2_5RswrH8bHUjQAAAA4"]
[Thu Apr 23 09:52:59.628107 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 91.230.225.199:57739] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:00.645660 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.199:57739] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ael7fIAV4GfOOdX8Qzoq1AAAAYA"]
[Thu Apr 23 09:53:01.223475 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 91.230.225.19:50611] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:01.770604 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 91.230.225.19:50611] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:02.051532 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.19:50611] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael7foV5EysYcTLjmwhxBwAAAdU"]
[Thu Apr 23 09:53:02.622311 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 91.230.225.205:32251] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:03.200825 2026] [:error] [pid 65000:tid 65053] [client 91.230.225.205:32251] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "ael7f76vRb9j6psK2Zb2uwAAAhQ"]
[Thu Apr 23 09:53:03.805304 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 91.230.225.20:27883] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:04.697318 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.20:27883] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael7gIV5EysYcTLjmwhxIAAAAdY"]
[Thu Apr 23 09:53:05.537316 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 185.192.71.24:26955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:06.114296 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 185.192.71.24:26955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:06.422327 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 185.192.71.24:26955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:06.965224 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 185.192.71.24:26955] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:07.244623 2026] [:error] [pid 42972:tid 43028] [client 185.192.71.24:26955] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael7g8OAb-3sOknsk4c99wAAAEw"]
[Thu Apr 23 09:53:07.792685 2026] [:error] [pid 64967:tid 64988] [client 91.230.225.22:26661] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael7g4AV4GfOOdX8QzorCAAAAZM"]
[Thu Apr 23 09:53:08.336364 2026] [:error] [pid 43083:tid 43092] [client 91.230.225.21:56157] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael7hDC5hrvNXosL83IP9wAAAMc"]
[Thu Apr 23 09:53:08.887428 2026] [:error] [pid 64998:tid 65004] [client 185.192.71.22:22781] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael7hIV5EysYcTLjmwhxSwAAAcI"]
[Thu Apr 23 09:53:09.480842 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 185.192.71.25:48393] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:09.794042 2026] [:error] [pid 64998:tid 65004] [client 185.192.71.25:48393] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael7hYV5EysYcTLjmwhxVQAAAcI"]
[Thu Apr 23 09:53:10.384671 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.204:57369] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael7hr6vRb9j6psK2Zb3MwAAAgI"]
[Thu Apr 23 09:53:10.975293 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 185.192.71.24:27801] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:16.438816 2026] [:error] [pid 64967:tid 64990] [client 185.192.71.24:27801] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael7jIAV4GfOOdX8QzorUAAAAZU"]
[Thu Apr 23 09:53:17.001173 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.14:43489] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael7jDEP2_5RswrH8bHVhgAAABU"]
[Thu Apr 23 09:53:17.597804 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.13:29203] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael7jb6vRb9j6psK2Zb3hwAAAhc"]
[Thu Apr 23 09:53:18.198351 2026] [:error] [pid 65000:tid 65029] [client 185.192.71.25:24543] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael7jr6vRb9j6psK2Zb3kQAAAgA"]
[Thu Apr 23 09:53:19.051819 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.205:21015] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael7j76vRb9j6psK2Zb3qgAAAgY"]
[Thu Apr 23 09:53:20.218111 2026] [:error] [pid 64998:tid 65006] [client 185.192.71.27:47783] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael7kIV5EysYcTLjmwhxrAAAAcQ"]
[Thu Apr 23 09:53:20.763309 2026] [proxy_fcgi:error] [pid 64967:tid 64981] [client 185.192.71.29:64881] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:21.720326 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 185.192.71.29:64881] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:22.005973 2026] [:error] [pid 64967:tid 64989] [client 185.192.71.29:64881] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael7koAV4GfOOdX8QzorewAAAZQ"]
[Thu Apr 23 09:53:22.866316 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 185.192.71.31:59721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:23.185297 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 185.192.71.31:59721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:24.570287 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 185.192.71.31:59721] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:24.855987 2026] [:error] [pid 59700:tid 59713] [client 185.192.71.31:59721] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ael7lJXyGZJFeAIDWtmO5wAAAUs"]
[Thu Apr 23 09:53:25.421303 2026] [proxy_fcgi:error] [pid 42973:tid 43060] [client 91.230.225.15:59745] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:26.289551 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.15:59745] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael7lm6I0QqmmmLTHE3stQAAAII"]
[Thu Apr 23 09:53:26.865870 2026] [:error] [pid 43083:tid 43104] [client 185.192.71.35:47951] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael7ljC5hrvNXosL83IQtAAAANM"]
[Thu Apr 23 09:53:28.601842 2026] [:error] [pid 42971:tid 42988] [client 91.230.225.196:41657] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael7mDEP2_5RswrH8bHWGwAAAAI"]
[Thu Apr 23 09:53:34.831290 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 91.230.225.13:34213] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:35.112203 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 91.230.225.13:34213] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:35.459349 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 91.230.225.13:34213] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:35.827788 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 91.230.225.13:34213] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:37.313778 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.13:34213] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael7oYV5EysYcTLjmwhyqAAAAc8"]
[Thu Apr 23 09:53:37.921653 2026] [:error] [pid 64967:tid 64981] [client 185.192.71.25:42787] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael7oYAV4GfOOdX8QzosDAAAAYw"]
[Thu Apr 23 09:53:38.516678 2026] [:error] [pid 42971:tid 42990] [client 185.192.71.31:63619] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael7ojEP2_5RswrH8bHWgAAAAAQ"]
[Thu Apr 23 09:53:39.068111 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.28:24539] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael7o5XyGZJFeAIDWtmPagAAAVA"]
[Thu Apr 23 09:53:39.626678 2026] [:error] [pid 25635:tid 25662] [client 91.230.225.199:29369] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael7o8Rxv6UsgRGKB3L2HQAAARc"]
[Thu Apr 23 09:53:41.259835 2026] [:error] [pid 64967:tid 64977] [client 91.230.225.21:52061] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael7pYAV4GfOOdX8QzosIwAAAYg"]
[Thu Apr 23 09:53:42.110810 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.12:30865] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael7poV5EysYcTLjmwhy-gAAAdI"]
[Thu Apr 23 09:53:42.679685 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.16:20067] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael7poV5EysYcTLjmwhzBwAAAc8"]
[Thu Apr 23 09:53:43.245988 2026] [:error] [pid 43083:tid 43094] [client 185.192.71.37:51127] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael7pzC5hrvNXosL83IRkwAAAMk"]
[Thu Apr 23 09:53:43.820451 2026] [:error] [pid 42973:tid 43060] [client 185.192.71.28:44711] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael7p26I0QqmmmLTHE3tIQAAAJE"]
[Thu Apr 23 09:53:45.074170 2026] [:error] [pid 25635:tid 25648] [client 91.230.225.23:58833] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael7qcRxv6UsgRGKB3L2VAAAAQk"]
[Thu Apr 23 09:53:46.083072 2026] [:error] [pid 25635:tid 25641] [client 185.192.71.36:48085] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael7qsRxv6UsgRGKB3L2WwAAAQI"]
[Thu Apr 23 09:53:46.660412 2026] [proxy_fcgi:error] [pid 42973:tid 43050] [client 185.192.71.34:32813] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:47.232946 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.34:32813] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael7q26I0QqmmmLTHE3tOQAAAJU"]
[Thu Apr 23 09:53:48.403740 2026] [:error] [pid 42973:tid 43067] [client 91.230.225.209:38233] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ael7rG6I0QqmmmLTHE3tQQAAAJg"]
[Thu Apr 23 09:53:48.977300 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 91.230.225.18:58679] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:49.558313 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 91.230.225.18:58679] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:49.850580 2026] [:error] [pid 64967:tid 64985] [client 91.230.225.18:58679] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael7rYAV4GfOOdX8QzosjwAAAZA"]
[Thu Apr 23 09:53:50.768372 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 91.230.225.206:57175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:51.066341 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 91.230.225.206:57175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:51.368311 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 91.230.225.206:57175] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:51.654846 2026] [:error] [pid 43083:tid 43096] [client 91.230.225.206:57175] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael7rzC5hrvNXosL83IR8QAAAMs"]
[Thu Apr 23 09:53:52.220298 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 185.192.71.37:44609] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:52.520952 2026] [:error] [pid 65000:tid 65048] [client 185.192.71.37:44609] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ael7sL6vRb9j6psK2Zb5LAAAAg8"]
[Thu Apr 23 09:53:53.767345 2026] [proxy_fcgi:error] [pid 25635:tid 25654] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:54.046320 2026] [proxy_fcgi:error] [pid 25635:tid 25656] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:54.335445 2026] [proxy_fcgi:error] [pid 25635:tid 25643] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:54.945308 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:55.972298 2026] [proxy_fcgi:error] [pid 25635:tid 25656] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:56.250557 2026] [proxy_fcgi:error] [pid 25635:tid 25661] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:56.576319 2026] [proxy_fcgi:error] [pid 25635:tid 25651] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:56.936538 2026] [proxy_fcgi:error] [pid 25635:tid 25647] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:57.793729 2026] [proxy_fcgi:error] [pid 25635:tid 25640] [client 91.230.225.208:29513] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:58.068734 2026] [:error] [pid 25635:tid 25643] [client 91.230.225.208:29513] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael7tsRxv6UsgRGKB3L2ywAAAQQ"]
[Thu Apr 23 09:53:58.642081 2026] [:error] [pid 42973:tid 43049] [client 185.192.71.39:56753] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael7tm6I0QqmmmLTHE3tiwAAAIY"]
[Thu Apr 23 09:53:59.200319 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 185.192.71.39:46215] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:59.483449 2026] [:error] [pid 42971:tid 43009] [client 185.192.71.39:46215] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael7tzEP2_5RswrH8bHXGAAAABc"]
[Thu Apr 23 09:54:00.366887 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 185.192.71.30:46621] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:00.645151 2026] [:error] [pid 42971:tid 43004] [client 185.192.71.30:46621] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael7uDEP2_5RswrH8bHXMAAAABI"]
[Thu Apr 23 09:54:01.265411 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.18:58141] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael7uYAV4GfOOdX8QzotCgAAAYU"]
[Thu Apr 23 09:54:02.962434 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.205:52977] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael7uoV5EysYcTLjmwhz7QAAAcw"]
[Thu Apr 23 09:54:03.937957 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.203:40627] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "ael7u4AV4GfOOdX8QzotJAAAAYc"]
[Thu Apr 23 09:54:07.040311 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 185.192.71.36:42665] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:07.698632 2026] [:error] [pid 25635:tid 25647] [client 185.192.71.36:42665] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael7v8Rxv6UsgRGKB3L3CgAAAQg"]
[Thu Apr 23 09:54:08.533304 2026] [proxy_fcgi:error] [pid 64967:tid 64972] [client 91.230.225.202:39933] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:09.089098 2026] [:error] [pid 64967:tid 64984] [client 91.230.225.202:39933] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "ael7wYAV4GfOOdX8QzotWAAAAY8"]
[Thu Apr 23 09:54:09.644265 2026] [:error] [pid 64967:tid 64985] [client 91.230.225.17:24451] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ael7wYAV4GfOOdX8QzotYAAAAZA"]
[Thu Apr 23 09:54:10.560294 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 185.192.71.31:39533] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:10.851878 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.31:39533] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael7woV5EysYcTLjmwh0OwAAAdc"]
[Thu Apr 23 09:54:11.497895 2026] [:error] [pid 65000:tid 65057] [client 185.192.71.36:63633] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael7w76vRb9j6psK2Zb5zQAAAhg"]
[Thu Apr 23 09:54:12.855304 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 185.192.71.35:22183] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:13.166296 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 185.192.71.35:22183] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:13.791653 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 185.192.71.35:22183] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:14.416822 2026] [:error] [pid 43083:tid 43093] [client 185.192.71.35:22183] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ael7xjC5hrvNXosL83ITIQAAAMg"]
[Thu Apr 23 09:54:15.003536 2026] [:error] [pid 42972:tid 43018] [client 185.192.71.32:65449] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael7x8OAb-3sOknsk4dBCQAAAEI"]
[Thu Apr 23 09:54:15.627298 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 91.230.225.206:38455] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:15.923302 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 91.230.225.206:38455] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:16.555625 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 91.230.225.206:38455] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:16.838382 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.206:38455] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "ael7yJXyGZJFeAIDWtmQ6wAAAUs"]
[Thu Apr 23 09:54:17.392914 2026] [:error] [pid 42972:tid 43022] [client 91.230.225.209:30239] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael7ycOAb-3sOknsk4dBLQAAAEY"]
[Thu Apr 23 09:54:17.975359 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.24:24123] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael7yZXyGZJFeAIDWtmQ9wAAAUA"]
[Thu Apr 23 09:54:19.811320 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 185.192.71.37:50729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:20.089581 2026] [:error] [pid 42973:tid 43050] [client 185.192.71.37:50729] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael7zG6I0QqmmmLTHE3u3AAAAIc"]
[Thu Apr 23 09:54:20.949623 2026] [:error] [pid 42971:tid 43004] [client 91.230.225.202:65087] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael7zDEP2_5RswrH8bHX6wAAABI"]
[Thu Apr 23 09:54:21.527291 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:21.866505 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:22.487302 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:23.691532 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.208:61751] [client 91.230.225.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.208, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "ael7z76vRb9j6psK2Zb6jgAAAhE"]
[Thu Apr 23 09:54:24.298657 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.208:61751] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Thu Apr 23 09:54:24.606297 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:24.944313 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:25.232334 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:25.509659 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.208:61751] [client 91.230.225.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.208, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael70b6vRb9j6psK2Zb6rQAAAhg"]
[Thu Apr 23 09:54:25.831310 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:31.351132 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:31.639222 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:32.193013 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:32.756336 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:33.619290 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:35.573633 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:35.881649 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:36.713294 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:37.627297 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:37.917995 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 91.230.225.208:61751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:38.189450 2026] [:error] [pid 65000:tid 65030] [client 91.230.225.208:61751] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ael73r6vRb9j6psK2Zb7yAAAAgE"]
[Thu Apr 23 09:54:39.026317 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 185.192.71.33:38797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:39.351788 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 185.192.71.33:38797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:39.623816 2026] [:error] [pid 43083:tid 43094] [client 185.192.71.33:38797] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael73zC5hrvNXosL83IUaAAAAMk"]
[Thu Apr 23 09:54:40.495374 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 91.230.225.18:20389] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:40.775461 2026] [:error] [pid 59700:tid 59726] [client 91.230.225.18:20389] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael74JXyGZJFeAIDWtmR2gAAAVg"]
[Thu Apr 23 09:54:41.862369 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 185.192.71.29:40707] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:42.427737 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 185.192.71.29:40707] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:42.708284 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 185.192.71.29:40707] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:43.013642 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 185.192.71.29:40707] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:43.294351 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 185.192.71.29:40707] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:43.845436 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.29:40707] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael744V5EysYcTLjmwh2SQAAAcY"]
[Thu Apr 23 09:54:44.423206 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 91.230.225.14:57837] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:44.711322 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 91.230.225.14:57837] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:44.997326 2026] [:error] [pid 59700:tid 59719] [client 91.230.225.14:57837] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael75JXyGZJFeAIDWtmSEAAAAVE"]
[Thu Apr 23 09:54:45.808810 2026] [:error] [pid 64998:tid 65015] [client 185.192.71.24:38193] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael75YV5EysYcTLjmwh2ZQAAAc0"]
[Thu Apr 23 09:54:46.636628 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 91.230.225.202:50089] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:47.488417 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 91.230.225.202:50089] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:47.768579 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 91.230.225.202:50089] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:48.035507 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.202:50089] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael76MOAb-3sOknsk4dCYQAAAEM"]
[Thu Apr 23 09:54:48.578351 2026] [:error] [pid 42973:tid 43055] [client 91.230.225.10:39161] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael76G6I0QqmmmLTHE3v4gAAAIw"]
[Thu Apr 23 09:54:50.542324 2026] [proxy_fcgi:error] [pid 64967:tid 64989] [client 91.230.225.205:49613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:51.133303 2026] [:error] [pid 64967:tid 64991] [client 91.230.225.205:49613] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael764AV4GfOOdX8QzovEwAAAZY"]
[Thu Apr 23 09:54:51.950526 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.20:47263] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "ael764V5EysYcTLjmwh2-gAAAdM"]
[Thu Apr 23 09:54:52.772287 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 91.230.225.11:35345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:53.060304 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 91.230.225.11:35345] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:53.334314 2026] [:error] [pid 42971:tid 43001] [client 91.230.225.11:35345] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael77TEP2_5RswrH8bHZDwAAAA8"]
[Thu Apr 23 09:54:54.175413 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 91.230.225.13:60999] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:54.448049 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 91.230.225.13:60999] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:55.030612 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 91.230.225.13:60999] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:55.876881 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.13:60999] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael778OAb-3sOknsk4dCtwAAAEo"]
[Thu Apr 23 09:54:56.431300 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 91.230.225.195:36871] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:57.278290 2026] [:error] [pid 43083:tid 43092] [client 91.230.225.195:36871] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael78TC5hrvNXosL83IVQgAAAMc"]
[Thu Apr 23 09:54:58.143347 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 91.230.225.201:39989] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:59.016022 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 91.230.225.201:39989] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:59.302283 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 91.230.225.201:39989] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:59.846691 2026] [:error] [pid 42971:tid 42994] [client 91.230.225.201:39989] [client 91.230.225.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.201, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ael78zEP2_5RswrH8bHZUgAAAAg"]
[Thu Apr 23 09:55:00.454308 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 91.230.225.201:39989] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:01.303755 2026] [:error] [pid 42971:tid 43005] [client 91.230.225.201:39989] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ael79TEP2_5RswrH8bHZWQAAABM"]
[Thu Apr 23 09:55:01.873292 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 185.192.71.30:30939] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:02.207680 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.30:30939] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ael79r6vRb9j6psK2Zb9UwAAAgs"]
[Thu Apr 23 09:55:02.847319 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 91.230.225.14:37609] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:03.437771 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 91.230.225.14:37609] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:04.021949 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.14:37609] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ael7-IV5EysYcTLjmwh4GwAAAdM"]
[Thu Apr 23 09:55:04.868438 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 185.192.71.38:46113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:05.153257 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 185.192.71.38:46113] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:05.449845 2026] [:error] [pid 43083:tid 43090] [client 185.192.71.38:46113] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ael7-TC5hrvNXosL83IVjQAAAMU"]
[Thu Apr 23 09:55:06.007718 2026] [:error] [pid 25635:tid 25663] [client 91.230.225.207:43581] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ael7-sRxv6UsgRGKB3L5EgAAARg"]
[Thu Apr 23 09:55:06.577631 2026] [proxy_fcgi:error] [pid 64967:tid 64985] [client 91.230.225.21:31637] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:06.864342 2026] [proxy_fcgi:error] [pid 64967:tid 64990] [client 91.230.225.21:31637] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:07.431337 2026] [:error] [pid 64967:tid 64985] [client 91.230.225.21:31637] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ael7-4AV4GfOOdX8QzovwQAAAZA"]
[Thu Apr 23 09:55:08.008306 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 91.230.225.199:24223] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:08.645301 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 91.230.225.199:24223] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:08.918153 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.199:24223] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ael7_L6vRb9j6psK2Zb9lwAAAhc"]
[Thu Apr 23 09:55:09.762212 2026] [:error] [pid 42971:tid 42990] [client 185.192.71.37:65437] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/db.php"] [unique_id "ael7_TEP2_5RswrH8bHZpAAAAAQ"]
[Thu Apr 23 09:55:10.303697 2026] [:error] [pid 64967:tid 64993] [client 91.230.225.19:27625] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ael7_oAV4GfOOdX8Qzov4gAAAZg"]
[Thu Apr 23 09:55:10.855691 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.27:58627] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ael7_r6vRb9j6psK2Zb9pAAAAgs"]
[Thu Apr 23 09:55:11.398636 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.22:23015] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ael7_4V5EysYcTLjmwh46QAAAdY"]
[Thu Apr 23 09:55:11.963688 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.208:55269] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ael7_4V5EysYcTLjmwh5AwAAAck"]
[Thu Apr 23 09:55:12.502914 2026] [:error] [pid 59700:tid 59723] [client 185.192.71.29:55999] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ael8AJXyGZJFeAIDWtmTLgAAAVU"]
[Thu Apr 23 09:55:13.661633 2026] [:error] [pid 25635:tid 25653] [client 185.192.71.39:41489] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ael8AcRxv6UsgRGKB3L5jwAAAQ4"]
[Thu Apr 23 09:55:14.211462 2026] [:error] [pid 65000:tid 65030] [client 91.230.225.199:63097] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ael8Ar6vRb9j6psK2Zb9yQAAAgE"]
[Thu Apr 23 09:55:14.760980 2026] [:error] [pid 42972:tid 43027] [client 91.230.225.197:61985] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ael8AsOAb-3sOknsk4dDVAAAAEs"]
[Thu Apr 23 09:55:15.307578 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.195:55655] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ael8A4V5EysYcTLjmwh5WQAAAdc"]
[Thu Apr 23 09:55:15.870727 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.22:50717] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ael8A76vRb9j6psK2Zb99gAAAhc"]
[Thu Apr 23 09:55:17.466876 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 91.230.225.206:57201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:18.342524 2026] [:error] [pid 43083:tid 43095] [client 91.230.225.206:57201] [client 91.230.225.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.206, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ael8BjC5hrvNXosL83IWOAAAAMo"]
[Thu Apr 23 09:55:19.833096 2026] [:error] [pid 43083:tid 43097] [client 91.230.225.206:57201] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ael8BzC5hrvNXosL83IWXQAAAMw"]
[Thu Apr 23 09:55:20.982339 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:21.295323 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:22.447338 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:22.738302 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:23.903542 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:24.189847 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:24.478310 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:24.762998 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 91.230.225.21:31613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:25.050068 2026] [:error] [pid 59700:tid 59721] [client 91.230.225.21:31613] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ael8DZXyGZJFeAIDWtmTjgAAAVM"]
[Thu Apr 23 09:55:25.622310 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.198:54169] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ael8DYV5EysYcTLjmwh6BQAAAcU"]
[Thu Apr 23 09:55:26.179915 2026] [:error] [pid 64967:tid 64970] [client 185.192.71.22:54001] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ael8DoAV4GfOOdX8QzowswAAAYE"]
[Thu Apr 23 09:55:27.003377 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 185.192.71.35:46743] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:27.301290 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 185.192.71.35:46743] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:27.848297 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 185.192.71.35:46743] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:28.394830 2026] [:error] [pid 59700:tid 59712] [client 185.192.71.35:46743] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ael8EJXyGZJFeAIDWtmTuQAAAUo"]
[Thu Apr 23 09:55:28.950478 2026] [:error] [pid 42971:tid 42997] [client 185.192.71.31:51431] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ael8EDEP2_5RswrH8bHaQQAAAAs"]
[Thu Apr 23 09:55:29.520612 2026] [:error] [pid 59700:tid 59709] [client 185.192.71.25:39629] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ael8EZXyGZJFeAIDWtmT0wAAAUc"]
[Thu Apr 23 09:55:31.171188 2026] [:error] [pid 65000:tid 65032] [client 185.192.71.36:33907] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ael8E76vRb9j6psK2Zb--QAAAgM"]
[Thu Apr 23 09:55:32.008075 2026] [:error] [pid 42973:tid 43051] [client 91.230.225.14:39369] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ael8FG6I0QqmmmLTHE3x1AAAAIg"]
[Thu Apr 23 09:55:33.095432 2026] [:error] [pid 25635:tid 25639] [client 185.192.71.21:23195] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ael8FcRxv6UsgRGKB3L6WgAAAQA"]
[Thu Apr 23 09:55:35.378803 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 185.192.71.40:40527] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:35.972570 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 185.192.71.40:40527] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:37.966446 2026] [:error] [pid 59700:tid 59719] [client 185.192.71.40:40527] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ael8GZXyGZJFeAIDWtmUOQAAAVE"]
[Thu Apr 23 09:55:38.515306 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 91.230.225.11:23207] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:38.812299 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.11:23207] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/about.php"] [unique_id "ael8GoV5EysYcTLjmwh6vQAAAc0"]
[Thu Apr 23 09:55:41.054371 2026] [proxy_fcgi:error] [pid 64967:tid 64980] [client 185.192.71.32:51223] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:41.917306 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 185.192.71.32:51223] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:42.188333 2026] [:error] [pid 64967:tid 64985] [client 185.192.71.32:51223] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "ael8HoAV4GfOOdX8QzoxhgAAAZA"]
[Thu Apr 23 09:55:43.302887 2026] [:error] [pid 43083:tid 43102] [client 185.192.71.24:53339] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ael8HzC5hrvNXosL83IXjAAAANE"]
[Thu Apr 23 09:55:44.197301 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.12:54745] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:45.034476 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.12:54745] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ael8Ib6vRb9j6psK2Zb_4gAAAhc"]
[Thu Apr 23 09:55:46.745379 2026] [:error] [pid 42972:tid 43029] [client 185.192.71.31:32573] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ael8IsOAb-3sOknsk4dE8gAAAE0"]
[Thu Apr 23 09:55:47.328306 2026] [proxy_fcgi:error] [pid 43083:tid 43104] [client 91.230.225.11:51939] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:47.637380 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 91.230.225.11:51939] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:47.929723 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.11:51939] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ael8IzC5hrvNXosL83IXugAAANI"]
[Thu Apr 23 09:55:49.642575 2026] [:error] [pid 59700:tid 59709] [client 185.192.71.35:64811] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ael8JZXyGZJFeAIDWtmUyQAAAUc"]
[Thu Apr 23 09:55:51.127362 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 185.192.71.32:21093] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:51.691178 2026] [:error] [pid 42973:tid 43060] [client 185.192.71.32:21093] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ael8J26I0QqmmmLTHE3yjwAAAJE"]
[Thu Apr 23 09:55:52.250223 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 185.192.71.40:55631] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:53.392982 2026] [proxy_fcgi:error] [pid 42971:tid 42993] [client 185.192.71.40:55631] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:53.688018 2026] [:error] [pid 42971:tid 43003] [client 185.192.71.40:55631] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ael8KTEP2_5RswrH8bHb1gAAABE"]
[Thu Apr 23 09:55:54.785831 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 91.230.225.19:48337] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:55.325589 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.19:48337] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael8K5XyGZJFeAIDWtmVIQAAAUs"]
[Thu Apr 23 09:55:56.988669 2026] [:error] [pid 59700:tid 59712] [client 91.230.225.197:59535] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ael8LJXyGZJFeAIDWtmVMAAAAUo"]
[Thu Apr 23 09:55:58.850303 2026] [:error] [pid 59700:tid 59709] [client 91.230.225.208:43837] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ael8LpXyGZJFeAIDWtmVSQAAAUc"]
[Thu Apr 23 09:55:59.970499 2026] [:error] [pid 64967:tid 64989] [client 91.230.225.195:41651] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "ael8L4AV4GfOOdX8QzoySwAAAZQ"]
[Thu Apr 23 09:56:01.687037 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.10:57921] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ael8MYAV4GfOOdX8QzoybAAAAZE"]
[Thu Apr 23 09:56:02.569600 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 185.192.71.28:22735] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:04.024312 2026] [:error] [pid 42972:tid 43021] [client 185.192.71.28:22735] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "ael8NMOAb-3sOknsk4dFnQAAAEU"]
[Thu Apr 23 09:56:06.129679 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.205:21381] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "ael8NsOAb-3sOknsk4dF0AAAAEo"]
[Thu Apr 23 09:56:07.697344 2026] [:error] [pid 42972:tid 43030] [client 185.192.71.35:56653] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "ael8N8OAb-3sOknsk4dF6gAAAE4"]
[Thu Apr 23 09:56:08.239384 2026] [:error] [pid 65000:tid 65047] [client 185.192.71.36:60703] [client 185.192.71.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/include/install.php"] [unique_id "ael8OL6vRb9j6psK2ZYBFQAAAg4"]
[Thu Apr 23 09:56:09.105288 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 185.92.25.114:23699] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:09.395164 2026] [:error] [pid 64998:tid 65007] [client 185.92.25.114:23699] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ael8OYV5EysYcTLjmwh9FwAAAcU"]
[Thu Apr 23 09:56:16.721052 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.17:53173] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "ael8QIAV4GfOOdX8QzozNQAAAYA"]
[Thu Apr 23 09:56:19.767552 2026] [:error] [pid 65000:tid 65032] [client 91.230.225.209:40295] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "ael8Q76vRb9j6psK2ZYBrwAAAgM"]
[Thu Apr 23 09:56:20.624805 2026] [proxy_fcgi:error] [pid 64967:tid 64981] [client 91.230.225.206:60145] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:20.898567 2026] [:error] [pid 64967:tid 64971] [client 91.230.225.206:60145] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "ael8RIAV4GfOOdX8QzozVAAAAYI"]
[Thu Apr 23 09:56:22.003325 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.25:61471] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "ael8RoV5EysYcTLjmwh-OgAAAdI"]
[Thu Apr 23 09:56:22.838196 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.37:62397] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/as.php"] [unique_id "ael8Rr6vRb9j6psK2ZYBzQAAAhc"]
[Thu Apr 23 09:56:23.748384 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.14:28477] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "ael8R4V5EysYcTLjmwh-dAAAAc4"]
[Thu Apr 23 09:56:24.275685 2026] [:error] [pid 25635:tid 25641] [client 91.230.225.22:42647] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/install.php"] [unique_id "ael8SMRxv6UsgRGKB3L8rwAAAQI"]
[Thu Apr 23 09:56:24.813508 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.13:42063] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "ael8SIV5EysYcTLjmwh-lQAAAdQ"]
[Thu Apr 23 09:56:27.026187 2026] [:error] [pid 64998:tid 65016] [client 185.192.71.39:46473] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "ael8S4V5EysYcTLjmwh-4wAAAc4"]
[Thu Apr 23 09:56:28.435700 2026] [:error] [pid 25635:tid 25663] [client 185.192.71.28:63553] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "ael8TMRxv6UsgRGKB3L8-gAAARg"]
[Thu Apr 23 09:56:37.448985 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 91.230.225.14:40553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:37.734585 2026] [:error] [pid 64967:tid 64992] [client 91.230.225.14:40553] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "ael8VYAV4GfOOdX8Qzoz_wAAAZc"]
[Thu Apr 23 09:56:38.841250 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.205:30339] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "ael8VoV5EysYcTLjmwiAHQAAAcc"]
[Thu Apr 23 09:56:39.408400 2026] [proxy_fcgi:error] [pid 64967:tid 64977] [client 185.192.71.37:55905] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:40.849072 2026] [:error] [pid 64967:tid 64975] [client 185.192.71.37:55905] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "ael8WIAV4GfOOdX8Qzo0KgAAAYY"]
[Thu Apr 23 09:56:41.955836 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.209:50977] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "ael8WYV5EysYcTLjmwiAawAAAcg"]
[Thu Apr 23 09:56:42.776336 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.28:47889] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "ael8Wm6I0QqmmmLTHE30zQAAAJU"]
[Thu Apr 23 09:56:44.674329 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 91.230.225.19:22437] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:44.942383 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.19:22437] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "ael8XMOAb-3sOknsk4dHtgAAAEk"]
[Thu Apr 23 09:56:47.733149 2026] [:error] [pid 65000:tid 65040] [client 91.230.225.196:41413] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "ael8X76vRb9j6psK2ZYDKgAAAgc"]
[Thu Apr 23 09:56:48.304868 2026] [:error] [pid 64998:tid 65003] [client 91.230.225.196:33051] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "ael8YIV5EysYcTLjmwiA8gAAAcE"]
[Thu Apr 23 09:56:49.667570 2026] [:error] [pid 42972:tid 43029] [client 91.230.225.10:34875] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "ael8YcOAb-3sOknsk4dIBwAAAE0"]
[Thu Apr 23 09:56:50.206619 2026] [:error] [pid 64967:tid 64988] [client 185.192.71.27:62433] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael8YoAV4GfOOdX8Qzo0XwAAAZM"]
[Thu Apr 23 09:56:52.402294 2026] [:error] [pid 64967:tid 64993] [client 185.192.71.33:64541] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "ael8ZIAV4GfOOdX8Qzo0hAAAAZg"]
[Thu Apr 23 09:56:53.971820 2026] [:error] [pid 64998:tid 65026] [client 185.192.71.34:52973] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "ael8ZYV5EysYcTLjmwiBowAAAdg"]
[Thu Apr 23 09:56:54.505849 2026] [:error] [pid 42971:tid 43008] [client 91.230.225.22:36959] [client 91.230.225.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.22, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ael8ZjEP2_5RswrH8bHeCgAAABY"]
[Thu Apr 23 09:56:54.533335 2026] [proxy_fcgi:error] [pid 42971:tid 43008] [client 91.230.225.22:36959] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:54.803401 2026] [:error] [pid 42971:tid 42987] [client 91.230.225.22:36959] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "ael8ZjEP2_5RswrH8bHeEgAAAAE"]
[Thu Apr 23 09:56:55.645501 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 91.230.225.206:43257] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:56:55.912593 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.206:43257] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ael8Z4V5EysYcTLjmwiBuQAAAcs"]
[Thu Apr 23 09:56:56.456671 2026] [:error] [pid 65000:tid 65042] [client 91.230.225.195:64443] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/network.php"] [unique_id "ael8aL6vRb9j6psK2ZYDcgAAAgk"]
[Thu Apr 23 09:56:57.005409 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.24:56491] [client 185.192.71.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/page.php"] [unique_id "ael8aTEP2_5RswrH8bHeLwAAAAg"]
[Thu Apr 23 09:56:58.033300 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 185.192.71.22:28629] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:00.422810 2026] [:error] [pid 25635:tid 25652] [client 185.192.71.22:28629] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "ael8bMRxv6UsgRGKB3L-0AAAAQ0"]
[Thu Apr 23 09:57:01.050514 2026] [:error] [pid 59700:tid 59722] [client 91.230.225.202:48485] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "ael8bZXyGZJFeAIDWtmXVAAAAVQ"]
[Thu Apr 23 09:57:02.408524 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.35:35273] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "ael8br6vRb9j6psK2ZYDwgAAAhc"]
[Thu Apr 23 09:57:05.439246 2026] [:error] [pid 59700:tid 59721] [client 91.230.225.24:56555] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "ael8cZXyGZJFeAIDWtmXcAAAAVM"]
[Thu Apr 23 09:57:08.865306 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 185.192.71.24:42745] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:09.143528 2026] [:error] [pid 59700:tid 59710] [client 185.192.71.24:42745] [client 185.192.71.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.24, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "ael8dZXyGZJFeAIDWtmXlwAAAUg"]
[Thu Apr 23 09:57:09.714429 2026] [:error] [pid 59700:tid 59722] [client 185.192.71.24:42745] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "ael8dZXyGZJFeAIDWtmXogAAAVQ"]
[Thu Apr 23 09:57:11.096979 2026] [:error] [pid 64967:tid 64984] [client 185.192.71.30:46139] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "ael8d4AV4GfOOdX8Qzo1DwAAAY8"]
[Thu Apr 23 09:57:11.647314 2026] [proxy_fcgi:error] [pid 42971:tid 43002] [client 91.230.225.205:47045] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:11.924784 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.205:47045] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "ael8dzEP2_5RswrH8bHeqwAAABU"]
[Thu Apr 23 09:57:12.479163 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.202:65271] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "ael8eIV5EysYcTLjmwiCyAAAAcg"]
[Thu Apr 23 09:57:13.052211 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 91.230.225.13:36723] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:13.903743 2026] [:error] [pid 25635:tid 25650] [client 91.230.225.13:36723] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "ael8ecRxv6UsgRGKB3L_QgAAAQs"]
[Thu Apr 23 09:57:15.001446 2026] [:error] [pid 43083:tid 43109] [client 185.192.71.34:47715] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ael8ezC5hrvNXosL83Ib8AAAANg"]
[Thu Apr 23 09:57:15.577532 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 185.192.71.21:61495] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:16.203372 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 185.192.71.21:61495] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:16.812185 2026] [:error] [pid 42971:tid 42993] [client 185.192.71.21:61495] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "ael8fDEP2_5RswrH8bHe4gAAAAc"]
[Thu Apr 23 09:57:17.351465 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.14:29733] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "ael8fYV5EysYcTLjmwiDQgAAAdQ"]
[Thu Apr 23 09:57:18.153816 2026] [:error] [pid 42971:tid 42998] [client 91.230.225.18:59015] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/count.php"] [unique_id "ael8fjEP2_5RswrH8bHe-gAAAAw"]
[Thu Apr 23 09:57:19.781657 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 91.230.225.197:38855] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:21.503687 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.197:38855] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "ael8gYV5EysYcTLjmwiDkgAAAcM"]
[Thu Apr 23 09:57:22.701592 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.11:40999] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||stratapluswa.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "stratapluswa.com.au"] [uri "/images/stories/themes.php"] [unique_id "ael8goV5EysYcTLjmwiDtQAAAdI"]
[Thu Apr 23 09:57:22.972455 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.11:40999] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "ael8goV5EysYcTLjmwiDvAAAAcM"]
[Thu Apr 23 09:57:24.100913 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.23:55493] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "ael8hJXyGZJFeAIDWtmYkwAAAUs"]
[Thu Apr 23 09:57:24.637017 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.17:30461] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "ael8hIV5EysYcTLjmwiD2gAAAdU"]
[Thu Apr 23 09:57:25.735302 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 91.230.225.14:42849] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:26.846694 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.14:42849] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "ael8hoV5EysYcTLjmwiEFgAAAcM"]
[Thu Apr 23 09:57:27.998466 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.30:39659] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "ael8h8OAb-3sOknsk4dJ8gAAAFE"]
[Thu Apr 23 09:57:28.867257 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.22:40767] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "ael8iIV5EysYcTLjmwiEQgAAAdM"]
[Thu Apr 23 09:57:29.446842 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 185.192.71.38:24549] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:30.903336 2026] [:error] [pid 43083:tid 43101] [client 185.192.71.38:24549] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "ael8ijC5hrvNXosL83Ic2gAAANA"]
[Thu Apr 23 09:57:31.437100 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.31:22331] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/colour.php"] [unique_id "ael8izEP2_5RswrH8bHfmwAAAAM"]
[Thu Apr 23 09:57:31.979662 2026] [proxy_fcgi:error] [pid 64967:tid 64980] [client 185.192.71.33:58959] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:32.249590 2026] [:error] [pid 64967:tid 64988] [client 185.192.71.33:58959] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "ael8jIAV4GfOOdX8Qzo1zgAAAZM"]
[Thu Apr 23 09:57:39.883643 2026] [:error] [pid 43083:tid 43098] [client 91.230.225.209:48715] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "ael8kzC5hrvNXosL83IdbgAAAM0"]
[Thu Apr 23 09:57:40.984201 2026] [:error] [pid 64967:tid 64984] [client 91.230.225.198:31551] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "ael8lIAV4GfOOdX8Qzo2JwAAAY8"]
[Thu Apr 23 09:57:42.117326 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.10:40765] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "ael8loAV4GfOOdX8Qzo2PgAAAYc"]
[Thu Apr 23 09:57:42.675730 2026] [:error] [pid 42973:tid 43067] [client 91.230.225.204:27143] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "ael8lm6I0QqmmmLTHE33QgAAAJg"]
[Thu Apr 23 09:57:44.104297 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 91.230.225.13:31095] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:44.383108 2026] [:error] [pid 65000:tid 65043] [client 91.230.225.13:31095] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "ael8mL6vRb9j6psK2ZYGMwAAAgo"]
[Thu Apr 23 09:57:45.485420 2026] [:error] [pid 64967:tid 64982] [client 185.192.71.21:41803] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "ael8mYAV4GfOOdX8Qzo2cwAAAY0"]
[Thu Apr 23 09:57:46.031642 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 91.230.225.207:60185] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:46.851659 2026] [:error] [pid 65000:tid 65046] [client 91.230.225.207:60185] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "ael8mr6vRb9j6psK2ZYGVQAAAg0"]
[Thu Apr 23 09:57:47.411873 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.24:22049] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "ael8mzC5hrvNXosL83Id4QAAANI"]
[Thu Apr 23 09:57:47.967474 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.197:31009] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "ael8m4V5EysYcTLjmwiFigAAAcg"]
[Thu Apr 23 09:57:48.553811 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 91.230.225.209:49787] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:49.131720 2026] [:error] [pid 65000:tid 65046] [client 91.230.225.209:49787] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "ael8nb6vRb9j6psK2ZYGYwAAAg0"]
[Thu Apr 23 09:57:50.736709 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 91.230.225.19:34571] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:57:51.289315 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.19:34571] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "ael8n76vRb9j6psK2ZYGlAAAAhE"]
[Thu Apr 23 09:57:52.948885 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.14:54891] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "ael8oG6I0QqmmmLTHE338AAAAII"]
[Thu Apr 23 09:57:53.768638 2026] [:error] [pid 43083:tid 43107] [client 91.230.225.18:44537] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ael8oTC5hrvNXosL83IeIAAAANY"]
[Thu Apr 23 09:57:54.302087 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.198:46431] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "ael8osOAb-3sOknsk4dLeQAAAEI"]
[Thu Apr 23 09:57:55.387198 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.200:48411] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "ael8o26I0QqmmmLTHE34DAAAAII"]
[Thu Apr 23 09:57:56.208077 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.20:43823] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "ael8pIV5EysYcTLjmwiGBwAAAdM"]
[Thu Apr 23 09:57:56.768050 2026] [:error] [pid 42973:tid 43053] [client 91.230.225.196:49835] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ael8pG6I0QqmmmLTHE34HgAAAIo"]
[Thu Apr 23 09:57:57.308556 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.19:27041] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "ael8pTC5hrvNXosL83IeSQAAANA"]
[Thu Apr 23 09:57:59.516491 2026] [:error] [pid 42972:tid 43024] [client 91.230.225.17:22577] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "ael8p8OAb-3sOknsk4dLngAAAEg"]
[Thu Apr 23 09:58:00.656886 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.13:23093] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "ael8qIV5EysYcTLjmwiGPwAAAcs"]
[Thu Apr 23 09:58:01.507778 2026] [:error] [pid 64967:tid 64977] [client 185.192.71.22:22769] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "ael8qYAV4GfOOdX8Qzo3CgAAAYg"]
[Thu Apr 23 09:58:02.361847 2026] [:error] [pid 42972:tid 43022] [client 91.230.225.200:61539] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "ael8qsOAb-3sOknsk4dLswAAAEY"]
[Thu Apr 23 09:58:03.480294 2026] [proxy_fcgi:error] [pid 42972:tid 43018] [client 185.192.71.25:40235] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:04.619769 2026] [:error] [pid 42972:tid 43028] [client 185.192.71.25:40235] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "ael8rMOAb-3sOknsk4dL5QAAAEw"]
[Thu Apr 23 09:58:05.159696 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.203:40555] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "ael8rYV5EysYcTLjmwiGqgAAAck"]
[Thu Apr 23 09:58:07.047367 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 185.192.71.21:38559] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:07.317058 2026] [:error] [pid 42971:tid 43003] [client 185.192.71.21:38559] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "ael8rzEP2_5RswrH8bHhVwAAABE"]
[Thu Apr 23 09:58:08.990701 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.30:50981] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "ael8sIV5EysYcTLjmwiHEAAAAcY"]
[Thu Apr 23 09:58:09.812285 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 91.230.225.205:22273] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:10.088907 2026] [:error] [pid 59700:tid 59705] [client 91.230.225.205:22273] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "ael8spXyGZJFeAIDWtma1wAAAUM"]
[Thu Apr 23 09:58:11.210818 2026] [:error] [pid 42972:tid 43016] [client 91.230.225.205:63335] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "ael8s8OAb-3sOknsk4dMEwAAAEA"]
[Thu Apr 23 09:58:11.775347 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 91.230.225.202:42117] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:12.046847 2026] [:error] [pid 43083:tid 43093] [client 91.230.225.202:42117] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "ael8tDC5hrvNXosL83IfAAAAAMg"]
[Thu Apr 23 09:58:12.894448 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.208:62923] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "ael8tDC5hrvNXosL83IfEAAAAMU"]
[Thu Apr 23 09:58:14.303325 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 91.230.225.199:22041] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:14.587419 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.199:22041] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "ael8toV5EysYcTLjmwiHggAAAcY"]
[Thu Apr 23 09:58:17.114675 2026] [:error] [pid 42972:tid 43032] [client 91.230.225.197:46035] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "ael8ucOAb-3sOknsk4dMVQAAAFA"]
[Thu Apr 23 09:58:17.669314 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 185.192.71.23:48595] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:17.953960 2026] [:error] [pid 65000:tid 65042] [client 185.192.71.23:48595] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "ael8ub6vRb9j6psK2ZYIBwAAAgk"]
[Thu Apr 23 09:58:18.496041 2026] [:error] [pid 25635:tid 25645] [client 185.192.71.26:36923] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "ael8usRxv6UsgRGKB3ICTQAAAQY"]
[Thu Apr 23 09:58:19.028489 2026] [proxy_fcgi:error] [pid 42971:tid 43010] [client 91.230.225.17:34655] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:19.630982 2026] [:error] [pid 42971:tid 42999] [client 91.230.225.17:34655] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "ael8uzEP2_5RswrH8bHhwwAAAA0"]
[Thu Apr 23 09:58:20.164671 2026] [:error] [pid 42971:tid 42992] [client 91.230.225.197:21445] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "ael8vDEP2_5RswrH8bHhzAAAAAY"]
[Thu Apr 23 09:58:22.367633 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.24:36499] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "ael8vsOAb-3sOknsk4dMgQAAAEk"]
[Thu Apr 23 09:58:23.967252 2026] [:error] [pid 65000:tid 65046] [client 185.192.71.32:22081] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "ael8v76vRb9j6psK2ZYIPwAAAg0"]
[Thu Apr 23 09:58:24.776830 2026] [:error] [pid 64998:tid 65016] [client 185.192.71.29:31269] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/log.php"] [unique_id "ael8wIV5EysYcTLjmwiH4wAAAc4"]
[Thu Apr 23 09:58:25.317152 2026] [:error] [pid 42972:tid 43016] [client 91.230.225.12:39355] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "ael8wcOAb-3sOknsk4dMkwAAAEA"]
[Thu Apr 23 09:58:25.848267 2026] [:error] [pid 64967:tid 64977] [client 91.230.225.14:46629] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "ael8wYAV4GfOOdX8Qzo3xAAAAYg"]
[Thu Apr 23 09:58:29.705427 2026] [:error] [pid 64967:tid 64989] [client 185.92.25.114:35545] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/aw.php"] [unique_id "ael8xYAV4GfOOdX8Qzo32QAAAZQ"]
[Thu Apr 23 09:58:31.379649 2026] [:error] [pid 25635:tid 25639] [client 185.192.71.38:52589] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "ael8x8Rxv6UsgRGKB3IDJAAAAQA"]
[Thu Apr 23 09:58:31.921244 2026] [:error] [pid 64967:tid 64970] [client 91.230.225.16:42261] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "ael8x4AV4GfOOdX8Qzo36wAAAYE"]
[Thu Apr 23 09:58:32.734461 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 185.192.71.31:27923] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:33.008254 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.31:27923] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "ael8yTEP2_5RswrH8bHiGAAAAAw"]
[Thu Apr 23 09:58:33.544305 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.19:30033] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "ael8yYV5EysYcTLjmwiIIwAAAcM"]
[Thu Apr 23 09:58:34.633482 2026] [:error] [pid 25635:tid 25659] [client 185.192.71.39:42659] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "ael8ysRxv6UsgRGKB3IDYgAAARQ"]
[Thu Apr 23 09:58:35.166473 2026] [:error] [pid 59700:tid 59706] [client 91.230.225.10:20131] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "ael8y5XyGZJFeAIDWtmb_gAAAUQ"]
[Thu Apr 23 09:58:37.764502 2026] [:error] [pid 42972:tid 43040] [client 185.192.71.25:42339] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "ael8zcOAb-3sOknsk4dM6wAAAFg"]
[Thu Apr 23 09:58:38.311853 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.199:21159] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ael8zsOAb-3sOknsk4dM8AAAAEI"]
[Thu Apr 23 09:58:39.408302 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.205:64955] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/file.php"] [unique_id "ael8z4V5EysYcTLjmwiIogAAAcY"]
[Thu Apr 23 09:58:40.248068 2026] [:error] [pid 65000:tid 65051] [client 185.192.71.35:45787] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "ael80L6vRb9j6psK2ZYJBwAAAhI"]
[Thu Apr 23 09:58:41.071753 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.23:40107] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/load.php"] [unique_id "ael80cOAb-3sOknsk4dNDQAAAEU"]
[Thu Apr 23 09:58:41.605717 2026] [:error] [pid 43083:tid 43104] [client 91.230.225.209:42269] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "ael80TC5hrvNXosL83IgRQAAANM"]
[Thu Apr 23 09:58:42.144695 2026] [:error] [pid 59700:tid 59715] [client 91.230.225.18:41117] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "ael80pXyGZJFeAIDWtmcNwAAAU0"]
[Thu Apr 23 09:58:43.526965 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.10:24161] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "ael80zC5hrvNXosL83IgeAAAANI"]
[Thu Apr 23 09:58:44.088035 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 91.230.225.11:20819] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:44.364410 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.11:20819] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "ael81IV5EysYcTLjmwiI8QAAAcg"]
[Thu Apr 23 09:58:45.207342 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 91.230.225.16:27197] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:45.476632 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.16:27197] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "ael81cOAb-3sOknsk4dNRAAAAEU"]
[Thu Apr 23 09:58:46.055751 2026] [:error] [pid 64967:tid 64984] [client 185.192.71.24:32927] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "ael81oAV4GfOOdX8Qzo4igAAAY8"]
[Thu Apr 23 09:58:46.592618 2026] [:error] [pid 42972:tid 43031] [client 185.192.71.23:44343] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "ael81sOAb-3sOknsk4dNVwAAAE8"]
[Thu Apr 23 09:58:48.234378 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 185.192.71.23:54143] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:58:49.334389 2026] [:error] [pid 25635:tid 25642] [client 185.192.71.23:54143] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "ael82cRxv6UsgRGKB3IEIQAAAQM"]
[Thu Apr 23 09:58:50.162573 2026] [:error] [pid 42973:tid 43067] [client 185.192.71.29:38739] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "ael82m6I0QqmmmLTHE36fgAAAJg"]
[Thu Apr 23 09:58:54.288305 2026] [:error] [pid 43083:tid 43091] [client 185.92.25.114:50599] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "ael83jC5hrvNXosL83IgxgAAAMY"]
[Thu Apr 23 09:58:54.822456 2026] [:error] [pid 64967:tid 64993] [client 91.230.225.22:25077] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "ael83oAV4GfOOdX8Qzo5GQAAAZg"]
[Thu Apr 23 09:58:55.355120 2026] [:error] [pid 42972:tid 43024] [client 91.230.225.16:48703] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "ael838OAb-3sOknsk4dNowAAAEg"]
[Thu Apr 23 09:58:56.621987 2026] [:error] [pid 64967:tid 64978] [client 185.192.71.30:32573] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "ael84IAV4GfOOdX8Qzo5RQAAAYk"]
[Thu Apr 23 09:58:59.429432 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.15:62201] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "ael8476vRb9j6psK2ZYJngAAAhA"]
[Thu Apr 23 09:59:01.152197 2026] [:error] [pid 43083:tid 43108] [client 185.192.71.21:33243] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "ael85TC5hrvNXosL83Ig9QAAANc"]
[Thu Apr 23 09:59:02.246655 2026] [:error] [pid 65000:tid 65045] [client 185.192.71.28:58613] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "ael85r6vRb9j6psK2ZYJrAAAAgw"]
[Thu Apr 23 09:59:02.775419 2026] [:error] [pid 64998:tid 65012] [client 185.192.71.29:33629] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "ael85oV5EysYcTLjmwiKCgAAAco"]
[Thu Apr 23 09:59:04.895507 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.16:28857] [client 91.230.225.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/images/archive.php"] [unique_id "ael86MOAb-3sOknsk4dOCwAAAEo"]
[Thu Apr 23 09:59:08.026137 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.18:47269] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "ael87JXyGZJFeAIDWtmdeQAAAUs"]
[Thu Apr 23 09:59:08.562584 2026] [:error] [pid 42971:tid 42996] [client 91.230.225.199:32955] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "ael87DEP2_5RswrH8bHjggAAAAo"]
[Thu Apr 23 09:59:09.096373 2026] [:error] [pid 59700:tid 59726] [client 185.192.71.21:23073] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "ael87ZXyGZJFeAIDWtmdhQAAAVg"]
[Thu Apr 23 09:59:09.898196 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.200:57649] [client 91.230.225.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.200, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "ael87b6vRb9j6psK2ZYJ8AAAAg4"]
[Thu Apr 23 09:59:10.469963 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.200:57649] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ael87r6vRb9j6psK2ZYJ-AAAAhU"]
[Thu Apr 23 09:59:11.014440 2026] [:error] [pid 42972:tid 43038] [client 185.192.71.32:65401] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "ael878OAb-3sOknsk4dOSwAAAFY"]
[Thu Apr 23 09:59:11.554797 2026] [:error] [pid 59700:tid 59722] [client 91.230.225.200:42497] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "ael875XyGZJFeAIDWtmdogAAAVQ"]
[Thu Apr 23 09:59:13.768309 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.37:45207] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "ael88ZXyGZJFeAIDWtmdwQAAAUA"]
[Thu Apr 23 09:59:16.342710 2026] [:error] [pid 43083:tid 43098] [client 91.230.225.207:35643] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "ael89DC5hrvNXosL83IhfQAAAM0"]
[Thu Apr 23 09:59:17.476861 2026] [:error] [pid 64998:tid 65010] [client 185.192.71.34:20847] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "ael89YV5EysYcTLjmwiKzQAAAcg"]
[Thu Apr 23 09:59:21.427908 2026] [:error] [pid 42972:tid 43038] [client 185.192.71.35:54827] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ael8-cOAb-3sOknsk4dOnQAAAFY"]
[Thu Apr 23 09:59:21.959326 2026] [:error] [pid 64998:tid 65004] [client 91.230.225.22:29315] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "ael8-YV5EysYcTLjmwiLHgAAAcI"]
[Thu Apr 23 09:59:22.498900 2026] [:error] [pid 25635:tid 25647] [client 185.192.71.34:21181] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "ael8-sRxv6UsgRGKB3IE3AAAAQg"]
[Thu Apr 23 09:59:23.043312 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.204:51837] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "ael8-76vRb9j6psK2ZYKfwAAAg8"]
[Thu Apr 23 09:59:24.139562 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.32:21985] [client 185.192.71.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "ael8_IV5EysYcTLjmwiLRQAAAdA"]
[Thu Apr 23 09:59:24.937497 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.10:55055] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "ael8_G6I0QqmmmLTHE378AAAAI8"]
[Thu Apr 23 09:59:25.474688 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.14:60783] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "ael8_W6I0QqmmmLTHE379AAAAIA"]
[Thu Apr 23 09:59:27.383711 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.14:25071] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "ael8_26I0QqmmmLTHE38AwAAAIA"]
[Thu Apr 23 09:59:29.005383 2026] [:error] [pid 25635:tid 25644] [client 185.192.71.34:57559] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "ael9AcRxv6UsgRGKB3IFIAAAAQU"]
[Thu Apr 23 09:59:29.548809 2026] [:error] [pid 42971:tid 42996] [client 185.192.71.40:22307] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "ael9ATEP2_5RswrH8bHkHwAAAAo"]
[Thu Apr 23 09:59:36.514705 2026] [:error] [pid 25635:tid 25645] [client 91.230.225.206:25129] [client 91.230.225.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/"] [unique_id "ael9CMRxv6UsgRGKB3IFSwAAAQY"]
[Thu Apr 23 09:59:37.358462 2026] [autoindex:error] [pid 42971:tid 43007] [client 91.230.225.10:40577] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:59:46.284586 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.10:40577] [client 91.230.225.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/components/com_jea/views/form/tmpl/"] [unique_id "ael9EjEP2_5RswrH8bHkzQAAABU"]
[Thu Apr 23 09:59:57.512012 2026] [autoindex:error] [pid 43083:tid 43100] [client 91.230.225.195:32209] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:00:43.077729 2026] [:error] [pid 64998:tid 65019] [client 91.230.225.23:20537] [client 91.230.225.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/hideo/"] [unique_id "ael9S4V5EysYcTLjmwiOcgAAAdE"]
[Thu Apr 23 10:11:08.832652 2026] [:error] [pid 65000:tid 65053] [client 74.241.244.158:11341] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ael_vL6vRb9j6psK2ZYhcgAAAhQ"]
[Thu Apr 23 10:11:09.488615 2026] [:error] [pid 59700:tid 59717] [client 74.241.244.158:11346] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ael_vZXyGZJFeAIDWtmo8QAAAU8"]
[Thu Apr 23 10:11:10.275762 2026] [:error] [pid 43083:tid 43087] [client 74.241.244.158:11329] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ael_vjC5hrvNXosL83IrbAAAAMI"]
[Thu Apr 23 10:11:10.916890 2026] [:error] [pid 65000:tid 65042] [client 74.241.244.158:11340] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ael_vr6vRb9j6psK2ZYhgQAAAgk"]
[Thu Apr 23 11:48:49.415370 2026] [:error] [pid 64967:tid 64984] [client 103.78.208.66:65147] [client 103.78.208.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.208.66, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aemWoYAV4GfOOdX8QzpC2gAAAY8"]
[Thu Apr 23 11:48:49.427042 2026] [proxy_fcgi:error] [pid 64967:tid 64984] [client 103.78.208.66:65147] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:02.483812 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:02.695811 2026] [proxy_fcgi:error] [pid 42973:tid 43050] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:02.953347 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:03.162480 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:03.371911 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:03.581514 2026] [proxy_fcgi:error] [pid 42973:tid 43066] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:03.793022 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:04.213845 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:04.435445 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:04.646458 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 20.151.104.6:19804] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 13:52:04.858613 2026] [:error] [pid 42973:tid 43067] [client 20.151.104.6:19804] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aemzhG6I0QqmmmLTHE13HAAAAJg"]
[Thu Apr 23 13:52:06.762576 2026] [:error] [pid 65000:tid 65038] [client 20.151.104.6:55095] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aemzhr6vRb9j6psK2ZaIlgAAAgU"]
[Thu Apr 23 13:52:11.013890 2026] [:error] [pid 59700:tid 59726] [client 20.151.104.6:64603] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aemzi5XyGZJFeAIDWtnOdgAAAVg"]
[Thu Apr 23 13:52:12.676413 2026] [:error] [pid 42973:tid 43050] [client 20.151.104.6:64632] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aemzjG6I0QqmmmLTHE13IQAAAIc"]
[Thu Apr 23 14:18:10.817339 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:11.092799 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:11.407980 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:11.683992 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:11.989859 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:12.279547 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:12.558345 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:12.834295 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:13.109299 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 20.215.57.60:6568] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:18:13.825037 2026] [:error] [pid 65000:tid 65051] [client 20.215.57.60:6568] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aem5pb6vRb9j6psK2ZaR6gAAAhI"]
[Thu Apr 23 14:18:14.397576 2026] [:error] [pid 64998:tid 65016] [client 20.215.57.60:30395] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aem5poV5EysYcTLjmwjQCgAAAc4"]
[Thu Apr 23 14:18:14.997722 2026] [:error] [pid 42972:tid 43021] [client 20.215.57.60:29854] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aem5psOAb-3sOknsk4eb5AAAAEU"]
[Thu Apr 23 14:18:15.540182 2026] [:error] [pid 42972:tid 43022] [client 20.215.57.60:29886] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "aem5p8OAb-3sOknsk4eb5QAAAEY"]
[Thu Apr 23 14:18:16.086385 2026] [:error] [pid 42972:tid 43039] [client 20.215.57.60:30382] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aem5qMOAb-3sOknsk4eb5wAAAFc"]
[Thu Apr 23 14:18:16.653790 2026] [:error] [pid 42973:tid 43046] [client 20.215.57.60:30361] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aem5qG6I0QqmmmLTHE2HCQAAAIM"]
[Thu Apr 23 14:18:21.004656 2026] [:error] [pid 59700:tid 59724] [client 20.215.57.60:6361] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aem5rZXyGZJFeAIDWtnSRgAAAVY"]
[Thu Apr 23 14:18:24.159151 2026] [:error] [pid 65000:tid 65037] [client 20.215.57.60:6375] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aem5sL6vRb9j6psK2ZaR7wAAAgQ"]
[Thu Apr 23 14:18:25.314989 2026] [:error] [pid 42972:tid 43030] [client 20.215.57.60:30434] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aem5scOAb-3sOknsk4eb7wAAAE4"]
[Thu Apr 23 14:18:26.351835 2026] [:error] [pid 65000:tid 65051] [client 20.215.57.60:29850] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aem5sr6vRb9j6psK2ZaR8wAAAhI"]
[Thu Apr 23 14:18:27.092780 2026] [:error] [pid 65000:tid 65029] [client 20.215.57.60:9334] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aem5s76vRb9j6psK2ZaR9gAAAgA"]
[Thu Apr 23 14:18:27.728148 2026] [:error] [pid 64998:tid 65017] [client 20.215.57.60:30867] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "aem5s4V5EysYcTLjmwjQDwAAAc8"]
[Thu Apr 23 14:18:28.649814 2026] [:error] [pid 64998:tid 65013] [client 20.215.57.60:30870] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "aem5tIV5EysYcTLjmwjQEwAAAcs"]
[Thu Apr 23 14:18:29.984797 2026] [:error] [pid 42971:tid 42986] [client 20.215.57.60:6347] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "aem5tTEP2_5RswrH8bH_egAAAAA"]
[Thu Apr 23 14:18:30.742062 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:6363] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "aem5tm6I0QqmmmLTHE2HRQAAAI0"]
[Thu Apr 23 14:18:31.803366 2026] [:error] [pid 65000:tid 65051] [client 20.215.57.60:30437] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "aem5t76vRb9j6psK2ZaR_QAAAhI"]
[Thu Apr 23 14:18:33.358169 2026] [:error] [pid 42972:tid 43026] [client 20.215.57.60:29909] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem5ucOAb-3sOknsk4eb-AAAAEo"]
[Thu Apr 23 14:18:35.226870 2026] [:error] [pid 42973:tid 43054] [client 20.215.57.60:30417] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem5u26I0QqmmmLTHE2HUAAAAIs"]
[Thu Apr 23 14:18:37.688690 2026] [:error] [pid 42971:tid 42998] [client 20.215.57.60:6358] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem5vTEP2_5RswrH8bH_fQAAAAw"]
[Thu Apr 23 14:18:40.137557 2026] [:error] [pid 42973:tid 43047] [client 20.215.57.60:31349] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem5wG6I0QqmmmLTHE2HZgAAAIQ"]
[Thu Apr 23 14:18:43.336630 2026] [:error] [pid 43083:tid 43106] [client 20.215.57.60:6389] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dragonshell.php"] [unique_id "aem5wzC5hrvNXosL83JE5QAAANU"]
[Thu Apr 23 14:18:44.210819 2026] [:error] [pid 42972:tid 43037] [client 20.215.57.60:30949] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dragonshell.php"] [unique_id "aem5xMOAb-3sOknsk4ecAAAAAFU"]
[Thu Apr 23 14:18:44.788176 2026] [:error] [pid 42973:tid 43054] [client 20.215.57.60:30897] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dragonshell.php"] [unique_id "aem5xG6I0QqmmmLTHE2HcQAAAIs"]
[Thu Apr 23 14:18:45.415786 2026] [:error] [pid 42973:tid 43053] [client 20.215.57.60:29890] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dragonshell.php"] [unique_id "aem5xW6I0QqmmmLTHE2HdQAAAIo"]
[Thu Apr 23 14:18:46.009322 2026] [:error] [pid 42971:tid 43006] [client 20.215.57.60:29899] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "aem5xjEP2_5RswrH8bH_gQAAABQ"]
[Thu Apr 23 14:18:46.551104 2026] [:error] [pid 59700:tid 59725] [client 20.215.57.60:6590] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "aem5xpXyGZJFeAIDWtnSWgAAAVc"]
[Thu Apr 23 14:18:47.100502 2026] [:error] [pid 42972:tid 43035] [client 20.215.57.60:6337] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "aem5x8OAb-3sOknsk4ecAwAAAFM"]
[Thu Apr 23 14:18:47.643905 2026] [:error] [pid 65000:tid 65038] [client 20.215.57.60:29837] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "aem5x76vRb9j6psK2ZaSCwAAAgU"]
[Thu Apr 23 14:18:48.157732 2026] [:error] [pid 42973:tid 43055] [client 20.215.57.60:11351] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "aem5yG6I0QqmmmLTHE2HggAAAIw"]
[Thu Apr 23 14:18:48.729134 2026] [:error] [pid 42973:tid 43061] [client 20.215.57.60:29921] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "aem5yG6I0QqmmmLTHE2HhQAAAJI"]
[Thu Apr 23 14:18:49.251062 2026] [:error] [pid 65000:tid 65032] [client 20.215.57.60:29943] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "aem5yb6vRb9j6psK2ZaSDwAAAgM"]
[Thu Apr 23 14:18:49.825034 2026] [:error] [pid 42973:tid 43063] [client 20.215.57.60:30944] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "aem5yW6I0QqmmmLTHE2HjAAAAJQ"]
[Thu Apr 23 14:18:50.416086 2026] [:error] [pid 42973:tid 43052] [client 20.215.57.60:30910] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "aem5ym6I0QqmmmLTHE2HjgAAAIk"]
[Thu Apr 23 14:18:51.005943 2026] [:error] [pid 42973:tid 43064] [client 20.215.57.60:30358] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "aem5y26I0QqmmmLTHE2HjwAAAJU"]
[Thu Apr 23 14:18:51.989391 2026] [:error] [pid 42972:tid 43030] [client 20.215.57.60:30430] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "aem5y8OAb-3sOknsk4ecBwAAAE4"]
[Thu Apr 23 14:18:52.552109 2026] [:error] [pid 46953:tid 46976] [client 20.215.57.60:30932] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "aem5zEnlpdHh-P6wKbr1rQAAAlQ"]
[Thu Apr 23 14:18:53.122597 2026] [:error] [pid 46953:tid 46967] [client 20.215.57.60:29929] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "aem5zUnlpdHh-P6wKbr1rwAAAks"]
[Thu Apr 23 14:18:53.665091 2026] [:error] [pid 42972:tid 43033] [client 20.215.57.60:31270] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "aem5zcOAb-3sOknsk4ecDQAAAFE"]
[Thu Apr 23 14:18:54.220948 2026] [:error] [pid 64998:tid 65022] [client 20.215.57.60:31250] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "aem5zoV5EysYcTLjmwjQIQAAAdQ"]
[Thu Apr 23 14:18:54.767383 2026] [:error] [pid 65000:tid 65030] [client 20.215.57.60:11371] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "aem5zr6vRb9j6psK2ZaSGAAAAgE"]
[Thu Apr 23 14:18:55.359314 2026] [:error] [pid 65000:tid 65056] [client 20.215.57.60:30893] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aem5z76vRb9j6psK2ZaSGwAAAhc"]
[Thu Apr 23 14:18:55.890911 2026] [:error] [pid 65000:tid 65044] [client 20.215.57.60:29923] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aem5z76vRb9j6psK2ZaSHwAAAgs"]
[Thu Apr 23 14:18:56.423887 2026] [:error] [pid 42973:tid 43064] [client 20.215.57.60:30961] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aem50G6I0QqmmmLTHE2HoQAAAJU"]
[Thu Apr 23 14:18:56.979198 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:6379] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sw.php"] [unique_id "aem50G6I0QqmmmLTHE2HqAAAAI0"]
[Thu Apr 23 14:18:57.554683 2026] [:error] [pid 64998:tid 65003] [client 20.215.57.60:6534] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aem50YV5EysYcTLjmwjQIgAAAcE"]
[Thu Apr 23 14:18:58.125600 2026] [:error] [pid 65000:tid 65039] [client 20.215.57.60:31352] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aem50r6vRb9j6psK2ZaSIwAAAgY"]
[Thu Apr 23 14:18:58.745540 2026] [:error] [pid 42973:tid 43044] [client 20.215.57.60:31259] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aem50m6I0QqmmmLTHE2HtQAAAIE"]
[Thu Apr 23 14:18:59.283391 2026] [:error] [pid 42972:tid 43022] [client 20.215.57.60:11354] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "aem508OAb-3sOknsk4ecFQAAAEY"]
[Thu Apr 23 14:18:59.811907 2026] [:error] [pid 43083:tid 43101] [client 20.215.57.60:6528] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aem50zC5hrvNXosL83JE7gAAANA"]
[Thu Apr 23 14:19:00.401337 2026] [:error] [pid 42972:tid 43039] [client 20.215.57.60:31287] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aem51MOAb-3sOknsk4ecFgAAAFc"]
[Thu Apr 23 14:19:00.969402 2026] [:error] [pid 42972:tid 43017] [client 20.215.57.60:11384] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aem51MOAb-3sOknsk4ecGQAAAEE"]
[Thu Apr 23 14:19:01.500562 2026] [:error] [pid 64967:tid 64976] [client 20.215.57.60:6561] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "aem51YAV4GfOOdX8QzpNXQAAAYc"]
[Thu Apr 23 14:19:02.061722 2026] [:error] [pid 42973:tid 43048] [client 20.215.57.60:30440] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aem51m6I0QqmmmLTHE2HxAAAAIU"]
[Thu Apr 23 14:19:02.661368 2026] [:error] [pid 42971:tid 42999] [client 20.215.57.60:30947] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aem51jEP2_5RswrH8bH_gwAAAA0"]
[Thu Apr 23 14:19:03.235222 2026] [:error] [pid 42972:tid 43027] [client 20.215.57.60:7753] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aem518OAb-3sOknsk4ecHAAAAEs"]
[Thu Apr 23 14:19:03.848723 2026] [:error] [pid 25635:tid 25640] [client 20.215.57.60:6547] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sxdfrt.php"] [unique_id "aem518Rxv6UsgRGKB3IVEAAAAQE"]
[Thu Apr 23 14:19:04.377650 2026] [:error] [pid 42973:tid 43064] [client 20.215.57.60:31308] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aem52G6I0QqmmmLTHE2HxQAAAJU"]
[Thu Apr 23 14:19:04.971356 2026] [:error] [pid 59700:tid 59712] [client 20.215.57.60:31852] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aem52JXyGZJFeAIDWtnSawAAAUo"]
[Thu Apr 23 14:19:05.757881 2026] [:error] [pid 46953:tid 46963] [client 20.215.57.60:6558] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aem52UnlpdHh-P6wKbr1twAAAkc"]
[Thu Apr 23 14:19:06.412619 2026] [:error] [pid 65000:tid 65040] [client 20.215.57.60:10834] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aem52r6vRb9j6psK2ZaSUgAAAgc"]
[Thu Apr 23 14:19:07.165743 2026] [:error] [pid 65000:tid 65038] [client 20.215.57.60:8764] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aem5276vRb9j6psK2ZaSWQAAAgU"]
[Thu Apr 23 14:19:07.745489 2026] [:error] [pid 42971:tid 42996] [client 20.215.57.60:31312] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aem52zEP2_5RswrH8bH_hQAAAAo"]
[Thu Apr 23 14:19:08.326787 2026] [:error] [pid 42973:tid 43048] [client 20.215.57.60:31849] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aem53G6I0QqmmmLTHE2HxwAAAIU"]
[Thu Apr 23 14:19:08.875012 2026] [:error] [pid 42973:tid 43052] [client 20.215.57.60:8210] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aem53G6I0QqmmmLTHE2HyAAAAIk"]
[Thu Apr 23 14:19:09.426760 2026] [:error] [pid 64967:tid 64977] [client 20.215.57.60:6336] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aem53YAV4GfOOdX8QzpNYAAAAYg"]
[Thu Apr 23 14:19:09.947417 2026] [:error] [pid 65000:tid 65037] [client 20.215.57.60:31845] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aem53b6vRb9j6psK2ZaScgAAAgQ"]
[Thu Apr 23 14:19:10.508447 2026] [:error] [pid 65000:tid 65032] [client 20.215.57.60:8738] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aem53r6vRb9j6psK2ZaSdQAAAgM"]
[Thu Apr 23 14:19:11.080790 2026] [:error] [pid 65000:tid 65054] [client 20.215.57.60:7804] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "aem5376vRb9j6psK2ZaSfQAAAhU"]
[Thu Apr 23 14:19:11.616311 2026] [:error] [pid 42973:tid 43065] [client 20.215.57.60:31853] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aem5326I0QqmmmLTHE2HzgAAAJY"]
[Thu Apr 23 14:19:12.220880 2026] [:error] [pid 65000:tid 65054] [client 20.215.57.60:8752] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aem54L6vRb9j6psK2ZaShwAAAhU"]
[Thu Apr 23 14:19:12.859220 2026] [:error] [pid 65000:tid 65038] [client 20.215.57.60:31329] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "aem54L6vRb9j6psK2ZaSkwAAAgU"]
[Thu Apr 23 14:19:13.388445 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:13.647933 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:13.910581 2026] [proxy_fcgi:error] [pid 42972:tid 43024] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:14.175590 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:16.468112 2026] [proxy_fcgi:error] [pid 42972:tid 43030] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:16.735501 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:16.999949 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:17.260582 2026] [proxy_fcgi:error] [pid 42972:tid 43020] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:17.548154 2026] [proxy_fcgi:error] [pid 42972:tid 43019] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:17.808996 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 20.215.57.60:7757] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:19:18.334557 2026] [:error] [pid 42972:tid 43021] [client 20.215.57.60:7757] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem55sOAb-3sOknsk4ecOQAAAEU"]
[Thu Apr 23 14:19:18.857729 2026] [:error] [pid 64998:tid 65006] [client 20.215.57.60:6222] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem55oV5EysYcTLjmwjQNAAAAcQ"]
[Thu Apr 23 14:19:19.474386 2026] [:error] [pid 65000:tid 65051] [client 20.215.57.60:31850] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem5576vRb9j6psK2ZaSswAAAhI"]
[Thu Apr 23 14:19:20.025341 2026] [:error] [pid 42971:tid 42993] [client 20.215.57.60:31829] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem56DEP2_5RswrH8bH_iAAAAAc"]
[Thu Apr 23 14:19:20.640061 2026] [:error] [pid 59700:tid 59720] [client 20.215.57.60:7792] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aem56JXyGZJFeAIDWtnScwAAAVI"]
[Thu Apr 23 14:19:21.237520 2026] [:error] [pid 42972:tid 43029] [client 20.215.57.60:13451] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aem56cOAb-3sOknsk4ecPAAAAE0"]
[Thu Apr 23 14:19:21.847593 2026] [:error] [pid 42973:tid 43048] [client 20.215.57.60:10759] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aem56W6I0QqmmmLTHE2H7AAAAIU"]
[Thu Apr 23 14:19:22.506751 2026] [:error] [pid 65000:tid 65038] [client 20.215.57.60:8454] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amdin.php"] [unique_id "aem56r6vRb9j6psK2ZaSwAAAAgU"]
[Thu Apr 23 14:19:23.064905 2026] [:error] [pid 42972:tid 43032] [client 20.215.57.60:7774] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aem568OAb-3sOknsk4ecPwAAAFA"]
[Thu Apr 23 14:19:23.735417 2026] [:error] [pid 42972:tid 43023] [client 20.215.57.60:13861] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aem568OAb-3sOknsk4ecQgAAAEc"]
[Thu Apr 23 14:19:24.490329 2026] [:error] [pid 42972:tid 43030] [client 20.215.57.60:8026] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aem57MOAb-3sOknsk4ecRQAAAE4"]
[Thu Apr 23 14:19:25.118530 2026] [:error] [pid 42973:tid 43053] [client 20.215.57.60:31792] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/huya.php"] [unique_id "aem57W6I0QqmmmLTHE2H-AAAAIo"]
[Thu Apr 23 14:19:25.698057 2026] [:error] [pid 46953:tid 46956] [client 20.215.57.60:10872] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aem57UnlpdHh-P6wKbr1xAAAAkA"]
[Thu Apr 23 14:19:26.300793 2026] [:error] [pid 42971:tid 43007] [client 20.215.57.60:11384] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aem57jEP2_5RswrH8bH_igAAABU"]
[Thu Apr 23 14:19:26.880449 2026] [:error] [pid 46953:tid 46970] [client 20.215.57.60:6864] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aem57knlpdHh-P6wKbr1xQAAAk4"]
[Thu Apr 23 14:19:27.455661 2026] [:error] [pid 42973:tid 43058] [client 20.215.57.60:10833] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "aem5726I0QqmmmLTHE2H_gAAAI8"]
[Thu Apr 23 14:19:28.095635 2026] [:error] [pid 42972:tid 43029] [client 20.215.57.60:13877] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aem58MOAb-3sOknsk4ecTAAAAE0"]
[Thu Apr 23 14:19:28.645040 2026] [:error] [pid 59700:tid 59702] [client 20.215.57.60:6891] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aem58JXyGZJFeAIDWtnSewAAAUA"]
[Thu Apr 23 14:19:29.211532 2026] [:error] [pid 59700:tid 59721] [client 20.215.57.60:31756] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aem58ZXyGZJFeAIDWtnSfgAAAVM"]
[Thu Apr 23 14:19:30.185499 2026] [:error] [pid 42971:tid 43003] [client 20.215.57.60:8732] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "aem58jEP2_5RswrH8bH_jAAAABE"]
[Thu Apr 23 14:19:31.212977 2026] [:error] [pid 46953:tid 46979] [client 20.215.57.60:10848] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aem580nlpdHh-P6wKbr1yAAAAlY"]
[Thu Apr 23 14:19:32.017460 2026] [:error] [pid 42971:tid 42989] [client 20.215.57.60:13825] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aem59DEP2_5RswrH8bH_kAAAAAM"]
[Thu Apr 23 14:19:32.706012 2026] [:error] [pid 64967:tid 64980] [client 20.215.57.60:6997] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aem59IAV4GfOOdX8QzpNYwAAAYs"]
[Thu Apr 23 14:19:33.539841 2026] [:error] [pid 64967:tid 64991] [client 20.215.57.60:32367] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "aem59YAV4GfOOdX8QzpNZwAAAZY"]
[Thu Apr 23 14:19:34.157400 2026] [:error] [pid 65000:tid 65041] [client 20.215.57.60:6884] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aem59r6vRb9j6psK2ZaS7gAAAgg"]
[Thu Apr 23 14:19:34.928479 2026] [:error] [pid 64998:tid 65025] [client 20.215.57.60:6879] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aem59oV5EysYcTLjmwjQQAAAAdc"]
[Thu Apr 23 14:19:35.877779 2026] [:error] [pid 64998:tid 65011] [client 20.215.57.60:10766] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aem594V5EysYcTLjmwjQQgAAAck"]
[Thu Apr 23 14:19:36.943932 2026] [:error] [pid 64967:tid 64973] [client 20.215.57.60:13887] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "aem5-IAV4GfOOdX8QzpNaQAAAYQ"]
[Thu Apr 23 14:19:37.925773 2026] [:error] [pid 59700:tid 59725] [client 20.215.57.60:32377] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem5-ZXyGZJFeAIDWtnSigAAAVc"]
[Thu Apr 23 14:19:39.284664 2026] [:error] [pid 46953:tid 46974] [client 20.215.57.60:6996] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem5-0nlpdHh-P6wKbr1zAAAAlI"]
[Thu Apr 23 14:19:40.081106 2026] [:error] [pid 42972:tid 43039] [client 20.215.57.60:32275] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem5_MOAb-3sOknsk4eccwAAAFc"]
[Thu Apr 23 14:19:40.702766 2026] [:error] [pid 59700:tid 59720] [client 20.215.57.60:6929] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "aem5_JXyGZJFeAIDWtnSjgAAAVI"]
[Thu Apr 23 14:19:41.445244 2026] [:error] [pid 43083:tid 43095] [client 20.215.57.60:13450] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aem5_TC5hrvNXosL83JE_AAAAMo"]
[Thu Apr 23 14:19:42.518083 2026] [:error] [pid 64998:tid 65009] [client 20.215.57.60:8767] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aem5_oV5EysYcTLjmwjQSgAAAcc"]
[Thu Apr 23 14:19:43.144412 2026] [:error] [pid 59700:tid 59707] [client 20.215.57.60:6855] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aem5_5XyGZJFeAIDWtnSjwAAAUU"]
[Thu Apr 23 14:19:43.814893 2026] [:error] [pid 42973:tid 43053] [client 20.215.57.60:8004] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "aem5_26I0QqmmmLTHE2IDAAAAIo"]
[Thu Apr 23 14:19:44.407208 2026] [:error] [pid 65000:tid 65038] [client 20.215.57.60:32304] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aem6AL6vRb9j6psK2ZaS-gAAAgU"]
[Thu Apr 23 14:19:45.105909 2026] [:error] [pid 65000:tid 65050] [client 20.215.57.60:32306] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aem6Ab6vRb9j6psK2ZaS_wAAAhE"]
[Thu Apr 23 14:19:45.850489 2026] [:error] [pid 65000:tid 65056] [client 20.215.57.60:6990] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aem6Ab6vRb9j6psK2ZaTAwAAAhc"]
[Thu Apr 23 14:19:46.553696 2026] [:error] [pid 42972:tid 43035] [client 20.215.57.60:13849] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "aem6AsOAb-3sOknsk4ecjQAAAFM"]
[Thu Apr 23 14:19:47.208857 2026] [:error] [pid 42972:tid 43037] [client 20.215.57.60:6945] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aem6A8OAb-3sOknsk4eckgAAAFU"]
[Thu Apr 23 14:19:47.831833 2026] [:error] [pid 65000:tid 65030] [client 20.215.57.60:6601] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aem6A76vRb9j6psK2ZaTBgAAAgE"]
[Thu Apr 23 14:19:48.472188 2026] [:error] [pid 64967:tid 64978] [client 20.215.57.60:6627] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aem6BIAV4GfOOdX8QzpNagAAAYk"]
[Thu Apr 23 14:19:49.188289 2026] [:error] [pid 42972:tid 43034] [client 20.215.57.60:8295] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "aem6BcOAb-3sOknsk4ecnwAAAFI"]
[Thu Apr 23 14:19:49.797714 2026] [:error] [pid 46953:tid 46957] [client 20.215.57.60:32300] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aem6BUnlpdHh-P6wKbr12QAAAkE"]
[Thu Apr 23 14:19:50.393897 2026] [:error] [pid 46953:tid 46974] [client 20.215.57.60:7025] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aem6BknlpdHh-P6wKbr13AAAAlI"]
[Thu Apr 23 14:19:51.899462 2026] [:error] [pid 65000:tid 65047] [client 20.215.57.60:12365] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aem6B76vRb9j6psK2ZaTDgAAAg4"]
[Thu Apr 23 14:19:52.718282 2026] [:error] [pid 42971:tid 43006] [client 20.215.57.60:6995] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "aem6CDEP2_5RswrH8bH_oAAAABQ"]
[Thu Apr 23 14:19:53.325319 2026] [:error] [pid 42973:tid 43064] [client 20.215.57.60:13846] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aem6CW6I0QqmmmLTHE2IFAAAAJU"]
[Thu Apr 23 14:19:53.959370 2026] [:error] [pid 65000:tid 65056] [client 20.215.57.60:13491] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aem6Cb6vRb9j6psK2ZaTEwAAAhc"]
[Thu Apr 23 14:19:55.091631 2026] [:error] [pid 25635:tid 25641] [client 20.215.57.60:6637] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aem6C8Rxv6UsgRGKB3IVJQAAAQI"]
[Thu Apr 23 14:19:57.859077 2026] [:error] [pid 25635:tid 25649] [client 20.215.57.60:6870] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "aem6DcRxv6UsgRGKB3IVJgAAAQo"]
[Thu Apr 23 14:19:58.795936 2026] [:error] [pid 65000:tid 65054] [client 20.215.57.60:8281] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aem6Dr6vRb9j6psK2ZaTGgAAAhU"]
[Thu Apr 23 14:19:59.495881 2026] [:error] [pid 42973:tid 43052] [client 20.215.57.60:13865] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aem6D26I0QqmmmLTHE2IFgAAAIk"]
[Thu Apr 23 14:20:00.093956 2026] [:error] [pid 65000:tid 65032] [client 20.215.57.60:8282] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aem6EL6vRb9j6psK2ZaTHQAAAgM"]
[Thu Apr 23 14:20:00.850016 2026] [:error] [pid 65000:tid 65057] [client 20.215.57.60:6940] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "aem6EL6vRb9j6psK2ZaTQQAAAhg"]
[Thu Apr 23 14:20:01.790047 2026] [:error] [pid 42973:tid 43050] [client 20.215.57.60:7001] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aem6EW6I0QqmmmLTHE2IHwAAAIc"]
[Thu Apr 23 14:20:02.549193 2026] [:error] [pid 42972:tid 43038] [client 20.215.57.60:15831] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aem6EsOAb-3sOknsk4ecuwAAAFY"]
[Thu Apr 23 14:20:03.255163 2026] [:error] [pid 46953:tid 46962] [client 20.215.57.60:6621] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aem6E0nlpdHh-P6wKbr15gAAAkY"]
[Thu Apr 23 14:20:03.948100 2026] [:error] [pid 65000:tid 65031] [client 20.215.57.60:12390] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "aem6E76vRb9j6psK2ZaTTQAAAgI"]
[Thu Apr 23 14:20:04.637229 2026] [:error] [pid 65000:tid 65051] [client 20.215.57.60:6653] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aem6FL6vRb9j6psK2ZaTUgAAAhI"]
[Thu Apr 23 14:20:05.559871 2026] [:error] [pid 42972:tid 43027] [client 20.215.57.60:6733] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aem6FcOAb-3sOknsk4ecvAAAAEs"]
[Thu Apr 23 14:20:06.287253 2026] [:error] [pid 42973:tid 43067] [client 20.215.57.60:32775] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aem6Fm6I0QqmmmLTHE2ILwAAAJg"]
[Thu Apr 23 14:20:07.058822 2026] [:error] [pid 42973:tid 43057] [client 20.215.57.60:13834] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aem6F26I0QqmmmLTHE2IMwAAAI4"]
[Thu Apr 23 14:20:07.636578 2026] [:error] [pid 42973:tid 43055] [client 20.215.57.60:6600] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aem6F26I0QqmmmLTHE2INQAAAIw"]
[Thu Apr 23 14:20:08.290515 2026] [:error] [pid 25635:tid 25648] [client 20.215.57.60:8298] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aem6GMRxv6UsgRGKB3IVKgAAAQk"]
[Thu Apr 23 14:20:08.995349 2026] [:error] [pid 65000:tid 65056] [client 20.215.57.60:8271] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aem6GL6vRb9j6psK2ZaTWgAAAhc"]
[Thu Apr 23 14:20:09.789345 2026] [:error] [pid 65000:tid 65047] [client 20.215.57.60:15850] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "aem6Gb6vRb9j6psK2ZaTXwAAAg4"]
[Thu Apr 23 14:20:10.663937 2026] [:error] [pid 46953:tid 46973] [client 20.215.57.60:12372] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aem6GknlpdHh-P6wKbr16gAAAlE"]
[Thu Apr 23 14:20:11.380801 2026] [:error] [pid 65000:tid 65041] [client 20.215.57.60:32857] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aem6G76vRb9j6psK2ZaTdAAAAgg"]
[Thu Apr 23 14:20:13.029746 2026] [:error] [pid 65000:tid 65052] [client 20.215.57.60:11108] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aem6Hb6vRb9j6psK2ZaTeQAAAhM"]
[Thu Apr 23 14:20:13.548126 2026] [:error] [pid 65000:tid 65050] [client 20.215.57.60:7693] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aem6Hb6vRb9j6psK2ZaTfwAAAhE"]
[Thu Apr 23 14:20:14.135951 2026] [:error] [pid 64998:tid 65007] [client 20.215.57.60:12323] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/max.php"] [unique_id "aem6HoV5EysYcTLjmwjQXgAAAcU"]
[Thu Apr 23 14:20:14.823296 2026] [:error] [pid 65000:tid 65044] [client 20.215.57.60:6315] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/max.php"] [unique_id "aem6Hr6vRb9j6psK2ZaThgAAAgs"]
[Thu Apr 23 14:20:15.431811 2026] [:error] [pid 65000:tid 65030] [client 20.215.57.60:9349] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/max.php"] [unique_id "aem6H76vRb9j6psK2ZaTiwAAAgE"]
[Thu Apr 23 14:20:15.994047 2026] [:error] [pid 42973:tid 43061] [client 20.215.57.60:12302] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/max.php"] [unique_id "aem6H26I0QqmmmLTHE2IPgAAAJI"]
[Thu Apr 23 14:20:16.606375 2026] [:error] [pid 59700:tid 59717] [client 20.215.57.60:32859] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aem6IJXyGZJFeAIDWtnTBQAAAU8"]
[Thu Apr 23 14:20:17.191000 2026] [:error] [pid 42973:tid 43046] [client 20.215.57.60:32772] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "aem6IW6I0QqmmmLTHE2IQgAAAIM"]
[Thu Apr 23 14:20:18.629296 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:18.932182 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:19.192597 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:19.460012 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:19.720930 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:19.983200 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:20.242426 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:21.092392 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:21.402668 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:21.676880 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:21.978333 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 20.215.57.60:12714] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:20:22.251472 2026] [:error] [pid 65000:tid 65037] [client 20.215.57.60:12714] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aem6Jr6vRb9j6psK2ZaTqAAAAgQ"]
[Thu Apr 23 14:20:22.878246 2026] [:error] [pid 42972:tid 43021] [client 20.215.57.60:7517] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aem6JsOAb-3sOknsk4ecywAAAEU"]
[Thu Apr 23 14:20:23.555687 2026] [:error] [pid 42972:tid 43017] [client 20.215.57.60:10005] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aem6J8OAb-3sOknsk4eczQAAAEE"]
[Thu Apr 23 14:20:25.457884 2026] [:error] [pid 46953:tid 46976] [client 20.215.57.60:7160] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aem6KUnlpdHh-P6wKbr2AwAAAlQ"]
[Thu Apr 23 14:20:26.925757 2026] [:error] [pid 46953:tid 46975] [client 20.215.57.60:7124] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aem6KknlpdHh-P6wKbr2BwAAAlM"]
[Thu Apr 23 14:20:27.703535 2026] [:error] [pid 43083:tid 43093] [client 20.215.57.60:14209] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aem6KzC5hrvNXosL83JFDAAAAMg"]
[Thu Apr 23 14:20:28.287951 2026] [:error] [pid 43083:tid 43098] [client 20.215.57.60:14215] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aem6LDC5hrvNXosL83JFDQAAAM0"]
[Thu Apr 23 14:20:28.929493 2026] [:error] [pid 64998:tid 65022] [client 20.215.57.60:13147] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aem6LIV5EysYcTLjmwjQagAAAdQ"]
[Thu Apr 23 14:20:29.492998 2026] [:error] [pid 64998:tid 65014] [client 20.215.57.60:10298] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "aem6LYV5EysYcTLjmwjQbQAAAcw"]
[Thu Apr 23 14:20:30.116041 2026] [:error] [pid 42971:tid 43006] [client 20.215.57.60:10241] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "aem6LjEP2_5RswrH8bH_qgAAABQ"]
[Thu Apr 23 14:20:30.711564 2026] [:error] [pid 42972:tid 43032] [client 20.215.57.60:6144] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "aem6LsOAb-3sOknsk4ec0gAAAFA"]
[Thu Apr 23 14:20:31.912099 2026] [:error] [pid 25635:tid 25649] [client 20.215.57.60:7458] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/155.php"] [unique_id "aem6L8Rxv6UsgRGKB3IVNAAAAQo"]
[Thu Apr 23 14:20:32.654868 2026] [:error] [pid 46953:tid 46971] [client 20.215.57.60:7471] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aem6MEnlpdHh-P6wKbr2HwAAAk8"]
[Thu Apr 23 14:20:33.235250 2026] [:error] [pid 42972:tid 43028] [client 20.215.57.60:6180] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aem6McOAb-3sOknsk4ec2wAAAEw"]
[Thu Apr 23 14:20:33.888505 2026] [:error] [pid 42972:tid 43031] [client 20.215.57.60:6990] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aem6McOAb-3sOknsk4ec4AAAAE8"]
[Thu Apr 23 14:20:34.401121 2026] [:error] [pid 65000:tid 65049] [client 20.215.57.60:14266] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "aem6Mr6vRb9j6psK2ZaTvgAAAhA"]
[Thu Apr 23 14:20:34.967548 2026] [:error] [pid 64967:tid 64973] [client 20.215.57.60:14221] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/144.php"] [unique_id "aem6MoAV4GfOOdX8QzpNeAAAAYQ"]
[Thu Apr 23 14:20:35.578509 2026] [:error] [pid 42972:tid 43032] [client 20.215.57.60:9249] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/144.php"] [unique_id "aem6M8OAb-3sOknsk4ec6AAAAFA"]
[Thu Apr 23 14:20:37.088384 2026] [:error] [pid 42972:tid 43030] [client 20.215.57.60:9270] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/144.php"] [unique_id "aem6NcOAb-3sOknsk4ec9wAAAE4"]
[Thu Apr 23 14:20:38.468204 2026] [:error] [pid 64998:tid 65022] [client 20.215.57.60:9604] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/144.php"] [unique_id "aem6NoV5EysYcTLjmwjQkQAAAdQ"]
[Thu Apr 23 14:20:39.268387 2026] [:error] [pid 59700:tid 59703] [client 20.215.57.60:9263] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aem6N5XyGZJFeAIDWtnTVwAAAUE"]
[Thu Apr 23 14:20:39.958556 2026] [:error] [pid 59700:tid 59715] [client 20.215.57.60:9216] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aem6N5XyGZJFeAIDWtnTXQAAAU0"]
[Thu Apr 23 14:20:40.511616 2026] [:error] [pid 46953:tid 46967] [client 20.215.57.60:14885] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aem6OEnlpdHh-P6wKbr2PAAAAks"]
[Thu Apr 23 14:20:41.145206 2026] [:error] [pid 59700:tid 59723] [client 20.215.57.60:33354] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "aem6OZXyGZJFeAIDWtnTagAAAVU"]
[Thu Apr 23 14:20:41.710632 2026] [:error] [pid 65000:tid 65053] [client 20.215.57.60:33392] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aem6Ob6vRb9j6psK2ZaT3QAAAhQ"]
[Thu Apr 23 14:20:42.292410 2026] [:error] [pid 42971:tid 43000] [client 20.215.57.60:16811] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aem6OjEP2_5RswrH8bH_tgAAAA4"]
[Thu Apr 23 14:20:42.883114 2026] [:error] [pid 64998:tid 65013] [client 20.215.57.60:8805] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aem6OoV5EysYcTLjmwjQrQAAAcs"]
[Thu Apr 23 14:20:43.473452 2026] [:error] [pid 64998:tid 65024] [client 20.215.57.60:33317] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "aem6O4V5EysYcTLjmwjQtAAAAdY"]
[Thu Apr 23 14:20:44.216814 2026] [:error] [pid 42972:tid 43025] [client 20.215.57.60:9683] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aem6PMOAb-3sOknsk4edGgAAAEk"]
[Thu Apr 23 14:20:44.836971 2026] [:error] [pid 59700:tid 59718] [client 20.215.57.60:9244] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aem6PJXyGZJFeAIDWtnTdAAAAVA"]
[Thu Apr 23 14:20:45.468704 2026] [:error] [pid 42972:tid 43021] [client 20.215.57.60:12780] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aem6PcOAb-3sOknsk4edIgAAAEU"]
[Thu Apr 23 14:20:46.026483 2026] [:error] [pid 64998:tid 65016] [client 20.215.57.60:14905] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aem6PoV5EysYcTLjmwjQwQAAAc4"]
[Thu Apr 23 14:20:46.609375 2026] [:error] [pid 42972:tid 43039] [client 20.215.57.60:9408] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aem6PsOAb-3sOknsk4edLAAAAFc"]
[Thu Apr 23 14:20:47.301983 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:8790] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aem6P26I0QqmmmLTHE2IaAAAAI0"]
[Thu Apr 23 14:20:47.966600 2026] [:error] [pid 42971:tid 42987] [client 20.215.57.60:33404] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aem6PzEP2_5RswrH8bH_vgAAAAE"]
[Thu Apr 23 14:20:48.492487 2026] [:error] [pid 43083:tid 43087] [client 20.215.57.60:33305] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "aem6QDC5hrvNXosL83JFKgAAAMI"]
[Thu Apr 23 14:20:49.082733 2026] [:error] [pid 64998:tid 65002] [client 20.215.57.60:12792] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aem6QYV5EysYcTLjmwjQ0AAAAcA"]
[Thu Apr 23 14:20:49.616335 2026] [:error] [pid 64998:tid 65013] [client 20.215.57.60:14878] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aem6QYV5EysYcTLjmwjQ1wAAAcs"]
[Thu Apr 23 14:20:50.285918 2026] [:error] [pid 42973:tid 43045] [client 20.215.57.60:6672] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aem6Qm6I0QqmmmLTHE2IhwAAAII"]
[Thu Apr 23 14:20:50.897803 2026] [:error] [pid 64998:tid 65005] [client 20.215.57.60:31349] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "aem6QoV5EysYcTLjmwjQ3AAAAcM"]
[Thu Apr 23 14:20:51.456551 2026] [:error] [pid 65000:tid 65045] [client 20.215.57.60:17401] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aem6Q76vRb9j6psK2ZaUCwAAAgw"]
[Thu Apr 23 14:20:52.017688 2026] [:error] [pid 65000:tid 65055] [client 20.215.57.60:17311] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aem6RL6vRb9j6psK2ZaUDgAAAhY"]
[Thu Apr 23 14:20:52.663975 2026] [:error] [pid 64998:tid 65008] [client 20.215.57.60:14872] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aem6RIV5EysYcTLjmwjQ6gAAAcY"]
[Thu Apr 23 14:20:53.203131 2026] [:error] [pid 42972:tid 43024] [client 20.215.57.60:33297] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aem6RcOAb-3sOknsk4edTQAAAEg"]
[Thu Apr 23 14:20:54.269860 2026] [:error] [pid 59700:tid 59710] [client 20.215.57.60:14856] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aem6RpXyGZJFeAIDWtnTdwAAAUg"]
[Thu Apr 23 14:20:54.973998 2026] [:error] [pid 64998:tid 65018] [client 20.215.57.60:12747] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aem6RoV5EysYcTLjmwjQ9QAAAdA"]
[Thu Apr 23 14:20:55.590689 2026] [:error] [pid 42973:tid 43065] [client 20.215.57.60:17287] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aem6R26I0QqmmmLTHE2IpgAAAJY"]
[Thu Apr 23 14:20:56.508156 2026] [:error] [pid 42973:tid 43066] [client 20.215.57.60:17323] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aem6SG6I0QqmmmLTHE2IrAAAAJc"]
[Thu Apr 23 14:20:57.185146 2026] [:error] [pid 42972:tid 43032] [client 20.215.57.60:9028] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aem6ScOAb-3sOknsk4edUwAAAFA"]
[Thu Apr 23 14:20:58.040543 2026] [:error] [pid 65000:tid 65030] [client 20.215.57.60:17290] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aem6Sr6vRb9j6psK2ZaUFQAAAgE"]
[Thu Apr 23 14:20:59.511958 2026] [:error] [pid 64967:tid 64984] [client 20.215.57.60:10559] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aem6S4AV4GfOOdX8QzpNkAAAAY8"]
[Thu Apr 23 14:21:02.192275 2026] [:error] [pid 46953:tid 46974] [client 20.215.57.60:13100] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "aem6TknlpdHh-P6wKbr2XwAAAlI"]
[Thu Apr 23 14:21:03.212838 2026] [:error] [pid 64998:tid 65023] [client 20.215.57.60:17384] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aem6T4V5EysYcTLjmwjRCQAAAdU"]
[Thu Apr 23 14:21:03.833210 2026] [:error] [pid 42973:tid 43067] [client 20.215.57.60:12797] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aem6T26I0QqmmmLTHE2IxAAAAJg"]
[Thu Apr 23 14:21:04.663263 2026] [:error] [pid 64998:tid 65025] [client 20.215.57.60:33915] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aem6UIV5EysYcTLjmwjREQAAAdc"]
[Thu Apr 23 14:21:05.418063 2026] [:error] [pid 25635:tid 25658] [client 20.215.57.60:11011] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "aem6UcRxv6UsgRGKB3IVYQAAARM"]
[Thu Apr 23 14:21:06.010087 2026] [:error] [pid 65000:tid 65056] [client 20.215.57.60:11955] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aem6Ur6vRb9j6psK2ZaUQgAAAhc"]
[Thu Apr 23 14:21:07.425317 2026] [:error] [pid 65000:tid 65049] [client 20.215.57.60:17296] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aem6U76vRb9j6psK2ZaUSQAAAhA"]
[Thu Apr 23 14:21:08.394793 2026] [:error] [pid 65000:tid 65046] [client 20.215.57.60:9047] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aem6VL6vRb9j6psK2ZaUTQAAAg0"]
[Thu Apr 23 14:21:09.025607 2026] [:error] [pid 25635:tid 25644] [client 20.215.57.60:6701] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "aem6VcRxv6UsgRGKB3IVYgAAAQU"]
[Thu Apr 23 14:21:09.705597 2026] [:error] [pid 65000:tid 65044] [client 20.215.57.60:13103] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aem6Vb6vRb9j6psK2ZaUUgAAAgs"]
[Thu Apr 23 14:21:10.408003 2026] [:error] [pid 65000:tid 65049] [client 20.215.57.60:11626] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aem6Vr6vRb9j6psK2ZaUVAAAAhA"]
[Thu Apr 23 14:21:11.024691 2026] [:error] [pid 65000:tid 65031] [client 20.215.57.60:11016] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aem6V76vRb9j6psK2ZaUWAAAAgI"]
[Thu Apr 23 14:21:12.023921 2026] [:error] [pid 59700:tid 59707] [client 20.215.57.60:17336] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "aem6WJXyGZJFeAIDWtnTjAAAAUU"]
[Thu Apr 23 14:21:12.847845 2026] [:error] [pid 59700:tid 59721] [client 20.215.57.60:11630] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aem6WJXyGZJFeAIDWtnTjQAAAVM"]
[Thu Apr 23 14:21:13.438295 2026] [:error] [pid 46953:tid 46966] [client 20.215.57.60:9034] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aem6WUnlpdHh-P6wKbr2agAAAko"]
[Thu Apr 23 14:21:14.132121 2026] [:error] [pid 46953:tid 46970] [client 20.215.57.60:10546] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aem6WknlpdHh-P6wKbr2bQAAAk4"]
[Thu Apr 23 14:21:14.805500 2026] [:error] [pid 65000:tid 65051] [client 20.215.57.60:11067] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "aem6Wr6vRb9j6psK2ZaUYQAAAhI"]
[Thu Apr 23 14:21:15.567450 2026] [:error] [pid 42972:tid 43021] [client 20.215.57.60:11598] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aem6W8OAb-3sOknsk4edcgAAAEU"]
[Thu Apr 23 14:21:16.151782 2026] [:error] [pid 65000:tid 65052] [client 20.215.57.60:11058] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aem6XL6vRb9j6psK2ZaUaQAAAhM"]
[Thu Apr 23 14:21:16.903882 2026] [:error] [pid 42973:tid 43048] [client 20.215.57.60:14612] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aem6XG6I0QqmmmLTHE2IzQAAAIU"]
[Thu Apr 23 14:21:17.876687 2026] [:error] [pid 42973:tid 43061] [client 20.215.57.60:11958] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "aem6XW6I0QqmmmLTHE2I0wAAAJI"]
[Thu Apr 23 14:21:18.511698 2026] [:error] [pid 65000:tid 65053] [client 20.215.57.60:16327] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aem6Xr6vRb9j6psK2ZaUbAAAAhQ"]
[Thu Apr 23 14:21:19.065171 2026] [:error] [pid 65000:tid 65048] [client 20.215.57.60:33829] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aem6X76vRb9j6psK2ZaUbQAAAg8"]
[Thu Apr 23 14:21:19.764954 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:14630] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aem6X26I0QqmmmLTHE2I2AAAAI0"]
[Thu Apr 23 14:21:20.398923 2026] [:error] [pid 65000:tid 65056] [client 20.215.57.60:17335] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "aem6YL6vRb9j6psK2ZaUcgAAAhc"]
[Thu Apr 23 14:21:21.955825 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:22.222722 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:22.519465 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:23.088079 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:23.350137 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:23.620790 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:23.880639 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:24.144373 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:24.410459 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:24.724327 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 20.215.57.60:7052] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:21:24.991217 2026] [:error] [pid 65000:tid 65043] [client 20.215.57.60:7052] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aem6ZL6vRb9j6psK2ZaUjwAAAgo"]
[Thu Apr 23 14:21:25.709425 2026] [:error] [pid 42971:tid 43006] [client 20.215.57.60:10541] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aem6ZTEP2_5RswrH8bH_1QAAABQ"]
[Thu Apr 23 14:21:26.314147 2026] [:error] [pid 65000:tid 65037] [client 20.215.57.60:10496] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aem6Zr6vRb9j6psK2ZaUkgAAAgQ"]
[Thu Apr 23 14:21:26.861773 2026] [:error] [pid 42973:tid 43062] [client 20.215.57.60:15755] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aem6Zm6I0QqmmmLTHE2I4gAAAJM"]
[Thu Apr 23 14:21:28.092542 2026] [:error] [pid 42973:tid 43045] [client 20.215.57.60:11962] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aem6aG6I0QqmmmLTHE2I5gAAAII"]
[Thu Apr 23 14:21:29.507645 2026] [:error] [pid 59700:tid 59715] [client 20.215.57.60:33831] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aem6aZXyGZJFeAIDWtnTkgAAAU0"]
[Thu Apr 23 14:21:30.250476 2026] [:error] [pid 42972:tid 43023] [client 20.215.57.60:11964] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aem6asOAb-3sOknsk4eddAAAAEc"]
[Thu Apr 23 14:21:31.106836 2026] [:error] [pid 65000:tid 65046] [client 20.215.57.60:14605] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-act.php"] [unique_id "aem6a76vRb9j6psK2ZaUlQAAAg0"]
[Thu Apr 23 14:21:31.941963 2026] [:error] [pid 42973:tid 43043] [client 20.215.57.60:11910] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "aem6a26I0QqmmmLTHE2I8QAAAIA"]
[Thu Apr 23 14:21:32.874983 2026] [:error] [pid 42973:tid 43059] [client 20.215.57.60:14613] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "aem6bG6I0QqmmmLTHE2I9AAAAJA"]
[Thu Apr 23 14:21:34.981916 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:14682] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "aem6bm6I0QqmmmLTHE2I-wAAAI0"]
[Thu Apr 23 14:21:35.815623 2026] [:error] [pid 42973:tid 43043] [client 20.215.57.60:34402] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "aem6b26I0QqmmmLTHE2I_gAAAIA"]
[Thu Apr 23 14:21:38.528113 2026] [:error] [pid 42973:tid 43054] [client 20.215.57.60:8979] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aem6cm6I0QqmmmLTHE2JAwAAAIs"]
[Thu Apr 23 14:21:39.641880 2026] [:error] [pid 65000:tid 65040] [client 20.215.57.60:14623] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aem6c76vRb9j6psK2ZaUpAAAAgc"]
[Thu Apr 23 14:21:40.620839 2026] [:error] [pid 42973:tid 43067] [client 20.215.57.60:9019] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aem6dG6I0QqmmmLTHE2JBwAAAJg"]
[Thu Apr 23 14:21:41.299812 2026] [:error] [pid 46953:tid 46956] [client 20.215.57.60:16888] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "aem6dUnlpdHh-P6wKbr2cQAAAkA"]
[Thu Apr 23 14:21:41.825331 2026] [:error] [pid 42973:tid 43048] [client 20.215.57.60:8991] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aem6dW6I0QqmmmLTHE2JDgAAAIU"]
[Thu Apr 23 14:21:42.407110 2026] [:error] [pid 46953:tid 46965] [client 20.215.57.60:7045] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aem6dknlpdHh-P6wKbr2cgAAAkk"]
[Thu Apr 23 14:21:42.985527 2026] [:error] [pid 65000:tid 65055] [client 20.215.57.60:17880] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aem6dr6vRb9j6psK2ZaUqAAAAhY"]
[Thu Apr 23 14:21:43.610172 2026] [:error] [pid 42973:tid 43045] [client 20.215.57.60:34397] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aem6d26I0QqmmmLTHE2JEgAAAII"]
[Thu Apr 23 14:21:44.450484 2026] [:error] [pid 64998:tid 65014] [client 20.215.57.60:34347] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aem6eIV5EysYcTLjmwjRKwAAAcw"]
[Thu Apr 23 14:21:45.483830 2026] [:error] [pid 46953:tid 46975] [client 20.215.57.60:19603] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aem6eUnlpdHh-P6wKbr2cwAAAlM"]
[Thu Apr 23 14:21:47.412661 2026] [:error] [pid 42972:tid 43031] [client 20.215.57.60:19631] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aem6e8OAb-3sOknsk4edeAAAAE8"]
[Thu Apr 23 14:21:48.910449 2026] [:error] [pid 59700:tid 59714] [client 20.215.57.60:19618] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "aem6fJXyGZJFeAIDWtnTlwAAAUw"]
[Thu Apr 23 14:21:50.067852 2026] [:error] [pid 42973:tid 43046] [client 20.215.57.60:18284] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aem6fm6I0QqmmmLTHE2JHwAAAIM"]
[Thu Apr 23 14:21:52.600353 2026] [:error] [pid 42973:tid 43045] [client 20.215.57.60:21717] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aem6gG6I0QqmmmLTHE2JJgAAAII"]
[Thu Apr 23 14:21:56.413597 2026] [:error] [pid 42973:tid 43053] [client 20.215.57.60:17897] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aem6hG6I0QqmmmLTHE2JNgAAAIo"]
[Thu Apr 23 14:21:57.535649 2026] [:error] [pid 64998:tid 65009] [client 20.215.57.60:18240] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "aem6hYV5EysYcTLjmwjRLgAAAcc"]
[Thu Apr 23 14:21:58.127756 2026] [:error] [pid 42973:tid 43053] [client 20.215.57.60:18181] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aem6hm6I0QqmmmLTHE2JOgAAAIo"]
[Thu Apr 23 14:21:58.821575 2026] [:error] [pid 65000:tid 65040] [client 20.215.57.60:18195] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aem6hr6vRb9j6psK2ZaUtgAAAgc"]
[Thu Apr 23 14:21:59.428718 2026] [:error] [pid 42972:tid 43017] [client 20.215.57.60:18211] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aem6h8OAb-3sOknsk4edfQAAAEE"]
[Thu Apr 23 14:22:00.107917 2026] [:error] [pid 43083:tid 43087] [client 20.215.57.60:13907] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aem6iDC5hrvNXosL83JFVAAAAMI"]
[Thu Apr 23 14:22:00.671185 2026] [:error] [pid 42973:tid 43064] [client 20.215.57.60:14659] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aem6iG6I0QqmmmLTHE2JQgAAAJU"]
[Thu Apr 23 14:22:01.206287 2026] [:error] [pid 64967:tid 64972] [client 20.215.57.60:34367] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aem6iYAV4GfOOdX8QzpNrAAAAYM"]
[Thu Apr 23 14:22:01.743768 2026] [:error] [pid 42972:tid 43036] [client 20.215.57.60:13918] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aem6icOAb-3sOknsk4edgAAAAFQ"]
[Thu Apr 23 14:22:02.319341 2026] [:error] [pid 42971:tid 43002] [client 20.215.57.60:34304] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "aem6ijEP2_5RswrH8bH_2wAAABA"]
[Thu Apr 23 14:22:02.886382 2026] [:error] [pid 42971:tid 42986] [client 20.215.57.60:19639] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6ijEP2_5RswrH8bH_3AAAAAA"]
[Thu Apr 23 14:22:03.432693 2026] [:error] [pid 42973:tid 43050] [client 20.215.57.60:19589] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6i26I0QqmmmLTHE2JSwAAAIc"]
[Thu Apr 23 14:22:04.074678 2026] [:error] [pid 42973:tid 43054] [client 20.215.57.60:8988] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6jG6I0QqmmmLTHE2JTgAAAIs"]
[Thu Apr 23 14:22:04.792144 2026] [:error] [pid 42973:tid 43058] [client 20.215.57.60:18205] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6jG6I0QqmmmLTHE2JUQAAAI8"]
[Thu Apr 23 14:22:05.383959 2026] [:error] [pid 42973:tid 43059] [client 20.215.57.60:16867] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aem6jW6I0QqmmmLTHE2JVQAAAJA"]
[Thu Apr 23 14:22:06.016848 2026] [:error] [pid 42973:tid 43054] [client 20.215.57.60:21709] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aem6jm6I0QqmmmLTHE2JWQAAAIs"]
[Thu Apr 23 14:22:06.574896 2026] [:error] [pid 64967:tid 64977] [client 20.215.57.60:18208] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aem6joAV4GfOOdX8QzpNsgAAAYg"]
[Thu Apr 23 14:22:07.130913 2026] [:error] [pid 42973:tid 43047] [client 20.215.57.60:19611] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "aem6j26I0QqmmmLTHE2JXwAAAIQ"]
[Thu Apr 23 14:22:08.028615 2026] [:error] [pid 46953:tid 46981] [client 20.215.57.60:18619] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aem6kEnlpdHh-P6wKbr2dwAAAlg"]
[Thu Apr 23 14:22:08.966511 2026] [:error] [pid 42971:tid 42993] [client 20.215.57.60:18219] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aem6kDEP2_5RswrH8bH_3gAAAAc"]
[Thu Apr 23 14:22:09.641487 2026] [:error] [pid 42973:tid 43047] [client 20.215.57.60:18275] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aem6kW6I0QqmmmLTHE2JaQAAAIQ"]
[Thu Apr 23 14:22:10.986085 2026] [:error] [pid 65000:tid 65051] [client 20.215.57.60:9002] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "aem6kr6vRb9j6psK2ZaUwAAAAhI"]
[Thu Apr 23 14:22:12.185666 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:18623] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6lG6I0QqmmmLTHE2JdAAAAI0"]
[Thu Apr 23 14:22:13.171170 2026] [:error] [pid 64998:tid 65008] [client 20.215.57.60:20198] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6lYV5EysYcTLjmwjRNAAAAcY"]
[Thu Apr 23 14:22:13.873692 2026] [:error] [pid 42972:tid 43032] [client 20.215.57.60:21753] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6lcOAb-3sOknsk4edgwAAAFA"]
[Thu Apr 23 14:22:14.622946 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:34856] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aem6lm6I0QqmmmLTHE2JfQAAAI0"]
[Thu Apr 23 14:22:15.231263 2026] [:error] [pid 64998:tid 65004] [client 20.215.57.60:34846] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aem6l4V5EysYcTLjmwjROgAAAcI"]
[Thu Apr 23 14:22:15.776966 2026] [:error] [pid 64998:tid 65023] [client 20.215.57.60:34850] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aem6l4V5EysYcTLjmwjRPAAAAdU"]
[Thu Apr 23 14:22:16.354598 2026] [:error] [pid 59700:tid 59724] [client 20.215.57.60:16859] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aem6mJXyGZJFeAIDWtnTngAAAVY"]
[Thu Apr 23 14:22:16.908044 2026] [:error] [pid 42971:tid 43008] [client 20.215.57.60:17792] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "aem6mDEP2_5RswrH8bH_4AAAABY"]
[Thu Apr 23 14:22:17.489165 2026] [:error] [pid 59700:tid 59726] [client 20.215.57.60:34371] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aem6mZXyGZJFeAIDWtnTnwAAAVg"]
[Thu Apr 23 14:22:18.050783 2026] [:error] [pid 42972:tid 43023] [client 20.215.57.60:34836] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aem6msOAb-3sOknsk4ediAAAAEc"]
[Thu Apr 23 14:22:18.981315 2026] [:error] [pid 64967:tid 64989] [client 20.215.57.60:18223] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aem6moAV4GfOOdX8QzpNtgAAAZQ"]
[Thu Apr 23 14:22:20.040737 2026] [:error] [pid 42973:tid 43065] [client 20.215.57.60:20192] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aem6nG6I0QqmmmLTHE2JhAAAAJY"]
[Thu Apr 23 14:22:21.195947 2026] [:error] [pid 64998:tid 65026] [client 20.215.57.60:16845] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aem6nYV5EysYcTLjmwjRPwAAAdg"]
[Thu Apr 23 14:22:21.790600 2026] [:error] [pid 25635:tid 25649] [client 20.215.57.60:17823] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aem6ncRxv6UsgRGKB3IVcAAAAQo"]
[Thu Apr 23 14:22:22.625714 2026] [:error] [pid 64967:tid 64975] [client 20.215.57.60:18575] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aem6noAV4GfOOdX8QzpNuQAAAYY"]
[Thu Apr 23 14:22:23.843404 2026] [:error] [pid 64967:tid 64979] [client 20.215.57.60:21728] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "aem6n4AV4GfOOdX8QzpNvQAAAYo"]
[Thu Apr 23 14:22:24.974121 2026] [proxy_fcgi:error] [pid 46953:tid 46959] [client 20.215.57.60:34916] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:22:25.339224 2026] [proxy_fcgi:error] [pid 46953:tid 46960] [client 20.215.57.60:34916] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:22:25.625090 2026] [proxy_fcgi:error] [pid 46953:tid 46961] [client 20.215.57.60:34916] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:22:26.191314 2026] [proxy_fcgi:error] [pid 46953:tid 46956] [client 20.215.57.60:34916] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:22:27.385008 2026] [proxy_fcgi:error] [pid 46953:tid 46975] [client 20.215.57.60:34916] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:22:27.995736 2026] [proxy_fcgi:error] [pid 46953:tid 46964] [client 20.215.57.60:34916] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:22:28.272806 2026] [:error] [pid 46953:tid 46973] [client 20.215.57.60:34916] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aem6pEnlpdHh-P6wKbr2hwAAAlE"]
[Thu Apr 23 14:22:28.984593 2026] [:error] [pid 64998:tid 65023] [client 20.215.57.60:17810] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aem6pIV5EysYcTLjmwjRRAAAAdU"]
[Thu Apr 23 14:22:29.621812 2026] [:error] [pid 64998:tid 65007] [client 20.215.57.60:19082] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aem6pYV5EysYcTLjmwjRRQAAAcU"]
[Thu Apr 23 14:22:30.256827 2026] [:error] [pid 65000:tid 65052] [client 20.215.57.60:34860] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aem6pr6vRb9j6psK2ZaUxwAAAhM"]
[Thu Apr 23 14:22:31.156104 2026] [:error] [pid 42973:tid 43046] [client 20.215.57.60:34897] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aem6p26I0QqmmmLTHE2JmwAAAIM"]
[Thu Apr 23 14:22:31.757787 2026] [:error] [pid 42973:tid 43055] [client 20.215.57.60:20216] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aem6p26I0QqmmmLTHE2JnAAAAIw"]
[Thu Apr 23 14:22:32.311057 2026] [:error] [pid 64967:tid 64973] [client 20.215.57.60:16889] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aem6qIAV4GfOOdX8QzpNwgAAAYQ"]
[Thu Apr 23 14:22:33.019091 2026] [:error] [pid 59700:tid 59716] [client 20.215.57.60:15350] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "aem6qZXyGZJFeAIDWtnTqAAAAU4"]
[Thu Apr 23 14:22:33.661670 2026] [:error] [pid 42972:tid 43030] [client 20.215.57.60:18281] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aem6qcOAb-3sOknsk4edkAAAAE4"]
[Thu Apr 23 14:22:34.358024 2026] [:error] [pid 42973:tid 43053] [client 20.215.57.60:18231] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aem6qm6I0QqmmmLTHE2JoQAAAIo"]
[Thu Apr 23 14:22:35.331335 2026] [:error] [pid 42972:tid 43032] [client 20.215.57.60:18604] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aem6q8OAb-3sOknsk4edmAAAAFA"]
[Thu Apr 23 14:22:36.000470 2026] [:error] [pid 64998:tid 65026] [client 20.215.57.60:15322] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abcd.php"] [unique_id "aem6q4V5EysYcTLjmwjRSQAAAdg"]
[Thu Apr 23 14:22:36.652948 2026] [:error] [pid 65000:tid 65040] [client 20.215.57.60:21756] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem6rL6vRb9j6psK2ZaUzgAAAgc"]
[Thu Apr 23 14:22:37.255405 2026] [:error] [pid 42972:tid 43040] [client 20.215.57.60:18612] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem6rcOAb-3sOknsk4edmQAAAFg"]
[Thu Apr 23 14:22:37.854662 2026] [:error] [pid 42973:tid 43046] [client 20.215.57.60:18625] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem6rW6I0QqmmmLTHE2JpQAAAIM"]
[Thu Apr 23 14:22:38.978113 2026] [:error] [pid 42973:tid 43063] [client 20.215.57.60:18177] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fi.php"] [unique_id "aem6rm6I0QqmmmLTHE2JqgAAAJQ"]
[Thu Apr 23 14:22:40.114837 2026] [:error] [pid 64998:tid 65022] [client 20.215.57.60:35349] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aem6sIV5EysYcTLjmwjRUAAAAdQ"]
[Thu Apr 23 14:22:40.938693 2026] [:error] [pid 64998:tid 65018] [client 20.215.57.60:17896] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aem6sIV5EysYcTLjmwjRUQAAAdA"]
[Thu Apr 23 14:22:41.592287 2026] [:error] [pid 42972:tid 43019] [client 20.215.57.60:18227] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aem6scOAb-3sOknsk4ednAAAAEM"]
[Thu Apr 23 14:22:42.186106 2026] [:error] [pid 43083:tid 43086] [client 20.215.57.60:34894] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "aem6sjC5hrvNXosL83JFaAAAAME"]
[Thu Apr 23 14:22:42.888058 2026] [:error] [pid 42973:tid 43061] [client 20.215.57.60:35374] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aem6sm6I0QqmmmLTHE2JtwAAAJI"]
[Thu Apr 23 14:22:43.519741 2026] [:error] [pid 64998:tid 65021] [client 20.215.57.60:21715] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aem6s4V5EysYcTLjmwjRVgAAAdM"]
[Thu Apr 23 14:22:44.104820 2026] [:error] [pid 46953:tid 46956] [client 20.215.57.60:15326] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aem6tEnlpdHh-P6wKbr2jQAAAkA"]
[Thu Apr 23 14:22:44.843855 2026] [:error] [pid 65000:tid 65042] [client 20.215.57.60:17842] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/update/f35.php"] [unique_id "aem6tL6vRb9j6psK2ZaU0QAAAgk"]
[Thu Apr 23 14:22:45.419381 2026] [:error] [pid 59700:tid 59719] [client 20.215.57.60:17805] [client 20.215.57.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aem6tZXyGZJFeAIDWtnTsAAAAVE"]
[Thu Apr 23 14:22:46.577011 2026] [:error] [pid 42972:tid 43021] [client 20.215.57.60:20192] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aem6tsOAb-3sOknsk4edngAAAEU"]
[Thu Apr 23 14:22:47.147062 2026] [:error] [pid 46953:tid 46973] [client 20.215.57.60:20211] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aem6t0nlpdHh-P6wKbr2kAAAAlE"]
[Thu Apr 23 14:22:47.725432 2026] [:error] [pid 43083:tid 43099] [client 20.215.57.60:35429] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aem6tzC5hrvNXosL83JFagAAAM4"]
[Thu Apr 23 14:22:48.317399 2026] [:error] [pid 42972:tid 43026] [client 20.215.57.60:18591] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f35.php"] [unique_id "aem6uMOAb-3sOknsk4edoAAAAEo"]
[Thu Apr 23 14:22:49.079933 2026] [:error] [pid 65000:tid 65030] [client 20.215.57.60:20206] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aem6ub6vRb9j6psK2ZaU1AAAAgE"]
[Thu Apr 23 14:22:49.709208 2026] [:error] [pid 42972:tid 43022] [client 20.215.57.60:18680] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aem6ucOAb-3sOknsk4edpwAAAEY"]
[Thu Apr 23 14:22:50.227858 2026] [:error] [pid 42972:tid 43038] [client 20.215.57.60:21194] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aem6usOAb-3sOknsk4edqQAAAFY"]
[Thu Apr 23 14:22:50.800461 2026] [:error] [pid 65000:tid 65040] [client 20.215.57.60:17839] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aem6ur6vRb9j6psK2ZaU1gAAAgc"]
[Thu Apr 23 14:22:51.526608 2026] [:error] [pid 46953:tid 46970] [client 20.215.57.60:19156] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aem6u0nlpdHh-P6wKbr2kQAAAk4"]
[Thu Apr 23 14:22:52.117286 2026] [:error] [pid 42972:tid 43029] [client 20.215.57.60:24970] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aem6vMOAb-3sOknsk4edqwAAAE0"]
[Thu Apr 23 14:22:52.692989 2026] [:error] [pid 64967:tid 64988] [client 20.215.57.60:19073] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aem6vIAV4GfOOdX8QzpNxwAAAZM"]
[Thu Apr 23 14:22:53.264882 2026] [:error] [pid 59700:tid 59725] [client 20.215.57.60:35412] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aem6vZXyGZJFeAIDWtnTtgAAAVc"]
[Thu Apr 23 14:22:53.822339 2026] [:error] [pid 42972:tid 43020] [client 20.215.57.60:19110] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aem6vcOAb-3sOknsk4edrAAAAEQ"]
[Thu Apr 23 14:22:54.391610 2026] [:error] [pid 42972:tid 43017] [client 20.215.57.60:26094] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aem6vsOAb-3sOknsk4edrQAAAEE"]
[Thu Apr 23 14:22:55.002207 2026] [:error] [pid 43083:tid 43087] [client 20.215.57.60:15309] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aem6vzC5hrvNXosL83JFbQAAAMI"]
[Thu Apr 23 14:22:55.649188 2026] [:error] [pid 42971:tid 42999] [client 20.215.57.60:21211] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "aem6vzEP2_5RswrH8bH_6wAAAA0"]
[Thu Apr 23 14:22:56.324931 2026] [:error] [pid 64998:tid 65023] [client 20.215.57.60:25002] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww2.php"] [unique_id "aem6wIV5EysYcTLjmwjRVwAAAdU"]
[Thu Apr 23 14:22:57.090397 2026] [:error] [pid 64967:tid 64992] [client 20.215.57.60:20182] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww2.php"] [unique_id "aem6wYAV4GfOOdX8QzpNyAAAAZc"]
[Thu Apr 23 14:22:57.916937 2026] [:error] [pid 46953:tid 46958] [client 20.215.57.60:17830] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww2.php"] [unique_id "aem6wUnlpdHh-P6wKbr2lAAAAkI"]
[Thu Apr 23 14:22:58.457322 2026] [:error] [pid 42973:tid 43065] [client 20.215.57.60:18686] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww2.php"] [unique_id "aem6wm6I0QqmmmLTHE2JyAAAAJY"]
[Thu Apr 23 14:22:58.994801 2026] [:error] [pid 64998:tid 65005] [client 20.215.57.60:24995] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww3.php"] [unique_id "aem6woV5EysYcTLjmwjRYAAAAcM"]
[Thu Apr 23 14:22:59.534473 2026] [:error] [pid 64998:tid 65014] [client 20.215.57.60:16259] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww3.php"] [unique_id "aem6w4V5EysYcTLjmwjRYgAAAcw"]
[Thu Apr 23 14:23:00.071914 2026] [:error] [pid 64998:tid 65026] [client 20.215.57.60:16286] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww3.php"] [unique_id "aem6xIV5EysYcTLjmwjRZAAAAdg"]
[Thu Apr 23 14:23:00.649230 2026] [:error] [pid 42973:tid 43061] [client 20.215.57.60:19679] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww3.php"] [unique_id "aem6xG6I0QqmmmLTHE2JyQAAAJI"]
[Thu Apr 23 14:23:01.213481 2026] [:error] [pid 42973:tid 43063] [client 20.215.57.60:17836] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aem6xW6I0QqmmmLTHE2JygAAAJQ"]
[Thu Apr 23 14:23:02.008350 2026] [:error] [pid 42973:tid 43059] [client 20.215.57.60:15299] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aem6xm6I0QqmmmLTHE2JywAAAJA"]
[Thu Apr 23 14:23:02.564586 2026] [:error] [pid 42973:tid 43057] [client 20.215.57.60:21194] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aem6xm6I0QqmmmLTHE2JzAAAAI4"]
[Thu Apr 23 14:23:03.132197 2026] [:error] [pid 64967:tid 64981] [client 20.215.57.60:24455] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "aem6x4AV4GfOOdX8QzpNzgAAAYw"]
[Thu Apr 23 14:23:03.731268 2026] [:error] [pid 65000:tid 65039] [client 20.215.57.60:35348] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aem6x76vRb9j6psK2ZaU4wAAAgY"]
[Thu Apr 23 14:23:04.315452 2026] [:error] [pid 42972:tid 43023] [client 20.215.57.60:26102] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aem6yMOAb-3sOknsk4edswAAAEc"]
[Thu Apr 23 14:23:04.927084 2026] [:error] [pid 42972:tid 43032] [client 20.215.57.60:25003] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aem6yMOAb-3sOknsk4edtQAAAFA"]
[Thu Apr 23 14:23:05.545506 2026] [:error] [pid 65000:tid 65053] [client 20.215.57.60:35406] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/in.php"] [unique_id "aem6yb6vRb9j6psK2ZaU5AAAAhQ"]
[Thu Apr 23 14:23:06.234782 2026] [:error] [pid 65000:tid 65049] [client 20.215.57.60:35856] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aem6yr6vRb9j6psK2ZaU5QAAAhA"]
[Thu Apr 23 14:23:06.793186 2026] [:error] [pid 42972:tid 43039] [client 20.215.57.60:35938] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aem6ysOAb-3sOknsk4edtwAAAFc"]
[Thu Apr 23 14:23:07.390254 2026] [:error] [pid 42972:tid 43036] [client 20.215.57.60:19152] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aem6y8OAb-3sOknsk4eduAAAAFQ"]
[Thu Apr 23 14:23:08.159055 2026] [:error] [pid 42973:tid 43043] [client 20.215.57.60:35451] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gssdd.php"] [unique_id "aem6zG6I0QqmmmLTHE2J1AAAAIA"]
[Thu Apr 23 14:23:08.766612 2026] [:error] [pid 42972:tid 43035] [client 20.215.57.60:35851] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aem6zMOAb-3sOknsk4edugAAAFM"]
[Thu Apr 23 14:23:09.365513 2026] [:error] [pid 65000:tid 65048] [client 20.215.57.60:35877] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aem6zb6vRb9j6psK2ZaU5gAAAg8"]
[Thu Apr 23 14:23:09.930921 2026] [:error] [pid 42971:tid 42991] [client 20.215.57.60:19690] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aem6zTEP2_5RswrH8bH_7QAAAAU"]
[Thu Apr 23 14:23:10.968841 2026] [:error] [pid 42973:tid 43056] [client 20.215.57.60:19692] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aem6zm6I0QqmmmLTHE2J2wAAAI0"]
[Thu Apr 23 14:23:11.576626 2026] [:error] [pid 64998:tid 65003] [client 20.215.57.60:35442] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aem6z4V5EysYcTLjmwjRdgAAAcE"]
[Thu Apr 23 14:23:12.200104 2026] [:error] [pid 42973:tid 43062] [client 20.215.57.60:23979] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aem60G6I0QqmmmLTHE2J3AAAAJM"]
[Thu Apr 23 14:23:12.811868 2026] [:error] [pid 65000:tid 65047] [client 20.215.57.60:19142] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aem60L6vRb9j6psK2ZaU6wAAAg4"]
[Thu Apr 23 14:23:13.375203 2026] [:error] [pid 42971:tid 42997] [client 20.215.57.60:35927] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "aem60TEP2_5RswrH8bH_7gAAAAs"]
[Thu Apr 23 14:23:13.960890 2026] [:error] [pid 42972:tid 43033] [client 20.215.57.60:14872] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aem60cOAb-3sOknsk4edxAAAAFE"]
[Thu Apr 23 14:23:14.495746 2026] [:error] [pid 64998:tid 65004] [client 20.215.57.60:26095] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aem60oV5EysYcTLjmwjRfwAAAcI"]
[Thu Apr 23 14:23:15.182659 2026] [:error] [pid 42972:tid 43037] [client 20.215.57.60:24976] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aem608OAb-3sOknsk4edyAAAAFU"]
[Thu Apr 23 14:23:15.716515 2026] [:error] [pid 42973:tid 43054] [client 20.215.57.60:16317] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aem6026I0QqmmmLTHE2J4gAAAIs"]
[Thu Apr 23 14:23:16.504730 2026] [:error] [pid 64998:tid 65018] [client 20.215.57.60:24992] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aem61IV5EysYcTLjmwjRggAAAdA"]
[Thu Apr 23 14:23:17.234019 2026] [:error] [pid 64998:tid 65008] [client 20.215.57.60:23942] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aem61YV5EysYcTLjmwjRhwAAAcY"]
[Thu Apr 23 14:23:17.795431 2026] [:error] [pid 46953:tid 46963] [client 20.215.57.60:21653] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aem61UnlpdHh-P6wKbr2mAAAAkc"]
[Thu Apr 23 14:23:18.337304 2026] [:error] [pid 42973:tid 43065] [client 20.215.57.60:16277] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "aem61m6I0QqmmmLTHE2J5gAAAJY"]
[Thu Apr 23 14:23:18.979555 2026] [:error] [pid 64998:tid 65016] [client 20.215.57.60:27985] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aem61oV5EysYcTLjmwjRiwAAAc4"]
[Thu Apr 23 14:23:19.542688 2026] [:error] [pid 65000:tid 65050] [client 20.215.57.60:24465] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aem6176vRb9j6psK2ZaU9wAAAhE"]
[Thu Apr 23 14:23:20.088708 2026] [:error] [pid 64998:tid 65017] [client 20.215.57.60:28031] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aem62IV5EysYcTLjmwjRjgAAAc8"]
[Thu Apr 23 14:23:20.692293 2026] [:error] [pid 42972:tid 43024] [client 20.215.57.60:21633] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "aem62MOAb-3sOknsk4edzAAAAEg"]
[Thu Apr 23 14:23:21.308898 2026] [:error] [pid 42973:tid 43048] [client 20.215.57.60:24479] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aem62W6I0QqmmmLTHE2J6AAAAIU"]
[Thu Apr 23 14:23:21.939772 2026] [:error] [pid 65000:tid 65048] [client 20.215.57.60:21216] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aem62b6vRb9j6psK2ZaU_wAAAg8"]
[Thu Apr 23 14:23:22.476671 2026] [:error] [pid 42973:tid 43052] [client 20.215.57.60:21660] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aem62m6I0QqmmmLTHE2J7AAAAIk"]
[Thu Apr 23 14:23:23.162666 2026] [:error] [pid 42973:tid 43059] [client 20.215.57.60:24452] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "aem6226I0QqmmmLTHE2J7QAAAJA"]
[Thu Apr 23 14:23:23.748283 2026] [:error] [pid 42973:tid 43057] [client 20.215.57.60:24977] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aem6226I0QqmmmLTHE2J7gAAAI4"]
[Thu Apr 23 14:23:24.376651 2026] [:error] [pid 65000:tid 65057] [client 20.215.57.60:6627] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aem63L6vRb9j6psK2ZaVBwAAAhg"]
[Thu Apr 23 14:23:24.947711 2026] [:error] [pid 65000:tid 65047] [client 20.215.57.60:16260] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aem63L6vRb9j6psK2ZaVCQAAAg4"]
[Thu Apr 23 14:23:25.512007 2026] [:error] [pid 43083:tid 43107] [client 20.215.57.60:19658] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "aem63TC5hrvNXosL83JFeQAAANY"]
[Thu Apr 23 14:23:26.245645 2026] [:error] [pid 65000:tid 65056] [client 20.215.57.60:35915] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aem63r6vRb9j6psK2ZaVDgAAAhc"]
[Thu Apr 23 14:23:26.902617 2026] [:error] [pid 42973:tid 43047] [client 20.215.57.60:21670] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "aem63m6I0QqmmmLTHE2J8QAAAIQ"]
[Thu Apr 23 14:23:27.974926 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:29.488200 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:29.818592 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:30.149898 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:30.471387 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:30.857786 2026] [proxy_fcgi:error] [pid 64998:tid 65024] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:31.206372 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:31.559154 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:23:32.214802 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 20.215.57.60:35847] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:50.431300 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:50.598547 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:50.760395 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:50.922386 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:51.085818 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:51.258441 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:51.423006 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:51.587810 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:51.912907 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:52.073329 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:52.238185 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:52.403302 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:52.572001 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:52.743286 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:52.903747 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:53.069300 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:53.240249 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:53.406562 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 173.239.218.46:31277] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:56.588164 2026] [:error] [pid 59700:tid 59710] [client 173.239.218.46:31277] [client 173.239.218.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeo-eJXyGZJFeAIDWtlIlwAAAUg"]
[Thu Apr 23 23:44:57.420958 2026] [:error] [pid 46953:tid 46970] [client 173.239.218.37:20127] [client 173.239.218.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeo-eUnlpdHh-P6wKbpUWAAAAk4"]
[Thu Apr 23 23:44:58.241289 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 173.239.218.60:29007] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:58.741650 2026] [:error] [pid 64998:tid 65020] [client 173.239.218.60:29007] [client 173.239.218.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeo-eoV5EysYcTLjmwjG-wAAAdI"]
[Thu Apr 23 23:44:59.231027 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 173.239.218.27:33067] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.393025 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 173.239.218.27:33067] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.553158 2026] [:error] [pid 42972:tid 43028] [client 173.239.218.27:33067] [client 173.239.218.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeo-e8OAb-3sOknsk4d0uwAAAEw"]
[Fri Apr 24 01:04:57.191331 2026] [:error] [pid 64967:tid 64989] [client 104.28.208.60:48062] [client 104.28.208.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/style.php"] [unique_id "aepROYAV4GfOOdX8QzqT8QAAAZQ"]
[Fri Apr 24 01:05:04.830643 2026] [:error] [pid 42972:tid 43032] [client 104.28.208.60:34593] [client 104.28.208.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-content/style.php"] [unique_id "aepRQMOAb-3sOknsk4etagAAAFA"]
[Fri Apr 24 02:56:19.928443 2026] [:error] [pid 43083:tid 43088] [client 135.225.39.191:49478] [client 135.225.39.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeprUzC5hrvNXosL83K3GwAAAMM"]
[Fri Apr 24 02:56:22.406041 2026] [:error] [pid 65000:tid 65045] [client 135.225.39.191:49479] [client 135.225.39.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeprVr6vRb9j6psK2ZalZQAAAgw"]
[Fri Apr 24 02:56:27.717567 2026] [:error] [pid 64998:tid 65020] [client 135.225.39.191:32302] [client 135.225.39.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeprW4V5EysYcTLjmwhRbwAAAdI"]
[Fri Apr 24 02:56:31.683666 2026] [:error] [pid 64998:tid 65012] [client 135.225.39.191:38807] [client 135.225.39.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeprX4V5EysYcTLjmwhRfQAAAco"]
[Fri Apr 24 05:06:54.137671 2026] [proxy_fcgi:error] [pid 19101:tid 19144] [client 51.11.246.40:10213] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:06:54.378320 2026] [proxy_fcgi:error] [pid 19101:tid 19152] [client 51.11.246.40:10213] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:06:54.617780 2026] [:error] [pid 19101:tid 19154] [client 51.11.246.40:10213] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "aeqJ7mAHj9bEvrTgbO29sgAAAFE"]
[Fri Apr 24 05:06:55.115764 2026] [:error] [pid 52129:tid 52141] [client 51.11.246.40:27869] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "aeqJ7-KCZKf8_u2LKiA2JgAAAQg"]
[Fri Apr 24 05:06:55.613837 2026] [:error] [pid 52129:tid 52139] [client 51.11.246.40:27861] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "aeqJ7-KCZKf8_u2LKiA2KgAAAQY"]
[Fri Apr 24 05:06:56.085823 2026] [:error] [pid 52129:tid 52152] [client 51.11.246.40:29042] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "aeqJ8OKCZKf8_u2LKiA2LgAAARM"]
[Fri Apr 24 05:06:56.556771 2026] [:error] [pid 52129:tid 52151] [client 51.11.246.40:30378] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcs.php"] [unique_id "aeqJ8OKCZKf8_u2LKiA2MQAAARI"]
[Fri Apr 24 05:06:57.027685 2026] [:error] [pid 52129:tid 52140] [client 51.11.246.40:27893] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcs.php"] [unique_id "aeqJ8eKCZKf8_u2LKiA2NgAAAQc"]
[Fri Apr 24 05:06:57.498963 2026] [:error] [pid 19101:tid 19137] [client 51.11.246.40:29747] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcs.php"] [unique_id "aeqJ8WAHj9bEvrTgbO29twAAAEA"]
[Fri Apr 24 05:06:58.006029 2026] [:error] [pid 19101:tid 19145] [client 51.11.246.40:29709] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcs.php"] [unique_id "aeqJ8mAHj9bEvrTgbO29uQAAAEg"]
[Fri Apr 24 05:06:58.511520 2026] [:error] [pid 19100:tid 19119] [client 51.11.246.40:30397] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Marvins.php"] [unique_id "aeqJ8rF_hzQs4Cqbiff5MgAAAAk"]
[Fri Apr 24 05:06:58.981939 2026] [:error] [pid 19100:tid 19115] [client 51.11.246.40:26649] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Marvins.php"] [unique_id "aeqJ8rF_hzQs4Cqbiff5MwAAAAY"]
[Fri Apr 24 05:06:59.454320 2026] [:error] [pid 52129:tid 52138] [client 51.11.246.40:30372] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Marvins.php"] [unique_id "aeqJ8-KCZKf8_u2LKiA2RwAAAQU"]
[Fri Apr 24 05:06:59.926373 2026] [:error] [pid 52129:tid 52135] [client 51.11.246.40:30395] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Marvins.php"] [unique_id "aeqJ8-KCZKf8_u2LKiA2TAAAAQI"]
[Fri Apr 24 05:07:00.424277 2026] [:error] [pid 19101:tid 19156] [client 51.11.246.40:30354] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeqJ9GAHj9bEvrTgbO29wQAAAFM"]
[Fri Apr 24 05:07:00.923562 2026] [:error] [pid 19101:tid 19137] [client 51.11.246.40:27896] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeqJ9GAHj9bEvrTgbO29wwAAAEA"]
[Fri Apr 24 05:07:01.424878 2026] [:error] [pid 19100:tid 19131] [client 51.11.246.40:29048] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeqJ9bF_hzQs4Cqbiff5OQAAABU"]
[Fri Apr 24 05:07:01.921656 2026] [:error] [pid 19101:tid 19157] [client 51.11.246.40:26672] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "aeqJ9WAHj9bEvrTgbO29yAAAAFQ"]
[Fri Apr 24 05:07:02.419819 2026] [:error] [pid 19200:tid 19212] [client 51.11.246.40:26656] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "aeqJ9jQ--M3-tsKAnhF-jAAAAMQ"]
[Fri Apr 24 05:07:02.951966 2026] [:error] [pid 19102:tid 19185] [client 51.11.246.40:27886] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "aeqJ9gDSgrbLEZbkqD6oxQAAAJU"]
[Fri Apr 24 05:07:03.457516 2026] [:error] [pid 52129:tid 52150] [client 51.11.246.40:30370] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "aeqJ9-KCZKf8_u2LKiA2YAAAARE"]
[Fri Apr 24 05:07:03.954489 2026] [:error] [pid 52129:tid 52155] [client 51.11.246.40:9289] [client 51.11.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "aeqJ9-KCZKf8_u2LKiA2ZQAAARY"]
[Fri Apr 24 16:19:58.426894 2026] [proxy_fcgi:error] [pid 17720:tid 17766] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:19:58.693426 2026] [proxy_fcgi:error] [pid 17720:tid 17754] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:19:58.961996 2026] [proxy_fcgi:error] [pid 17720:tid 17770] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:20:00.790583 2026] [proxy_fcgi:error] [pid 17720:tid 17763] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:20:01.059504 2026] [proxy_fcgi:error] [pid 17720:tid 17757] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:20:01.325821 2026] [proxy_fcgi:error] [pid 17720:tid 17754] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:20:01.885250 2026] [proxy_fcgi:error] [pid 17720:tid 17766] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:20:02.154785 2026] [proxy_fcgi:error] [pid 17720:tid 17769] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:20:02.426575 2026] [proxy_fcgi:error] [pid 17720:tid 17776] [client 20.238.112.20:47519] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:20:02.689164 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:47519] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "aesnsuhlUs6BS3Ng7_UiKAAAANE"]
[Fri Apr 24 16:20:04.373890 2026] [:error] [pid 17721:tid 17784] [client 20.238.112.20:47768] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "aesntOFXXkLeyDnfk__39wAAAAM"]
[Fri Apr 24 16:20:05.093554 2026] [:error] [pid 17720:tid 17760] [client 20.238.112.20:47769] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "aesntehlUs6BS3Ng7_UiMAAAAMY"]
[Fri Apr 24 16:20:06.359402 2026] [:error] [pid 17720:tid 17778] [client 20.238.112.20:47677] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "aesntuhlUs6BS3Ng7_UiNQAAANg"]
[Fri Apr 24 16:20:06.956310 2026] [:error] [pid 17720:tid 17775] [client 20.238.112.20:47849] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesntuhlUs6BS3Ng7_UiOwAAANU"]
[Fri Apr 24 16:20:07.564984 2026] [:error] [pid 17720:tid 17769] [client 20.238.112.20:47556] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesnt-hlUs6BS3Ng7_UiQgAAAM8"]
[Fri Apr 24 16:20:08.358691 2026] [:error] [pid 14531:tid 14542] [client 20.238.112.20:47656] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesnuHfLU2gw-6KR-GZ1uwAAAUk"]
[Fri Apr 24 16:20:09.074166 2026] [:error] [pid 14531:tid 14537] [client 20.238.112.20:47855] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesnuXfLU2gw-6KR-GZ1vQAAAUQ"]
[Fri Apr 24 16:20:09.911968 2026] [:error] [pid 14531:tid 14548] [client 20.238.112.20:47767] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aesnuXfLU2gw-6KR-GZ1vgAAAU8"]
[Fri Apr 24 16:20:11.300991 2026] [:error] [pid 17721:tid 17795] [client 20.238.112.20:47525] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aesnu-FXXkLeyDnfk__3-wAAAA4"]
[Fri Apr 24 16:20:13.294929 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:47569] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aesnvehlUs6BS3Ng7_UiVwAAANE"]
[Fri Apr 24 16:20:14.080732 2026] [:error] [pid 17720:tid 17759] [client 20.238.112.20:47753] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "aesnvuhlUs6BS3Ng7_UiWgAAAMU"]
[Fri Apr 24 16:20:15.013140 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:47847] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesnv-hlUs6BS3Ng7_UiYAAAANE"]
[Fri Apr 24 16:20:15.628775 2026] [:error] [pid 14531:tid 14538] [client 20.238.112.20:47784] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesnv3fLU2gw-6KR-GZ1xQAAAUU"]
[Fri Apr 24 16:20:16.339783 2026] [:error] [pid 17720:tid 17776] [client 20.238.112.20:47645] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesnwOhlUs6BS3Ng7_UiaQAAANY"]
[Fri Apr 24 16:20:17.217857 2026] [:error] [pid 14531:tid 14534] [client 20.238.112.20:47806] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesnwXfLU2gw-6KR-GZ1yQAAAUE"]
[Fri Apr 24 16:20:18.889283 2026] [:error] [pid 17808:tid 17815] [client 20.238.112.20:47565] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "aesnwuarbOEFI8qshvLOogAAAEU"]
[Fri Apr 24 16:20:19.533626 2026] [:error] [pid 17808:tid 17834] [client 20.238.112.20:47858] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "aesnw-arbOEFI8qshvLOpQAAAFg"]
[Fri Apr 24 16:20:20.292662 2026] [:error] [pid 14531:tid 14552] [client 20.238.112.20:47722] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "aesnxHfLU2gw-6KR-GZ1zgAAAVM"]
[Fri Apr 24 16:20:21.105061 2026] [:error] [pid 17721:tid 17789] [client 20.238.112.20:47793] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "aesnxeFXXkLeyDnfk__4AAAAAAg"]
[Fri Apr 24 16:20:21.900146 2026] [:error] [pid 22114:tid 22117] [client 20.238.112.20:47801] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "aesnxYAuWGz3WlMQjoe9QQAAAQA"]
[Fri Apr 24 16:20:22.664603 2026] [:error] [pid 17719:tid 17731] [client 20.238.112.20:47553] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "aesnxsTZ9gzEyL1BkPpxFgAAAIQ"]
[Fri Apr 24 16:20:23.281780 2026] [:error] [pid 17719:tid 17736] [client 20.238.112.20:47571] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "aesnx8TZ9gzEyL1BkPpxFwAAAIk"]
[Fri Apr 24 16:20:23.981497 2026] [:error] [pid 17719:tid 17739] [client 20.238.112.20:47785] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "aesnx8TZ9gzEyL1BkPpxGAAAAIw"]
[Fri Apr 24 16:20:25.014709 2026] [:error] [pid 17721:tid 17788] [client 20.238.112.20:47531] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "aesnyeFXXkLeyDnfk__4AwAAAAc"]
[Fri Apr 24 16:20:25.859360 2026] [:error] [pid 17721:tid 17781] [client 20.238.112.20:47742] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "aesnyeFXXkLeyDnfk__4CwAAAAA"]
[Fri Apr 24 16:20:27.379256 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:47860] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "aesny-hlUs6BS3Ng7_UihQAAANE"]
[Fri Apr 24 16:20:27.976817 2026] [:error] [pid 22114:tid 22118] [client 20.238.112.20:47799] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "aesny4AuWGz3WlMQjoe9SgAAAQE"]
[Fri Apr 24 16:20:28.756341 2026] [:error] [pid 17719:tid 17747] [client 20.238.112.20:47741] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aesnzMTZ9gzEyL1BkPpxHgAAAJQ"]
[Fri Apr 24 16:20:29.475559 2026] [:error] [pid 17720:tid 17770] [client 20.238.112.20:47619] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aesnzehlUs6BS3Ng7_UihgAAANA"]
[Fri Apr 24 16:20:30.693366 2026] [:error] [pid 17719:tid 17751] [client 20.238.112.20:47904] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aesnzsTZ9gzEyL1BkPpxJQAAAJg"]
[Fri Apr 24 16:20:31.279808 2026] [:error] [pid 17720:tid 17776] [client 20.238.112.20:47928] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "aesnz-hlUs6BS3Ng7_UijQAAANY"]
[Fri Apr 24 16:20:31.851463 2026] [:error] [pid 17719:tid 17750] [client 20.238.112.20:47942] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aesnz8TZ9gzEyL1BkPpxKwAAAJc"]
[Fri Apr 24 16:20:32.500250 2026] [:error] [pid 17719:tid 17743] [client 20.238.112.20:47690] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aesn0MTZ9gzEyL1BkPpxLQAAAJA"]
[Fri Apr 24 16:20:33.110792 2026] [:error] [pid 17719:tid 17740] [client 20.238.112.20:47732] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aesn0cTZ9gzEyL1BkPpxMgAAAI0"]
[Fri Apr 24 16:20:33.679270 2026] [:error] [pid 17720:tid 17761] [client 20.238.112.20:47894] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aesn0ehlUs6BS3Ng7_UiowAAAMc"]
[Fri Apr 24 16:20:34.487798 2026] [:error] [pid 14531:tid 14547] [client 20.238.112.20:47625] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aesn0nfLU2gw-6KR-GZ13gAAAU4"]
[Fri Apr 24 16:20:35.598458 2026] [:error] [pid 17720:tid 17762] [client 20.238.112.20:47833] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aesn0-hlUs6BS3Ng7_UirAAAAMg"]
[Fri Apr 24 16:20:36.633073 2026] [:error] [pid 17719:tid 17739] [client 20.238.112.20:45996] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aesn1MTZ9gzEyL1BkPpxRgAAAIw"]
[Fri Apr 24 16:20:38.100637 2026] [:error] [pid 17721:tid 17798] [client 20.238.112.20:47333] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "aesn1uFXXkLeyDnfk__4GgAAABE"]
[Fri Apr 24 16:20:39.574970 2026] [:error] [pid 14531:tid 14543] [client 20.238.112.20:47775] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth.php"] [unique_id "aesn13fLU2gw-6KR-GZ14gAAAUo"]
[Fri Apr 24 16:20:40.859791 2026] [:error] [pid 14531:tid 14544] [client 20.238.112.20:47687] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth.php"] [unique_id "aesn2HfLU2gw-6KR-GZ16AAAAUs"]
[Fri Apr 24 16:20:42.891770 2026] [:error] [pid 17721:tid 17797] [client 20.238.112.20:47874] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth.php"] [unique_id "aesn2uFXXkLeyDnfk__4HwAAABA"]
[Fri Apr 24 16:20:44.439826 2026] [:error] [pid 17808:tid 17829] [client 20.238.112.20:47809] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/auth.php"] [unique_id "aesn3OarbOEFI8qshvLOugAAAFM"]
[Fri Apr 24 16:20:45.493357 2026] [:error] [pid 17721:tid 17802] [client 20.238.112.20:47787] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aesn3eFXXkLeyDnfk__4KQAAABU"]
[Fri Apr 24 16:20:46.243939 2026] [:error] [pid 17808:tid 17821] [client 20.238.112.20:47803] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aesn3uarbOEFI8qshvLOvwAAAEs"]
[Fri Apr 24 16:20:46.966717 2026] [:error] [pid 17720:tid 17772] [client 20.238.112.20:47887] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aesn3uhlUs6BS3Ng7_Ui0gAAANI"]
[Fri Apr 24 16:20:48.190016 2026] [:error] [pid 17721:tid 17786] [client 20.238.112.20:47733] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "aesn4OFXXkLeyDnfk__4OAAAAAU"]
[Fri Apr 24 16:20:51.312714 2026] [:error] [pid 17720:tid 17759] [client 20.238.112.20:47739] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aesn4-hlUs6BS3Ng7_Ui4AAAAMU"]
[Fri Apr 24 16:20:52.089912 2026] [:error] [pid 17721:tid 17797] [client 20.238.112.20:47500] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aesn5OFXXkLeyDnfk__4UQAAABA"]
[Fri Apr 24 16:20:53.407637 2026] [:error] [pid 17808:tid 17812] [client 20.238.112.20:47757] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aesn5earbOEFI8qshvLOzwAAAEI"]
[Fri Apr 24 16:20:54.394944 2026] [:error] [pid 17720:tid 17774] [client 20.238.112.20:47780] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "aesn5uhlUs6BS3Ng7_Ui7gAAANQ"]
[Fri Apr 24 16:20:55.203666 2026] [:error] [pid 17808:tid 17826] [client 20.238.112.20:47655] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aesn5-arbOEFI8qshvLO0AAAAFA"]
[Fri Apr 24 16:20:56.213451 2026] [:error] [pid 17720:tid 17776] [client 20.238.112.20:47811] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aesn6OhlUs6BS3Ng7_Ui9wAAANY"]
[Fri Apr 24 16:20:57.279787 2026] [:error] [pid 14531:tid 14556] [client 20.238.112.20:47936] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aesn6XfLU2gw-6KR-GZ1_wAAAVc"]
[Fri Apr 24 16:20:57.979748 2026] [:error] [pid 17720:tid 17778] [client 20.238.112.20:47670] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-png.php"] [unique_id "aesn6ehlUs6BS3Ng7_UjAwAAANg"]
[Fri Apr 24 16:20:58.694760 2026] [:error] [pid 14531:tid 14545] [client 20.238.112.20:47782] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aesn6nfLU2gw-6KR-GZ2BgAAAUw"]
[Fri Apr 24 16:20:59.303461 2026] [:error] [pid 14531:tid 14550] [client 20.238.112.20:48054] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aesn63fLU2gw-6KR-GZ2CQAAAVE"]
[Fri Apr 24 16:21:00.269921 2026] [:error] [pid 17720:tid 17765] [client 20.238.112.20:48076] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aesn7OhlUs6BS3Ng7_UjEgAAAMs"]
[Fri Apr 24 16:21:01.854415 2026] [:error] [pid 14531:tid 14544] [client 20.238.112.20:47749] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "aesn7XfLU2gw-6KR-GZ2DQAAAUs"]
[Fri Apr 24 16:21:04.179901 2026] [proxy_fcgi:error] [pid 17719:tid 17730] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:04.759480 2026] [proxy_fcgi:error] [pid 17719:tid 17742] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:05.075353 2026] [proxy_fcgi:error] [pid 17719:tid 17733] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:05.365071 2026] [proxy_fcgi:error] [pid 17719:tid 17727] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:05.662354 2026] [proxy_fcgi:error] [pid 17719:tid 17745] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:05.952435 2026] [proxy_fcgi:error] [pid 17719:tid 17740] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:06.241610 2026] [proxy_fcgi:error] [pid 17719:tid 17731] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:06.537757 2026] [proxy_fcgi:error] [pid 17719:tid 17736] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:06.832422 2026] [proxy_fcgi:error] [pid 17719:tid 17749] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:07.131956 2026] [proxy_fcgi:error] [pid 17719:tid 17739] [client 20.238.112.20:48060] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:21:07.419608 2026] [:error] [pid 17719:tid 17728] [client 20.238.112.20:48060] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aesn88TZ9gzEyL1BkPpxYwAAAIE"]
[Fri Apr 24 16:21:10.047410 2026] [:error] [pid 17808:tid 17823] [client 20.238.112.20:47996] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aesn9uarbOEFI8qshvLO7gAAAE0"]
[Fri Apr 24 16:21:10.605272 2026] [:error] [pid 22114:tid 22125] [client 20.238.112.20:47946] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aesn9oAuWGz3WlMQjoe9awAAAQg"]
[Fri Apr 24 16:21:11.250812 2026] [:error] [pid 17720:tid 17757] [client 20.238.112.20:48080] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/saorix1.php"] [unique_id "aesn9-hlUs6BS3Ng7_UjMgAAAMM"]
[Fri Apr 24 16:21:12.001166 2026] [:error] [pid 17720:tid 17755] [client 20.238.112.20:47796] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aesn-OhlUs6BS3Ng7_UjNAAAAME"]
[Fri Apr 24 16:21:12.626961 2026] [:error] [pid 17808:tid 17828] [client 20.238.112.20:47939] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aesn-OarbOEFI8qshvLO8wAAAFI"]
[Fri Apr 24 16:21:13.282476 2026] [:error] [pid 17808:tid 17814] [client 20.238.112.20:47510] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aesn-earbOEFI8qshvLO-QAAAEQ"]
[Fri Apr 24 16:21:14.321731 2026] [:error] [pid 17808:tid 17819] [client 20.238.112.20:48101] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/byypas.php"] [unique_id "aesn-uarbOEFI8qshvLO_wAAAEk"]
[Fri Apr 24 16:21:15.595637 2026] [:error] [pid 22114:tid 22129] [client 20.238.112.20:47673] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aesn-4AuWGz3WlMQjoe9dAAAAQw"]
[Fri Apr 24 16:21:16.764321 2026] [:error] [pid 17720:tid 17774] [client 20.238.112.20:47766] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aesn_OhlUs6BS3Ng7_UjQQAAANQ"]
[Fri Apr 24 16:21:21.564482 2026] [:error] [pid 17808:tid 17825] [client 20.238.112.20:47993] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aesoAearbOEFI8qshvLPEgAAAE8"]
[Fri Apr 24 16:21:24.881441 2026] [:error] [pid 17720:tid 17776] [client 20.238.112.20:47686] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aesoBOhlUs6BS3Ng7_UjawAAANY"]
[Fri Apr 24 16:21:29.004852 2026] [:error] [pid 17720:tid 17754] [client 20.238.112.20:47994] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aesoCehlUs6BS3Ng7_UjeAAAAMA"]
[Fri Apr 24 16:21:29.909119 2026] [:error] [pid 17720:tid 17763] [client 20.238.112.20:48218] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aesoCehlUs6BS3Ng7_UjegAAAMk"]
[Fri Apr 24 16:21:32.217319 2026] [:error] [pid 17808:tid 17822] [client 20.238.112.20:48169] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aesoDOarbOEFI8qshvLPHQAAAEw"]
[Fri Apr 24 16:21:35.231031 2026] [:error] [pid 14531:tid 14533] [client 20.238.112.20:47818] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "aesoD3fLU2gw-6KR-GZ2fgAAAUA"]
[Fri Apr 24 16:21:38.106031 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:47824] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aesoEuhlUs6BS3Ng7_UjjgAAANE"]
[Fri Apr 24 16:21:38.667033 2026] [:error] [pid 17720:tid 17776] [client 20.238.112.20:48125] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aesoEuhlUs6BS3Ng7_UjlAAAANY"]
[Fri Apr 24 16:21:40.418161 2026] [:error] [pid 17808:tid 17833] [client 20.238.112.20:48026] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aesoFOarbOEFI8qshvLPJgAAAFc"]
[Fri Apr 24 16:21:41.064161 2026] [:error] [pid 17721:tid 17789] [client 20.238.112.20:48038] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/0x.php"] [unique_id "aesoFeFXXkLeyDnfk__4mwAAAAg"]
[Fri Apr 24 16:21:42.429185 2026] [:error] [pid 17719:tid 17739] [client 20.238.112.20:48079] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aesoFsTZ9gzEyL1BkPpxeAAAAIw"]
[Fri Apr 24 16:21:43.161478 2026] [:error] [pid 14531:tid 14536] [client 20.238.112.20:47907] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aesoF3fLU2gw-6KR-GZ2jQAAAUM"]
[Fri Apr 24 16:21:43.885398 2026] [:error] [pid 17720:tid 17767] [client 20.238.112.20:48244] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aesoF-hlUs6BS3Ng7_UjngAAAM0"]
[Fri Apr 24 16:21:44.869993 2026] [:error] [pid 17721:tid 17786] [client 20.238.112.20:47913] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "aesoGOFXXkLeyDnfk__4oQAAAAU"]
[Fri Apr 24 16:21:45.654824 2026] [:error] [pid 17720:tid 17775] [client 20.238.112.20:47969] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aesoGehlUs6BS3Ng7_UjogAAANU"]
[Fri Apr 24 16:21:46.554303 2026] [:error] [pid 17721:tid 17782] [client 20.238.112.20:48028] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aesoGuFXXkLeyDnfk__4pgAAAAE"]
[Fri Apr 24 16:21:47.739490 2026] [:error] [pid 17719:tid 17740] [client 20.238.112.20:47947] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aesoG8TZ9gzEyL1BkPpxggAAAI0"]
[Fri Apr 24 16:21:51.611090 2026] [:error] [pid 17721:tid 17784] [client 20.238.112.20:47667] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "aesoH-FXXkLeyDnfk__4rQAAAAM"]
[Fri Apr 24 16:21:54.012878 2026] [:error] [pid 17721:tid 17798] [client 20.238.112.20:47916] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aesoIuFXXkLeyDnfk__4sQAAABE"]
[Fri Apr 24 16:21:54.697711 2026] [:error] [pid 14531:tid 14553] [client 20.238.112.20:48223] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aesoInfLU2gw-6KR-GZ2ngAAAVQ"]
[Fri Apr 24 16:21:55.708458 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:48183] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aesoI-hlUs6BS3Ng7_UjrwAAANE"]
[Fri Apr 24 16:21:56.414502 2026] [:error] [pid 17721:tid 17802] [client 20.238.112.20:47874] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bolt.php"] [unique_id "aesoJOFXXkLeyDnfk__4tQAAABU"]
[Fri Apr 24 16:21:57.039321 2026] [:error] [pid 22114:tid 22132] [client 20.238.112.20:48130] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/koiy.php"] [unique_id "aesoJYAuWGz3WlMQjoe9kgAAAQ8"]
[Fri Apr 24 16:21:57.940168 2026] [:error] [pid 17721:tid 17787] [client 20.238.112.20:48087] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/koiy.php"] [unique_id "aesoJeFXXkLeyDnfk__4uAAAAAY"]
[Fri Apr 24 16:21:58.827506 2026] [:error] [pid 17721:tid 17800] [client 20.238.112.20:47838] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/koiy.php"] [unique_id "aesoJuFXXkLeyDnfk__4uwAAABM"]
[Fri Apr 24 16:21:59.513392 2026] [:error] [pid 14531:tid 14539] [client 20.238.112.20:48335] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/koiy.php"] [unique_id "aesoJ3fLU2gw-6KR-GZ2rgAAAUY"]
[Fri Apr 24 16:22:00.380499 2026] [:error] [pid 17720:tid 17754] [client 20.238.112.20:48049] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "aesoKOhlUs6BS3Ng7_UjtwAAAMA"]
[Fri Apr 24 16:22:01.433615 2026] [:error] [pid 17808:tid 17816] [client 20.238.112.20:48070] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "aesoKearbOEFI8qshvLPOQAAAEY"]
[Fri Apr 24 16:22:02.134672 2026] [:error] [pid 17808:tid 17830] [client 20.238.112.20:48328] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "aesoKuarbOEFI8qshvLPOgAAAFQ"]
[Fri Apr 24 16:22:02.890432 2026] [:error] [pid 17720:tid 17755] [client 20.238.112.20:48044] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "aesoKuhlUs6BS3Ng7_UjuwAAAME"]
[Fri Apr 24 16:22:03.649567 2026] [:error] [pid 17808:tid 17820] [client 20.238.112.20:47974] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aesoK-arbOEFI8qshvLPPgAAAEo"]
[Fri Apr 24 16:22:04.172978 2026] [:error] [pid 17720:tid 17760] [client 20.238.112.20:48240] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "aesoLOhlUs6BS3Ng7_UjwAAAAMY"]
[Fri Apr 24 16:22:07.101256 2026] [proxy_fcgi:error] [pid 17808:tid 17812] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:07.627314 2026] [proxy_fcgi:error] [pid 17808:tid 17833] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:07.883135 2026] [proxy_fcgi:error] [pid 17808:tid 17816] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:08.136843 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:08.408376 2026] [proxy_fcgi:error] [pid 17808:tid 17820] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:08.662149 2026] [proxy_fcgi:error] [pid 17808:tid 17815] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:08.917051 2026] [proxy_fcgi:error] [pid 17808:tid 17831] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:09.183969 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:09.439305 2026] [proxy_fcgi:error] [pid 17808:tid 17814] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:09.700045 2026] [proxy_fcgi:error] [pid 17808:tid 17828] [client 20.238.112.20:48187] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:22:09.950494 2026] [:error] [pid 17808:tid 17825] [client 20.238.112.20:48187] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "aesoMearbOEFI8qshvLPUgAAAE8"]
[Fri Apr 24 16:22:10.921337 2026] [:error] [pid 17720:tid 17768] [client 20.238.112.20:48343] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "aesoMuhlUs6BS3Ng7_UjzgAAAM4"]
[Fri Apr 24 16:22:11.915035 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:48051] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "aesoM-hlUs6BS3Ng7_Uj1gAAANE"]
[Fri Apr 24 16:22:12.746960 2026] [:error] [pid 17719:tid 17732] [client 20.238.112.20:48234] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/t00l.php"] [unique_id "aesoNMTZ9gzEyL1BkPpxnQAAAIU"]
[Fri Apr 24 16:22:13.534371 2026] [:error] [pid 17720:tid 17774] [client 20.238.112.20:48116] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "aesoNehlUs6BS3Ng7_Uj3QAAANQ"]
[Fri Apr 24 16:22:14.545635 2026] [:error] [pid 17720:tid 17775] [client 20.238.112.20:48317] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "aesoNuhlUs6BS3Ng7_Uj4QAAANU"]
[Fri Apr 24 16:22:15.769382 2026] [:error] [pid 17808:tid 17832] [client 20.238.112.20:48370] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "aesoN-arbOEFI8qshvLPVgAAAFY"]
[Fri Apr 24 16:22:17.293955 2026] [:error] [pid 22114:tid 22118] [client 20.238.112.20:48047] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "aesoOYAuWGz3WlMQjoe9mQAAAQE"]
[Fri Apr 24 16:22:19.067255 2026] [:error] [pid 17720:tid 17772] [client 20.238.112.20:48050] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aesoO-hlUs6BS3Ng7_Uj7wAAANI"]
[Fri Apr 24 16:22:19.792702 2026] [:error] [pid 14531:tid 14533] [client 20.238.112.20:48153] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aesoO3fLU2gw-6KR-GZ2ywAAAUA"]
[Fri Apr 24 16:22:20.966504 2026] [:error] [pid 14531:tid 14556] [client 20.238.112.20:48123] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aesoPHfLU2gw-6KR-GZ2zAAAAVc"]
[Fri Apr 24 16:22:22.563755 2026] [:error] [pid 17720:tid 17777] [client 20.238.112.20:47976] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acc.php"] [unique_id "aesoPuhlUs6BS3Ng7_Uj-AAAANc"]
[Fri Apr 24 16:22:23.454842 2026] [:error] [pid 14531:tid 14551] [client 20.238.112.20:48064] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "aesoP3fLU2gw-6KR-GZ20QAAAVI"]
[Fri Apr 24 16:22:24.497808 2026] [:error] [pid 17808:tid 17828] [client 20.238.112.20:48226] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "aesoQOarbOEFI8qshvLPWQAAAFI"]
[Fri Apr 24 16:22:25.891124 2026] [:error] [pid 17720:tid 17764] [client 20.238.112.20:48365] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "aesoQehlUs6BS3Ng7_UkCwAAAMo"]
[Fri Apr 24 16:22:26.670485 2026] [:error] [pid 17721:tid 17800] [client 20.238.112.20:47892] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "aesoQuFXXkLeyDnfk__43AAAABM"]
[Fri Apr 24 16:22:28.093283 2026] [:error] [pid 14531:tid 14536] [client 20.238.112.20:48055] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aesoRHfLU2gw-6KR-GZ22gAAAUM"]
[Fri Apr 24 16:22:31.043571 2026] [:error] [pid 14531:tid 14546] [client 20.238.112.20:48173] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aesoR3fLU2gw-6KR-GZ24gAAAU0"]
[Fri Apr 24 16:22:34.881330 2026] [:error] [pid 17721:tid 17794] [client 20.238.112.20:48470] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aesoSuFXXkLeyDnfk__45AAAAA0"]
[Fri Apr 24 16:22:35.839716 2026] [:error] [pid 17720:tid 17765] [client 20.238.112.20:48383] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "aesoS-hlUs6BS3Ng7_UkIwAAAMs"]
[Fri Apr 24 16:22:38.503417 2026] [:error] [pid 17719:tid 17746] [client 20.238.112.20:48430] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aesoTsTZ9gzEyL1BkPpxqQAAAJM"]
[Fri Apr 24 16:22:42.116884 2026] [:error] [pid 17808:tid 17812] [client 20.238.112.20:48442] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aesoUuarbOEFI8qshvLPawAAAEI"]
[Fri Apr 24 16:22:43.223313 2026] [:error] [pid 17808:tid 17832] [client 20.238.112.20:48259] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aesoU-arbOEFI8qshvLPcAAAAFY"]
[Fri Apr 24 16:22:43.802569 2026] [:error] [pid 14531:tid 14551] [client 20.238.112.20:48112] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packsin1.php"] [unique_id "aesoU3fLU2gw-6KR-GZ2_wAAAVI"]
[Fri Apr 24 16:22:44.397998 2026] [:error] [pid 17721:tid 17793] [client 20.238.112.20:48456] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aesoVOFXXkLeyDnfk__49QAAAAw"]
[Fri Apr 24 16:22:45.009063 2026] [:error] [pid 17721:tid 17785] [client 20.238.112.20:48115] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aesoVeFXXkLeyDnfk__49wAAAAQ"]
[Fri Apr 24 16:22:45.665809 2026] [:error] [pid 17720:tid 17774] [client 20.238.112.20:48274] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aesoVehlUs6BS3Ng7_UkNQAAANQ"]
[Fri Apr 24 16:22:46.276683 2026] [:error] [pid 17720:tid 17777] [client 20.238.112.20:48492] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "aesoVuhlUs6BS3Ng7_UkOgAAANc"]
[Fri Apr 24 16:22:46.881085 2026] [:error] [pid 17721:tid 17799] [client 20.238.112.20:48360] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "aesoVuFXXkLeyDnfk__4-gAAABI"]
[Fri Apr 24 16:22:47.601520 2026] [:error] [pid 17721:tid 17789] [client 20.238.112.20:48074] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "aesoV-FXXkLeyDnfk__4_AAAAAg"]
[Fri Apr 24 16:22:48.235249 2026] [:error] [pid 17720:tid 17767] [client 20.238.112.20:48465] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "aesoWOhlUs6BS3Ng7_UkPwAAAM0"]
[Fri Apr 24 16:22:49.418109 2026] [:error] [pid 14531:tid 14539] [client 20.238.112.20:48208] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "aesoWXfLU2gw-6KR-GZ3AwAAAUY"]
[Fri Apr 24 16:22:50.630701 2026] [:error] [pid 17719:tid 17742] [client 20.238.112.20:48162] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aesoWsTZ9gzEyL1BkPpxsAAAAI8"]
[Fri Apr 24 16:22:52.742924 2026] [:error] [pid 22114:tid 22122] [client 20.238.112.20:48386] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aesoXIAuWGz3WlMQjoe9sgAAAQU"]
[Fri Apr 24 16:22:53.743517 2026] [:error] [pid 17720:tid 17763] [client 20.238.112.20:48339] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aesoXehlUs6BS3Ng7_UkRQAAAMk"]
[Fri Apr 24 16:22:54.748901 2026] [:error] [pid 17808:tid 17825] [client 20.238.112.20:48488] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/motu.php"] [unique_id "aesoXuarbOEFI8qshvLPdQAAAE8"]
[Fri Apr 24 16:22:55.328532 2026] [:error] [pid 17808:tid 17834] [client 20.238.112.20:48077] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aesoX-arbOEFI8qshvLPdwAAAFg"]
[Fri Apr 24 16:22:56.244112 2026] [:error] [pid 17720:tid 17755] [client 20.238.112.20:48135] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aesoYOhlUs6BS3Ng7_UkRwAAAME"]
[Fri Apr 24 16:22:56.910626 2026] [:error] [pid 14531:tid 14540] [client 20.238.112.20:48397] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aesoYHfLU2gw-6KR-GZ3DwAAAUc"]
[Fri Apr 24 16:22:57.919730 2026] [:error] [pid 17721:tid 17804] [client 20.238.112.20:48182] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aesoYeFXXkLeyDnfk__5BgAAABc"]
[Fri Apr 24 16:22:58.588670 2026] [:error] [pid 17720:tid 17770] [client 20.238.112.20:48114] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aesoYuhlUs6BS3Ng7_UkSwAAANA"]
[Fri Apr 24 16:22:59.492657 2026] [:error] [pid 17808:tid 17832] [client 20.238.112.20:48129] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aesoY-arbOEFI8qshvLPfAAAAFY"]
[Fri Apr 24 16:23:00.390717 2026] [:error] [pid 22114:tid 22119] [client 20.238.112.20:48358] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aesoZIAuWGz3WlMQjoe9tgAAAQI"]
[Fri Apr 24 16:23:02.302425 2026] [:error] [pid 22114:tid 22127] [client 20.238.112.20:48478] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "aesoZoAuWGz3WlMQjoe9uAAAAQo"]
[Fri Apr 24 16:23:04.199736 2026] [:error] [pid 14531:tid 14554] [client 20.238.112.20:48322] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aesoaHfLU2gw-6KR-GZ3FQAAAVU"]
[Fri Apr 24 16:23:07.247314 2026] [:error] [pid 17719:tid 17744] [client 20.238.112.20:48331] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aesoa8TZ9gzEyL1BkPpxtwAAAJE"]
[Fri Apr 24 16:23:08.739426 2026] [:error] [pid 17720:tid 17773] [client 20.238.112.20:48058] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "aesobOhlUs6BS3Ng7_UkZwAAANM"]
[Fri Apr 24 16:23:10.003995 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:10.294848 2026] [proxy_fcgi:error] [pid 17720:tid 17760] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:10.582732 2026] [proxy_fcgi:error] [pid 17720:tid 17758] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:10.874568 2026] [proxy_fcgi:error] [pid 17720:tid 17773] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:11.164550 2026] [proxy_fcgi:error] [pid 17720:tid 17772] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:11.456083 2026] [proxy_fcgi:error] [pid 17720:tid 17766] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:11.745171 2026] [proxy_fcgi:error] [pid 17720:tid 17761] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:12.036809 2026] [proxy_fcgi:error] [pid 17720:tid 17759] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:12.328325 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:12.627226 2026] [proxy_fcgi:error] [pid 17720:tid 17754] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:12.917169 2026] [proxy_fcgi:error] [pid 17720:tid 17772] [client 20.238.112.20:48378] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:23:13.203463 2026] [:error] [pid 17720:tid 17777] [client 20.238.112.20:48378] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "aesocehlUs6BS3Ng7_UkhQAAANc"]
[Fri Apr 24 16:23:14.645666 2026] [:error] [pid 17721:tid 17797] [client 20.238.112.20:48545] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "aesocuFXXkLeyDnfk__5DQAAABA"]
[Fri Apr 24 16:23:15.608109 2026] [:error] [pid 17721:tid 17783] [client 20.238.112.20:48505] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "aesoc-FXXkLeyDnfk__5FwAAAAI"]
[Fri Apr 24 16:23:17.906405 2026] [:error] [pid 17719:tid 17737] [client 20.238.112.20:48283] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "aesodcTZ9gzEyL1BkPpxvQAAAIo"]
[Fri Apr 24 16:23:20.215191 2026] [:error] [pid 22114:tid 22134] [client 20.238.112.20:48364] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aesoeIAuWGz3WlMQjoe9wwAAARE"]
[Fri Apr 24 16:23:22.265806 2026] [:error] [pid 17808:tid 17811] [client 20.238.112.20:48380] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aesoeuarbOEFI8qshvLPnwAAAEE"]
[Fri Apr 24 16:23:23.019543 2026] [:error] [pid 17808:tid 17829] [client 20.238.112.20:48449] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aesoe-arbOEFI8qshvLPowAAAFM"]
[Fri Apr 24 16:23:24.147172 2026] [:error] [pid 17720:tid 17757] [client 20.238.112.20:48232] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "aesofOhlUs6BS3Ng7_UkkwAAAMM"]
[Fri Apr 24 16:23:25.115964 2026] [:error] [pid 17721:tid 17783] [client 20.238.112.20:48606] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ai.php"] [unique_id "aesofeFXXkLeyDnfk__5KgAAAAI"]
[Fri Apr 24 16:23:26.078398 2026] [:error] [pid 17720:tid 17778] [client 20.238.112.20:48219] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ai.php"] [unique_id "aesofuhlUs6BS3Ng7_UkmAAAANg"]
[Fri Apr 24 16:23:26.681780 2026] [:error] [pid 17720:tid 17762] [client 20.238.112.20:48524] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ai.php"] [unique_id "aesofuhlUs6BS3Ng7_UkmwAAAMg"]
[Fri Apr 24 16:23:27.854328 2026] [:error] [pid 17808:tid 17815] [client 20.238.112.20:48196] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ai.php"] [unique_id "aesof-arbOEFI8qshvLPqgAAAEU"]
[Fri Apr 24 16:23:29.012816 2026] [:error] [pid 17721:tid 17804] [client 20.238.112.20:48384] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aesogeFXXkLeyDnfk__5LQAAABc"]
[Fri Apr 24 16:23:30.729660 2026] [:error] [pid 17721:tid 17801] [client 20.238.112.20:48595] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aesoguFXXkLeyDnfk__5LwAAABQ"]
[Fri Apr 24 16:23:32.331784 2026] [:error] [pid 17720:tid 17762] [client 20.238.112.20:48525] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aesohOhlUs6BS3Ng7_UkpwAAAMg"]
[Fri Apr 24 16:23:33.719997 2026] [:error] [pid 17720:tid 17757] [client 20.238.112.20:48355] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jga.php"] [unique_id "aesohehlUs6BS3Ng7_UkrAAAAMM"]
[Fri Apr 24 16:29:20.950903 2026] [:error] [pid 14531:tid 14550] [client 195.178.110.241:60616] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aesp4HfLU2gw-6KR-GZ5RQAAAVE"]
[Fri Apr 24 17:58:37.672744 2026] [:error] [pid 17808:tid 17810] [client 34.58.239.158:52724] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aes-zearbOEFI8qshvL7QwAAAEA"]
[Fri Apr 24 18:06:39.802048 2026] [:error] [pid 4177:tid 4201] [client 87.219.114.141:59095] [client 87.219.114.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.219.114.141, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aetAr32asKnvdrSe0x6rXgAAAZA"]
[Fri Apr 24 18:06:39.814286 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 87.219.114.141:59095] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:46.453966 2026] [proxy_fcgi:error] [pid 42791:tid 42806] [client 20.214.230.200:3786] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:46.596706 2026] [proxy_fcgi:error] [pid 42791:tid 42818] [client 20.214.230.200:3786] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:46.902961 2026] [proxy_fcgi:error] [pid 42791:tid 42807] [client 20.214.230.200:3786] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:47.047813 2026] [proxy_fcgi:error] [pid 42791:tid 42814] [client 20.214.230.200:3786] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:47.331677 2026] [proxy_fcgi:error] [pid 42791:tid 42810] [client 20.214.230.200:3786] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:47.473131 2026] [proxy_fcgi:error] [pid 42791:tid 42795] [client 20.214.230.200:3786] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:47.615247 2026] [proxy_fcgi:error] [pid 42791:tid 42813] [client 20.214.230.200:3786] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 01:19:48.036904 2026] [:error] [pid 42791:tid 42797] [client 20.214.230.200:3786] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aeumNLKmN9doraCEWKXsUwAAAcI"]
[Sat Apr 25 01:19:48.711087 2026] [:error] [pid 42755:tid 42757] [client 20.214.230.200:3176] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aeumNNH7__k0j6aa600D_QAAAIA"]
[Sat Apr 25 01:19:49.293705 2026] [:error] [pid 42852:tid 42874] [client 20.214.230.200:3794] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aeumNTMEwxhhak_EhMKRhQAAAlM"]
[Sat Apr 25 01:19:49.845647 2026] [:error] [pid 42852:tid 42876] [client 20.214.230.200:3172] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aeumNTMEwxhhak_EhMKRigAAAlU"]
[Sat Apr 25 01:52:38.431220 2026] [:error] [pid 42755:tid 42760] [client 155.248.183.67:55302] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-manager/initialize"] [unique_id "aeut5tH7__k0j6aa600MTQAAAIM"]
[Sat Apr 25 01:52:39.658271 2026] [:error] [pid 42791:tid 42815] [client 155.248.183.67:61769] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-manager/initialize"] [unique_id "aeut57KmN9doraCEWKX3GgAAAdQ"]
[Sat Apr 25 01:52:39.885487 2026] [:error] [pid 14989:tid 14998] [client 155.248.183.67:52778] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeut53hRYjsAsZTO4EOq4gAAAAc"]
[Sat Apr 25 05:50:04.856410 2026] [proxy_fcgi:error] [pid 46083:tid 46098] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:05.132260 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:05.413062 2026] [proxy_fcgi:error] [pid 46083:tid 46087] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:05.675556 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:05.938908 2026] [proxy_fcgi:error] [pid 46083:tid 46089] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:06.214505 2026] [proxy_fcgi:error] [pid 46083:tid 46097] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:06.484383 2026] [proxy_fcgi:error] [pid 46083:tid 46110] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:06.764412 2026] [proxy_fcgi:error] [pid 46083:tid 46091] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:07.031702 2026] [proxy_fcgi:error] [pid 46083:tid 46109] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:07.295251 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 20.251.112.6:33805] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:50:07.555009 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:33805] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pinfo.php"] [unique_id "aevljzxw_Zq74vWdjmklnwAAAQw"]
[Sat Apr 25 05:50:08.903007 2026] [:error] [pid 44425:tid 44431] [client 20.251.112.6:38332] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pinfo.php"] [unique_id "aevlkCUl-VlItvY2tR_9cQAAAMQ"]
[Sat Apr 25 05:50:09.892425 2026] [:error] [pid 44321:tid 44388] [client 20.251.112.6:53385] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pinfo.php"] [unique_id "aevlkY1b5lV-asWa_Y4jnwAAAIU"]
[Sat Apr 25 05:50:11.240778 2026] [:error] [pid 44320:tid 44357] [client 20.251.112.6:54687] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pinfo.php"] [unique_id "aevlkzmFqSpku_dij8hvJgAAAEE"]
[Sat Apr 25 05:50:12.668525 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:40140] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/litespeed.php"] [unique_id "aevllDxw_Zq74vWdjmklpQAAAQU"]
[Sat Apr 25 05:50:15.464851 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:33344] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/litespeed.php"] [unique_id "aevll41b5lV-asWa_Y4jpgAAAJc"]
[Sat Apr 25 05:50:16.687881 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:38320] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/litespeed.php"] [unique_id "aevlmCUl-VlItvY2tR_9fwAAANI"]
[Sat Apr 25 05:50:18.745750 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:38294] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/litespeed.php"] [unique_id "aevlmjxw_Zq74vWdjmklsgAAARM"]
[Sat Apr 25 05:50:21.088963 2026] [:error] [pid 44319:tid 44334] [client 20.251.112.6:47075] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environments.php"] [unique_id "aevlnczJPAVLUb2pWtJNAgAAAAU"]
[Sat Apr 25 05:50:22.203330 2026] [:error] [pid 44425:tid 44432] [client 20.251.112.6:33794] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environments.php"] [unique_id "aevlniUl-VlItvY2tR_9igAAAMU"]
[Sat Apr 25 05:50:23.723543 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:33349] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environments.php"] [unique_id "aevlnzxw_Zq74vWdjmkl0gAAARM"]
[Sat Apr 25 05:50:27.288945 2026] [:error] [pid 44321:tid 44399] [client 20.251.112.6:33373] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environments.php"] [unique_id "aevlo41b5lV-asWa_Y4juQAAAJA"]
[Sat Apr 25 05:50:28.726633 2026] [:error] [pid 44321:tid 44398] [client 20.251.112.6:54756] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/raf.php"] [unique_id "aevlpI1b5lV-asWa_Y4jwgAAAI8"]
[Sat Apr 25 05:50:30.560165 2026] [:error] [pid 44425:tid 44435] [client 20.251.112.6:35198] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/raf.php"] [unique_id "aevlpiUl-VlItvY2tR_9nAAAAMg"]
[Sat Apr 25 05:50:33.198464 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:61879] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/raf.php"] [unique_id "aevlqSUl-VlItvY2tR_9owAAANI"]
[Sat Apr 25 05:50:34.250019 2026] [:error] [pid 44321:tid 44387] [client 20.251.112.6:54722] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/raf.php"] [unique_id "aevlqo1b5lV-asWa_Y4jzAAAAIQ"]
[Sat Apr 25 05:50:35.131841 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:35182] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aevlqzxw_Zq74vWdjmkl7QAAAQg"]
[Sat Apr 25 05:50:36.107220 2026] [:error] [pid 46083:tid 46108] [client 20.251.112.6:40170] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aevlrDxw_Zq74vWdjmkl9AAAARQ"]
[Sat Apr 25 05:50:36.750299 2026] [:error] [pid 46083:tid 46102] [client 20.251.112.6:61883] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aevlrDxw_Zq74vWdjmkl9wAAAQ8"]
[Sat Apr 25 05:50:37.531159 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:45457] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "aevlrY1b5lV-asWa_Y4j0gAAAJc"]
[Sat Apr 25 05:50:38.404865 2026] [:error] [pid 46083:tid 46111] [client 20.251.112.6:34790] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infos.php"] [unique_id "aevlrjxw_Zq74vWdjmkmAAAAARc"]
[Sat Apr 25 05:50:39.584574 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:61850] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infos.php"] [unique_id "aevlrzxw_Zq74vWdjmkmBAAAAQw"]
[Sat Apr 25 05:50:40.441041 2026] [:error] [pid 44319:tid 44348] [client 20.251.112.6:35967] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infos.php"] [unique_id "aevlsMzJPAVLUb2pWtJNGQAAABM"]
[Sat Apr 25 05:50:41.134999 2026] [:error] [pid 44321:tid 44395] [client 20.251.112.6:33368] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infos.php"] [unique_id "aevlsY1b5lV-asWa_Y4j1AAAAIw"]
[Sat Apr 25 05:50:41.681983 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:61834] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aws.php"] [unique_id "aevlsTxw_Zq74vWdjmkmCwAAAQU"]
[Sat Apr 25 05:50:42.235066 2026] [:error] [pid 46083:tid 46112] [client 20.251.112.6:34775] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aws.php"] [unique_id "aevlsjxw_Zq74vWdjmkmDgAAARg"]
[Sat Apr 25 05:50:42.755000 2026] [:error] [pid 44321:tid 44388] [client 20.251.112.6:35177] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aws.php"] [unique_id "aevlso1b5lV-asWa_Y4j1QAAAIU"]
[Sat Apr 25 05:50:43.297460 2026] [:error] [pid 44319:tid 44337] [client 20.251.112.6:38298] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/embed.php"] [unique_id "aevls8zJPAVLUb2pWtJNGwAAAAg"]
[Sat Apr 25 05:50:43.856182 2026] [:error] [pid 44319:tid 44329] [client 20.251.112.6:34803] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/embed.php"] [unique_id "aevls8zJPAVLUb2pWtJNHAAAAAA"]
[Sat Apr 25 05:50:44.375164 2026] [:error] [pid 44320:tid 44371] [client 20.251.112.6:47092] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/embed.php"] [unique_id "aevltDmFqSpku_dij8hvQgAAAE8"]
[Sat Apr 25 05:50:44.946271 2026] [:error] [pid 44319:tid 44350] [client 20.251.112.6:34762] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/embed.php"] [unique_id "aevltMzJPAVLUb2pWtJNIAAAABU"]
[Sat Apr 25 05:50:45.478777 2026] [:error] [pid 44319:tid 44353] [client 20.251.112.6:54699] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stat.php"] [unique_id "aevltczJPAVLUb2pWtJNIwAAABg"]
[Sat Apr 25 05:50:46.026068 2026] [:error] [pid 44319:tid 44343] [client 20.251.112.6:40159] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stat.php"] [unique_id "aevltszJPAVLUb2pWtJNKAAAAA4"]
[Sat Apr 25 05:50:46.569794 2026] [:error] [pid 44425:tid 44451] [client 20.251.112.6:47080] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stat.php"] [unique_id "aevltiUl-VlItvY2tR_9sgAAANg"]
[Sat Apr 25 05:50:47.093277 2026] [:error] [pid 46083:tid 46112] [client 20.251.112.6:33360] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/stat.php"] [unique_id "aevltzxw_Zq74vWdjmkmEQAAARg"]
[Sat Apr 25 05:50:47.744253 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:35937] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/setup.php"] [unique_id "aevltzxw_Zq74vWdjmkmEwAAAQw"]
[Sat Apr 25 05:50:48.571731 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:35174] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/setup.php"] [unique_id "aevluDxw_Zq74vWdjmkmFwAAARM"]
[Sat Apr 25 05:50:49.212249 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:53383] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/setup.php"] [unique_id "aevluY1b5lV-asWa_Y4j3wAAAJc"]
[Sat Apr 25 05:50:49.829094 2026] [:error] [pid 44321:tid 44404] [client 20.251.112.6:35157] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/setup.php"] [unique_id "aevluY1b5lV-asWa_Y4j4QAAAJU"]
[Sat Apr 25 05:50:50.428564 2026] [:error] [pid 44425:tid 44442] [client 20.251.112.6:54686] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/development.php"] [unique_id "aevluiUl-VlItvY2tR_9tAAAAM8"]
[Sat Apr 25 05:50:51.139997 2026] [:error] [pid 44319:tid 44344] [client 20.251.112.6:45483] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/development.php"] [unique_id "aevlu8zJPAVLUb2pWtJNOgAAAA8"]
[Sat Apr 25 05:50:51.961669 2026] [:error] [pid 46083:tid 46112] [client 20.251.112.6:38312] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/development.php"] [unique_id "aevluzxw_Zq74vWdjmkmHAAAARg"]
[Sat Apr 25 05:50:53.268527 2026] [:error] [pid 44321:tid 44394] [client 20.251.112.6:34267] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/development.php"] [unique_id "aevlvY1b5lV-asWa_Y4j5wAAAIs"]
[Sat Apr 25 05:50:54.768465 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:34778] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environment.php"] [unique_id "aevlvjmFqSpku_dij8hvTwAAAEs"]
[Sat Apr 25 05:50:55.822833 2026] [:error] [pid 44319:tid 44338] [client 20.251.112.6:33808] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environment.php"] [unique_id "aevlv8zJPAVLUb2pWtJNRgAAAAk"]
[Sat Apr 25 05:50:58.012109 2026] [:error] [pid 44319:tid 44348] [client 20.251.112.6:35172] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environment.php"] [unique_id "aevlwszJPAVLUb2pWtJNTAAAABM"]
[Sat Apr 25 05:50:59.124410 2026] [:error] [pid 44321:tid 44383] [client 20.251.112.6:40144] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/environment.php"] [unique_id "aevlw41b5lV-asWa_Y4j9QAAAIA"]
[Sat Apr 25 05:51:01.389651 2026] [:error] [pid 44320:tid 44364] [client 20.251.112.6:33838] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db_config.php"] [unique_id "aevlxTmFqSpku_dij8hvUgAAAEg"]
[Sat Apr 25 05:51:04.175014 2026] [:error] [pid 44321:tid 44390] [client 20.251.112.6:33370] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db_config.php"] [unique_id "aevlyI1b5lV-asWa_Y4j_gAAAIc"]
[Sat Apr 25 05:51:05.023755 2026] [:error] [pid 44321:tid 44385] [client 20.251.112.6:38287] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db_config.php"] [unique_id "aevlyY1b5lV-asWa_Y4kAAAAAII"]
[Sat Apr 25 05:51:05.647173 2026] [:error] [pid 44425:tid 44439] [client 20.251.112.6:33799] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db_config.php"] [unique_id "aevlySUl-VlItvY2tR_9wQAAAMw"]
[Sat Apr 25 05:51:06.464965 2026] [:error] [pid 44319:tid 44332] [client 20.251.112.6:47090] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevlyszJPAVLUb2pWtJNWAAAAAM"]
[Sat Apr 25 05:51:07.668575 2026] [proxy_fcgi:error] [pid 44320:tid 44356] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:07.934175 2026] [proxy_fcgi:error] [pid 44320:tid 44377] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:08.199778 2026] [proxy_fcgi:error] [pid 44320:tid 44380] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:08.464504 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:08.727818 2026] [proxy_fcgi:error] [pid 44320:tid 44359] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:08.994509 2026] [proxy_fcgi:error] [pid 44320:tid 44372] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:09.259417 2026] [proxy_fcgi:error] [pid 44320:tid 44357] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:09.526690 2026] [proxy_fcgi:error] [pid 44320:tid 44363] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:09.790035 2026] [proxy_fcgi:error] [pid 44320:tid 44362] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:10.077596 2026] [proxy_fcgi:error] [pid 44320:tid 44360] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:10.341781 2026] [proxy_fcgi:error] [pid 44320:tid 44370] [client 20.251.112.6:33366] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:51:10.602472 2026] [:error] [pid 44320:tid 44358] [client 20.251.112.6:33366] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpversion.php"] [unique_id "aevlzjmFqSpku_dij8hvZAAAAEI"]
[Sat Apr 25 05:51:11.691003 2026] [:error] [pid 46083:tid 46103] [client 20.251.112.6:33365] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpversion.php"] [unique_id "aevlzzxw_Zq74vWdjmkmLwAAARA"]
[Sat Apr 25 05:51:13.591737 2026] [:error] [pid 44425:tid 44427] [client 20.251.112.6:54663] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpversion.php"] [unique_id "aevl0SUl-VlItvY2tR_9ygAAAMA"]
[Sat Apr 25 05:51:14.720924 2026] [:error] [pid 46083:tid 46101] [client 20.251.112.6:45461] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpversion.php"] [unique_id "aevl0jxw_Zq74vWdjmkmOAAAAQ4"]
[Sat Apr 25 05:51:15.497693 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:38280] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asus.php"] [unique_id "aevl0zxw_Zq74vWdjmkmOgAAAQQ"]
[Sat Apr 25 05:51:16.414329 2026] [:error] [pid 44425:tid 44447] [client 20.251.112.6:38303] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asus.php"] [unique_id "aevl1CUl-VlItvY2tR_90AAAANQ"]
[Sat Apr 25 05:51:18.101663 2026] [:error] [pid 44425:tid 44433] [client 20.251.112.6:45488] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asus.php"] [unique_id "aevl1iUl-VlItvY2tR_90QAAAMY"]
[Sat Apr 25 05:51:19.719851 2026] [:error] [pid 44320:tid 44373] [client 20.251.112.6:35958] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asus.php"] [unique_id "aevl1zmFqSpku_dij8hvZgAAAFE"]
[Sat Apr 25 05:51:20.568429 2026] [:error] [pid 44425:tid 44444] [client 20.251.112.6:33844] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php_version.php"] [unique_id "aevl2CUl-VlItvY2tR_91AAAANE"]
[Sat Apr 25 05:51:21.513976 2026] [:error] [pid 44425:tid 44431] [client 20.251.112.6:54683] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php_version.php"] [unique_id "aevl2SUl-VlItvY2tR_91gAAAMQ"]
[Sat Apr 25 05:51:22.451448 2026] [:error] [pid 44319:tid 44340] [client 20.251.112.6:47078] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php_version.php"] [unique_id "aevl2szJPAVLUb2pWtJNWwAAAAs"]
[Sat Apr 25 05:51:23.817524 2026] [:error] [pid 44319:tid 44345] [client 20.251.112.6:54728] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php_version.php"] [unique_id "aevl28zJPAVLUb2pWtJNXgAAABA"]
[Sat Apr 25 05:51:25.392219 2026] [:error] [pid 44319:tid 44332] [client 20.251.112.6:54755] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abouts.php"] [unique_id "aevl3czJPAVLUb2pWtJNXwAAAAM"]
[Sat Apr 25 05:51:27.683587 2026] [:error] [pid 44321:tid 44389] [client 20.251.112.6:61872] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abouts.php"] [unique_id "aevl341b5lV-asWa_Y4kDQAAAIY"]
[Sat Apr 25 05:51:28.921739 2026] [:error] [pid 44425:tid 44451] [client 20.251.112.6:54659] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abouts.php"] [unique_id "aevl4CUl-VlItvY2tR_95AAAANg"]
[Sat Apr 25 05:51:30.782894 2026] [:error] [pid 44320:tid 44374] [client 20.251.112.6:54684] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abouts.php"] [unique_id "aevl4jmFqSpku_dij8hvbQAAAFI"]
[Sat Apr 25 05:51:31.956169 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:35185] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profmanage.php"] [unique_id "aevl4zmFqSpku_dij8hvdAAAAEs"]
[Sat Apr 25 05:51:32.965684 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:45473] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profmanage.php"] [unique_id "aevl5CUl-VlItvY2tR_97gAAANI"]
[Sat Apr 25 05:51:33.645693 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:35926] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profmanage.php"] [unique_id "aevl5SUl-VlItvY2tR_98wAAAM4"]
[Sat Apr 25 05:51:34.374572 2026] [:error] [pid 44425:tid 44451] [client 20.251.112.6:33823] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profmanage.php"] [unique_id "aevl5iUl-VlItvY2tR_99QAAANg"]
[Sat Apr 25 05:51:35.616446 2026] [:error] [pid 46083:tid 46094] [client 20.251.112.6:38292] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makecvs.php"] [unique_id "aevl5zxw_Zq74vWdjmkmTAAAAQc"]
[Sat Apr 25 05:51:36.411715 2026] [:error] [pid 44320:tid 44368] [client 20.251.112.6:54750] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makecvs.php"] [unique_id "aevl6DmFqSpku_dij8hveAAAAEw"]
[Sat Apr 25 05:51:37.152839 2026] [:error] [pid 44425:tid 44442] [client 20.251.112.6:33847] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makecvs.php"] [unique_id "aevl6SUl-VlItvY2tR_99wAAAM8"]
[Sat Apr 25 05:51:38.109123 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:34757] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makecvs.php"] [unique_id "aevl6jxw_Zq74vWdjmkmUwAAAQg"]
[Sat Apr 25 05:51:39.159491 2026] [:error] [pid 46083:tid 46093] [client 20.251.112.6:40135] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevl6zxw_Zq74vWdjmkmVQAAAQY"]
[Sat Apr 25 05:51:40.061795 2026] [:error] [pid 46083:tid 46108] [client 20.251.112.6:45442] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevl7Dxw_Zq74vWdjmkmWQAAARQ"]
[Sat Apr 25 05:51:41.060759 2026] [:error] [pid 46083:tid 46111] [client 20.251.112.6:61854] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevl7Txw_Zq74vWdjmkmWwAAARc"]
[Sat Apr 25 05:51:42.646792 2026] [:error] [pid 44425:tid 44442] [client 20.251.112.6:47100] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevl7iUl-VlItvY2tR_-BAAAAM8"]
[Sat Apr 25 05:51:45.215043 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:40175] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/configuration.php"] [unique_id "aevl8SUl-VlItvY2tR_-CwAAANI"]
[Sat Apr 25 05:51:48.367565 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:45498] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/configuration.php"] [unique_id "aevl9Dxw_Zq74vWdjmkmaAAAAQw"]
[Sat Apr 25 05:51:49.644977 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:35949] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/configuration.php"] [unique_id "aevl9TmFqSpku_dij8hvewAAAEs"]
[Sat Apr 25 05:51:50.265071 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:35941] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/configuration.php"] [unique_id "aevl9jxw_Zq74vWdjmkmbgAAARE"]
[Sat Apr 25 05:51:51.136700 2026] [:error] [pid 44321:tid 44390] [client 20.251.112.6:35195] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ay.php"] [unique_id "aevl941b5lV-asWa_Y4kFwAAAIc"]
[Sat Apr 25 05:51:51.971334 2026] [:error] [pid 44320:tid 44365] [client 20.251.112.6:47050] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ay.php"] [unique_id "aevl9zmFqSpku_dij8hvfQAAAEk"]
[Sat Apr 25 05:51:52.869476 2026] [:error] [pid 46083:tid 46110] [client 20.251.112.6:45467] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ay.php"] [unique_id "aevl-Dxw_Zq74vWdjmkmdQAAARY"]
[Sat Apr 25 05:51:53.585784 2026] [:error] [pid 46083:tid 46100] [client 20.251.112.6:36413] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ay.php"] [unique_id "aevl-Txw_Zq74vWdjmkmdgAAAQ0"]
[Sat Apr 25 05:51:54.125947 2026] [:error] [pid 46083:tid 46097] [client 20.251.112.6:54761] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevl-jxw_Zq74vWdjmkmeAAAAQo"]
[Sat Apr 25 05:51:54.656053 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:33835] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevl-jxw_Zq74vWdjmkmeQAAAQg"]
[Sat Apr 25 05:51:55.225284 2026] [:error] [pid 44320:tid 44363] [client 20.251.112.6:61867] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevl-zmFqSpku_dij8hvfgAAAEc"]
[Sat Apr 25 05:51:55.791879 2026] [:error] [pid 44320:tid 44358] [client 20.251.112.6:61877] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevl-zmFqSpku_dij8hvfwAAAEI"]
[Sat Apr 25 05:51:56.494583 2026] [:error] [pid 44425:tid 44439] [client 20.251.112.6:33395] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Black.php"] [unique_id "aevl_CUl-VlItvY2tR_-EQAAAMw"]
[Sat Apr 25 05:51:57.435964 2026] [:error] [pid 44319:tid 44350] [client 20.251.112.6:54765] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Black.php"] [unique_id "aevl_czJPAVLUb2pWtJNawAAABU"]
[Sat Apr 25 05:51:58.263524 2026] [:error] [pid 44321:tid 44398] [client 20.251.112.6:33357] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Black.php"] [unique_id "aevl_o1b5lV-asWa_Y4kGwAAAI8"]
[Sat Apr 25 05:51:58.840436 2026] [:error] [pid 44321:tid 44388] [client 20.251.112.6:45464] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Black.php"] [unique_id "aevl_o1b5lV-asWa_Y4kHgAAAIU"]
[Sat Apr 25 05:51:59.526138 2026] [:error] [pid 44320:tid 44361] [client 20.251.112.6:40187] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infoinfo.php"] [unique_id "aevl_zmFqSpku_dij8hvgAAAAEU"]
[Sat Apr 25 05:52:00.415141 2026] [:error] [pid 44320:tid 44379] [client 20.251.112.6:35945] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infoinfo.php"] [unique_id "aevmADmFqSpku_dij8hvggAAAFc"]
[Sat Apr 25 05:52:01.163588 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:40143] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infoinfo.php"] [unique_id "aevmAczJPAVLUb2pWtJNbQAAAAE"]
[Sat Apr 25 05:52:02.440381 2026] [:error] [pid 44320:tid 44373] [client 20.251.112.6:35183] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/infoinfo.php"] [unique_id "aevmAjmFqSpku_dij8hvhAAAAFE"]
[Sat Apr 25 08:24:43.198602 2026] [:error] [pid 44321:tid 44386] [client 160.30.179.127:34108] [client 160.30.179.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "aewJy41b5lV-asWa_Y5HbAAAAIM"]
[Sat Apr 25 09:11:30.302417 2026] [proxy_fcgi:error] [pid 44320:tid 44356] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:30.597945 2026] [proxy_fcgi:error] [pid 44320:tid 44376] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:30.882606 2026] [proxy_fcgi:error] [pid 44320:tid 44361] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:31.295499 2026] [proxy_fcgi:error] [pid 44320:tid 44357] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:31.608655 2026] [proxy_fcgi:error] [pid 44320:tid 44369] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:32.009846 2026] [proxy_fcgi:error] [pid 44320:tid 44379] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:32.609048 2026] [proxy_fcgi:error] [pid 44320:tid 44360] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:33.044777 2026] [proxy_fcgi:error] [pid 44320:tid 44374] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:33.328807 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 74.248.134.252:17194] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:11:33.631941 2026] [:error] [pid 44320:tid 44363] [client 74.248.134.252:17194] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aewUxTmFqSpku_dij8iT_QAAAEc"]
[Sat Apr 25 09:11:41.364179 2026] [:error] [pid 44320:tid 44368] [client 74.248.134.252:40924] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aewUzTmFqSpku_dij8iUCwAAAEw"]
[Sat Apr 25 09:11:44.587715 2026] [:error] [pid 44425:tid 44445] [client 74.248.134.252:56032] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aewU0CUl-VlItvY2tR9AlQAAANI"]
[Sat Apr 25 09:11:46.134999 2026] [:error] [pid 44321:tid 44403] [client 74.248.134.252:55961] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/166.php"] [unique_id "aewU0o1b5lV-asWa_Y5R3QAAAJQ"]
[Sat Apr 25 09:11:48.315271 2026] [:error] [pid 44320:tid 44362] [client 74.248.134.252:1419] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aewU1DmFqSpku_dij8iUEAAAAEY"]
[Sat Apr 25 09:11:50.391980 2026] [:error] [pid 44425:tid 44442] [client 74.248.134.252:52715] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aewU1iUl-VlItvY2tR9AmgAAAM8"]
[Sat Apr 25 09:11:51.687744 2026] [:error] [pid 44320:tid 44359] [client 74.248.134.252:45931] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aewU1zmFqSpku_dij8iUFgAAAEM"]
[Sat Apr 25 09:11:54.707409 2026] [:error] [pid 44319:tid 44349] [client 74.248.134.252:52676] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/term.php"] [unique_id "aewU2szJPAVLUb2pWtJuKgAAABQ"]
[Sat Apr 25 09:11:57.836997 2026] [:error] [pid 46083:tid 46092] [client 74.248.134.252:59002] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aewU3Txw_Zq74vWdjml_4wAAAQU"]
[Sat Apr 25 09:12:03.906536 2026] [:error] [pid 46083:tid 46110] [client 74.248.134.252:45946] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aewU4zxw_Zq74vWdjml_5QAAARY"]
[Sat Apr 25 09:12:05.174978 2026] [:error] [pid 46083:tid 46103] [client 74.248.134.252:29595] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aewU5Txw_Zq74vWdjml_5gAAARA"]
[Sat Apr 25 09:12:07.306920 2026] [:error] [pid 44321:tid 44399] [client 74.248.134.252:19209] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/666.php"] [unique_id "aewU541b5lV-asWa_Y5R4QAAAJA"]
[Sat Apr 25 09:12:09.651679 2026] [:error] [pid 46083:tid 46101] [client 74.248.134.252:17231] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aewU6Txw_Zq74vWdjml_7QAAAQ4"]
[Sat Apr 25 09:12:17.307805 2026] [:error] [pid 46083:tid 46107] [client 74.248.134.252:17258] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tt.php"] [unique_id "aewU8Txw_Zq74vWdjml__wAAARM"]
[Sat Apr 25 09:12:26.126493 2026] [:error] [pid 44425:tid 44437] [client 74.248.134.252:56013] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aewU-iUl-VlItvY2tR9AuAAAAMo"]
[Sat Apr 25 09:12:28.001486 2026] [:error] [pid 44321:tid 44404] [client 74.248.134.252:31617] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "aewU_I1b5lV-asWa_Y5R9AAAAJU"]
[Sat Apr 25 09:12:33.148671 2026] [proxy_fcgi:error] [pid 44321:tid 44383] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:33.431304 2026] [proxy_fcgi:error] [pid 44321:tid 44388] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:33.715293 2026] [proxy_fcgi:error] [pid 44321:tid 44406] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:33.999565 2026] [proxy_fcgi:error] [pid 44321:tid 44395] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:34.284373 2026] [proxy_fcgi:error] [pid 44321:tid 44394] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:35.681122 2026] [proxy_fcgi:error] [pid 44321:tid 44390] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:35.965759 2026] [proxy_fcgi:error] [pid 44321:tid 44402] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:36.549148 2026] [proxy_fcgi:error] [pid 44321:tid 44389] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:36.836289 2026] [proxy_fcgi:error] [pid 44321:tid 44405] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:37.121272 2026] [proxy_fcgi:error] [pid 44321:tid 44401] [client 74.248.134.252:2035] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:12:37.401889 2026] [:error] [pid 44321:tid 44392] [client 74.248.134.252:2035] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aewVBY1b5lV-asWa_Y5SAwAAAIk"]
[Sat Apr 25 09:12:39.251517 2026] [:error] [pid 44321:tid 44384] [client 74.248.134.252:56052] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aewVB41b5lV-asWa_Y5SBgAAAIE"]
[Sat Apr 25 09:12:51.764976 2026] [:error] [pid 44321:tid 44402] [client 74.248.134.252:2009] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aewVE41b5lV-asWa_Y5SDAAAAJM"]
[Sat Apr 25 09:12:53.457722 2026] [:error] [pid 46083:tid 46094] [client 74.248.134.252:1435] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aewVFTxw_Zq74vWdjmmAYgAAAQc"]
[Sat Apr 25 09:12:55.691747 2026] [:error] [pid 44425:tid 44438] [client 74.248.134.252:23470] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aewVFyUl-VlItvY2tR9AzQAAAMs"]
[Sat Apr 25 09:12:57.463572 2026] [:error] [pid 44320:tid 44374] [client 74.248.134.252:62282] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aewVGTmFqSpku_dij8iUOwAAAFI"]
[Sat Apr 25 09:13:00.316422 2026] [:error] [pid 44425:tid 44429] [client 74.248.134.252:23480] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aewVHCUl-VlItvY2tR9A0AAAAMI"]
[Sat Apr 25 09:13:01.687274 2026] [:error] [pid 44320:tid 44376] [client 74.248.134.252:52305] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aewVHTmFqSpku_dij8iUPQAAAFQ"]
[Sat Apr 25 09:13:04.815348 2026] [:error] [pid 44425:tid 44436] [client 74.248.134.252:62331] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aewVICUl-VlItvY2tR9A1QAAAMk"]
[Sat Apr 25 09:13:07.329475 2026] [:error] [pid 44425:tid 44428] [client 74.248.134.252:62312] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aewVIyUl-VlItvY2tR9A1wAAAME"]
[Sat Apr 25 09:13:09.109935 2026] [:error] [pid 44321:tid 44407] [client 74.248.134.252:33744] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "aewVJY1b5lV-asWa_Y5SPwAAAJg"]
[Sat Apr 25 09:13:12.382448 2026] [:error] [pid 44320:tid 44369] [client 74.248.134.252:27291] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aewVKDmFqSpku_dij8iUQAAAAE0"]
[Sat Apr 25 09:13:13.503300 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:35794] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aewVKSUl-VlItvY2tR9A2wAAANM"]
[Sat Apr 25 09:13:18.031712 2026] [:error] [pid 44319:tid 44340] [client 74.248.134.252:58965] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aewVLszJPAVLUb2pWtJuUQAAAAs"]
[Sat Apr 25 09:13:19.626694 2026] [:error] [pid 44321:tid 44386] [client 74.248.134.252:30140] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/shell.php"] [unique_id "aewVL41b5lV-asWa_Y5SRQAAAIM"]
[Sat Apr 25 09:13:20.591413 2026] [:error] [pid 46083:tid 46099] [client 74.248.134.252:56060] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new.php"] [unique_id "aewVMDxw_Zq74vWdjmmAoQAAAQw"]
[Sat Apr 25 09:13:29.131100 2026] [:error] [pid 46083:tid 46091] [client 74.248.134.252:35810] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new.php"] [unique_id "aewVOTxw_Zq74vWdjmmAuAAAAQQ"]
[Sat Apr 25 09:13:32.376258 2026] [:error] [pid 44321:tid 44388] [client 74.248.134.252:30084] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/new.php"] [unique_id "aewVPI1b5lV-asWa_Y5SVAAAAIU"]
[Sat Apr 25 09:13:35.704755 2026] [:error] [pid 44321:tid 44402] [client 74.248.134.252:23432] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewVP41b5lV-asWa_Y5SWQAAAJM"]
[Sat Apr 25 09:13:53.202411 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:53.469763 2026] [proxy_fcgi:error] [pid 46083:tid 46110] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:53.738976 2026] [proxy_fcgi:error] [pid 46083:tid 46090] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:54.006467 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:54.276766 2026] [proxy_fcgi:error] [pid 46083:tid 46087] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:54.544549 2026] [proxy_fcgi:error] [pid 46083:tid 46097] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:54.803594 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:55.062380 2026] [proxy_fcgi:error] [pid 46083:tid 46107] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:55.337955 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:55.596508 2026] [proxy_fcgi:error] [pid 46083:tid 46099] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:55.855722 2026] [proxy_fcgi:error] [pid 46083:tid 46109] [client 74.248.134.252:1452] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:13:56.698885 2026] [:error] [pid 46083:tid 46094] [client 74.248.134.252:1452] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aewVVDxw_Zq74vWdjmmA0QAAAQc"]
[Sat Apr 25 09:14:00.034956 2026] [:error] [pid 44425:tid 44431] [client 74.248.134.252:62608] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aewVWCUl-VlItvY2tR9BFQAAAMQ"]
[Sat Apr 25 09:14:04.247895 2026] [:error] [pid 44321:tid 44401] [client 74.248.134.252:33771] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aewVXI1b5lV-asWa_Y5SaAAAAJI"]
[Sat Apr 25 09:14:06.410522 2026] [:error] [pid 44320:tid 44366] [client 74.248.134.252:49122] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cu.php"] [unique_id "aewVXjmFqSpku_dij8iUUwAAAEo"]
[Sat Apr 25 09:14:09.156425 2026] [:error] [pid 44425:tid 44427] [client 74.248.134.252:45847] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aewVYSUl-VlItvY2tR9BHAAAAMA"]
[Sat Apr 25 09:14:10.379744 2026] [:error] [pid 46083:tid 46098] [client 74.248.134.252:21093] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aewVYjxw_Zq74vWdjmmA3gAAAQs"]
[Sat Apr 25 09:14:13.016899 2026] [:error] [pid 44425:tid 44432] [client 74.248.134.252:28296] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aewVZSUl-VlItvY2tR9BIAAAAMU"]
[Sat Apr 25 09:14:17.657488 2026] [:error] [pid 44319:tid 44353] [client 74.248.134.252:16612] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/amax.php"] [unique_id "aewVaczJPAVLUb2pWtJudgAAABg"]
[Sat Apr 25 09:14:19.860828 2026] [:error] [pid 44319:tid 44347] [client 74.248.134.252:23030] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aewVa8zJPAVLUb2pWtJueAAAABI"]
[Sat Apr 25 09:14:21.647953 2026] [:error] [pid 44321:tid 44383] [client 74.248.134.252:14954] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aewVbY1b5lV-asWa_Y5SbgAAAIA"]
[Sat Apr 25 09:14:24.511373 2026] [:error] [pid 46083:tid 46097] [client 74.248.134.252:32991] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aewVcDxw_Zq74vWdjmmA8AAAAQo"]
[Sat Apr 25 09:14:26.134718 2026] [:error] [pid 46083:tid 46109] [client 74.248.134.252:34531] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mh.php"] [unique_id "aewVcjxw_Zq74vWdjmmA8gAAARU"]
[Sat Apr 25 09:14:27.639216 2026] [:error] [pid 44321:tid 44399] [client 74.248.134.252:34513] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aewVc41b5lV-asWa_Y5ScQAAAJA"]
[Sat Apr 25 09:14:29.114731 2026] [:error] [pid 44319:tid 44334] [client 74.248.134.252:34539] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aewVdczJPAVLUb2pWtJuegAAAAU"]
[Sat Apr 25 09:14:31.547347 2026] [:error] [pid 46083:tid 46092] [client 74.248.134.252:41366] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aewVdzxw_Zq74vWdjmmA-AAAAQU"]
[Sat Apr 25 09:14:34.810138 2026] [:error] [pid 46083:tid 46099] [client 74.248.134.252:30665] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "aewVejxw_Zq74vWdjmmBBAAAAQw"]
[Sat Apr 25 09:14:37.080628 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:1936] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aewVfTmFqSpku_dij8iUYAAAAEU"]
[Sat Apr 25 09:14:41.473816 2026] [:error] [pid 46083:tid 46095] [client 74.248.134.252:58938] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/abc.php"] [unique_id "aewVgTxw_Zq74vWdjmmBEAAAAQg"]
[Sat Apr 25 09:15:01.162373 2026] [proxy_fcgi:error] [pid 44425:tid 44435] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:01.454952 2026] [proxy_fcgi:error] [pid 44425:tid 44427] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:01.740120 2026] [proxy_fcgi:error] [pid 44425:tid 44451] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:02.319713 2026] [proxy_fcgi:error] [pid 44425:tid 44447] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:02.615969 2026] [proxy_fcgi:error] [pid 44425:tid 44437] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:02.906136 2026] [proxy_fcgi:error] [pid 44425:tid 44429] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:03.190191 2026] [proxy_fcgi:error] [pid 44425:tid 44431] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:03.479708 2026] [proxy_fcgi:error] [pid 44425:tid 44432] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:03.763697 2026] [proxy_fcgi:error] [pid 44425:tid 44449] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:04.064920 2026] [proxy_fcgi:error] [pid 44425:tid 44436] [client 74.248.134.252:58909] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:15:04.356903 2026] [:error] [pid 44425:tid 44445] [client 74.248.134.252:58909] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aewVmCUl-VlItvY2tR9BVQAAANI"]
[Sat Apr 25 09:15:07.076326 2026] [:error] [pid 46083:tid 46111] [client 74.248.134.252:58326] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aewVmzxw_Zq74vWdjmmBOgAAARc"]
[Sat Apr 25 09:15:09.457155 2026] [:error] [pid 46083:tid 46108] [client 74.248.134.252:14411] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aewVnTxw_Zq74vWdjmmBPAAAARQ"]
[Sat Apr 25 09:15:13.750169 2026] [:error] [pid 46083:tid 46105] [client 74.248.134.252:54981] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "aewVoTxw_Zq74vWdjmmBPwAAARI"]
[Sat Apr 25 09:15:14.847500 2026] [:error] [pid 44319:tid 44347] [client 74.248.134.252:57182] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aewVoszJPAVLUb2pWtJutQAAABI"]
[Sat Apr 25 09:15:15.922268 2026] [:error] [pid 46083:tid 46095] [client 74.248.134.252:38546] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aewVozxw_Zq74vWdjmmBQwAAAQg"]
[Sat Apr 25 09:15:19.513912 2026] [:error] [pid 44321:tid 44383] [client 74.248.134.252:27358] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aewVp41b5lV-asWa_Y5ShgAAAIA"]
[Sat Apr 25 09:15:22.439978 2026] [:error] [pid 44319:tid 44352] [client 74.248.134.252:56028] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/press.php"] [unique_id "aewVqszJPAVLUb2pWtJutgAAABc"]
[Sat Apr 25 09:15:25.619207 2026] [:error] [pid 46083:tid 46090] [client 74.248.134.252:1464] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aewVrTxw_Zq74vWdjmmBRgAAAQM"]
[Sat Apr 25 09:15:28.899493 2026] [:error] [pid 44425:tid 44438] [client 74.248.134.252:36906] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aewVsCUl-VlItvY2tR9BYQAAAMs"]
[Sat Apr 25 09:15:31.191615 2026] [:error] [pid 46083:tid 46094] [client 74.248.134.252:34483] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aewVszxw_Zq74vWdjmmBSwAAAQc"]
[Sat Apr 25 09:15:33.831775 2026] [:error] [pid 46083:tid 46112] [client 74.248.134.252:16553] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/900.php"] [unique_id "aewVtTxw_Zq74vWdjmmBUAAAARg"]
[Sat Apr 25 09:15:37.019016 2026] [:error] [pid 46083:tid 46088] [client 74.248.134.252:56041] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aewVuTxw_Zq74vWdjmmBWwAAAQE"]
[Sat Apr 25 09:15:38.304002 2026] [:error] [pid 46083:tid 46095] [client 74.248.134.252:62651] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aewVujxw_Zq74vWdjmmBXgAAAQg"]
[Sat Apr 25 09:15:47.808083 2026] [:error] [pid 44321:tid 44394] [client 74.248.134.252:32162] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aewVw41b5lV-asWa_Y5SiAAAAIs"]
[Sat Apr 25 09:15:48.896499 2026] [:error] [pid 44319:tid 44348] [client 74.248.134.252:1462] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "aewVxMzJPAVLUb2pWtJuuAAAABM"]
[Sat Apr 25 09:15:52.468028 2026] [:error] [pid 44320:tid 44374] [client 74.248.134.252:27284] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jk.php"] [unique_id "aewVyDmFqSpku_dij8iUewAAAFI"]
[Sat Apr 25 09:15:57.802922 2026] [:error] [pid 44321:tid 44385] [client 74.248.134.252:27277] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jk.php"] [unique_id "aewVzY1b5lV-asWa_Y5SjAAAAII"]
[Sat Apr 25 09:15:59.415453 2026] [:error] [pid 44320:tid 44364] [client 74.248.134.252:27279] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jk.php"] [unique_id "aewVzzmFqSpku_dij8iUfwAAAEg"]
[Sat Apr 25 09:16:08.765591 2026] [proxy_fcgi:error] [pid 44425:tid 44440] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:09.042457 2026] [proxy_fcgi:error] [pid 44425:tid 44427] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:09.301459 2026] [proxy_fcgi:error] [pid 44425:tid 44428] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:09.564897 2026] [proxy_fcgi:error] [pid 44425:tid 44447] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:09.824632 2026] [proxy_fcgi:error] [pid 44425:tid 44451] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:10.083463 2026] [proxy_fcgi:error] [pid 44425:tid 44431] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:10.343280 2026] [proxy_fcgi:error] [pid 44425:tid 44443] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:10.602992 2026] [proxy_fcgi:error] [pid 44425:tid 44442] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:10.862753 2026] [proxy_fcgi:error] [pid 44425:tid 44429] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:11.137803 2026] [proxy_fcgi:error] [pid 44425:tid 44446] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:11.406360 2026] [proxy_fcgi:error] [pid 44425:tid 44449] [client 74.248.134.252:61871] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:16:11.673730 2026] [:error] [pid 44425:tid 44436] [client 74.248.134.252:61871] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aewV2yUl-VlItvY2tR9BfgAAAMk"]
[Sat Apr 25 09:16:12.660944 2026] [:error] [pid 44425:tid 44445] [client 74.248.134.252:52645] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aewV3CUl-VlItvY2tR9BfwAAANI"]
[Sat Apr 25 09:16:17.078341 2026] [:error] [pid 44319:tid 44340] [client 74.248.134.252:32154] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aewV4czJPAVLUb2pWtJuvgAAAAs"]
[Sat Apr 25 09:16:20.498159 2026] [:error] [pid 44320:tid 44363] [client 74.248.134.252:37923] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/an.php"] [unique_id "aewV5DmFqSpku_dij8iUhgAAAEc"]
[Sat Apr 25 09:16:26.250538 2026] [:error] [pid 44320:tid 44360] [client 74.248.134.252:43435] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t.php"] [unique_id "aewV6jmFqSpku_dij8iUigAAAEQ"]
[Sat Apr 25 09:16:30.190599 2026] [:error] [pid 44319:tid 44352] [client 74.248.134.252:56377] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t.php"] [unique_id "aewV7szJPAVLUb2pWtJuwQAAABc"]
[Sat Apr 25 09:16:34.947487 2026] [:error] [pid 44425:tid 44448] [client 74.248.134.252:14372] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/t.php"] [unique_id "aewV8iUl-VlItvY2tR9BiwAAANU"]
[Sat Apr 25 09:16:37.489049 2026] [:error] [pid 44321:tid 44403] [client 74.248.134.252:26859] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aewV9Y1b5lV-asWa_Y5SngAAAJQ"]
[Sat Apr 25 09:16:41.772117 2026] [:error] [pid 44320:tid 44359] [client 74.248.134.252:61159] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aewV-TmFqSpku_dij8iUlAAAAEM"]
[Sat Apr 25 09:16:43.880394 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:20919] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aewV-zmFqSpku_dij8iUnAAAAEU"]
[Sat Apr 25 09:16:46.068805 2026] [:error] [pid 44425:tid 44449] [client 74.248.134.252:36419] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aewV_iUl-VlItvY2tR9BkQAAANY"]
[Sat Apr 25 09:16:48.790122 2026] [:error] [pid 44425:tid 44440] [client 74.248.134.252:14898] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aewWACUl-VlItvY2tR9BkwAAAM0"]
[Sat Apr 25 09:16:50.182657 2026] [:error] [pid 46083:tid 46087] [client 74.248.134.252:13891] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aewWAjxw_Zq74vWdjmmBiAAAAQA"]
[Sat Apr 25 09:16:51.952177 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:20894] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aewWAzmFqSpku_dij8iUoQAAAEU"]
[Sat Apr 25 09:16:54.087137 2026] [:error] [pid 46083:tid 46111] [client 74.248.134.252:19918] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/profile.php"] [unique_id "aewWBjxw_Zq74vWdjmmBjAAAARc"]
[Sat Apr 25 09:16:56.760298 2026] [:error] [pid 44425:tid 44443] [client 74.248.134.252:30160] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aewWCCUl-VlItvY2tR9BnQAAANA"]
[Sat Apr 25 09:16:58.319742 2026] [:error] [pid 46083:tid 46095] [client 74.248.134.252:26838] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aewWCjxw_Zq74vWdjmmBkAAAAQg"]
[Sat Apr 25 09:17:01.775525 2026] [:error] [pid 46083:tid 46103] [client 74.248.134.252:47598] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aewWDTxw_Zq74vWdjmmBlAAAARA"]
[Sat Apr 25 09:17:03.429512 2026] [:error] [pid 46083:tid 46110] [client 74.248.134.252:35186] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gaza.php"] [unique_id "aewWDzxw_Zq74vWdjmmBlgAAARY"]
[Sat Apr 25 09:17:04.171137 2026] [:error] [pid 44320:tid 44365] [client 74.248.134.252:36443] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aewWEDmFqSpku_dij8iUqwAAAEk"]
[Sat Apr 25 09:17:05.011673 2026] [:error] [pid 46083:tid 46092] [client 74.248.134.252:30166] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aewWETxw_Zq74vWdjmmBmgAAAQU"]
[Sat Apr 25 09:17:06.651896 2026] [:error] [pid 46083:tid 46108] [client 74.248.134.252:45399] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aewWEjxw_Zq74vWdjmmBoAAAARQ"]
[Sat Apr 25 09:17:07.674444 2026] [:error] [pid 44321:tid 44395] [client 74.248.134.252:30202] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kj.php"] [unique_id "aewWE41b5lV-asWa_Y5SpAAAAIw"]
[Sat Apr 25 09:17:10.559772 2026] [:error] [pid 46083:tid 46088] [client 74.248.134.252:30186] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "aewWFjxw_Zq74vWdjmmBpQAAAQE"]
[Sat Apr 25 09:17:14.216686 2026] [proxy_fcgi:error] [pid 46083:tid 46108] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:14.475798 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:14.751843 2026] [proxy_fcgi:error] [pid 46083:tid 46099] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:15.014039 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:15.275097 2026] [proxy_fcgi:error] [pid 46083:tid 46110] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:15.543081 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:15.801975 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:17.259255 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:17.520303 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:17.782902 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:18.052342 2026] [proxy_fcgi:error] [pid 46083:tid 46108] [client 74.248.134.252:36401] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:17:18.309072 2026] [:error] [pid 46083:tid 46111] [client 74.248.134.252:36401] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aewWHjxw_Zq74vWdjmmBvAAAARc"]
[Sat Apr 25 09:17:19.272520 2026] [:error] [pid 46083:tid 46094] [client 74.248.134.252:21379] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aewWHzxw_Zq74vWdjmmBwAAAAQc"]
[Sat Apr 25 09:17:21.522885 2026] [:error] [pid 46083:tid 46088] [client 74.248.134.252:17789] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aewWITxw_Zq74vWdjmmBxQAAAQE"]
[Sat Apr 25 09:17:23.612218 2026] [:error] [pid 44321:tid 44402] [client 74.248.134.252:54390] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/retu11.PhP7"] [unique_id "aewWI41b5lV-asWa_Y5SsAAAAJM"]
[Sat Apr 25 09:17:26.840874 2026] [:error] [pid 44320:tid 44371] [client 74.248.134.252:48286] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aewWJjmFqSpku_dij8iUrgAAAE8"]
[Sat Apr 25 09:17:28.406036 2026] [:error] [pid 44425:tid 44434] [client 74.248.134.252:30642] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aewWKCUl-VlItvY2tR9BsQAAAMc"]
[Sat Apr 25 09:17:30.279908 2026] [:error] [pid 44319:tid 44348] [client 74.248.134.252:54385] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aewWKszJPAVLUb2pWtJu2gAAABM"]
[Sat Apr 25 09:17:32.379981 2026] [:error] [pid 44320:tid 44367] [client 74.248.134.252:54342] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/rip.php"] [unique_id "aewWLDmFqSpku_dij8iUtgAAAEs"]
[Sat Apr 25 09:17:35.742941 2026] [:error] [pid 44319:tid 44330] [client 74.248.134.252:40315] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aewWL8zJPAVLUb2pWtJu5QAAAAE"]
[Sat Apr 25 09:17:40.760900 2026] [:error] [pid 46083:tid 46104] [client 74.248.134.252:19291] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aewWNDxw_Zq74vWdjmmBzQAAARE"]
[Sat Apr 25 09:17:43.377005 2026] [:error] [pid 44321:tid 44387] [client 74.248.134.252:40846] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aewWN41b5lV-asWa_Y5SvQAAAIQ"]
[Sat Apr 25 09:17:45.158069 2026] [:error] [pid 44425:tid 44451] [client 74.248.134.252:45349] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "aewWOSUl-VlItvY2tR9BvQAAANg"]
[Sat Apr 25 09:17:46.196788 2026] [:error] [pid 44321:tid 44405] [client 74.248.134.252:34157] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aewWOo1b5lV-asWa_Y5SvwAAAJY"]
[Sat Apr 25 09:17:47.176853 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:40878] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aewWOyUl-VlItvY2tR9BvwAAANM"]
[Sat Apr 25 09:17:51.381844 2026] [:error] [pid 44320:tid 44372] [client 74.248.134.252:54356] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aewWPzmFqSpku_dij8iUwwAAAFA"]
[Sat Apr 25 09:17:55.990809 2026] [:error] [pid 44425:tid 44450] [client 74.248.134.252:39342] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/zoo.php"] [unique_id "aewWQyUl-VlItvY2tR9B6wAAANc"]
[Sat Apr 25 09:18:01.292766 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:39328] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admlo.php"] [unique_id "aewWSSUl-VlItvY2tR9B9wAAANM"]
[Sat Apr 25 09:18:07.242894 2026] [:error] [pid 46083:tid 46098] [client 74.248.134.252:27822] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admlo.php"] [unique_id "aewWTzxw_Zq74vWdjmmB_AAAAQs"]
[Sat Apr 25 09:18:09.872967 2026] [:error] [pid 44321:tid 44394] [client 74.248.134.252:58952] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admlo.php"] [unique_id "aewWUY1b5lV-asWa_Y5S2AAAAIs"]
[Sat Apr 25 09:18:15.631923 2026] [:error] [pid 44425:tid 44440] [client 74.248.134.252:31697] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/gcqoa.php"] [unique_id "aewWVyUl-VlItvY2tR9CCgAAAM0"]
[Sat Apr 25 09:18:18.172519 2026] [proxy_fcgi:error] [pid 46083:tid 46109] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:18.432146 2026] [proxy_fcgi:error] [pid 46083:tid 46087] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:18.697748 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:18.964743 2026] [proxy_fcgi:error] [pid 46083:tid 46100] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:19.223553 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:19.489942 2026] [proxy_fcgi:error] [pid 46083:tid 46104] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:19.754498 2026] [proxy_fcgi:error] [pid 46083:tid 46107] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:20.022207 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 09:18:20.281191 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 74.248.134.252:43885] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:40:03.589020 2026] [:error] [pid 46083:tid 46088] [client 93.185.162.138:47746] [client 93.185.162.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "aexFozxw_Zq74vWdjmnU9wAAAQE"]
[Sat Apr 25 12:40:06.552586 2026] [:error] [pid 46083:tid 46110] [client 93.185.162.138:47754] [client 93.185.162.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aexFpjxw_Zq74vWdjmnVAAAAARY"]
[Sat Apr 25 13:12:03.539069 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:05.139578 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:05.420571 2026] [proxy_fcgi:error] [pid 44320:tid 44359] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:05.708960 2026] [proxy_fcgi:error] [pid 44320:tid 44363] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:05.987088 2026] [proxy_fcgi:error] [pid 44320:tid 44361] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:06.263019 2026] [proxy_fcgi:error] [pid 44320:tid 44374] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:06.536586 2026] [proxy_fcgi:error] [pid 44320:tid 44377] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:06.821533 2026] [proxy_fcgi:error] [pid 44320:tid 44376] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:07.364101 2026] [proxy_fcgi:error] [pid 44320:tid 44378] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:07.642286 2026] [proxy_fcgi:error] [pid 44320:tid 44371] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:07.911187 2026] [proxy_fcgi:error] [pid 44320:tid 44367] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:08.186889 2026] [proxy_fcgi:error] [pid 44320:tid 44360] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:08.462758 2026] [proxy_fcgi:error] [pid 44320:tid 44357] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:08.733119 2026] [proxy_fcgi:error] [pid 44320:tid 44369] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:09.003431 2026] [proxy_fcgi:error] [pid 44320:tid 44373] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:09.276087 2026] [proxy_fcgi:error] [pid 44320:tid 44366] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:09.557378 2026] [proxy_fcgi:error] [pid 44320:tid 44380] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:09.827286 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 45.86.200.187:44211] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:13.690567 2026] [:error] [pid 44320:tid 44356] [client 45.86.200.187:44211] [client 45.86.200.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aexNLTmFqSpku_dij8i5egAAAEA"]
[Sat Apr 25 13:12:15.064292 2026] [:error] [pid 44321:tid 44406] [client 45.86.200.171:59675] [client 45.86.200.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aexNL41b5lV-asWa_Y6GewAAAJc"]
[Sat Apr 25 13:12:16.483119 2026] [proxy_fcgi:error] [pid 44320:tid 44372] [client 45.86.200.207:33705] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:17.331609 2026] [:error] [pid 44320:tid 44374] [client 45.86.200.207:33705] [client 45.86.200.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aexNMTmFqSpku_dij8i5hQAAAFI"]
[Sat Apr 25 13:12:18.166894 2026] [proxy_fcgi:error] [pid 44319:tid 44344] [client 45.86.200.210:32291] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:18.438934 2026] [proxy_fcgi:error] [pid 44319:tid 44343] [client 45.86.200.210:32291] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:18.708919 2026] [:error] [pid 44319:tid 44351] [client 45.86.200.210:32291] [client 45.86.200.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aexNMszJPAVLUb2pWtKOuQAAABY"]
[Sat Apr 25 13:12:19.524200 2026] [proxy_fcgi:error] [pid 44425:tid 44447] [client 45.86.200.190:54607] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:20.886461 2026] [:error] [pid 44425:tid 44433] [client 45.86.200.190:54607] [client 45.86.200.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aexNNCUl-VlItvY2tR-EUgAAAMY"]
[Sat Apr 25 13:12:21.729138 2026] [:error] [pid 44319:tid 44333] [client 45.86.200.211:47307] [client 45.86.200.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aexNNczJPAVLUb2pWtKOuwAAAAQ"]
[Sat Apr 25 13:12:22.265990 2026] [:error] [pid 44425:tid 44449] [client 45.86.200.172:60241] [client 45.86.200.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aexNNiUl-VlItvY2tR-EVAAAANY"]
[Sat Apr 25 13:12:22.815180 2026] [:error] [pid 44321:tid 44385] [client 45.86.200.210:28489] [client 45.86.200.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aexNNo1b5lV-asWa_Y6GfAAAAII"]
[Sat Apr 25 13:12:23.370403 2026] [:error] [pid 44321:tid 44383] [client 45.86.200.192:43755] [client 45.86.200.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aexNN41b5lV-asWa_Y6GfQAAAIA"]
[Sat Apr 25 13:12:23.909113 2026] [:error] [pid 46083:tid 46101] [client 45.86.200.187:47101] [client 45.86.200.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aexNNzxw_Zq74vWdjmnfcgAAAQ4"]
[Sat Apr 25 13:12:24.747118 2026] [:error] [pid 44321:tid 44389] [client 45.86.200.187:28141] [client 45.86.200.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aexNOI1b5lV-asWa_Y6GgAAAAIY"]
[Sat Apr 25 13:12:25.289544 2026] [proxy_fcgi:error] [pid 44320:tid 44356] [client 45.86.200.194:65269] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:25.826921 2026] [:error] [pid 44320:tid 44369] [client 45.86.200.194:65269] [client 45.86.200.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "aexNOTmFqSpku_dij8i5jAAAAE0"]
[Sat Apr 25 13:12:26.379203 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 45.86.200.188:24219] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:26.661697 2026] [proxy_fcgi:error] [pid 44320:tid 44359] [client 45.86.200.188:24219] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:26.936774 2026] [:error] [pid 44320:tid 44372] [client 45.86.200.188:24219] [client 45.86.200.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aexNOjmFqSpku_dij8i5jwAAAFA"]
[Sat Apr 25 13:12:27.784967 2026] [:error] [pid 44320:tid 44376] [client 45.86.200.202:60071] [client 45.86.200.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aexNOzmFqSpku_dij8i5lAAAAFQ"]
[Sat Apr 25 13:12:28.334072 2026] [proxy_fcgi:error] [pid 44319:tid 44342] [client 45.86.200.191:62167] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:28.603222 2026] [:error] [pid 44319:tid 44341] [client 45.86.200.191:62167] [client 45.86.200.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aexNPMzJPAVLUb2pWtKOwAAAAAw"]
[Sat Apr 25 13:12:29.156920 2026] [proxy_fcgi:error] [pid 44425:tid 44446] [client 45.86.200.205:34791] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:29.981392 2026] [proxy_fcgi:error] [pid 44425:tid 44442] [client 45.86.200.205:34791] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:30.796020 2026] [:error] [pid 44425:tid 44449] [client 45.86.200.205:34791] [client 45.86.200.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aexNPiUl-VlItvY2tR-EYQAAANY"]
[Sat Apr 25 13:12:31.365698 2026] [proxy_fcgi:error] [pid 44321:tid 44398] [client 45.86.200.206:28735] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:31.651455 2026] [:error] [pid 44321:tid 44388] [client 45.86.200.206:28735] [client 45.86.200.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aexNP41b5lV-asWa_Y6GhgAAAIU"]
[Sat Apr 25 13:12:32.195063 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 45.86.200.187:40201] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:32.750573 2026] [:error] [pid 46083:tid 46096] [client 45.86.200.187:40201] [client 45.86.200.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aexNQDxw_Zq74vWdjmnffQAAAQk"]
[Sat Apr 25 13:12:33.560310 2026] [:error] [pid 44425:tid 44432] [client 45.86.200.200:54047] [client 45.86.200.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aexNQSUl-VlItvY2tR-EZgAAAMU"]
[Sat Apr 25 13:12:34.400688 2026] [proxy_fcgi:error] [pid 44319:tid 44340] [client 45.86.200.164:63953] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:34.673711 2026] [proxy_fcgi:error] [pid 44319:tid 44331] [client 45.86.200.164:63953] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:35.213768 2026] [:error] [pid 44319:tid 44345] [client 45.86.200.164:63953] [client 45.86.200.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aexNQ8zJPAVLUb2pWtKOxgAAABA"]
[Sat Apr 25 13:12:36.026289 2026] [:error] [pid 44320:tid 44359] [client 45.86.200.168:56769] [client 45.86.200.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aexNRDmFqSpku_dij8i5mQAAAEM"]
[Sat Apr 25 13:12:36.840903 2026] [:error] [pid 44425:tid 44448] [client 45.86.200.196:27429] [client 45.86.200.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aexNRCUl-VlItvY2tR-EagAAANU"]
[Sat Apr 25 13:12:37.386568 2026] [:error] [pid 44425:tid 44446] [client 45.86.200.178:22609] [client 45.86.200.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aexNRSUl-VlItvY2tR-EawAAANM"]
[Sat Apr 25 13:12:37.950364 2026] [:error] [pid 44425:tid 44444] [client 45.86.200.194:28159] [client 45.86.200.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aexNRSUl-VlItvY2tR-EbQAAANE"]
[Sat Apr 25 13:12:39.089555 2026] [proxy_fcgi:error] [pid 46083:tid 46112] [client 45.86.200.169:36243] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:39.369950 2026] [:error] [pid 46083:tid 46100] [client 45.86.200.169:36243] [client 45.86.200.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aexNRzxw_Zq74vWdjmnfhQAAAQ0"]
[Sat Apr 25 13:12:39.960438 2026] [:error] [pid 46083:tid 46107] [client 45.86.200.171:39611] [client 45.86.200.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aexNRzxw_Zq74vWdjmnfhgAAARM"]
[Sat Apr 25 13:12:40.502849 2026] [:error] [pid 44320:tid 44361] [client 45.86.200.181:23263] [client 45.86.200.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aexNSDmFqSpku_dij8i5mgAAAEU"]
[Sat Apr 25 13:12:41.668585 2026] [proxy_fcgi:error] [pid 44320:tid 44378] [client 45.86.200.190:32089] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:42.251161 2026] [proxy_fcgi:error] [pid 44320:tid 44371] [client 45.86.200.190:32089] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:42.525052 2026] [proxy_fcgi:error] [pid 44320:tid 44370] [client 45.86.200.190:32089] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:43.356324 2026] [:error] [pid 44320:tid 44365] [client 45.86.200.190:32089] [client 45.86.200.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aexNSzmFqSpku_dij8i5pAAAAEk"]
[Sat Apr 25 13:12:44.789772 2026] [:error] [pid 44319:tid 44334] [client 45.86.200.179:57225] [client 45.86.200.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.179, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aexNTMzJPAVLUb2pWtKOzQAAAAU"]
[Sat Apr 25 13:12:45.071049 2026] [proxy_fcgi:error] [pid 44319:tid 44347] [client 45.86.200.179:57225] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:47.842891 2026] [proxy_fcgi:error] [pid 44319:tid 44337] [client 45.86.200.179:57225] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:48.211088 2026] [proxy_fcgi:error] [pid 44319:tid 44331] [client 45.86.200.179:57225] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:49.763213 2026] [:error] [pid 44319:tid 44332] [client 45.86.200.179:57225] [client 45.86.200.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aexNUczJPAVLUb2pWtKO3AAAAAM"]
[Sat Apr 25 13:12:50.634756 2026] [proxy_fcgi:error] [pid 44425:tid 44446] [client 45.86.200.197:52117] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:50.915990 2026] [:error] [pid 44425:tid 44439] [client 45.86.200.197:52117] [client 45.86.200.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.197, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aexNUiUl-VlItvY2tR-EdgAAAMw"]
[Sat Apr 25 13:12:51.494336 2026] [:error] [pid 44425:tid 44442] [client 45.86.200.197:52117] [client 45.86.200.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "aexNUyUl-VlItvY2tR-EeAAAAM8"]
[Sat Apr 25 13:12:52.329017 2026] [proxy_fcgi:error] [pid 44320:tid 44369] [client 45.86.200.193:34757] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:53.160685 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 45.86.200.193:34757] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:53.719432 2026] [proxy_fcgi:error] [pid 44320:tid 44372] [client 45.86.200.193:34757] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:54.270642 2026] [:error] [pid 44320:tid 44377] [client 45.86.200.193:34757] [client 45.86.200.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aexNVjmFqSpku_dij8i5rwAAAFU"]
[Sat Apr 25 13:12:54.819037 2026] [proxy_fcgi:error] [pid 44425:tid 44438] [client 45.86.200.171:47989] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:55.649935 2026] [proxy_fcgi:error] [pid 44425:tid 44427] [client 45.86.200.171:47989] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:56.236845 2026] [proxy_fcgi:error] [pid 44425:tid 44432] [client 45.86.200.171:47989] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:56.799324 2026] [proxy_fcgi:error] [pid 44425:tid 44429] [client 45.86.200.171:47989] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:57.072301 2026] [:error] [pid 44425:tid 44448] [client 45.86.200.171:47989] [client 45.86.200.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aexNWSUl-VlItvY2tR-EhAAAANU"]
[Sat Apr 25 13:12:57.636000 2026] [proxy_fcgi:error] [pid 44321:tid 44387] [client 45.86.200.205:49395] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:57.909001 2026] [proxy_fcgi:error] [pid 44321:tid 44403] [client 45.86.200.205:49395] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:58.187524 2026] [:error] [pid 44321:tid 44394] [client 45.86.200.205:49395] [client 45.86.200.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aexNWo1b5lV-asWa_Y6GmQAAAIs"]
[Sat Apr 25 13:12:59.343834 2026] [proxy_fcgi:error] [pid 44425:tid 44446] [client 45.86.200.174:28767] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:12:59.931837 2026] [:error] [pid 44425:tid 44433] [client 45.86.200.174:28767] [client 45.86.200.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.174, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aexNWyUl-VlItvY2tR-EiAAAAMY"]
[Sat Apr 25 13:13:00.306689 2026] [:error] [pid 44425:tid 44442] [client 45.86.200.174:28767] [client 45.86.200.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aexNXCUl-VlItvY2tR-EiQAAAM8"]
[Sat Apr 25 13:13:03.919918 2026] [proxy_fcgi:error] [pid 44425:tid 44430] [client 45.86.200.168:46377] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:05.057994 2026] [proxy_fcgi:error] [pid 44425:tid 44429] [client 45.86.200.168:46377] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:05.645670 2026] [proxy_fcgi:error] [pid 44425:tid 44437] [client 45.86.200.168:46377] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:05.914389 2026] [:error] [pid 44425:tid 44443] [client 45.86.200.168:46377] [client 45.86.200.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aexNYSUl-VlItvY2tR-EmwAAANA"]
[Sat Apr 25 13:13:06.505376 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 45.86.200.170:30485] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:08.518437 2026] [:error] [pid 46083:tid 46108] [client 45.86.200.170:30485] [client 45.86.200.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.170, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aexNZDxw_Zq74vWdjmnfpwAAARQ"]
[Sat Apr 25 13:13:08.823050 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 45.86.200.170:30485] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:09.097516 2026] [proxy_fcgi:error] [pid 46083:tid 46091] [client 45.86.200.170:30485] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:09.452706 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 45.86.200.170:30485] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:09.724104 2026] [:error] [pid 46083:tid 46092] [client 45.86.200.170:30485] [client 45.86.200.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aexNZTxw_Zq74vWdjmnfqwAAAQU"]
[Sat Apr 25 13:13:10.289861 2026] [proxy_fcgi:error] [pid 44321:tid 44393] [client 45.86.200.187:22811] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:10.581574 2026] [:error] [pid 44321:tid 44395] [client 45.86.200.187:22811] [client 45.86.200.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aexNZo1b5lV-asWa_Y6GnwAAAIw"]
[Sat Apr 25 13:13:11.424577 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 185.82.72.7:48813] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:11.705767 2026] [:error] [pid 46083:tid 46090] [client 185.82.72.7:48813] [client 185.82.72.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aexNZzxw_Zq74vWdjmnfsAAAAQM"]
[Sat Apr 25 13:13:12.906050 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 45.86.200.194:63747] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:13.245412 2026] [:error] [pid 46083:tid 46099] [client 45.86.200.194:63747] [client 45.86.200.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aexNaTxw_Zq74vWdjmnftwAAAQw"]
[Sat Apr 25 13:13:13.801942 2026] [:error] [pid 46083:tid 46101] [client 45.86.200.170:21033] [client 45.86.200.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aexNaTxw_Zq74vWdjmnfuAAAAQ4"]
[Sat Apr 25 13:13:14.444538 2026] [proxy_fcgi:error] [pid 44425:tid 44442] [client 45.86.200.205:56961] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:14.718839 2026] [proxy_fcgi:error] [pid 44425:tid 44445] [client 45.86.200.205:56961] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:15.956328 2026] [:error] [pid 44425:tid 44438] [client 45.86.200.205:56961] [client 45.86.200.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aexNayUl-VlItvY2tR-EowAAAMs"]
[Sat Apr 25 13:13:16.842047 2026] [:error] [pid 44319:tid 44342] [client 45.86.200.198:34383] [client 45.86.200.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aexNbMzJPAVLUb2pWtKO5wAAAA0"]
[Sat Apr 25 13:13:17.531600 2026] [proxy_fcgi:error] [pid 46083:tid 46098] [client 45.86.200.183:23023] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:18.389405 2026] [:error] [pid 46083:tid 46108] [client 45.86.200.183:23023] [client 45.86.200.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aexNbjxw_Zq74vWdjmnfwAAAARQ"]
[Sat Apr 25 13:13:18.936656 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 45.86.200.182:49699] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:19.580463 2026] [proxy_fcgi:error] [pid 44320:tid 44372] [client 45.86.200.182:49699] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:19.906970 2026] [:error] [pid 44320:tid 44361] [client 45.86.200.182:49699] [client 45.86.200.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aexNbzmFqSpku_dij8i5vwAAAEU"]
[Sat Apr 25 13:13:20.468269 2026] [proxy_fcgi:error] [pid 44320:tid 44376] [client 45.86.200.194:57071] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:21.025987 2026] [:error] [pid 44320:tid 44360] [client 45.86.200.194:57071] [client 45.86.200.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "aexNcTmFqSpku_dij8i5wwAAAEQ"]
[Sat Apr 25 13:13:21.575155 2026] [proxy_fcgi:error] [pid 46083:tid 46092] [client 45.86.200.179:44593] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:22.435095 2026] [:error] [pid 46083:tid 46111] [client 45.86.200.179:44593] [client 45.86.200.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aexNcjxw_Zq74vWdjmnfyAAAARc"]
[Sat Apr 25 13:13:23.262099 2026] [proxy_fcgi:error] [pid 44321:tid 44384] [client 45.86.200.207:59223] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:23.840474 2026] [proxy_fcgi:error] [pid 44321:tid 44396] [client 45.86.200.207:59223] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:24.195554 2026] [proxy_fcgi:error] [pid 44321:tid 44391] [client 45.86.200.207:59223] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:24.849762 2026] [proxy_fcgi:error] [pid 44321:tid 44402] [client 45.86.200.207:59223] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:25.264080 2026] [:error] [pid 44321:tid 44393] [client 45.86.200.207:59223] [client 45.86.200.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aexNdY1b5lV-asWa_Y6GrQAAAIo"]
[Sat Apr 25 13:13:25.820550 2026] [:error] [pid 46083:tid 46092] [client 45.86.200.207:64195] [client 45.86.200.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aexNdTxw_Zq74vWdjmnf0gAAAQU"]
[Sat Apr 25 13:13:27.018917 2026] [:error] [pid 44320:tid 44365] [client 45.86.200.175:56487] [client 45.86.200.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aexNdzmFqSpku_dij8i5xAAAAEk"]
[Sat Apr 25 13:13:27.803144 2026] [:error] [pid 46083:tid 46087] [client 45.86.200.189:25025] [client 45.86.200.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aexNdzxw_Zq74vWdjmnf4AAAAQA"]
[Sat Apr 25 13:13:28.589912 2026] [proxy_fcgi:error] [pid 46083:tid 46089] [client 45.86.200.204:54379] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:28.858412 2026] [:error] [pid 46083:tid 46094] [client 45.86.200.204:54379] [client 45.86.200.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aexNeDxw_Zq74vWdjmnf6gAAAQc"]
[Sat Apr 25 13:13:29.454811 2026] [:error] [pid 44319:tid 44330] [client 45.86.200.179:33399] [client 45.86.200.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aexNeczJPAVLUb2pWtKO7gAAAAE"]
[Sat Apr 25 13:13:30.022819 2026] [proxy_fcgi:error] [pid 44321:tid 44385] [client 45.86.200.178:59397] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:30.648094 2026] [:error] [pid 44321:tid 44386] [client 45.86.200.178:59397] [client 45.86.200.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aexNeo1b5lV-asWa_Y6GtQAAAIM"]
[Sat Apr 25 13:13:31.229097 2026] [:error] [pid 44425:tid 44446] [client 45.86.200.181:41845] [client 45.86.200.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aexNeyUl-VlItvY2tR-EqwAAANM"]
[Sat Apr 25 13:13:31.948538 2026] [:error] [pid 44425:tid 44440] [client 45.86.200.211:22111] [client 45.86.200.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aexNeyUl-VlItvY2tR-ErwAAAM0"]
[Sat Apr 25 13:13:32.559334 2026] [:error] [pid 46083:tid 46105] [client 45.86.200.212:54493] [client 45.86.200.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aexNfDxw_Zq74vWdjmngAwAAARI"]
[Sat Apr 25 13:13:33.529589 2026] [:error] [pid 44321:tid 44393] [client 185.82.72.8:28679] [client 185.82.72.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aexNfY1b5lV-asWa_Y6GuQAAAIo"]
[Sat Apr 25 13:13:34.709880 2026] [:error] [pid 44319:tid 44351] [client 45.86.200.182:39127] [client 45.86.200.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aexNfszJPAVLUb2pWtKO9QAAABY"]
[Sat Apr 25 13:13:35.446399 2026] [proxy_fcgi:error] [pid 44321:tid 44390] [client 45.86.200.177:45689] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:36.309050 2026] [proxy_fcgi:error] [pid 44321:tid 44394] [client 45.86.200.177:45689] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:36.582480 2026] [:error] [pid 44321:tid 44396] [client 45.86.200.177:45689] [client 45.86.200.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aexNgI1b5lV-asWa_Y6GyQAAAI0"]
[Sat Apr 25 13:13:37.647554 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 45.86.200.204:61463] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:37.929145 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 45.86.200.204:61463] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:39.187678 2026] [proxy_fcgi:error] [pid 46083:tid 46108] [client 45.86.200.204:61463] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:39.460173 2026] [:error] [pid 46083:tid 46090] [client 45.86.200.204:61463] [client 45.86.200.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aexNgzxw_Zq74vWdjmngKwAAAQM"]
[Sat Apr 25 13:13:40.367621 2026] [proxy_fcgi:error] [pid 44320:tid 44360] [client 45.86.200.189:47657] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:41.204620 2026] [:error] [pid 44320:tid 44374] [client 45.86.200.189:47657] [client 45.86.200.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aexNhTmFqSpku_dij8i50AAAAFI"]
[Sat Apr 25 13:13:42.197778 2026] [:error] [pid 44319:tid 44340] [client 45.86.200.175:34027] [client 45.86.200.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aexNhszJPAVLUb2pWtKO-wAAAAs"]
[Sat Apr 25 13:13:44.393382 2026] [:error] [pid 46083:tid 46103] [client 45.86.200.196:20927] [client 45.86.200.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aexNiDxw_Zq74vWdjmngOgAAARA"]
[Sat Apr 25 13:13:46.040774 2026] [proxy_fcgi:error] [pid 44425:tid 44449] [client 45.86.200.205:38163] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:46.319365 2026] [proxy_fcgi:error] [pid 44425:tid 44441] [client 45.86.200.205:38163] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:46.596017 2026] [proxy_fcgi:error] [pid 44425:tid 44434] [client 45.86.200.205:38163] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:46.895516 2026] [proxy_fcgi:error] [pid 44425:tid 44432] [client 45.86.200.205:38163] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:13:48.403121 2026] [:error] [pid 44425:tid 44437] [client 45.86.200.205:38163] [client 45.86.200.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aexNjCUl-VlItvY2tR-E2AAAAMo"]
[Sat Apr 25 13:13:49.285984 2026] [:error] [pid 44321:tid 44389] [client 45.86.200.195:62033] [client 45.86.200.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aexNjY1b5lV-asWa_Y6G2wAAAIY"]
[Sat Apr 25 13:13:50.343705 2026] [:error] [pid 44425:tid 44450] [client 45.86.200.209:61733] [client 45.86.200.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aexNjiUl-VlItvY2tR-E3QAAANc"]
[Sat Apr 25 13:13:51.274662 2026] [:error] [pid 44321:tid 44390] [client 45.86.200.205:63263] [client 45.86.200.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aexNj41b5lV-asWa_Y6G3QAAAIc"]
[Sat Apr 25 13:13:52.235082 2026] [:error] [pid 44425:tid 44439] [client 185.82.72.7:49489] [client 185.82.72.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aexNkCUl-VlItvY2tR-E4gAAAMw"]
[Sat Apr 25 13:13:54.301700 2026] [:error] [pid 46083:tid 46102] [client 45.86.200.170:47931] [client 45.86.200.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aexNkjxw_Zq74vWdjmngRAAAAQ8"]
[Sat Apr 25 13:13:55.329062 2026] [:error] [pid 44321:tid 44404] [client 45.86.200.190:23529] [client 45.86.200.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aexNk41b5lV-asWa_Y6G3wAAAJU"]
[Sat Apr 25 13:13:56.315360 2026] [:error] [pid 44321:tid 44403] [client 45.86.200.204:31363] [client 45.86.200.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aexNlI1b5lV-asWa_Y6G4AAAAJQ"]
[Sat Apr 25 13:13:57.106774 2026] [:error] [pid 46083:tid 46108] [client 45.86.200.192:43967] [client 45.86.200.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aexNlTxw_Zq74vWdjmngSwAAARQ"]
[Sat Apr 25 13:13:57.669596 2026] [:error] [pid 44321:tid 44384] [client 45.86.200.171:28661] [client 45.86.200.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aexNlY1b5lV-asWa_Y6G4QAAAIE"]
[Sat Apr 25 13:13:58.809635 2026] [:error] [pid 44319:tid 44346] [client 45.86.200.195:49211] [client 45.86.200.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aexNlszJPAVLUb2pWtKPAAAAABE"]
[Sat Apr 25 13:13:59.694482 2026] [:error] [pid 44425:tid 44427] [client 45.86.200.180:63601] [client 45.86.200.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aexNlyUl-VlItvY2tR-E6QAAAMA"]
[Sat Apr 25 13:14:00.795971 2026] [proxy_fcgi:error] [pid 44425:tid 44450] [client 45.86.200.170:56121] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:01.380141 2026] [:error] [pid 44425:tid 44432] [client 45.86.200.170:56121] [client 45.86.200.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aexNmSUl-VlItvY2tR-E7AAAAMU"]
[Sat Apr 25 13:14:02.663321 2026] [:error] [pid 44321:tid 44401] [client 45.86.200.200:48111] [client 45.86.200.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aexNmo1b5lV-asWa_Y6G5gAAAJI"]
[Sat Apr 25 13:14:03.320929 2026] [proxy_fcgi:error] [pid 44425:tid 44437] [client 45.86.200.205:35237] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:03.912858 2026] [proxy_fcgi:error] [pid 44425:tid 44431] [client 45.86.200.205:35237] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:04.201403 2026] [:error] [pid 44425:tid 44441] [client 45.86.200.205:35237] [client 45.86.200.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aexNnCUl-VlItvY2tR-E8wAAAM4"]
[Sat Apr 25 13:14:05.127326 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 45.86.200.181:63713] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:05.469331 2026] [proxy_fcgi:error] [pid 46083:tid 46091] [client 45.86.200.181:63713] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:05.762246 2026] [proxy_fcgi:error] [pid 46083:tid 46108] [client 45.86.200.181:63713] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:06.069700 2026] [:error] [pid 46083:tid 46093] [client 45.86.200.181:63713] [client 45.86.200.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aexNnjxw_Zq74vWdjmngWwAAAQY"]
[Sat Apr 25 13:14:06.784564 2026] [proxy_fcgi:error] [pid 46083:tid 46104] [client 45.86.200.186:30275] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:07.051079 2026] [:error] [pid 46083:tid 46098] [client 45.86.200.186:30275] [client 45.86.200.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aexNnzxw_Zq74vWdjmngXwAAAQs"]
[Sat Apr 25 13:14:08.671505 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:08.957496 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:09.237211 2026] [proxy_fcgi:error] [pid 46083:tid 46094] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:09.819297 2026] [proxy_fcgi:error] [pid 46083:tid 46107] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:10.685182 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:10.975167 2026] [proxy_fcgi:error] [pid 46083:tid 46090] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:11.302351 2026] [proxy_fcgi:error] [pid 46083:tid 46100] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:11.605687 2026] [proxy_fcgi:error] [pid 46083:tid 46099] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:12.476072 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 45.86.200.182:44957] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 13:14:12.771154 2026] [:error] [pid 46083:tid 46104] [client 45.86.200.182:44957] [client 45.86.200.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aexNpDxw_Zq74vWdjmngfwAAARE"]
[Sat Apr 25 13:14:30.612255 2026] [autoindex:error] [pid 44425:tid 44432] [client 45.86.200.190:43899] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 13:14:51.605365 2026] [autoindex:error] [pid 44425:tid 44428] [client 45.86.200.190:43899] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 14:01:11.375532 2026] [:error] [pid 44320:tid 44372] [client 169.148.73.126:57954] [client 169.148.73.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.148.73.126, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aexYpzmFqSpku_dij8jD-wAAAFA"]
[Sat Apr 25 14:01:11.386495 2026] [proxy_fcgi:error] [pid 44320:tid 44372] [client 169.148.73.126:57954] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 00:26:53.168099 2026] [:error] [pid 59985:tid 60005] [client 45.215.251.176:10455] [client 45.215.251.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.215.251.176, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "aezrTQF_zDvEhKvyTH7o9wAAABI"]
[Sun Apr 26 00:26:53.184009 2026] [proxy_fcgi:error] [pid 59985:tid 60005] [client 45.215.251.176:10455] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 00:53:05.471575 2026] [autoindex:error] [pid 59985:tid 59994] [client 185.198.240.149:53497] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 00:53:29.622511 2026] [autoindex:error] [pid 59985:tid 60003] [client 185.198.240.149:53497] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:55:27.047381 2026] [:error] [pid 59896:tid 59922] [client 212.47.78.126:62593] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ae0AD7LLzhtkd-OXUgBe6wAAAFY"]
[Sun Apr 26 01:55:27.626365 2026] [:error] [pid 3212:tid 3218] [client 212.47.78.126:59102] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0AD_g-28TY8_YLtUfMcAAAAQQ"]
[Sun Apr 26 01:55:28.178461 2026] [:error] [pid 3212:tid 3215] [client 212.47.78.126:49704] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae0AEPg-28TY8_YLtUfMdwAAAQE"]
[Sun Apr 26 02:44:24.028533 2026] [proxy_fcgi:error] [pid 59985:tid 59994] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.045300 2026] [proxy_fcgi:error] [pid 59985:tid 59997] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.062375 2026] [proxy_fcgi:error] [pid 59985:tid 60010] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.079968 2026] [proxy_fcgi:error] [pid 59985:tid 60006] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.097476 2026] [proxy_fcgi:error] [pid 59985:tid 59991] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.114626 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.131168 2026] [proxy_fcgi:error] [pid 59985:tid 59988] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.197927 2026] [proxy_fcgi:error] [pid 59985:tid 60007] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.214501 2026] [proxy_fcgi:error] [pid 59985:tid 60005] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.230596 2026] [proxy_fcgi:error] [pid 59985:tid 60002] [client 20.5.74.70:9472] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:44:24.244602 2026] [:error] [pid 59985:tid 59996] [client 20.5.74.70:9472] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae0LiAF_zDvEhKvyTH4YJwAAAAk"]
[Sun Apr 26 02:44:24.309659 2026] [:error] [pid 59897:tid 59939] [client 20.5.74.70:9510] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae0LiPBrrkdzpEbmK4fUuwAAAIw"]
[Sun Apr 26 02:44:24.404474 2026] [:error] [pid 3212:tid 3223] [client 20.5.74.70:9509] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae0LiPg-28TY8_YLtUfogAAAAQk"]
[Sun Apr 26 02:44:24.496702 2026] [:error] [pid 3212:tid 3226] [client 20.5.74.70:11466] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae0LiPg-28TY8_YLtUfogQAAAQw"]
[Sun Apr 26 05:56:58.795307 2026] [proxy_fcgi:error] [pid 41906:tid 41914] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:56:59.081333 2026] [proxy_fcgi:error] [pid 41906:tid 41909] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:56:59.370755 2026] [proxy_fcgi:error] [pid 41906:tid 41924] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:56:59.656360 2026] [proxy_fcgi:error] [pid 41906:tid 41930] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:56:59.980934 2026] [proxy_fcgi:error] [pid 41906:tid 41927] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:57:00.337582 2026] [proxy_fcgi:error] [pid 41906:tid 41928] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:57:00.721356 2026] [proxy_fcgi:error] [pid 41906:tid 41932] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:57:01.232126 2026] [proxy_fcgi:error] [pid 41906:tid 41922] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:57:01.518644 2026] [proxy_fcgi:error] [pid 41906:tid 41925] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:57:02.030575 2026] [proxy_fcgi:error] [pid 41906:tid 41921] [client 20.91.188.120:9483] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:57:02.331385 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:9483] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoko.php"] [unique_id "ae04rj3-0A3lxw9OXoAWuAAAAYg"]
[Sun Apr 26 05:57:02.938431 2026] [:error] [pid 31273:tid 31342] [client 20.91.188.120:41301] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoko.php"] [unique_id "ae04rvhcNJEGrATcuEfI9AAAAUU"]
[Sun Apr 26 05:57:03.983080 2026] [:error] [pid 8385:tid 8429] [client 20.91.188.120:29205] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoko.php"] [unique_id "ae04rzOy7_J84Wx3-oxhOAAAAEU"]
[Sun Apr 26 05:57:04.953127 2026] [:error] [pid 10315:tid 10321] [client 20.91.188.120:3908] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoko.php"] [unique_id "ae04sKJIw2vjkleLIaCcigAAAQQ"]
[Sun Apr 26 05:57:05.605880 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:27865] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/solo1.php"] [unique_id "ae04sfhcNJEGrATcuEfJDQAAAU0"]
[Sun Apr 26 05:57:06.526660 2026] [:error] [pid 8491:tid 8520] [client 20.91.188.120:41291] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/solo1.php"] [unique_id "ae04siq7I7e6CJooQM2SBwAAANU"]
[Sun Apr 26 05:57:07.161314 2026] [:error] [pid 10315:tid 10335] [client 20.91.188.120:57282] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/solo1.php"] [unique_id "ae04s6JIw2vjkleLIaCcmQAAARI"]
[Sun Apr 26 05:57:07.989015 2026] [:error] [pid 10315:tid 10327] [client 20.91.188.120:41281] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/solo1.php"] [unique_id "ae04s6JIw2vjkleLIaCcnQAAAQo"]
[Sun Apr 26 05:57:08.739029 2026] [:error] [pid 31273:tid 31354] [client 20.91.188.120:57283] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/locales.php"] [unique_id "ae04tPhcNJEGrATcuEfJHQAAAU8"]
[Sun Apr 26 05:57:09.823886 2026] [:error] [pid 10315:tid 10329] [client 20.91.188.120:4056] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/locales.php"] [unique_id "ae04taJIw2vjkleLIaCcrwAAAQw"]
[Sun Apr 26 05:57:10.528338 2026] [:error] [pid 8385:tid 8438] [client 20.91.188.120:57294] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/locales.php"] [unique_id "ae04tjOy7_J84Wx3-oxhRwAAAE4"]
[Sun Apr 26 05:57:11.563654 2026] [:error] [pid 8385:tid 8428] [client 20.91.188.120:31798] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/locales.php"] [unique_id "ae04tzOy7_J84Wx3-oxhSgAAAEQ"]
[Sun Apr 26 05:57:12.323155 2026] [:error] [pid 8385:tid 8443] [client 20.91.188.120:57314] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ae04uDOy7_J84Wx3-oxhTgAAAFM"]
[Sun Apr 26 05:57:13.256864 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:3699] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ae04uT3-0A3lxw9OXoAWzAAAAYQ"]
[Sun Apr 26 05:57:14.408141 2026] [:error] [pid 8390:tid 8471] [client 20.91.188.120:29211] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ae04uoGPtFK_i9p5yxQVLAAAAJQ"]
[Sun Apr 26 05:57:15.570786 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:27854] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bgymj.php"] [unique_id "ae04uz3-0A3lxw9OXoAW1wAAAYo"]
[Sun Apr 26 05:57:16.185739 2026] [:error] [pid 31273:tid 31363] [client 20.91.188.120:29235] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pucci.php"] [unique_id "ae04vPhcNJEGrATcuEfJMgAAAVg"]
[Sun Apr 26 05:57:16.818360 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:9474] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pucci.php"] [unique_id "ae04vPhcNJEGrATcuEfJNQAAAU0"]
[Sun Apr 26 05:57:17.554528 2026] [:error] [pid 41906:tid 41911] [client 20.91.188.120:57343] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pucci.php"] [unique_id "ae04vT3-0A3lxw9OXoAW5QAAAYM"]
[Sun Apr 26 05:57:18.311140 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:59541] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pucci.php"] [unique_id "ae04vvhcNJEGrATcuEfJOgAAAVA"]
[Sun Apr 26 05:57:19.057377 2026] [:error] [pid 31273:tid 31335] [client 20.91.188.120:59526] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae04v_hcNJEGrATcuEfJPQAAAUA"]
[Sun Apr 26 05:57:19.755645 2026] [:error] [pid 41906:tid 41921] [client 20.91.188.120:4034] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae04vz3-0A3lxw9OXoAW8AAAAY0"]
[Sun Apr 26 05:57:20.387684 2026] [:error] [pid 10315:tid 10323] [client 20.91.188.120:57315] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae04wKJIw2vjkleLIaCczQAAAQY"]
[Sun Apr 26 05:57:21.364391 2026] [:error] [pid 10315:tid 10337] [client 20.91.188.120:3945] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae04waJIw2vjkleLIaCc1QAAARQ"]
[Sun Apr 26 05:57:22.177631 2026] [:error] [pid 8390:tid 8467] [client 20.91.188.120:3913] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "ae04woGPtFK_i9p5yxQVMQAAAJA"]
[Sun Apr 26 05:57:23.010659 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:57321] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "ae04wz3-0A3lxw9OXoAW_QAAAYg"]
[Sun Apr 26 05:57:23.752415 2026] [:error] [pid 10315:tid 10330] [client 20.91.188.120:9525] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "ae04w6JIw2vjkleLIaCc3wAAAQ0"]
[Sun Apr 26 05:57:24.634338 2026] [:error] [pid 10315:tid 10319] [client 20.91.188.120:61587] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.dj/index.php"] [unique_id "ae04xKJIw2vjkleLIaCc7QAAAQI"]
[Sun Apr 26 05:57:25.269639 2026] [:error] [pid 10315:tid 10337] [client 20.91.188.120:4091] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae04xaJIw2vjkleLIaCc_QAAARQ"]
[Sun Apr 26 05:57:25.953584 2026] [:error] [pid 31273:tid 31357] [client 20.91.188.120:3916] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae04xfhcNJEGrATcuEfJVQAAAVI"]
[Sun Apr 26 05:57:26.549369 2026] [:error] [pid 31273:tid 31354] [client 20.91.188.120:3683] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae04xvhcNJEGrATcuEfJWwAAAU8"]
[Sun Apr 26 05:57:27.362746 2026] [:error] [pid 10315:tid 10322] [client 20.91.188.120:41299] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae04x6JIw2vjkleLIaCdBgAAAQU"]
[Sun Apr 26 05:57:28.081037 2026] [:error] [pid 8390:tid 8460] [client 20.91.188.120:4090] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "ae04yIGPtFK_i9p5yxQVPgAAAIk"]
[Sun Apr 26 05:57:28.703381 2026] [:error] [pid 8383:tid 8401] [client 20.91.188.120:57339] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "ae04yNFa2S3EsATMdWPAegAAAAQ"]
[Sun Apr 26 05:57:29.373588 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:9478] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "ae04yT3-0A3lxw9OXoAXDQAAAYg"]
[Sun Apr 26 05:57:30.029957 2026] [:error] [pid 10315:tid 10326] [client 20.91.188.120:59522] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/.tmb/"] [unique_id "ae04yqJIw2vjkleLIaCdDwAAAQk"]
[Sun Apr 26 05:57:30.712678 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:61597] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ae04yj3-0A3lxw9OXoAXHQAAAZE"]
[Sun Apr 26 05:57:31.334034 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:31748] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ae04yzOy7_J84Wx3-oxhYgAAAEg"]
[Sun Apr 26 05:57:31.959413 2026] [:error] [pid 41906:tid 41927] [client 20.91.188.120:29223] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ae04yz3-0A3lxw9OXoAXKgAAAZM"]
[Sun Apr 26 05:57:32.637620 2026] [:error] [pid 10315:tid 10324] [client 20.91.188.120:59568] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ae04zKJIw2vjkleLIaCdGAAAAQc"]
[Sun Apr 26 05:57:33.344001 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:9486] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "ae04zT3-0A3lxw9OXoAXPgAAAYg"]
[Sun Apr 26 05:57:34.051146 2026] [:error] [pid 8383:tid 8405] [client 20.91.188.120:3905] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "ae04ztFa2S3EsATMdWPAewAAAAg"]
[Sun Apr 26 05:57:34.683272 2026] [:error] [pid 8385:tid 8435] [client 20.91.188.120:29230] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "ae04zjOy7_J84Wx3-oxhZgAAAEs"]
[Sun Apr 26 05:57:35.286915 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:3657] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no20.php"] [unique_id "ae04zz3-0A3lxw9OXoAXVAAAAYs"]
[Sun Apr 26 05:57:35.893138 2026] [:error] [pid 8491:tid 8507] [client 20.91.188.120:3689] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "ae04zyq7I7e6CJooQM2SQgAAAMg"]
[Sun Apr 26 05:57:36.536553 2026] [:error] [pid 31273:tid 31359] [client 20.91.188.120:3703] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "ae040PhcNJEGrATcuEfJkgAAAVQ"]
[Sun Apr 26 05:57:37.251082 2026] [:error] [pid 41906:tid 41927] [client 20.91.188.120:61631] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "ae040T3-0A3lxw9OXoAXXQAAAZM"]
[Sun Apr 26 05:57:38.051843 2026] [:error] [pid 8385:tid 8438] [client 20.91.188.120:61605] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-alone.php"] [unique_id "ae040jOy7_J84Wx3-oxhZwAAAE4"]
[Sun Apr 26 05:57:39.083462 2026] [:error] [pid 8390:tid 8465] [client 20.91.188.120:4053] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "ae0404GPtFK_i9p5yxQVXAAAAI4"]
[Sun Apr 26 05:57:39.854619 2026] [:error] [pid 10315:tid 10325] [client 20.91.188.120:59533] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "ae0406JIw2vjkleLIaCdVQAAAQg"]
[Sun Apr 26 05:57:40.550425 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:4041] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "ae041D3-0A3lxw9OXoAXbwAAAYw"]
[Sun Apr 26 05:57:41.218862 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:31784] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasnu.php"] [unique_id "ae041T3-0A3lxw9OXoAXdQAAAZE"]
[Sun Apr 26 05:57:41.833957 2026] [:error] [pid 8385:tid 8428] [client 20.91.188.120:57335] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "ae041TOy7_J84Wx3-oxhawAAAEQ"]
[Sun Apr 26 05:57:42.591395 2026] [:error] [pid 41906:tid 41927] [client 20.91.188.120:59583] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "ae041j3-0A3lxw9OXoAXjAAAAZM"]
[Sun Apr 26 05:57:43.442226 2026] [:error] [pid 8385:tid 8427] [client 20.91.188.120:3931] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "ae041zOy7_J84Wx3-oxhbAAAAEM"]
[Sun Apr 26 05:57:44.182997 2026] [:error] [pid 41906:tid 41910] [client 20.91.188.120:61588] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sl.php"] [unique_id "ae042D3-0A3lxw9OXoAXkQAAAYI"]
[Sun Apr 26 05:57:44.752411 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:9507] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "ae042D3-0A3lxw9OXoAXnAAAAZE"]
[Sun Apr 26 05:57:45.316900 2026] [:error] [pid 10315:tid 10335] [client 20.91.188.120:29210] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "ae042aJIw2vjkleLIaCdZQAAARI"]
[Sun Apr 26 05:57:46.125356 2026] [:error] [pid 8385:tid 8440] [client 20.91.188.120:31796] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "ae042jOy7_J84Wx3-oxhcgAAAFA"]
[Sun Apr 26 05:57:46.915472 2026] [:error] [pid 8390:tid 8471] [client 20.91.188.120:59529] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vuln.php"] [unique_id "ae042oGPtFK_i9p5yxQVcwAAAJQ"]
[Sun Apr 26 05:57:47.572307 2026] [:error] [pid 31273:tid 31347] [client 20.91.188.120:3670] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "ae042_hcNJEGrATcuEfJtQAAAUk"]
[Sun Apr 26 05:57:48.120583 2026] [:error] [pid 10315:tid 10332] [client 20.91.188.120:27843] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "ae043KJIw2vjkleLIaCdcQAAAQ8"]
[Sun Apr 26 05:57:48.836017 2026] [:error] [pid 31273:tid 31341] [client 20.91.188.120:31757] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "ae043PhcNJEGrATcuEfJvQAAAUQ"]
[Sun Apr 26 05:57:49.423588 2026] [:error] [pid 31273:tid 31344] [client 20.91.188.120:4040] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-temp.php"] [unique_id "ae043fhcNJEGrATcuEfJvwAAAUY"]
[Sun Apr 26 05:57:50.097652 2026] [:error] [pid 10315:tid 10340] [client 20.91.188.120:27842] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae043qJIw2vjkleLIaCdeQAAARc"]
[Sun Apr 26 05:57:50.727139 2026] [:error] [pid 31273:tid 31341] [client 20.91.188.120:4089] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae043vhcNJEGrATcuEfJywAAAUQ"]
[Sun Apr 26 05:57:51.581358 2026] [:error] [pid 8383:tid 8413] [client 20.91.188.120:4039] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0439Fa2S3EsATMdWPAkgAAABA"]
[Sun Apr 26 05:57:52.276091 2026] [:error] [pid 10315:tid 10332] [client 20.91.188.120:59537] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae044KJIw2vjkleLIaCdggAAAQ8"]
[Sun Apr 26 05:57:53.034195 2026] [:error] [pid 8491:tid 8519] [client 20.91.188.120:57308] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae044Sq7I7e6CJooQM2SZQAAANQ"]
[Sun Apr 26 05:57:53.709128 2026] [:error] [pid 10315:tid 10333] [client 20.91.188.120:57327] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae044aJIw2vjkleLIaCdkQAAARA"]
[Sun Apr 26 05:57:54.988741 2026] [:error] [pid 41906:tid 41924] [client 20.91.188.120:61601] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae044j3-0A3lxw9OXoAXrwAAAZA"]
[Sun Apr 26 05:57:55.649537 2026] [:error] [pid 8390:tid 8461] [client 20.91.188.120:15843] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0444GPtFK_i9p5yxQVhwAAAIo"]
[Sun Apr 26 05:57:56.329688 2026] [:error] [pid 10315:tid 10334] [client 20.91.188.120:4062] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "ae045KJIw2vjkleLIaCdlwAAARE"]
[Sun Apr 26 05:57:56.977518 2026] [:error] [pid 8491:tid 8502] [client 20.91.188.120:3702] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "ae045Cq7I7e6CJooQM2SeAAAAMM"]
[Sun Apr 26 05:57:57.612613 2026] [:error] [pid 10315:tid 10319] [client 20.91.188.120:9532] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "ae045aJIw2vjkleLIaCdmAAAAQI"]
[Sun Apr 26 05:57:58.279085 2026] [:error] [pid 8491:tid 8515] [client 20.91.188.120:29193] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-bda.php"] [unique_id "ae045iq7I7e6CJooQM2SgAAAANA"]
[Sun Apr 26 05:57:58.883947 2026] [:error] [pid 31273:tid 31357] [client 20.91.188.120:27895] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "ae045vhcNJEGrATcuEfJ4QAAAVI"]
[Sun Apr 26 05:57:59.651385 2026] [:error] [pid 31273:tid 31349] [client 20.91.188.120:3693] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "ae045_hcNJEGrATcuEfJ6gAAAUo"]
[Sun Apr 26 05:58:01.110778 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:59532] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "ae046T3-0A3lxw9OXoAX0QAAAYQ"]
[Sun Apr 26 05:58:01.760438 2026] [:error] [pid 41906:tid 41909] [client 20.91.188.120:31775] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bhm.php"] [unique_id "ae046T3-0A3lxw9OXoAX3AAAAYE"]
[Sun Apr 26 05:58:02.438774 2026] [proxy_fcgi:error] [pid 41906:tid 41911] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:02.759174 2026] [proxy_fcgi:error] [pid 41906:tid 41918] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:03.047537 2026] [proxy_fcgi:error] [pid 41906:tid 41919] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:03.359752 2026] [proxy_fcgi:error] [pid 41906:tid 41915] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:03.643778 2026] [proxy_fcgi:error] [pid 41906:tid 41929] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:03.934297 2026] [proxy_fcgi:error] [pid 41906:tid 41927] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:04.220853 2026] [proxy_fcgi:error] [pid 41906:tid 41918] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:04.823635 2026] [proxy_fcgi:error] [pid 41906:tid 41913] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:05.111206 2026] [proxy_fcgi:error] [pid 41906:tid 41926] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:05.403419 2026] [proxy_fcgi:error] [pid 41906:tid 41914] [client 20.91.188.120:31755] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:58:05.700772 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:31755] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "ae047T3-0A3lxw9OXoAYCQAAAZg"]
[Sun Apr 26 05:58:06.466065 2026] [:error] [pid 31273:tid 31345] [client 20.91.188.120:3918] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "ae047vhcNJEGrATcuEfKCwAAAUc"]
[Sun Apr 26 05:58:07.043597 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:61577] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "ae047z3-0A3lxw9OXoAYDwAAAYk"]
[Sun Apr 26 05:58:07.594910 2026] [:error] [pid 8390:tid 8458] [client 20.91.188.120:29246] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/puc.php"] [unique_id "ae0474GPtFK_i9p5yxQVrgAAAIc"]
[Sun Apr 26 05:58:08.350255 2026] [:error] [pid 8390:tid 8474] [client 20.91.188.120:31776] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "ae048IGPtFK_i9p5yxQVtAAAAJc"]
[Sun Apr 26 05:58:09.000490 2026] [:error] [pid 31273:tid 31354] [client 20.91.188.120:3684] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "ae048PhcNJEGrATcuEfKIAAAAU8"]
[Sun Apr 26 05:58:09.639985 2026] [:error] [pid 8390:tid 8456] [client 20.91.188.120:29227] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "ae048YGPtFK_i9p5yxQVugAAAIU"]
[Sun Apr 26 05:58:10.208631 2026] [:error] [pid 8383:tid 8401] [client 20.91.188.120:4066] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "ae048tFa2S3EsATMdWPAowAAAAQ"]
[Sun Apr 26 05:58:10.859614 2026] [:error] [pid 10315:tid 10333] [client 20.91.188.120:50261] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "ae048qJIw2vjkleLIaCdyQAAARA"]
[Sun Apr 26 05:58:11.517298 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:3650] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "ae048_hcNJEGrATcuEfKLAAAAVA"]
[Sun Apr 26 05:58:12.148393 2026] [:error] [pid 8390:tid 8458] [client 20.91.188.120:29237] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "ae049IGPtFK_i9p5yxQVvQAAAIc"]
[Sun Apr 26 05:58:12.777182 2026] [:error] [pid 8383:tid 8403] [client 20.91.188.120:29185] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ewp.php"] [unique_id "ae049NFa2S3EsATMdWPApQAAAAY"]
[Sun Apr 26 05:58:13.428257 2026] [:error] [pid 10315:tid 10323] [client 20.91.188.120:29223] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "ae049aJIw2vjkleLIaCd2AAAAQY"]
[Sun Apr 26 05:58:14.067724 2026] [:error] [pid 8385:tid 8438] [client 20.91.188.120:4035] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "ae049jOy7_J84Wx3-oxhuAAAAE4"]
[Sun Apr 26 05:58:14.749977 2026] [:error] [pid 8385:tid 8444] [client 20.91.188.120:31797] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "ae049jOy7_J84Wx3-oxhugAAAFQ"]
[Sun Apr 26 05:58:15.393932 2026] [:error] [pid 8383:tid 8407] [client 20.91.188.120:59564] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "ae0499Fa2S3EsATMdWPAqwAAAAo"]
[Sun Apr 26 05:58:16.194117 2026] [:error] [pid 31273:tid 31349] [client 20.91.188.120:27846] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "ae04-PhcNJEGrATcuEfKTQAAAUo"]
[Sun Apr 26 05:58:17.050788 2026] [:error] [pid 8491:tid 8505] [client 20.91.188.120:29226] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "ae04-Sq7I7e6CJooQM2SrQAAAMY"]
[Sun Apr 26 05:58:17.597483 2026] [:error] [pid 8491:tid 8501] [client 20.91.188.120:3557] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "ae04-Sq7I7e6CJooQM2StAAAAMI"]
[Sun Apr 26 05:58:18.299001 2026] [:error] [pid 10315:tid 10324] [client 20.91.188.120:27892] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "ae04-qJIw2vjkleLIaCd_QAAAQc"]
[Sun Apr 26 05:58:19.246443 2026] [:error] [pid 8385:tid 8424] [client 20.91.188.120:27879] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "ae04-zOy7_J84Wx3-oxhwQAAAEA"]
[Sun Apr 26 05:58:19.935944 2026] [:error] [pid 8390:tid 8470] [client 20.91.188.120:27893] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "ae04-4GPtFK_i9p5yxQVxAAAAJM"]
[Sun Apr 26 05:58:20.546379 2026] [:error] [pid 8385:tid 8448] [client 20.91.188.120:3654] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "ae04_DOy7_J84Wx3-oxhwgAAAFg"]
[Sun Apr 26 05:58:21.287652 2026] [:error] [pid 8491:tid 8503] [client 20.91.188.120:29225] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "ae04_Sq7I7e6CJooQM2SzwAAAMQ"]
[Sun Apr 26 05:58:22.028021 2026] [:error] [pid 8383:tid 8402] [client 20.91.188.120:41303] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ae04_tFa2S3EsATMdWPAtgAAAAU"]
[Sun Apr 26 05:58:22.650032 2026] [:error] [pid 10315:tid 10335] [client 20.91.188.120:27860] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ae04_qJIw2vjkleLIaCeAgAAARI"]
[Sun Apr 26 05:58:23.684403 2026] [:error] [pid 8385:tid 8431] [client 20.91.188.120:57295] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ae04_zOy7_J84Wx3-oxhzgAAAEc"]
[Sun Apr 26 05:58:25.825822 2026] [:error] [pid 8491:tid 8502] [client 20.91.188.120:41330] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lupo.php"] [unique_id "ae05ASq7I7e6CJooQM2S0gAAAMM"]
[Sun Apr 26 05:58:26.507920 2026] [:error] [pid 8385:tid 8446] [client 20.91.188.120:3666] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "ae05AjOy7_J84Wx3-oxh0wAAAFY"]
[Sun Apr 26 05:58:27.187308 2026] [:error] [pid 31273:tid 31335] [client 20.91.188.120:3709] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "ae05A_hcNJEGrATcuEfKVwAAAUA"]
[Sun Apr 26 05:58:27.769766 2026] [:error] [pid 10315:tid 10321] [client 20.91.188.120:9524] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "ae05A6JIw2vjkleLIaCeCAAAAQQ"]
[Sun Apr 26 05:58:28.561453 2026] [:error] [pid 41906:tid 41927] [client 20.91.188.120:31788] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/awa.php"] [unique_id "ae05BD3-0A3lxw9OXoAYMAAAAZM"]
[Sun Apr 26 05:58:29.261327 2026] [:error] [pid 8383:tid 8405] [client 20.91.188.120:61606] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "ae05BdFa2S3EsATMdWPAuwAAAAg"]
[Sun Apr 26 05:58:29.973887 2026] [:error] [pid 31273:tid 31345] [client 20.91.188.120:9490] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "ae05BfhcNJEGrATcuEfKXAAAAUc"]
[Sun Apr 26 05:58:30.569693 2026] [:error] [pid 8491:tid 8516] [client 20.91.188.120:57341] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "ae05Biq7I7e6CJooQM2S2QAAANE"]
[Sun Apr 26 05:58:31.541482 2026] [:error] [pid 8491:tid 8515] [client 20.91.188.120:3651] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "ae05Byq7I7e6CJooQM2S3gAAANA"]
[Sun Apr 26 05:58:32.312781 2026] [:error] [pid 41906:tid 41915] [client 20.91.188.120:3700] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "ae05CD3-0A3lxw9OXoAYPwAAAYc"]
[Sun Apr 26 05:58:33.145414 2026] [:error] [pid 8390:tid 8457] [client 20.91.188.120:29220] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "ae05CYGPtFK_i9p5yxQV1AAAAIY"]
[Sun Apr 26 05:58:33.884353 2026] [:error] [pid 41906:tid 41926] [client 20.91.188.120:11732] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "ae05CT3-0A3lxw9OXoAYRQAAAZI"]
[Sun Apr 26 05:58:34.538599 2026] [:error] [pid 10315:tid 10329] [client 20.91.188.120:3960] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/13.php"] [unique_id "ae05CqJIw2vjkleLIaCeEgAAAQw"]
[Sun Apr 26 05:58:35.240889 2026] [:error] [pid 10315:tid 10331] [client 20.91.188.120:59577] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ae05C6JIw2vjkleLIaCeFwAAAQ4"]
[Sun Apr 26 05:58:35.871437 2026] [:error] [pid 8491:tid 8511] [client 20.91.188.120:29191] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ae05Cyq7I7e6CJooQM2S4gAAAMw"]
[Sun Apr 26 05:58:36.480709 2026] [:error] [pid 31273:tid 31337] [client 20.91.188.120:4057] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ae05DPhcNJEGrATcuEfKbAAAAUI"]
[Sun Apr 26 05:58:37.087918 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:9481] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "ae05DT3-0A3lxw9OXoAYTAAAAZE"]
[Sun Apr 26 05:58:37.696682 2026] [:error] [pid 41906:tid 41914] [client 20.91.188.120:4073] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "ae05DT3-0A3lxw9OXoAYTgAAAYY"]
[Sun Apr 26 05:58:38.370405 2026] [:error] [pid 10315:tid 10323] [client 20.91.188.120:61569] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "ae05DqJIw2vjkleLIaCeGQAAAQY"]
[Sun Apr 26 05:58:38.969022 2026] [:error] [pid 8491:tid 8500] [client 20.91.188.120:27877] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "ae05Diq7I7e6CJooQM2S7wAAAME"]
[Sun Apr 26 05:58:39.662251 2026] [:error] [pid 8491:tid 8523] [client 20.91.188.120:29200] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/p.php"] [unique_id "ae05Dyq7I7e6CJooQM2S9gAAANc"]
[Sun Apr 26 05:58:40.515797 2026] [:error] [pid 31273:tid 31360] [client 20.91.188.120:3663] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae05EPhcNJEGrATcuEfKcwAAAVU"]
[Sun Apr 26 05:58:41.121932 2026] [:error] [pid 8491:tid 8520] [client 20.91.188.120:59538] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae05ESq7I7e6CJooQM2S_gAAANU"]
[Sun Apr 26 05:58:41.934402 2026] [:error] [pid 10315:tid 10339] [client 20.91.188.120:61575] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae05EaJIw2vjkleLIaCeHQAAARY"]
[Sun Apr 26 05:58:42.526034 2026] [:error] [pid 10315:tid 10321] [client 20.91.188.120:9519] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae05EqJIw2vjkleLIaCeHwAAAQQ"]
[Sun Apr 26 05:58:43.251426 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:3936] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae05Ez3-0A3lxw9OXoAYXAAAAYs"]
[Sun Apr 26 05:58:43.832683 2026] [:error] [pid 41906:tid 41915] [client 20.91.188.120:31787] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae05Ez3-0A3lxw9OXoAYZQAAAYc"]
[Sun Apr 26 05:58:45.803018 2026] [:error] [pid 8390:tid 8460] [client 20.91.188.120:61580] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae05FYGPtFK_i9p5yxQV2QAAAIk"]
[Sun Apr 26 05:58:46.968557 2026] [:error] [pid 31273:tid 31361] [client 20.91.188.120:57298] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae05FvhcNJEGrATcuEfKgQAAAVY"]
[Sun Apr 26 05:58:47.562187 2026] [:error] [pid 31273:tid 31351] [client 20.91.188.120:15831] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ae05F_hcNJEGrATcuEfKggAAAUw"]
[Sun Apr 26 05:58:48.296916 2026] [:error] [pid 8491:tid 8510] [client 20.91.188.120:59543] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ae05GCq7I7e6CJooQM2TCgAAAMs"]
[Sun Apr 26 05:58:48.915618 2026] [:error] [pid 10315:tid 10324] [client 20.91.188.120:9493] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ae05GKJIw2vjkleLIaCeKwAAAQc"]
[Sun Apr 26 05:58:49.571962 2026] [:error] [pid 10315:tid 10331] [client 20.91.188.120:3953] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell.php"] [unique_id "ae05GaJIw2vjkleLIaCeLQAAAQ4"]
[Sun Apr 26 05:58:50.219338 2026] [:error] [pid 8385:tid 8442] [client 20.91.188.120:31800] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "ae05GjOy7_J84Wx3-oxh5QAAAFI"]
[Sun Apr 26 05:58:50.807042 2026] [:error] [pid 31273:tid 31347] [client 20.91.188.120:41327] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "ae05GvhcNJEGrATcuEfKjAAAAUk"]
[Sun Apr 26 05:58:51.711877 2026] [:error] [pid 10315:tid 10320] [client 20.91.188.120:31790] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "ae05G6JIw2vjkleLIaCeMAAAAQM"]
[Sun Apr 26 05:58:52.619185 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:61596] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/seo.php"] [unique_id "ae05HDOy7_J84Wx3-oxh5gAAAEg"]
[Sun Apr 26 05:58:53.334001 2026] [:error] [pid 8383:tid 8401] [client 20.91.188.120:46372] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "ae05HdFa2S3EsATMdWPAwwAAAAQ"]
[Sun Apr 26 05:58:54.073568 2026] [:error] [pid 8385:tid 8439] [client 20.91.188.120:9504] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "ae05HjOy7_J84Wx3-oxh6QAAAE8"]
[Sun Apr 26 05:58:55.454765 2026] [:error] [pid 8390:tid 8455] [client 20.91.188.120:59539] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "ae05H4GPtFK_i9p5yxQV4AAAAIQ"]
[Sun Apr 26 05:58:56.072483 2026] [:error] [pid 8390:tid 8475] [client 20.91.188.120:57342] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "ae05IIGPtFK_i9p5yxQV4QAAAJg"]
[Sun Apr 26 05:58:56.664658 2026] [:error] [pid 8491:tid 8510] [client 20.91.188.120:3697] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "ae05ICq7I7e6CJooQM2TEQAAAMs"]
[Sun Apr 26 05:58:57.667098 2026] [:error] [pid 10315:tid 10317] [client 20.91.188.120:9473] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "ae05IaJIw2vjkleLIaCePgAAAQA"]
[Sun Apr 26 05:58:58.634939 2026] [:error] [pid 10315:tid 10326] [client 20.91.188.120:46399] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "ae05IqJIw2vjkleLIaCeRQAAAQk"]
[Sun Apr 26 05:59:05.559590 2026] [proxy_fcgi:error] [pid 41906:tid 41923] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:05.872574 2026] [proxy_fcgi:error] [pid 41906:tid 41912] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:06.214447 2026] [proxy_fcgi:error] [pid 41906:tid 41922] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:06.501332 2026] [proxy_fcgi:error] [pid 41906:tid 41909] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:06.803505 2026] [proxy_fcgi:error] [pid 41906:tid 41911] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:07.110472 2026] [proxy_fcgi:error] [pid 41906:tid 41921] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:07.395819 2026] [proxy_fcgi:error] [pid 41906:tid 41908] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:07.693455 2026] [proxy_fcgi:error] [pid 41906:tid 41931] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:08.010952 2026] [proxy_fcgi:error] [pid 41906:tid 41923] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:08.408711 2026] [proxy_fcgi:error] [pid 41906:tid 41912] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:09.178244 2026] [proxy_fcgi:error] [pid 41906:tid 41916] [client 20.91.188.120:31756] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:59:09.483947 2026] [:error] [pid 41906:tid 41915] [client 20.91.188.120:31756] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "ae05LT3-0A3lxw9OXoAYogAAAYc"]
[Sun Apr 26 05:59:10.250157 2026] [:error] [pid 8390:tid 8454] [client 20.91.188.120:27880] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "ae05LoGPtFK_i9p5yxQV5gAAAIM"]
[Sun Apr 26 05:59:10.962797 2026] [:error] [pid 8390:tid 8459] [client 20.91.188.120:3652] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "ae05LoGPtFK_i9p5yxQV5wAAAIg"]
[Sun Apr 26 05:59:11.685883 2026] [:error] [pid 31273:tid 31336] [client 20.91.188.120:29206] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2026w.php"] [unique_id "ae05L_hcNJEGrATcuEfKowAAAUE"]
[Sun Apr 26 05:59:12.391874 2026] [:error] [pid 31273:tid 31349] [client 20.91.188.120:61610] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "ae05MPhcNJEGrATcuEfKpgAAAUo"]
[Sun Apr 26 05:59:13.315733 2026] [:error] [pid 41906:tid 41931] [client 20.91.188.120:3912] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "ae05MT3-0A3lxw9OXoAYpgAAAZc"]
[Sun Apr 26 05:59:14.063145 2026] [:error] [pid 10315:tid 10322] [client 20.91.188.120:41342] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "ae05MqJIw2vjkleLIaCeYwAAAQU"]
[Sun Apr 26 05:59:14.766304 2026] [:error] [pid 10315:tid 10339] [client 20.91.188.120:4092] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwpg.php"] [unique_id "ae05MqJIw2vjkleLIaCeZAAAARY"]
[Sun Apr 26 05:59:15.388469 2026] [:error] [pid 8390:tid 8455] [client 20.91.188.120:3660] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ae05M4GPtFK_i9p5yxQV7AAAAIQ"]
[Sun Apr 26 05:59:16.116514 2026] [:error] [pid 8383:tid 8402] [client 20.91.188.120:27864] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ae05NNFa2S3EsATMdWPA0QAAAAU"]
[Sun Apr 26 05:59:16.731570 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:57291] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ae05ND3-0A3lxw9OXoAYqAAAAYQ"]
[Sun Apr 26 05:59:17.383064 2026] [:error] [pid 31273:tid 31362] [client 20.91.188.120:4038] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ass.php"] [unique_id "ae05NfhcNJEGrATcuEfKsQAAAVc"]
[Sun Apr 26 05:59:18.180344 2026] [:error] [pid 41906:tid 41924] [client 20.91.188.120:27867] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae05Nj3-0A3lxw9OXoAYrgAAAZA"]
[Sun Apr 26 05:59:18.917435 2026] [:error] [pid 41906:tid 41927] [client 20.91.188.120:15841] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae05Nj3-0A3lxw9OXoAYsgAAAZM"]
[Sun Apr 26 05:59:19.568713 2026] [:error] [pid 8383:tid 8414] [client 20.91.188.120:57307] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae05N9Fa2S3EsATMdWPA0wAAABE"]
[Sun Apr 26 05:59:20.222311 2026] [:error] [pid 41906:tid 41930] [client 20.91.188.120:3958] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "ae05OD3-0A3lxw9OXoAYugAAAZY"]
[Sun Apr 26 05:59:20.858483 2026] [:error] [pid 8491:tid 8511] [client 20.91.188.120:29195] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "ae05OCq7I7e6CJooQM2TGQAAAMw"]
[Sun Apr 26 05:59:21.507172 2026] [:error] [pid 8491:tid 8510] [client 20.91.188.120:3959] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "ae05OSq7I7e6CJooQM2TGwAAAMs"]
[Sun Apr 26 05:59:22.149190 2026] [:error] [pid 8385:tid 8441] [client 20.91.188.120:41328] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "ae05OjOy7_J84Wx3-oxh-wAAAFE"]
[Sun Apr 26 05:59:22.826823 2026] [:error] [pid 8491:tid 8523] [client 20.91.188.120:3554] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no18.php"] [unique_id "ae05Oiq7I7e6CJooQM2THQAAANc"]
[Sun Apr 26 05:59:23.587294 2026] [:error] [pid 41906:tid 41911] [client 20.91.188.120:59552] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "ae05Oz3-0A3lxw9OXoAYxQAAAYM"]
[Sun Apr 26 05:59:24.229334 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:3923] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "ae05PD3-0A3lxw9OXoAYyAAAAYk"]
[Sun Apr 26 05:59:24.881058 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:61583] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "ae05PD3-0A3lxw9OXoAYzAAAAYo"]
[Sun Apr 26 05:59:25.597678 2026] [:error] [pid 8390:tid 8465] [client 20.91.188.120:31789] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fine.php"] [unique_id "ae05PYGPtFK_i9p5yxQV7QAAAI4"]
[Sun Apr 26 05:59:26.181191 2026] [:error] [pid 41906:tid 41926] [client 20.91.188.120:31801] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae05Pj3-0A3lxw9OXoAYzgAAAZI"]
[Sun Apr 26 05:59:26.804366 2026] [:error] [pid 41906:tid 41913] [client 20.91.188.120:59542] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae05Pj3-0A3lxw9OXoAY0QAAAYU"]
[Sun Apr 26 05:59:27.505835 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:4046] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae05Pz3-0A3lxw9OXoAY1AAAAYs"]
[Sun Apr 26 05:59:28.145029 2026] [:error] [pid 10315:tid 10329] [client 20.91.188.120:46349] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae05QKJIw2vjkleLIaCecAAAAQw"]
[Sun Apr 26 05:59:28.755441 2026] [:error] [pid 8390:tid 8452] [client 20.91.188.120:3926] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "ae05QIGPtFK_i9p5yxQV8AAAAIE"]
[Sun Apr 26 05:59:29.444199 2026] [:error] [pid 8385:tid 8437] [client 20.91.188.120:61599] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "ae05QTOy7_J84Wx3-oxh_gAAAE0"]
[Sun Apr 26 05:59:30.173686 2026] [:error] [pid 8491:tid 8507] [client 20.91.188.120:31761] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "ae05Qiq7I7e6CJooQM2TIQAAAMg"]
[Sun Apr 26 05:59:30.767713 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:41341] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "ae05Qj3-0A3lxw9OXoAY4AAAAYo"]
[Sun Apr 26 05:59:31.396158 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:9518] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ae05Qz3-0A3lxw9OXoAY4wAAAZU"]
[Sun Apr 26 05:59:32.059700 2026] [:error] [pid 41906:tid 41914] [client 20.91.188.120:59547] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ae05RD3-0A3lxw9OXoAY5AAAAYY"]
[Sun Apr 26 05:59:32.691887 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:41317] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ae05RD3-0A3lxw9OXoAY6AAAAYk"]
[Sun Apr 26 05:59:33.346851 2026] [:error] [pid 41906:tid 41928] [client 20.91.188.120:37713] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin.php"] [unique_id "ae05RT3-0A3lxw9OXoAY6wAAAZQ"]
[Sun Apr 26 05:59:34.072995 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:38657] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "ae05Rj3-0A3lxw9OXoAY7gAAAZg"]
[Sun Apr 26 05:59:34.709641 2026] [:error] [pid 8383:tid 8408] [client 20.91.188.120:3533] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "ae05RtFa2S3EsATMdWPA2gAAAAs"]
[Sun Apr 26 05:59:35.368821 2026] [:error] [pid 10315:tid 10318] [client 20.91.188.120:59556] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "ae05R6JIw2vjkleLIaCedwAAAQE"]
[Sun Apr 26 05:59:36.053402 2026] [:error] [pid 10315:tid 10341] [client 20.91.188.120:61627] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inege.php"] [unique_id "ae05SKJIw2vjkleLIaCefAAAARg"]
[Sun Apr 26 05:59:36.826158 2026] [:error] [pid 10315:tid 10331] [client 20.91.188.120:60271] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ae05SKJIw2vjkleLIaCegQAAAQ4"]
[Sun Apr 26 05:59:37.472183 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:41307] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ae05SfhcNJEGrATcuEfKuQAAAVA"]
[Sun Apr 26 05:59:38.142435 2026] [:error] [pid 8383:tid 8410] [client 20.91.188.120:9530] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ae05StFa2S3EsATMdWPA2wAAAA0"]
[Sun Apr 26 05:59:38.981673 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:3952] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uuu.php"] [unique_id "ae05Sj3-0A3lxw9OXoAY9AAAAYg"]
[Sun Apr 26 05:59:39.709602 2026] [:error] [pid 8491:tid 8524] [client 20.91.188.120:41311] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "ae05Syq7I7e6CJooQM2TJgAAANg"]
[Sun Apr 26 05:59:40.540034 2026] [:error] [pid 8383:tid 8402] [client 20.91.188.120:3688] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "ae05TNFa2S3EsATMdWPA3gAAAAU"]
[Sun Apr 26 05:59:41.375531 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:61611] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "ae05TT3-0A3lxw9OXoAY_AAAAYA"]
[Sun Apr 26 05:59:42.000995 2026] [:error] [pid 8385:tid 8444] [client 20.91.188.120:9488] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/no1.php"] [unique_id "ae05TTOy7_J84Wx3-oxiAwAAAFQ"]
[Sun Apr 26 05:59:42.585184 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:46363] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "ae05Tj3-0A3lxw9OXoAZAAAAAYg"]
[Sun Apr 26 05:59:43.247755 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:38681] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "ae05Tz3-0A3lxw9OXoAZAQAAAYQ"]
[Sun Apr 26 05:59:43.885200 2026] [:error] [pid 31273:tid 31341] [client 20.91.188.120:3706] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "ae05T_hcNJEGrATcuEfKxgAAAUQ"]
[Sun Apr 26 05:59:44.604570 2026] [:error] [pid 10315:tid 10319] [client 20.91.188.120:3567] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w2025.php"] [unique_id "ae05UKJIw2vjkleLIaCeiwAAAQI"]
[Sun Apr 26 05:59:45.217284 2026] [:error] [pid 10315:tid 10340] [client 20.91.188.120:3656] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "ae05UaJIw2vjkleLIaCejgAAARc"]
[Sun Apr 26 05:59:45.901531 2026] [:error] [pid 8491:tid 8499] [client 20.91.188.120:41296] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "ae05USq7I7e6CJooQM2TLwAAAMA"]
[Sun Apr 26 05:59:46.595646 2026] [:error] [pid 8383:tid 8408] [client 20.91.188.120:3683] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "ae05UtFa2S3EsATMdWPA4gAAAAs"]
[Sun Apr 26 05:59:47.308101 2026] [:error] [pid 8491:tid 8511] [client 20.91.188.120:50280] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fvvff.php"] [unique_id "ae05Uyq7I7e6CJooQM2TNAAAAMw"]
[Sun Apr 26 05:59:47.929564 2026] [:error] [pid 8390:tid 8475] [client 20.91.188.120:59559] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ae05U4GPtFK_i9p5yxQWBQAAAJg"]
[Sun Apr 26 05:59:48.537321 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:4080] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ae05VD3-0A3lxw9OXoAZGwAAAYk"]
[Sun Apr 26 05:59:49.118229 2026] [:error] [pid 8383:tid 8416] [client 20.91.188.120:31762] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ae05VdFa2S3EsATMdWPA4wAAABM"]
[Sun Apr 26 05:59:49.646141 2026] [:error] [pid 8491:tid 8524] [client 20.91.188.120:31783] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a2.php"] [unique_id "ae05VSq7I7e6CJooQM2TNwAAANg"]
[Sun Apr 26 05:59:50.245871 2026] [:error] [pid 8491:tid 8509] [client 20.91.188.120:29208] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ae05Viq7I7e6CJooQM2TOQAAAMo"]
[Sun Apr 26 05:59:50.850666 2026] [:error] [pid 8491:tid 8506] [client 20.91.188.120:37696] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ae05Viq7I7e6CJooQM2TOgAAAMc"]
[Sun Apr 26 05:59:51.427485 2026] [:error] [pid 8491:tid 8507] [client 20.91.188.120:3929] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ae05Vyq7I7e6CJooQM2TPAAAAMg"]
[Sun Apr 26 05:59:52.076887 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:29214] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ae05WD3-0A3lxw9OXoAZIwAAAZE"]
[Sun Apr 26 05:59:52.715568 2026] [:error] [pid 8390:tid 8451] [client 20.91.188.120:61581] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ae05WIGPtFK_i9p5yxQWBwAAAIA"]
[Sun Apr 26 05:59:53.300696 2026] [:error] [pid 31273:tid 31335] [client 20.91.188.120:31781] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ae05WfhcNJEGrATcuEfKygAAAUA"]
[Sun Apr 26 05:59:53.894760 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:4072] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ae05WT3-0A3lxw9OXoAZKQAAAYo"]
[Sun Apr 26 05:59:54.502402 2026] [:error] [pid 41906:tid 41915] [client 20.91.188.120:4050] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "ae05Wj3-0A3lxw9OXoAZKwAAAYc"]
[Sun Apr 26 05:59:55.178098 2026] [:error] [pid 41906:tid 41911] [client 20.91.188.120:3556] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae05Wz3-0A3lxw9OXoAZLwAAAYM"]
[Sun Apr 26 05:59:55.787381 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:9502] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae05Wz3-0A3lxw9OXoAZMgAAAYA"]
[Sun Apr 26 05:59:56.426516 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:31753] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae05XD3-0A3lxw9OXoAZNwAAAYs"]
[Sun Apr 26 05:59:57.075128 2026] [:error] [pid 41906:tid 41921] [client 20.91.188.120:29196] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae05XT3-0A3lxw9OXoAZOwAAAY0"]
[Sun Apr 26 05:59:57.704170 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:3678] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ae05XT3-0A3lxw9OXoAZPQAAAYQ"]
[Sun Apr 26 05:59:58.306547 2026] [:error] [pid 8385:tid 8424] [client 20.91.188.120:59573] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ae05XjOy7_J84Wx3-oxiDQAAAEA"]
[Sun Apr 26 05:59:58.933597 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:31745] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ae05Xj3-0A3lxw9OXoAZQwAAAZg"]
[Sun Apr 26 05:59:59.705806 2026] [:error] [pid 8491:tid 8506] [client 20.91.188.120:59572] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/66.php"] [unique_id "ae05Xyq7I7e6CJooQM2TRgAAAMc"]
[Sun Apr 26 06:00:00.336804 2026] [:error] [pid 10315:tid 10339] [client 20.91.188.120:59524] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ae05YKJIw2vjkleLIaCepwAAARY"]
[Sun Apr 26 06:00:01.034898 2026] [:error] [pid 8390:tid 8454] [client 20.91.188.120:57374] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ae05YYGPtFK_i9p5yxQWDgAAAIM"]
[Sun Apr 26 06:00:01.708931 2026] [:error] [pid 31273:tid 31361] [client 20.91.188.120:57286] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ae05YfhcNJEGrATcuEfKzwAAAVY"]
[Sun Apr 26 06:00:02.444917 2026] [:error] [pid 8385:tid 8447] [client 20.91.188.120:3949] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a5.php"] [unique_id "ae05YjOy7_J84Wx3-oxiDgAAAFc"]
[Sun Apr 26 06:00:03.092452 2026] [:error] [pid 8383:tid 8418] [client 20.91.188.120:4085] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "ae05Y9Fa2S3EsATMdWPA6wAAABU"]
[Sun Apr 26 06:00:03.712148 2026] [:error] [pid 8385:tid 8441] [client 20.91.188.120:57300] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "ae05YzOy7_J84Wx3-oxiDwAAAFE"]
[Sun Apr 26 06:00:04.618244 2026] [:error] [pid 8491:tid 8499] [client 20.91.188.120:29234] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "ae05ZCq7I7e6CJooQM2TRwAAAMA"]
[Sun Apr 26 06:00:05.259413 2026] [:error] [pid 8491:tid 8501] [client 20.91.188.120:37722] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ol.php"] [unique_id "ae05ZSq7I7e6CJooQM2TSgAAAMI"]
[Sun Apr 26 06:00:05.946511 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:27888] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ae05ZT3-0A3lxw9OXoAZSgAAAYk"]
[Sun Apr 26 06:00:06.719796 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:46360] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ae05Zj3-0A3lxw9OXoAZTwAAAYo"]
[Sun Apr 26 06:00:07.454132 2026] [:error] [pid 41906:tid 41924] [client 20.91.188.120:57334] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ae05Zz3-0A3lxw9OXoAZVAAAAZA"]
[Sun Apr 26 06:00:08.249272 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:57379] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f6.php"] [unique_id "ae05aD3-0A3lxw9OXoAZXQAAAYo"]
[Sun Apr 26 06:00:08.864816 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:29215] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inputs.php"] [unique_id "ae05aD3-0A3lxw9OXoAZYgAAAZU"]
[Sun Apr 26 06:00:09.491894 2026] [proxy_fcgi:error] [pid 31273:tid 31351] [client 20.91.188.120:9508] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:00:09.820370 2026] [proxy_fcgi:error] [pid 31273:tid 31362] [client 20.91.188.120:9508] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:00:10.115109 2026] [proxy_fcgi:error] [pid 31273:tid 31353] [client 20.91.188.120:9508] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:00:10.722787 2026] [proxy_fcgi:error] [pid 31273:tid 31347] [client 20.91.188.120:9508] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:00:11.055388 2026] [proxy_fcgi:error] [pid 31273:tid 31359] [client 20.91.188.120:9508] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:00:12.938800 2026] [proxy_fcgi:error] [pid 31273:tid 31342] [client 20.91.188.120:9508] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:00:13.271546 2026] [proxy_fcgi:error] [pid 31273:tid 31356] [client 20.91.188.120:9508] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:00:14.284915 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:9508] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05bvhcNJEGrATcuEfK4QAAAVA"]
[Sun Apr 26 06:00:14.904012 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:61571] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05bj3-0A3lxw9OXoAZcgAAAZU"]
[Sun Apr 26 06:00:15.586777 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:41329] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05bz3-0A3lxw9OXoAZdgAAAYg"]
[Sun Apr 26 06:00:16.345251 2026] [:error] [pid 8383:tid 8410] [client 20.91.188.120:57315] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05cNFa2S3EsATMdWPA8AAAAA0"]
[Sun Apr 26 06:00:16.979849 2026] [:error] [pid 8383:tid 8402] [client 20.91.188.120:41280] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "ae05cNFa2S3EsATMdWPA8wAAAAU"]
[Sun Apr 26 06:00:17.572983 2026] [:error] [pid 10315:tid 10317] [client 20.91.188.120:3648] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "ae05caJIw2vjkleLIaCetgAAAQA"]
[Sun Apr 26 06:00:18.339016 2026] [:error] [pid 8385:tid 8430] [client 20.91.188.120:29224] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "ae05cjOy7_J84Wx3-oxiEwAAAEY"]
[Sun Apr 26 06:00:19.057449 2026] [:error] [pid 31273:tid 31345] [client 20.91.188.120:27863] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "ae05c_hcNJEGrATcuEfK6QAAAUc"]
[Sun Apr 26 06:00:19.751051 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:3671] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "ae05c_hcNJEGrATcuEfK7AAAAU0"]
[Sun Apr 26 06:00:20.434247 2026] [:error] [pid 8385:tid 8437] [client 20.91.188.120:37750] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "ae05dDOy7_J84Wx3-oxiFwAAAE0"]
[Sun Apr 26 06:00:21.156713 2026] [:error] [pid 41906:tid 41910] [client 20.91.188.120:15866] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "ae05dT3-0A3lxw9OXoAZfwAAAYI"]
[Sun Apr 26 06:00:22.177481 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:27883] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "ae05dj3-0A3lxw9OXoAZhQAAAYA"]
[Sun Apr 26 06:00:23.009411 2026] [:error] [pid 8385:tid 8425] [client 20.91.188.120:15835] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05dzOy7_J84Wx3-oxiGgAAAEE"]
[Sun Apr 26 06:00:24.205019 2026] [:error] [pid 10315:tid 10327] [client 20.91.188.120:57348] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05eKJIw2vjkleLIaCexgAAAQo"]
[Sun Apr 26 06:00:24.791130 2026] [:error] [pid 10315:tid 10332] [client 20.91.188.120:3682] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05eKJIw2vjkleLIaCezQAAAQ8"]
[Sun Apr 26 06:00:25.840983 2026] [:error] [pid 8385:tid 8441] [client 20.91.188.120:57377] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ae05eTOy7_J84Wx3-oxiHQAAAFE"]
[Sun Apr 26 06:00:26.513771 2026] [:error] [pid 8385:tid 8443] [client 20.91.188.120:3413] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ae05ejOy7_J84Wx3-oxiHgAAAFM"]
[Sun Apr 26 06:00:27.180439 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:57405] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ae05ezOy7_J84Wx3-oxiIQAAAEg"]
[Sun Apr 26 06:00:27.848249 2026] [:error] [pid 8383:tid 8413] [client 20.91.188.120:57377] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ae05e9Fa2S3EsATMdWPA9wAAABA"]
[Sun Apr 26 06:00:28.776089 2026] [:error] [pid 8390:tid 8463] [client 20.91.188.120:3961] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "ae05fIGPtFK_i9p5yxQWIQAAAIw"]
[Sun Apr 26 06:00:29.607674 2026] [:error] [pid 8390:tid 8456] [client 20.91.188.120:4067] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae05fYGPtFK_i9p5yxQWIgAAAIU"]
[Sun Apr 26 06:00:30.359280 2026] [:error] [pid 8390:tid 8475] [client 20.91.188.120:27872] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae05foGPtFK_i9p5yxQWJAAAAJg"]
[Sun Apr 26 06:00:31.050411 2026] [:error] [pid 31273:tid 31346] [client 20.91.188.120:38173] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae05f_hcNJEGrATcuEfK_AAAAUg"]
[Sun Apr 26 06:00:31.753308 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:61618] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae05fz3-0A3lxw9OXoAZjQAAAZE"]
[Sun Apr 26 06:00:32.335048 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:57306] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "ae05gD3-0A3lxw9OXoAZkAAAAYw"]
[Sun Apr 26 06:00:33.013705 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:9506] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "ae05gT3-0A3lxw9OXoAZlQAAAZg"]
[Sun Apr 26 06:00:33.775842 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:3909] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "ae05gT3-0A3lxw9OXoAZnQAAAYg"]
[Sun Apr 26 06:00:34.437501 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:3444] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fff.php"] [unique_id "ae05gj3-0A3lxw9OXoAZpQAAAYs"]
[Sun Apr 26 06:00:35.061784 2026] [:error] [pid 41906:tid 41911] [client 20.91.188.120:57292] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05gz3-0A3lxw9OXoAZqgAAAYM"]
[Sun Apr 26 06:00:35.708312 2026] [:error] [pid 41906:tid 41922] [client 20.91.188.120:3687] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05gz3-0A3lxw9OXoAZrgAAAY4"]
[Sun Apr 26 06:00:36.477485 2026] [:error] [pid 10315:tid 10323] [client 20.91.188.120:60242] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05hKJIw2vjkleLIaCe1gAAAQY"]
[Sun Apr 26 06:00:37.077623 2026] [:error] [pid 10315:tid 10325] [client 20.91.188.120:3920] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05haJIw2vjkleLIaCe2gAAAQg"]
[Sun Apr 26 06:00:37.831365 2026] [:error] [pid 31273:tid 31339] [client 20.91.188.120:31769] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "ae05hfhcNJEGrATcuEfLBQAAAUM"]
[Sun Apr 26 06:00:38.522663 2026] [:error] [pid 8390:tid 8473] [client 20.91.188.120:29239] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "ae05hoGPtFK_i9p5yxQWKQAAAJY"]
[Sun Apr 26 06:00:39.191344 2026] [:error] [pid 10315:tid 10323] [client 20.91.188.120:3950] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "ae05h6JIw2vjkleLIaCe6gAAAQY"]
[Sun Apr 26 06:00:39.947483 2026] [:error] [pid 8491:tid 8523] [client 20.91.188.120:4063] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/makeasmtp.php"] [unique_id "ae05hyq7I7e6CJooQM2TYwAAANc"]
[Sun Apr 26 06:00:40.657979 2026] [:error] [pid 8491:tid 8506] [client 20.91.188.120:41310] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "ae05iCq7I7e6CJooQM2TZgAAAMc"]
[Sun Apr 26 06:00:41.451779 2026] [:error] [pid 10315:tid 10317] [client 20.91.188.120:31785] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "ae05iaJIw2vjkleLIaCe8AAAAQA"]
[Sun Apr 26 06:00:42.199044 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:57348] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "ae05ij3-0A3lxw9OXoAZwAAAAYs"]
[Sun Apr 26 06:00:42.874100 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:50301] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin1.php"] [unique_id "ae05ij3-0A3lxw9OXoAZzQAAAZE"]
[Sun Apr 26 06:00:43.612654 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:31791] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae05iz3-0A3lxw9OXoAZ2QAAAZE"]
[Sun Apr 26 06:00:44.383275 2026] [:error] [pid 8390:tid 8451] [client 20.91.188.120:57322] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae05jIGPtFK_i9p5yxQWLQAAAIA"]
[Sun Apr 26 06:00:45.090976 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:9523] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae05jT3-0A3lxw9OXoAZ3wAAAZU"]
[Sun Apr 26 06:00:45.868026 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:3704] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae05jT3-0A3lxw9OXoAZ4wAAAYk"]
[Sun Apr 26 06:00:47.471961 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:46351] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae05jz3-0A3lxw9OXoAZ5gAAAYw"]
[Sun Apr 26 06:00:48.544911 2026] [:error] [pid 31273:tid 31357] [client 20.91.188.120:29194] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae05kPhcNJEGrATcuEfLEwAAAVI"]
[Sun Apr 26 06:00:49.553042 2026] [:error] [pid 41906:tid 41921] [client 20.91.188.120:3692] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae05kT3-0A3lxw9OXoAZ7AAAAY0"]
[Sun Apr 26 06:00:50.353167 2026] [:error] [pid 8385:tid 8444] [client 20.91.188.120:41315] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae05kjOy7_J84Wx3-oxiMgAAAFQ"]
[Sun Apr 26 06:00:51.101286 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:57344] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae05kz3-0A3lxw9OXoAZ9QAAAZU"]
[Sun Apr 26 06:00:52.663015 2026] [:error] [pid 10315:tid 10329] [client 20.91.188.120:61579] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae05lKJIw2vjkleLIaCfJAAAAQw"]
[Sun Apr 26 06:00:53.642964 2026] [:error] [pid 8491:tid 8505] [client 20.91.188.120:3919] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae05lSq7I7e6CJooQM2TbwAAAMY"]
[Sun Apr 26 06:00:54.348929 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:9503] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae05lj3-0A3lxw9OXoAZ_gAAAZU"]
[Sun Apr 26 06:00:55.207519 2026] [:error] [pid 31273:tid 31349] [client 20.91.188.120:37723] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae05l_hcNJEGrATcuEfLGwAAAUo"]
[Sun Apr 26 06:00:55.995476 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:61591] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae05lz3-0A3lxw9OXoAaCAAAAYs"]
[Sun Apr 26 06:00:56.592354 2026] [:error] [pid 8390:tid 8454] [client 20.91.188.120:31792] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae05mIGPtFK_i9p5yxQWNgAAAIM"]
[Sun Apr 26 06:00:57.544144 2026] [:error] [pid 8385:tid 8426] [client 20.91.188.120:61615] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae05mTOy7_J84Wx3-oxiOAAAAEI"]
[Sun Apr 26 06:00:58.281489 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:4082] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ae05mvhcNJEGrATcuEfLJAAAAVA"]
[Sun Apr 26 06:00:58.974203 2026] [:error] [pid 41906:tid 41930] [client 20.91.188.120:29218] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ae05mj3-0A3lxw9OXoAaGgAAAZY"]
[Sun Apr 26 06:00:59.990165 2026] [:error] [pid 10315:tid 10332] [client 20.91.188.120:57297] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ae05m6JIw2vjkleLIaCfOAAAAQ8"]
[Sun Apr 26 06:01:00.802373 2026] [:error] [pid 8390:tid 8472] [client 20.91.188.120:29247] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ae05nIGPtFK_i9p5yxQWOAAAAJU"]
[Sun Apr 26 06:01:01.662670 2026] [:error] [pid 8390:tid 8455] [client 20.91.188.120:46341] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae05nYGPtFK_i9p5yxQWOwAAAIQ"]
[Sun Apr 26 06:01:02.372313 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:4032] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae05nj3-0A3lxw9OXoAaJQAAAYQ"]
[Sun Apr 26 06:01:03.131356 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:38656] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae05n_hcNJEGrATcuEfLLwAAAVA"]
[Sun Apr 26 06:01:04.102945 2026] [:error] [pid 31273:tid 31336] [client 20.91.188.120:27898] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae05oPhcNJEGrATcuEfLMQAAAUE"]
[Sun Apr 26 06:01:05.812075 2026] [:error] [pid 8385:tid 8437] [client 20.91.188.120:31765] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "ae05oTOy7_J84Wx3-oxiPgAAAE0"]
[Sun Apr 26 06:01:06.668789 2026] [:error] [pid 8385:tid 8435] [client 20.91.188.120:4081] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "ae05ojOy7_J84Wx3-oxiQAAAAEs"]
[Sun Apr 26 06:01:07.660490 2026] [:error] [pid 10315:tid 10330] [client 20.91.188.120:50246] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "ae05o6JIw2vjkleLIaCfTQAAAQ0"]
[Sun Apr 26 06:01:08.325691 2026] [:error] [pid 31273:tid 31336] [client 20.91.188.120:57350] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "ae05pPhcNJEGrATcuEfLOAAAAUE"]
[Sun Apr 26 06:01:09.093359 2026] [:error] [pid 31273:tid 31356] [client 20.91.188.120:3667] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae05pfhcNJEGrATcuEfLOgAAAVE"]
[Sun Apr 26 06:01:09.865500 2026] [:error] [pid 8491:tid 8501] [client 20.91.188.120:57388] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae05pSq7I7e6CJooQM2TgQAAAMI"]
[Sun Apr 26 06:01:10.968156 2026] [:error] [pid 41906:tid 41914] [client 20.91.188.120:41305] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae05pj3-0A3lxw9OXoAaSAAAAYY"]
[Sun Apr 26 06:01:11.667369 2026] [:error] [pid 31273:tid 31339] [client 20.91.188.120:61589] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae05p_hcNJEGrATcuEfLPQAAAUM"]
[Sun Apr 26 06:01:12.506142 2026] [:error] [pid 41906:tid 41913] [client 20.91.188.120:31749] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "ae05qD3-0A3lxw9OXoAaVAAAAYU"]
[Sun Apr 26 06:01:13.275541 2026] [proxy_fcgi:error] [pid 10315:tid 10318] [client 20.91.188.120:27891] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:13.556273 2026] [proxy_fcgi:error] [pid 10315:tid 10336] [client 20.91.188.120:27891] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:13.861633 2026] [proxy_fcgi:error] [pid 10315:tid 10333] [client 20.91.188.120:27891] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:14.820683 2026] [:error] [pid 10315:tid 10322] [client 20.91.188.120:27891] [client 20.91.188.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae05qqJIw2vjkleLIaCfXgAAAQU"]
[Sun Apr 26 06:01:16.479090 2026] [proxy_fcgi:error] [pid 10315:tid 10337] [client 20.91.188.120:4076] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:17.385753 2026] [proxy_fcgi:error] [pid 10315:tid 10324] [client 20.91.188.120:4076] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:17.655436 2026] [proxy_fcgi:error] [pid 10315:tid 10322] [client 20.91.188.120:4076] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:17.989984 2026] [proxy_fcgi:error] [pid 10315:tid 10327] [client 20.91.188.120:4076] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:18.258883 2026] [proxy_fcgi:error] [pid 10315:tid 10326] [client 20.91.188.120:4076] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 06:01:18.523286 2026] [:error] [pid 10315:tid 10337] [client 20.91.188.120:4076] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae05rqJIw2vjkleLIaCfcAAAARQ"]
[Sun Apr 26 06:01:19.274872 2026] [:error] [pid 41906:tid 41930] [client 20.91.188.120:3708] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae05rz3-0A3lxw9OXoAabgAAAZY"]
[Sun Apr 26 06:01:19.971904 2026] [:error] [pid 31273:tid 31360] [client 20.91.188.120:27889] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae05r_hcNJEGrATcuEfLPgAAAVU"]
[Sun Apr 26 06:01:21.042720 2026] [:error] [pid 8383:tid 8402] [client 20.91.188.120:27899] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae05sdFa2S3EsATMdWPBEwAAAAU"]
[Sun Apr 26 06:01:22.041051 2026] [:error] [pid 8383:tid 8415] [client 20.91.188.120:9512] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "ae05stFa2S3EsATMdWPBFAAAABI"]
[Sun Apr 26 06:01:22.906730 2026] [:error] [pid 31273:tid 31341] [client 20.91.188.120:29241] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "ae05svhcNJEGrATcuEfLRwAAAUQ"]
[Sun Apr 26 06:01:23.646841 2026] [:error] [pid 31273:tid 31344] [client 20.91.188.120:59560] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "ae05s_hcNJEGrATcuEfLSwAAAUY"]
[Sun Apr 26 06:01:24.387137 2026] [:error] [pid 8491:tid 8520] [client 20.91.188.120:3964] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bs1.php"] [unique_id "ae05tCq7I7e6CJooQM2TiwAAANU"]
[Sun Apr 26 06:01:25.117889 2026] [:error] [pid 8383:tid 8411] [client 20.91.188.120:41318] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae05tdFa2S3EsATMdWPBFQAAAA4"]
[Sun Apr 26 06:01:26.112211 2026] [:error] [pid 8385:tid 8445] [client 20.91.188.120:57281] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae05tjOy7_J84Wx3-oxiTgAAAFU"]
[Sun Apr 26 06:01:26.955023 2026] [:error] [pid 31273:tid 31361] [client 20.91.188.120:41302] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae05tvhcNJEGrATcuEfLTwAAAVY"]
[Sun Apr 26 06:01:27.742300 2026] [:error] [pid 8491:tid 8502] [client 20.91.188.120:41295] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae05tyq7I7e6CJooQM2TjgAAAMM"]
[Sun Apr 26 06:01:28.561109 2026] [:error] [pid 10315:tid 10324] [client 20.91.188.120:4034] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "ae05uKJIw2vjkleLIaCfeAAAAQc"]
[Sun Apr 26 06:01:29.750489 2026] [:error] [pid 10315:tid 10329] [client 20.91.188.120:4094] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "ae05uaJIw2vjkleLIaCfewAAAQw"]
[Sun Apr 26 06:01:30.642524 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:31768] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "ae05uj3-0A3lxw9OXoAafwAAAZg"]
[Sun Apr 26 06:01:31.411454 2026] [:error] [pid 8385:tid 8440] [client 20.91.188.120:57334] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axx.php"] [unique_id "ae05uzOy7_J84Wx3-oxiUgAAAFA"]
[Sun Apr 26 06:01:32.225017 2026] [:error] [pid 8385:tid 8446] [client 20.91.188.120:15822] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ae05vDOy7_J84Wx3-oxiVQAAAFY"]
[Sun Apr 26 06:01:32.939396 2026] [:error] [pid 41906:tid 41926] [client 20.91.188.120:3669] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ae05vD3-0A3lxw9OXoAagQAAAZI"]
[Sun Apr 26 06:01:33.636060 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:3938] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ae05vT3-0A3lxw9OXoAahAAAAYQ"]
[Sun Apr 26 06:01:34.305690 2026] [:error] [pid 8385:tid 8429] [client 20.91.188.120:31750] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gettest.php"] [unique_id "ae05vjOy7_J84Wx3-oxiWQAAAEU"]
[Sun Apr 26 06:01:34.932443 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:4047] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ae05vj3-0A3lxw9OXoAaiwAAAZU"]
[Sun Apr 26 06:01:35.491885 2026] [:error] [pid 41906:tid 41915] [client 20.91.188.120:31771] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ae05vz3-0A3lxw9OXoAajQAAAYc"]
[Sun Apr 26 06:01:36.206921 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:9476] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ae05wPhcNJEGrATcuEfLVgAAAVA"]
[Sun Apr 26 06:01:36.886818 2026] [:error] [pid 41906:tid 41931] [client 20.91.188.120:31759] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ae05wD3-0A3lxw9OXoAajgAAAZc"]
[Sun Apr 26 06:01:37.528654 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:61623] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "ae05wfhcNJEGrATcuEfLWwAAAU0"]
[Sun Apr 26 06:01:38.134867 2026] [:error] [pid 41906:tid 41911] [client 20.91.188.120:59567] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "ae05wj3-0A3lxw9OXoAakAAAAYM"]
[Sun Apr 26 06:01:38.742171 2026] [:error] [pid 8491:tid 8508] [client 20.91.188.120:3412] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "ae05wiq7I7e6CJooQM2TnwAAAMk"]
[Sun Apr 26 06:01:39.399406 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:3442] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file48.php"] [unique_id "ae05wz3-0A3lxw9OXoAakgAAAYo"]
[Sun Apr 26 06:01:40.011519 2026] [:error] [pid 10315:tid 10327] [client 20.91.188.120:3962] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05xKJIw2vjkleLIaCfjQAAAQo"]
[Sun Apr 26 06:01:40.609370 2026] [:error] [pid 31273:tid 31335] [client 20.91.188.120:57329] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05xPhcNJEGrATcuEfLawAAAUA"]
[Sun Apr 26 06:01:41.189010 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:3916] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05xfhcNJEGrATcuEfLbwAAAU0"]
[Sun Apr 26 06:01:41.864543 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:9498] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-content/"] [unique_id "ae05xT3-0A3lxw9OXoAalAAAAYw"]
[Sun Apr 26 06:01:42.505001 2026] [:error] [pid 10315:tid 10330] [client 20.91.188.120:3910] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ae05xqJIw2vjkleLIaCfmAAAAQ0"]
[Sun Apr 26 06:01:43.247117 2026] [:error] [pid 10315:tid 10341] [client 20.91.188.120:41286] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ae05x6JIw2vjkleLIaCfmwAAARg"]
[Sun Apr 26 06:01:43.894511 2026] [:error] [pid 10315:tid 10333] [client 20.91.188.120:57325] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ae05x6JIw2vjkleLIaCfnQAAARA"]
[Sun Apr 26 06:01:44.640155 2026] [:error] [pid 10315:tid 10324] [client 20.91.188.120:15824] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ae05yKJIw2vjkleLIaCfpAAAAQc"]
[Sun Apr 26 06:01:45.285659 2026] [:error] [pid 8491:tid 8513] [client 20.91.188.120:3915] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ae05ySq7I7e6CJooQM2TpgAAAM4"]
[Sun Apr 26 06:01:45.897916 2026] [:error] [pid 8390:tid 8451] [client 20.91.188.120:57382] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ae05yYGPtFK_i9p5yxQWTAAAAIA"]
[Sun Apr 26 06:01:46.554383 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:4083] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ae05yjOy7_J84Wx3-oxiYgAAAEg"]
[Sun Apr 26 06:01:47.171494 2026] [:error] [pid 10315:tid 10328] [client 20.91.188.120:29202] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ae05y6JIw2vjkleLIaCfqAAAAQs"]
[Sun Apr 26 06:01:47.847577 2026] [:error] [pid 10315:tid 10325] [client 20.91.188.120:9478] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ae05y6JIw2vjkleLIaCfrQAAAQg"]
[Sun Apr 26 06:01:48.695700 2026] [:error] [pid 8390:tid 8458] [client 20.91.188.120:41332] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ae05zIGPtFK_i9p5yxQWUAAAAIc"]
[Sun Apr 26 06:01:49.226290 2026] [:error] [pid 8385:tid 8429] [client 20.91.188.120:59545] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ae05zTOy7_J84Wx3-oxiZQAAAEU"]
[Sun Apr 26 06:01:49.863126 2026] [:error] [pid 41906:tid 41924] [client 20.91.188.120:29210] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ae05zT3-0A3lxw9OXoAamAAAAZA"]
[Sun Apr 26 06:01:50.523568 2026] [:error] [pid 10315:tid 10317] [client 20.91.188.120:57284] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "ae05zqJIw2vjkleLIaCfvgAAAQA"]
[Sun Apr 26 06:01:51.227198 2026] [:error] [pid 41906:tid 41928] [client 20.91.188.120:3538] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "ae05zz3-0A3lxw9OXoAamgAAAZQ"]
[Sun Apr 26 06:01:51.818002 2026] [:error] [pid 8491:tid 8507] [client 20.91.188.120:61602] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "ae05zyq7I7e6CJooQM2TrQAAAMg"]
[Sun Apr 26 06:01:52.460403 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:3661] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hypo.php"] [unique_id "ae050D3-0A3lxw9OXoAanwAAAYk"]
[Sun Apr 26 06:01:53.126634 2026] [:error] [pid 41906:tid 41910] [client 20.91.188.120:60243] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "ae050T3-0A3lxw9OXoAaogAAAYI"]
[Sun Apr 26 06:01:53.739805 2026] [:error] [pid 10315:tid 10320] [client 20.91.188.120:37726] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "ae050aJIw2vjkleLIaCfwQAAAQM"]
[Sun Apr 26 06:01:54.524073 2026] [:error] [pid 8385:tid 8436] [client 20.91.188.120:37752] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "ae050jOy7_J84Wx3-oxiaQAAAEw"]
[Sun Apr 26 06:01:55.259821 2026] [:error] [pid 10315:tid 10331] [client 20.91.188.120:3542] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file18.php"] [unique_id "ae0506JIw2vjkleLIaCfxgAAAQ4"]
[Sun Apr 26 06:01:55.982249 2026] [:error] [pid 10315:tid 10322] [client 20.91.188.120:4070] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae0506JIw2vjkleLIaCfyQAAAQU"]
[Sun Apr 26 06:01:56.660911 2026] [:error] [pid 8491:tid 8511] [client 20.91.188.120:57319] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae051Cq7I7e6CJooQM2TtwAAAMw"]
[Sun Apr 26 06:01:57.414684 2026] [:error] [pid 41906:tid 41923] [client 20.91.188.120:3707] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae051T3-0A3lxw9OXoAaqwAAAY8"]
[Sun Apr 26 06:01:58.355125 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:41301] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae051j3-0A3lxw9OXoAarQAAAYA"]
[Sun Apr 26 06:01:59.011054 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:29198] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae051z3-0A3lxw9OXoAarwAAAZE"]
[Sun Apr 26 06:01:59.638381 2026] [:error] [pid 8385:tid 8438] [client 20.91.188.120:31793] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae051zOy7_J84Wx3-oxicAAAAE4"]
[Sun Apr 26 06:02:00.495272 2026] [:error] [pid 10315:tid 10320] [client 20.91.188.120:9511] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae052KJIw2vjkleLIaCgMwAAAQM"]
[Sun Apr 26 06:02:01.093351 2026] [:error] [pid 8390:tid 8455] [client 20.91.188.120:4089] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae052YGPtFK_i9p5yxQWWQAAAIQ"]
[Sun Apr 26 06:02:01.825741 2026] [:error] [pid 8390:tid 8457] [client 20.91.188.120:3947] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "ae052YGPtFK_i9p5yxQWXAAAAIY"]
[Sun Apr 26 06:02:02.562160 2026] [:error] [pid 31273:tid 31356] [client 20.91.188.120:3553] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "ae052vhcNJEGrATcuEfLhgAAAVE"]
[Sun Apr 26 06:02:03.835496 2026] [:error] [pid 41906:tid 41909] [client 20.91.188.120:15856] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "ae052z3-0A3lxw9OXoAavgAAAYE"]
[Sun Apr 26 06:02:04.601804 2026] [:error] [pid 41906:tid 41928] [client 20.91.188.120:3696] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/chosen.php"] [unique_id "ae053D3-0A3lxw9OXoAawgAAAZQ"]
[Sun Apr 26 09:00:06.629965 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 13.74.146.113:8364] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:00:06.885227 2026] [proxy_fcgi:error] [pid 8390:tid 8475] [client 13.74.146.113:8364] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 09:52:58.417119 2026] [:error] [pid 16515:tid 16528] [client 191.109.98.73:42334] [client 191.109.98.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.109.98.73, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ae1v-ltDrUmgHSvpuLzkqwAAAko"]
[Sun Apr 26 09:52:58.427887 2026] [proxy_fcgi:error] [pid 16515:tid 16528] [client 191.109.98.73:42334] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 11:13:58.104153 2026] [:error] [pid 8390:tid 8468] [client 212.47.78.126:51426] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ae2C9oGPtFK_i9p5yxSfAwAAAJE"]
[Sun Apr 26 11:13:58.651324 2026] [:error] [pid 8390:tid 8474] [client 212.47.78.126:56930] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae2C9oGPtFK_i9p5yxSfBQAAAJc"]
[Sun Apr 26 11:13:59.242366 2026] [:error] [pid 8491:tid 8508] [client 212.47.78.126:61235] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae2C9yq7I7e6CJooQM3KhwAAAMk"]
[Sun Apr 26 20:43:43.584695 2026] [proxy_fcgi:error] [pid 13137:tid 13155] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:43.859379 2026] [proxy_fcgi:error] [pid 13137:tid 13157] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:44.125435 2026] [proxy_fcgi:error] [pid 13137:tid 13142] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:44.443957 2026] [proxy_fcgi:error] [pid 13137:tid 13163] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:44.801306 2026] [proxy_fcgi:error] [pid 13137:tid 13140] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:45.069003 2026] [proxy_fcgi:error] [pid 13137:tid 13159] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:45.352001 2026] [proxy_fcgi:error] [pid 13137:tid 13149] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:45.621815 2026] [proxy_fcgi:error] [pid 13137:tid 13141] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:45.888650 2026] [proxy_fcgi:error] [pid 13137:tid 13146] [client 4.232.184.88:47567] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:43:46.531719 2026] [:error] [pid 13137:tid 13152] [client 4.232.184.88:47567] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/elp.php"] [unique_id "ae4Igt0RB4J0o4h5neF6fQAAAgs"]
[Sun Apr 26 20:43:47.334053 2026] [:error] [pid 22572:tid 22595] [client 4.232.184.88:47637] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/elp.php"] [unique_id "ae4Ig9XOViWCFU-pZzAtNwAAAVE"]
[Sun Apr 26 20:43:48.238450 2026] [:error] [pid 22573:tid 22612] [client 4.232.184.88:9472] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/elp.php"] [unique_id "ae4IhHB3EmQlD4yKUt8CbQAAAYY"]
[Sun Apr 26 20:43:48.932218 2026] [:error] [pid 22573:tid 22629] [client 4.232.184.88:50792] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/elp.php"] [unique_id "ae4IhHB3EmQlD4yKUt8CcAAAAZY"]
[Sun Apr 26 20:43:49.642284 2026] [:error] [pid 8390:tid 8465] [client 4.232.184.88:47578] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "ae4IhYGPtFK_i9p5yxRuvgAAAI4"]
[Sun Apr 26 20:43:50.276038 2026] [:error] [pid 8383:tid 8398] [client 4.232.184.88:53989] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "ae4IhtFa2S3EsATMdWNZWgAAAAE"]
[Sun Apr 26 20:43:50.947021 2026] [:error] [pid 8383:tid 8419] [client 4.232.184.88:49522] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "ae4IhtFa2S3EsATMdWNZWwAAABY"]
[Sun Apr 26 20:43:51.495350 2026] [:error] [pid 13137:tid 13158] [client 4.232.184.88:9519] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zc-243.php"] [unique_id "ae4Ih90RB4J0o4h5neF6gAAAAhE"]
[Sun Apr 26 20:43:52.440372 2026] [:error] [pid 8385:tid 8439] [client 4.232.184.88:53977] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "ae4IiDOy7_J84Wx3-ozVQQAAAE8"]
[Sun Apr 26 20:43:53.341754 2026] [:error] [pid 8383:tid 8406] [client 4.232.184.88:54001] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "ae4IidFa2S3EsATMdWNZYgAAAAk"]
[Sun Apr 26 20:43:53.998066 2026] [:error] [pid 16515:tid 16534] [client 4.232.184.88:50765] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "ae4IiVtDrUmgHSvpuLxFgAAAAlA"]
[Sun Apr 26 20:43:54.977553 2026] [:error] [pid 22573:tid 22616] [client 4.232.184.88:50781] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bkyac.php"] [unique_id "ae4IinB3EmQlD4yKUt8CewAAAYk"]
[Sun Apr 26 20:43:55.776797 2026] [:error] [pid 22573:tid 22610] [client 4.232.184.88:47568] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ae4Ii3B3EmQlD4yKUt8CfwAAAYQ"]
[Sun Apr 26 20:43:56.399184 2026] [:error] [pid 8390:tid 8474] [client 4.232.184.88:49517] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ae4IjIGPtFK_i9p5yxRuzQAAAJc"]
[Sun Apr 26 20:43:57.078625 2026] [:error] [pid 8390:tid 8456] [client 4.232.184.88:50812] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ae4IjYGPtFK_i9p5yxRu1AAAAIU"]
[Sun Apr 26 20:43:58.920278 2026] [:error] [pid 8491:tid 8524] [client 4.232.184.88:50809] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wziar1.php"] [unique_id "ae4Ijiq7I7e6CJooQM0C2gAAANg"]
[Sun Apr 26 20:44:00.991016 2026] [:error] [pid 13137:tid 13144] [client 4.232.184.88:47558] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae4IkN0RB4J0o4h5neF6jgAAAgQ"]
[Sun Apr 26 20:44:02.608637 2026] [:error] [pid 8385:tid 8437] [client 4.232.184.88:50791] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae4IkjOy7_J84Wx3-ozVRgAAAE0"]
[Sun Apr 26 20:44:04.052522 2026] [:error] [pid 13137:tid 13141] [client 4.232.184.88:50786] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae4IlN0RB4J0o4h5neF6lwAAAgE"]
[Sun Apr 26 20:44:06.681410 2026] [:error] [pid 8383:tid 8401] [client 4.232.184.88:9479] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae4IltFa2S3EsATMdWNZegAAAAQ"]
[Sun Apr 26 20:44:08.108816 2026] [:error] [pid 8383:tid 8407] [client 4.232.184.88:50800] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "ae4ImNFa2S3EsATMdWNZfwAAAAo"]
[Sun Apr 26 20:44:10.086447 2026] [:error] [pid 8383:tid 8404] [client 4.232.184.88:47562] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "ae4ImtFa2S3EsATMdWNZiAAAAAc"]
[Sun Apr 26 20:44:11.630157 2026] [:error] [pid 8383:tid 8399] [client 4.232.184.88:53970] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "ae4Im9Fa2S3EsATMdWNZjAAAAAI"]
[Sun Apr 26 20:44:12.512613 2026] [:error] [pid 8383:tid 8410] [client 4.232.184.88:54007] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7logs.php"] [unique_id "ae4InNFa2S3EsATMdWNZkQAAAA0"]
[Sun Apr 26 20:44:14.232046 2026] [:error] [pid 8385:tid 8441] [client 4.232.184.88:53987] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae4InjOy7_J84Wx3-ozVRwAAAFE"]
[Sun Apr 26 20:44:15.393301 2026] [:error] [pid 16515:tid 16525] [client 4.232.184.88:49472] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae4In1tDrUmgHSvpuLxFmAAAAkc"]
[Sun Apr 26 20:44:17.891107 2026] [:error] [pid 16515:tid 16526] [client 4.232.184.88:9512] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae4IoVtDrUmgHSvpuLxFnAAAAkg"]
[Sun Apr 26 20:44:20.613362 2026] [:error] [pid 22573:tid 22619] [client 4.232.184.88:9530] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae4IpHB3EmQlD4yKUt8CuQAAAYw"]
[Sun Apr 26 20:44:21.514468 2026] [:error] [pid 22573:tid 22622] [client 4.232.184.88:50775] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ae4IpXB3EmQlD4yKUt8CvQAAAY8"]
[Sun Apr 26 20:44:24.785517 2026] [:error] [pid 8390:tid 8464] [client 4.232.184.88:49488] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ae4IqIGPtFK_i9p5yxRu-AAAAI0"]
[Sun Apr 26 20:44:27.526271 2026] [:error] [pid 8383:tid 8416] [client 4.232.184.88:9503] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ae4Iq9Fa2S3EsATMdWNZwwAAABM"]
[Sun Apr 26 20:44:30.201615 2026] [:error] [pid 22572:tid 22578] [client 4.232.184.88:9478] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ae4IrtXOViWCFU-pZzAtZgAAAUA"]
[Sun Apr 26 20:44:31.302764 2026] [:error] [pid 13137:tid 13143] [client 4.232.184.88:53976] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "ae4Ir90RB4J0o4h5neF6swAAAgM"]
[Sun Apr 26 20:44:31.963629 2026] [:error] [pid 8390:tid 8461] [client 4.232.184.88:49507] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "ae4Ir4GPtFK_i9p5yxRvCwAAAIo"]
[Sun Apr 26 20:44:33.272457 2026] [:error] [pid 22573:tid 22615] [client 4.232.184.88:50813] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "ae4IsXB3EmQlD4yKUt8CyAAAAYg"]
[Sun Apr 26 20:44:34.318778 2026] [:error] [pid 8383:tid 8412] [client 4.232.184.88:9513] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ctex1.php"] [unique_id "ae4IstFa2S3EsATMdWNZ2AAAAA8"]
[Sun Apr 26 20:44:35.490432 2026] [:error] [pid 22573:tid 22611] [client 4.232.184.88:47605] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "ae4Is3B3EmQlD4yKUt8CygAAAYU"]
[Sun Apr 26 20:44:38.266210 2026] [:error] [pid 8383:tid 8412] [client 4.232.184.88:47573] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "ae4IttFa2S3EsATMdWNZ3AAAAA8"]
[Sun Apr 26 20:44:40.488397 2026] [:error] [pid 8491:tid 8516] [client 4.232.184.88:47626] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "ae4IuCq7I7e6CJooQM0C5wAAANE"]
[Sun Apr 26 20:44:41.821670 2026] [:error] [pid 8385:tid 8438] [client 4.232.184.88:53965] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lb.php"] [unique_id "ae4IuTOy7_J84Wx3-ozVVgAAAE4"]
[Sun Apr 26 20:44:44.165623 2026] [:error] [pid 8491:tid 8504] [client 4.232.184.88:9496] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "ae4IvCq7I7e6CJooQM0C7wAAAMU"]
[Sun Apr 26 20:44:45.461896 2026] [:error] [pid 8491:tid 8514] [client 4.232.184.88:47564] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "ae4IvSq7I7e6CJooQM0C8wAAAM8"]
[Sun Apr 26 20:44:47.715832 2026] [proxy_fcgi:error] [pid 13137:tid 13140] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:47.956406 2026] [proxy_fcgi:error] [pid 13137:tid 13151] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:48.193917 2026] [proxy_fcgi:error] [pid 13137:tid 13145] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:48.431175 2026] [proxy_fcgi:error] [pid 13137:tid 13152] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:48.680010 2026] [proxy_fcgi:error] [pid 13137:tid 13158] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:48.916320 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:49.156405 2026] [proxy_fcgi:error] [pid 13137:tid 13143] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:49.428445 2026] [proxy_fcgi:error] [pid 13137:tid 13148] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:49.664776 2026] [proxy_fcgi:error] [pid 13137:tid 13157] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:50.803433 2026] [proxy_fcgi:error] [pid 13137:tid 13159] [client 4.232.184.88:50815] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:44:51.036980 2026] [:error] [pid 13137:tid 13141] [client 4.232.184.88:50815] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "ae4Iw90RB4J0o4h5neF60wAAAgE"]
[Sun Apr 26 20:44:56.142484 2026] [:error] [pid 8383:tid 8418] [client 4.232.184.88:49478] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "ae4IyNFa2S3EsATMdWNZ7AAAABU"]
[Sun Apr 26 20:44:59.814518 2026] [:error] [pid 16574:tid 16635] [client 4.232.184.88:50779] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "ae4Iy35MsX8wRQr99nY4YgAAA1Q"]
[Sun Apr 26 20:45:02.858432 2026] [:error] [pid 8383:tid 8399] [client 4.232.184.88:49479] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/abrand.php"] [unique_id "ae4IztFa2S3EsATMdWNZ8AAAAAI"]
[Sun Apr 26 20:45:05.086135 2026] [:error] [pid 8390:tid 8464] [client 4.232.184.88:47642] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ae4I0YGPtFK_i9p5yxRvKgAAAI0"]
[Sun Apr 26 20:45:06.813184 2026] [:error] [pid 22572:tid 22594] [client 4.232.184.88:49514] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ae4I0tXOViWCFU-pZzAtigAAAVA"]
[Sun Apr 26 20:45:08.435144 2026] [:error] [pid 13137:tid 13160] [client 4.232.184.88:47619] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ae4I1N0RB4J0o4h5neF68AAAAhM"]
[Sun Apr 26 20:45:09.403476 2026] [:error] [pid 8390:tid 8452] [client 4.232.184.88:49483] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amax.php"] [unique_id "ae4I1YGPtFK_i9p5yxRvOQAAAIE"]
[Sun Apr 26 20:45:11.007907 2026] [:error] [pid 8491:tid 8513] [client 4.232.184.88:50780] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ae4I1yq7I7e6CJooQM0DCgAAAM4"]
[Sun Apr 26 20:45:12.190705 2026] [:error] [pid 16515:tid 16521] [client 4.232.184.88:53958] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ae4I2FtDrUmgHSvpuLxFvwAAAkM"]
[Sun Apr 26 20:45:14.859605 2026] [:error] [pid 8390:tid 8458] [client 4.232.184.88:9498] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ae4I2oGPtFK_i9p5yxRvSgAAAIc"]
[Sun Apr 26 20:45:17.149082 2026] [:error] [pid 22573:tid 22627] [client 4.232.184.88:47555] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/classwithtostring.php"] [unique_id "ae4I3XB3EmQlD4yKUt8C_AAAAZQ"]
[Sun Apr 26 20:45:19.533047 2026] [:error] [pid 16515:tid 16527] [client 4.232.184.88:49498] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amwxl.php"] [unique_id "ae4I31tDrUmgHSvpuLxFyAAAAkk"]
[Sun Apr 26 20:45:21.973586 2026] [:error] [pid 8390:tid 8466] [client 4.232.184.88:63409] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amwxl.php"] [unique_id "ae4I4YGPtFK_i9p5yxRvdQAAAI8"]
[Sun Apr 26 20:45:24.198764 2026] [:error] [pid 16574:tid 16613] [client 4.232.184.88:50811] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amwxl.php"] [unique_id "ae4I5H5MsX8wRQr99nY4cgAAA0k"]
[Sun Apr 26 20:45:24.971955 2026] [:error] [pid 13137:tid 13162] [client 4.232.184.88:9515] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amwxl.php"] [unique_id "ae4I5N0RB4J0o4h5neF7BgAAAhU"]
[Sun Apr 26 20:45:25.814827 2026] [:error] [pid 13137:tid 13141] [client 4.232.184.88:47661] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ae4I5d0RB4J0o4h5neF7CwAAAgE"]
[Sun Apr 26 20:45:26.539391 2026] [:error] [pid 13197:tid 13245] [client 4.232.184.88:49531] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ae4I5t3kktFKdSxTrBvZGgAAAs0"]
[Sun Apr 26 20:45:27.404222 2026] [:error] [pid 22572:tid 22592] [client 4.232.184.88:53993] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ae4I59XOViWCFU-pZzAtkwAAAU4"]
[Sun Apr 26 20:45:28.067200 2026] [:error] [pid 22572:tid 22591] [client 4.232.184.88:47652] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ae4I6NXOViWCFU-pZzAtlQAAAU0"]
[Sun Apr 26 20:45:28.886988 2026] [:error] [pid 16515:tid 16538] [client 4.232.184.88:53979] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/userfuns.php"] [unique_id "ae4I6FtDrUmgHSvpuLxF5AAAAlQ"]
[Sun Apr 26 20:45:29.694368 2026] [:error] [pid 8491:tid 8510] [client 4.232.184.88:10234] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/userfuns.php"] [unique_id "ae4I6Sq7I7e6CJooQM0DEAAAAMs"]
[Sun Apr 26 20:45:30.522971 2026] [:error] [pid 8491:tid 8499] [client 4.232.184.88:53971] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/userfuns.php"] [unique_id "ae4I6iq7I7e6CJooQM0DEQAAAMA"]
[Sun Apr 26 20:45:32.190249 2026] [:error] [pid 16515:tid 16532] [client 4.232.184.88:47630] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/userfuns.php"] [unique_id "ae4I7FtDrUmgHSvpuLxF6wAAAk4"]
[Sun Apr 26 20:45:34.044953 2026] [:error] [pid 8383:tid 8397] [client 4.232.184.88:50754] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ae4I7tFa2S3EsATMdWNaGwAAAAA"]
[Sun Apr 26 20:45:36.367824 2026] [:error] [pid 8390:tid 8473] [client 4.232.184.88:47628] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ae4I8IGPtFK_i9p5yxRvfQAAAJY"]
[Sun Apr 26 20:45:38.659408 2026] [:error] [pid 22572:tid 22584] [client 4.232.184.88:49511] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ae4I8tXOViWCFU-pZzAtpwAAAUY"]
[Sun Apr 26 20:45:40.358831 2026] [:error] [pid 8383:tid 8417] [client 4.232.184.88:50764] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/menu.php"] [unique_id "ae4I9NFa2S3EsATMdWNaIQAAABQ"]
[Sun Apr 26 20:45:43.899905 2026] [:error] [pid 16515:tid 16533] [client 4.232.184.88:47625] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ae4I91tDrUmgHSvpuLxF8wAAAk8"]
[Sun Apr 26 20:45:48.198311 2026] [:error] [pid 22573:tid 22607] [client 4.232.184.88:49534] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ae4I_HB3EmQlD4yKUt8DEQAAAYE"]
[Sun Apr 26 20:45:49.972837 2026] [:error] [pid 8383:tid 8421] [client 4.232.184.88:49518] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ae4I_dFa2S3EsATMdWNaMAAAABg"]
[Sun Apr 26 20:45:53.788643 2026] [proxy_fcgi:error] [pid 8383:tid 8415] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:54.041406 2026] [proxy_fcgi:error] [pid 8383:tid 8413] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:54.288021 2026] [proxy_fcgi:error] [pid 8383:tid 8397] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:54.534757 2026] [proxy_fcgi:error] [pid 8383:tid 8400] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:54.889759 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:55.172841 2026] [proxy_fcgi:error] [pid 8383:tid 8401] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:55.427328 2026] [proxy_fcgi:error] [pid 8383:tid 8405] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:55.673702 2026] [proxy_fcgi:error] [pid 8383:tid 8406] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:55.918359 2026] [proxy_fcgi:error] [pid 8383:tid 8414] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:56.165978 2026] [proxy_fcgi:error] [pid 8383:tid 8419] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:56.412740 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 4.232.184.88:49495] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:45:56.799295 2026] [:error] [pid 8383:tid 8405] [client 4.232.184.88:49495] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ae4JBNFa2S3EsATMdWNaUgAAAAg"]
[Sun Apr 26 20:45:57.362638 2026] [:error] [pid 22572:tid 22592] [client 4.232.184.88:47672] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ae4JBdXOViWCFU-pZzAtvgAAAU4"]
[Sun Apr 26 20:45:57.953344 2026] [:error] [pid 8390:tid 8467] [client 4.232.184.88:49489] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ae4JBYGPtFK_i9p5yxRvrAAAAJA"]
[Sun Apr 26 20:45:58.637511 2026] [:error] [pid 8390:tid 8474] [client 4.232.184.88:47679] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ae4JBoGPtFK_i9p5yxRvrgAAAJc"]
[Sun Apr 26 20:45:59.590982 2026] [:error] [pid 22573:tid 22619] [client 4.232.184.88:50805] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "ae4JB3B3EmQlD4yKUt8DHAAAAYw"]
[Sun Apr 26 20:46:01.420246 2026] [:error] [pid 22573:tid 22607] [client 4.232.184.88:49494] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "ae4JCXB3EmQlD4yKUt8DIQAAAYE"]
[Sun Apr 26 20:46:03.462502 2026] [:error] [pid 8390:tid 8472] [client 4.232.184.88:47650] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "ae4JC4GPtFK_i9p5yxRvtAAAAJU"]
[Sun Apr 26 20:46:05.633010 2026] [:error] [pid 8390:tid 8456] [client 4.232.184.88:49486] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sa.php7"] [unique_id "ae4JDYGPtFK_i9p5yxRvtwAAAIU"]
[Sun Apr 26 20:46:07.447059 2026] [:error] [pid 22573:tid 22622] [client 4.232.184.88:47678] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ae4JD3B3EmQlD4yKUt8DLQAAAY8"]
[Sun Apr 26 20:46:08.731543 2026] [:error] [pid 22573:tid 22628] [client 4.232.184.88:49528] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ae4JEHB3EmQlD4yKUt8DLgAAAZU"]
[Sun Apr 26 20:46:10.317023 2026] [:error] [pid 22572:tid 22602] [client 4.232.184.88:47569] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ae4JEtXOViWCFU-pZzAtyQAAAVg"]
[Sun Apr 26 20:46:12.667448 2026] [:error] [pid 22572:tid 22594] [client 4.232.184.88:47586] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ae4JFNXOViWCFU-pZzAtzgAAAVA"]
[Sun Apr 26 20:46:15.116733 2026] [:error] [pid 8390:tid 8475] [client 4.232.184.88:50766] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ae4JF4GPtFK_i9p5yxRv2wAAAJg"]
[Sun Apr 26 20:46:15.936435 2026] [:error] [pid 8390:tid 8472] [client 4.232.184.88:47559] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ae4JF4GPtFK_i9p5yxRv3gAAAJU"]
[Sun Apr 26 20:46:18.167117 2026] [:error] [pid 8491:tid 8505] [client 4.232.184.88:50782] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ae4JGiq7I7e6CJooQM0DLQAAAMY"]
[Sun Apr 26 20:46:19.454380 2026] [:error] [pid 8383:tid 8400] [client 4.232.184.88:9491] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp9.php"] [unique_id "ae4JG9Fa2S3EsATMdWNagwAAAAM"]
[Sun Apr 26 20:46:20.827097 2026] [:error] [pid 8390:tid 8472] [client 4.232.184.88:50761] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae4JHIGPtFK_i9p5yxRv4AAAAJU"]
[Sun Apr 26 20:46:21.839143 2026] [:error] [pid 13137:tid 13163] [client 4.232.184.88:9522] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae4JHd0RB4J0o4h5neF7KgAAAhY"]
[Sun Apr 26 20:46:23.084533 2026] [:error] [pid 8383:tid 8416] [client 4.232.184.88:50767] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae4JH9Fa2S3EsATMdWNakwAAABM"]
[Sun Apr 26 20:46:24.008026 2026] [:error] [pid 8383:tid 8413] [client 4.232.184.88:53968] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ae4JINFa2S3EsATMdWNamAAAABA"]
[Sun Apr 26 20:46:24.698419 2026] [:error] [pid 8383:tid 8397] [client 4.232.184.88:47667] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ae4JINFa2S3EsATMdWNamQAAAAA"]
[Sun Apr 26 20:46:26.237997 2026] [:error] [pid 22572:tid 22592] [client 4.232.184.88:9518] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ae4JItXOViWCFU-pZzAt6wAAAU4"]
[Sun Apr 26 20:46:30.628181 2026] [:error] [pid 8390:tid 8463] [client 4.232.184.88:53998] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ae4JJoGPtFK_i9p5yxRv6wAAAIw"]
[Sun Apr 26 20:46:33.251786 2026] [:error] [pid 13137:tid 13163] [client 4.232.184.88:49529] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp5.php"] [unique_id "ae4JKd0RB4J0o4h5neF7NAAAAhY"]
[Sun Apr 26 20:46:34.661914 2026] [:error] [pid 22573:tid 22607] [client 4.232.184.88:47582] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "ae4JKnB3EmQlD4yKUt8DOAAAAYE"]
[Sun Apr 26 20:46:35.903000 2026] [:error] [pid 22573:tid 22624] [client 4.232.184.88:47676] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "ae4JK3B3EmQlD4yKUt8DOgAAAZE"]
[Sun Apr 26 20:46:36.794662 2026] [:error] [pid 22573:tid 22615] [client 4.232.184.88:53985] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "ae4JLHB3EmQlD4yKUt8DQQAAAYg"]
[Sun Apr 26 20:46:37.585767 2026] [:error] [pid 13197:tid 13239] [client 4.232.184.88:54004] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yuzuru1.php"] [unique_id "ae4JLd3kktFKdSxTrBvZMQAAAsg"]
[Sun Apr 26 20:46:38.339266 2026] [:error] [pid 22572:tid 22588] [client 4.232.184.88:9493] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "ae4JLtXOViWCFU-pZzAt-AAAAUo"]
[Sun Apr 26 20:46:39.383420 2026] [:error] [pid 8383:tid 8405] [client 4.232.184.88:53973] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "ae4JL9Fa2S3EsATMdWNaswAAAAg"]
[Sun Apr 26 20:46:40.420325 2026] [:error] [pid 8390:tid 8463] [client 4.232.184.88:53966] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "ae4JMIGPtFK_i9p5yxRv_gAAAIw"]
[Sun Apr 26 20:46:41.975927 2026] [:error] [pid 8383:tid 8421] [client 4.232.184.88:50771] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "ae4JMdFa2S3EsATMdWNavAAAABg"]
[Sun Apr 26 20:46:43.959990 2026] [:error] [pid 8390:tid 8458] [client 4.232.184.88:49477] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "ae4JM4GPtFK_i9p5yxRwBgAAAIc"]
[Sun Apr 26 20:46:45.337870 2026] [:error] [pid 8390:tid 8460] [client 4.232.184.88:54005] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "ae4JNYGPtFK_i9p5yxRwDAAAAIk"]
[Sun Apr 26 20:46:46.946353 2026] [:error] [pid 8390:tid 8473] [client 4.232.184.88:47655] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "ae4JNoGPtFK_i9p5yxRwEAAAAJY"]
[Sun Apr 26 20:46:48.779470 2026] [:error] [pid 13197:tid 13240] [client 4.232.184.88:9511] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Cap.php"] [unique_id "ae4JON3kktFKdSxTrBvZMwAAAsk"]
[Sun Apr 26 20:46:50.304038 2026] [:error] [pid 8383:tid 8408] [client 4.232.184.88:49504] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "ae4JOtFa2S3EsATMdWNaxAAAAAs"]
[Sun Apr 26 20:46:52.816028 2026] [:error] [pid 8390:tid 8465] [client 4.232.184.88:9508] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "ae4JPIGPtFK_i9p5yxRwHgAAAI4"]
[Sun Apr 26 20:46:54.637134 2026] [:error] [pid 8385:tid 8438] [client 4.232.184.88:47572] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tfm.php"] [unique_id "ae4JPjOy7_J84Wx3-ozVhgAAAE4"]
[Sun Apr 26 20:46:56.914780 2026] [proxy_fcgi:error] [pid 22573:tid 22624] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:57.168292 2026] [proxy_fcgi:error] [pid 22573:tid 22611] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:57.415023 2026] [proxy_fcgi:error] [pid 22573:tid 22613] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:57.665897 2026] [proxy_fcgi:error] [pid 22573:tid 22615] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:57.941632 2026] [proxy_fcgi:error] [pid 22573:tid 22630] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:58.189330 2026] [proxy_fcgi:error] [pid 22573:tid 22619] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:58.436729 2026] [proxy_fcgi:error] [pid 22573:tid 22626] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:58.703507 2026] [proxy_fcgi:error] [pid 22573:tid 22617] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:58.963742 2026] [proxy_fcgi:error] [pid 22573:tid 22618] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:46:59.239344 2026] [proxy_fcgi:error] [pid 22573:tid 22607] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:47:00.171871 2026] [proxy_fcgi:error] [pid 22573:tid 22608] [client 4.232.184.88:50801] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:47:00.440025 2026] [:error] [pid 22573:tid 22610] [client 4.232.184.88:50801] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae4JRHB3EmQlD4yKUt8DlAAAAYQ"]
[Sun Apr 26 20:47:02.105443 2026] [:error] [pid 8385:tid 8427] [client 4.232.184.88:49513] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae4JRjOy7_J84Wx3-ozVigAAAEM"]
[Sun Apr 26 20:47:03.815293 2026] [:error] [pid 8390:tid 8467] [client 4.232.184.88:47671] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae4JR4GPtFK_i9p5yxRwKwAAAJA"]
[Sun Apr 26 20:47:06.180662 2026] [:error] [pid 8390:tid 8465] [client 4.232.184.88:50760] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hplfuns.php"] [unique_id "ae4JSoGPtFK_i9p5yxRwLwAAAI4"]
[Sun Apr 26 20:47:08.597987 2026] [:error] [pid 8390:tid 8456] [client 4.232.184.88:53955] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "ae4JTIGPtFK_i9p5yxRwNQAAAIU"]
[Sun Apr 26 20:47:14.892772 2026] [:error] [pid 8390:tid 8466] [client 4.232.184.88:47577] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "ae4JUoGPtFK_i9p5yxRwUQAAAI8"]
[Sun Apr 26 20:47:19.706072 2026] [:error] [pid 16515:tid 16522] [client 4.232.184.88:49525] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xa.php"] [unique_id "ae4JV1tDrUmgHSvpuLxGNgAAAkQ"]
[Sun Apr 26 20:47:24.011328 2026] [:error] [pid 22572:tid 22591] [client 4.232.184.88:48136] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ae4JXNXOViWCFU-pZzAuEQAAAU0"]
[Sun Apr 26 20:47:25.110555 2026] [:error] [pid 22573:tid 22616] [client 4.232.184.88:47580] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ae4JXXB3EmQlD4yKUt8DswAAAYk"]
[Sun Apr 26 20:47:26.688310 2026] [:error] [pid 16515:tid 16537] [client 4.232.184.88:9502] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ae4JXltDrUmgHSvpuLxGPQAAAlM"]
[Sun Apr 26 20:47:28.029895 2026] [:error] [pid 22572:tid 22578] [client 4.232.184.88:53981] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8573.php"] [unique_id "ae4JYNXOViWCFU-pZzAuFAAAAUA"]
[Sun Apr 26 20:47:29.353369 2026] [:error] [pid 22572:tid 22586] [client 4.232.184.88:50777] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "ae4JYdXOViWCFU-pZzAuGAAAAUg"]
[Sun Apr 26 20:47:30.082018 2026] [:error] [pid 22572:tid 22591] [client 4.232.184.88:9501] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "ae4JYtXOViWCFU-pZzAuHgAAAU0"]
[Sun Apr 26 20:47:31.298026 2026] [:error] [pid 13197:tid 13238] [client 4.232.184.88:48176] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "ae4JY93kktFKdSxTrBvZQgAAAsc"]
[Sun Apr 26 20:47:32.292290 2026] [:error] [pid 22573:tid 22629] [client 4.232.184.88:54003] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "ae4JZHB3EmQlD4yKUt8DuAAAAZY"]
[Sun Apr 26 20:47:33.776933 2026] [:error] [pid 16515:tid 16533] [client 4.232.184.88:50806] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ae4JZVtDrUmgHSvpuLxGRQAAAk8"]
[Sun Apr 26 20:47:34.709326 2026] [:error] [pid 8390:tid 8469] [client 4.232.184.88:47553] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ae4JZoGPtFK_i9p5yxRwYwAAAJI"]
[Sun Apr 26 20:47:35.540800 2026] [:error] [pid 22572:tid 22585] [client 4.232.184.88:47601] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ae4JZ9XOViWCFU-pZzAuIQAAAUc"]
[Sun Apr 26 20:47:36.117266 2026] [:error] [pid 8390:tid 8451] [client 4.232.184.88:10194] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/666.php"] [unique_id "ae4JaIGPtFK_i9p5yxRwagAAAIA"]
[Sun Apr 26 20:47:37.213669 2026] [:error] [pid 13197:tid 13240] [client 4.232.184.88:10200] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae4Jad3kktFKdSxTrBvZRwAAAsk"]
[Sun Apr 26 20:47:38.791249 2026] [:error] [pid 22573:tid 22622] [client 4.232.184.88:50790] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae4JanB3EmQlD4yKUt8DvAAAAY8"]
[Sun Apr 26 20:47:39.849057 2026] [:error] [pid 22573:tid 22623] [client 4.232.184.88:9528] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae4Ja3B3EmQlD4yKUt8DvgAAAZA"]
[Sun Apr 26 20:47:40.777804 2026] [:error] [pid 8390:tid 8458] [client 4.232.184.88:47560] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xwx1.php"] [unique_id "ae4JbIGPtFK_i9p5yxRwewAAAIc"]
[Sun Apr 26 20:47:41.856361 2026] [:error] [pid 22572:tid 22602] [client 4.232.184.88:47615] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/prosellers8.php"] [unique_id "ae4JbdXOViWCFU-pZzAuKQAAAVg"]
[Sun Apr 26 20:47:43.289266 2026] [:error] [pid 8390:tid 8455] [client 4.232.184.88:53963] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/prosellers8.php"] [unique_id "ae4Jb4GPtFK_i9p5yxRwhwAAAIQ"]
[Sun Apr 26 20:47:45.572953 2026] [:error] [pid 13137:tid 13154] [client 4.232.184.88:53959] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/prosellers8.php"] [unique_id "ae4Jcd0RB4J0o4h5neF7ZwAAAg0"]
[Sun Apr 26 20:47:48.026535 2026] [:error] [pid 16574:tid 16609] [client 4.232.184.88:9486] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/prosellers8.php"] [unique_id "ae4JdH5MsX8wRQr99nY4gQAAA0U"]
[Sun Apr 26 20:47:48.890628 2026] [:error] [pid 22573:tid 22623] [client 4.232.184.88:47674] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop.php"] [unique_id "ae4JdHB3EmQlD4yKUt8DyQAAAZA"]
[Sun Apr 26 20:47:51.120649 2026] [:error] [pid 13137:tid 13143] [client 4.232.184.88:49473] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop.php"] [unique_id "ae4Jd90RB4J0o4h5neF7bAAAAgM"]
[Sun Apr 26 20:47:52.283651 2026] [:error] [pid 8491:tid 8499] [client 4.232.184.88:49482] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop.php"] [unique_id "ae4JeCq7I7e6CJooQM0DWQAAAMA"]
[Sun Apr 26 20:47:54.048021 2026] [:error] [pid 22572:tid 22591] [client 4.232.184.88:47639] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shop.php"] [unique_id "ae4JetXOViWCFU-pZzAuLQAAAU0"]
[Sun Apr 26 20:47:54.915910 2026] [:error] [pid 8383:tid 8411] [client 4.232.184.88:50773] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "ae4JetFa2S3EsATMdWNbGgAAAA4"]
[Sun Apr 26 20:47:55.778729 2026] [:error] [pid 8383:tid 8414] [client 4.232.184.88:53992] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "ae4Je9Fa2S3EsATMdWNbHwAAABE"]
[Sun Apr 26 20:47:57.325306 2026] [:error] [pid 22573:tid 22627] [client 4.232.184.88:9524] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "ae4JfXB3EmQlD4yKUt8D2QAAAZQ"]
[Sun Apr 26 20:47:58.104674 2026] [:error] [pid 8390:tid 8455] [client 4.232.184.88:9474] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ww.php"] [unique_id "ae4JfoGPtFK_i9p5yxRwpwAAAIQ"]
[Sun Apr 26 20:47:59.391106 2026] [:error] [pid 8385:tid 8448] [client 4.232.184.88:48170] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fsjzs.php"] [unique_id "ae4JfzOy7_J84Wx3-ozVnwAAAFg"]
[Sun Apr 26 20:48:00.468465 2026] [proxy_fcgi:error] [pid 8390:tid 8474] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:00.706916 2026] [proxy_fcgi:error] [pid 8390:tid 8466] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:00.982619 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:01.224488 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:01.461319 2026] [proxy_fcgi:error] [pid 8390:tid 8454] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:01.699894 2026] [proxy_fcgi:error] [pid 8390:tid 8464] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:02.022388 2026] [proxy_fcgi:error] [pid 8390:tid 8465] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:02.299399 2026] [proxy_fcgi:error] [pid 8390:tid 8453] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:02.536260 2026] [proxy_fcgi:error] [pid 8390:tid 8461] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:02.773451 2026] [proxy_fcgi:error] [pid 8390:tid 8463] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:03.011813 2026] [proxy_fcgi:error] [pid 8390:tid 8473] [client 4.232.184.88:53989] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 20:48:03.312066 2026] [:error] [pid 8390:tid 8466] [client 4.232.184.88:53989] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sd.php"] [unique_id "ae4Jg4GPtFK_i9p5yxRwuQAAAI8"]
[Sun Apr 26 20:48:03.885962 2026] [:error] [pid 8390:tid 8454] [client 4.232.184.88:52912] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sd.php"] [unique_id "ae4Jg4GPtFK_i9p5yxRwvwAAAIM"]
[Sun Apr 26 20:48:04.632820 2026] [:error] [pid 8390:tid 8465] [client 4.232.184.88:53990] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sd.php"] [unique_id "ae4JhIGPtFK_i9p5yxRwwgAAAI4"]
[Sun Apr 26 20:48:06.019398 2026] [:error] [pid 22573:tid 22608] [client 4.232.184.88:49526] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sd.php"] [unique_id "ae4JhnB3EmQlD4yKUt8D5AAAAYI"]
[Sun Apr 26 23:56:31.280954 2026] [proxy_fcgi:error] [pid 13137:tid 13162] [client 4.193.118.98:5345] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 23:56:31.375978 2026] [proxy_fcgi:error] [pid 13137:tid 13165] [client 4.193.118.98:5345] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 23:56:31.573619 2026] [proxy_fcgi:error] [pid 13137:tid 13144] [client 4.193.118.98:5345] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 23:56:31.664812 2026] [proxy_fcgi:error] [pid 13137:tid 13155] [client 4.193.118.98:5345] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 23:56:31.846771 2026] [proxy_fcgi:error] [pid 13137:tid 13146] [client 4.193.118.98:5345] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 23:56:31.937941 2026] [proxy_fcgi:error] [pid 13137:tid 13149] [client 4.193.118.98:5345] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 23:56:32.054892 2026] [proxy_fcgi:error] [pid 13137:tid 13156] [client 4.193.118.98:5345] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 23:56:32.320427 2026] [:error] [pid 13137:tid 13147] [client 4.193.118.98:5345] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae41sN0RB4J0o4h5neGhwAAAAgc"]
[Sun Apr 26 23:56:32.673678 2026] [:error] [pid 8383:tid 8420] [client 4.193.118.98:5343] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae41sNFa2S3EsATMdWOW7AAAABc"]
[Sun Apr 26 23:56:33.027724 2026] [:error] [pid 13137:tid 13158] [client 4.193.118.98:1067] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae41sd0RB4J0o4h5neGhwwAAAhE"]
[Sun Apr 26 23:56:33.395857 2026] [:error] [pid 8383:tid 8408] [client 4.193.118.98:5346] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae41sdFa2S3EsATMdWOW7wAAAAs"]
[Mon Apr 27 09:18:30.580544 2026] [autoindex:error] [pid 6970:tid 6981] [client 4.193.118.98:1318] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 09:18:30.691190 2026] [proxy_fcgi:error] [pid 6970:tid 6985] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:30.783103 2026] [proxy_fcgi:error] [pid 6970:tid 6980] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:30.885289 2026] [autoindex:error] [pid 6970:tid 6982] [client 4.193.118.98:1318] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 09:18:30.979724 2026] [proxy_fcgi:error] [pid 6970:tid 6975] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:31.090693 2026] [proxy_fcgi:error] [pid 6970:tid 6986] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:31.295929 2026] [proxy_fcgi:error] [pid 6970:tid 6983] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:31.387619 2026] [proxy_fcgi:error] [pid 6970:tid 6998] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:31.481541 2026] [proxy_fcgi:error] [pid 6970:tid 6974] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:31.573356 2026] [proxy_fcgi:error] [pid 6970:tid 6978] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:31.665629 2026] [proxy_fcgi:error] [pid 6970:tid 6993] [client 4.193.118.98:1318] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 09:18:31.754098 2026] [:error] [pid 6970:tid 6989] [client 4.193.118.98:1318] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ae65Zys_dFVzfQoHW0RC4gAAAI8"]
[Mon Apr 27 09:18:32.166704 2026] [:error] [pid 7056:tid 7074] [client 4.193.118.98:1380] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ae65aCaiHlvwyvjHbet4kQAAAQ8"]
[Mon Apr 27 09:18:32.587096 2026] [:error] [pid 10867:tid 10880] [client 4.193.118.98:1386] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ae65aLOAkozQqeaYR1tZwgAAAAo"]
[Mon Apr 27 09:18:32.966163 2026] [:error] [pid 10896:tid 10912] [client 4.193.118.98:1375] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/403.php"] [unique_id "ae65aF7aFv2GLXAkamnOqQAAAE4"]
[Mon Apr 27 13:51:51.967335 2026] [:error] [pid 62510:tid 62551] [client 34.55.86.97:57181] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75d4CpoM1jGOxUMpv3eQAAAMY"]
[Mon Apr 27 21:06:51.178786 2026] [proxy_fcgi:error] [pid 13523:tid 13535] [client 4.193.121.6:1211] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 21:06:51.356657 2026] [:error] [pid 13523:tid 13544] [client 4.193.121.6:1211] [client 4.193.121.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.121.6, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae9fa-eav51IXKv1ebH0TQAAAJM"]
[Mon Apr 27 21:06:51.451433 2026] [proxy_fcgi:error] [pid 13523:tid 13537] [client 4.193.121.6:1211] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 21:06:51.818741 2026] [proxy_fcgi:error] [pid 13523:tid 13547] [client 4.193.121.6:1211] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 21:06:52.111604 2026] [proxy_fcgi:error] [pid 13523:tid 13526] [client 4.193.121.6:1211] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 21:06:52.198899 2026] [:error] [pid 13523:tid 13530] [client 4.193.121.6:1211] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9fbOeav51IXKv1ebH0WwAAAIU"]
[Mon Apr 27 21:06:52.554138 2026] [:error] [pid 13523:tid 13542] [client 4.193.121.6:20067] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9fbOeav51IXKv1ebH0XQAAAJE"]
[Mon Apr 27 21:06:52.912108 2026] [:error] [pid 13554:tid 13580] [client 4.193.121.6:19867] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9fbHJx87Dl-xMmL92BmQAAANg"]
[Mon Apr 27 21:06:53.269934 2026] [:error] [pid 13554:tid 13571] [client 4.193.121.6:20040] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9fbXJx87Dl-xMmL92BnQAAAM8"]
[Mon Apr 27 22:02:37.435086 2026] [:error] [pid 13523:tid 13546] [client 168.144.115.41:53083] [client 168.144.115.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.144.115.41, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ae9sfeeav51IXKv1ebEFdQAAAJU"]
[Mon Apr 27 22:02:37.444668 2026] [proxy_fcgi:error] [pid 13523:tid 13546] [client 168.144.115.41:53083] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 22:02:37.731645 2026] [:error] [pid 13523:tid 13533] [client 168.144.115.41:53083] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 6"] [hostname "stratapluswa.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ae9sfeeav51IXKv1ebEFeAAAAIg"]
[Mon Apr 27 22:02:38.003284 2026] [:error] [pid 13554:tid 13577] [client 168.144.115.41:53566] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ae9sfnJx87Dl-xMmL92YzQAAANU"]
[Mon Apr 27 22:02:38.271909 2026] [:error] [pid 13554:tid 13566] [client 168.144.115.41:53685] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ae9sfnJx87Dl-xMmL92YzgAAAMo"]
[Mon Apr 27 22:02:38.543365 2026] [:error] [pid 13554:tid 13573] [client 168.144.115.41:53805] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ae9sfnJx87Dl-xMmL92YzwAAANE"]
[Mon Apr 27 22:02:38.826282 2026] [:error] [pid 13554:tid 13574] [client 168.144.115.41:53954] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ae9sfnJx87Dl-xMmL92Y0gAAANI"]
[Mon Apr 27 22:02:39.108198 2026] [:error] [pid 13554:tid 13572] [client 168.144.115.41:54098] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ae9sf3Jx87Dl-xMmL92Y0wAAANA"]
[Mon Apr 27 22:02:39.378181 2026] [:error] [pid 13464:tid 13468] [client 168.144.115.41:54225] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ae9sf2IEa0q6oQ95zvEtYwAAAcA"]
[Mon Apr 27 22:02:39.645904 2026] [:error] [pid 13523:tid 13528] [client 168.144.115.41:54347] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ae9sf-eav51IXKv1ebEFfAAAAIM"]
[Mon Apr 27 22:02:39.926812 2026] [:error] [pid 13554:tid 13562] [client 168.144.115.41:54447] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ae9sf3Jx87Dl-xMmL92Y1gAAAMY"]
[Mon Apr 27 22:02:40.207508 2026] [:error] [pid 13523:tid 13545] [client 168.144.115.41:54559] [client 168.144.115.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.115.41, counter = 7"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ae9sgOeav51IXKv1ebEFfgAAAJQ"]
[Tue Apr 28 01:56:16.583887 2026] [proxy_fcgi:error] [pid 42612:tid 42763] [client 4.193.121.6:8206] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 01:56:16.783265 2026] [:error] [pid 42612:tid 42780] [client 4.193.121.6:8206] [client 4.193.121.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.121.6, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae-jQDCDyZvIG2oFcJ7iQAAAARY"]
[Tue Apr 28 01:56:16.878697 2026] [proxy_fcgi:error] [pid 42612:tid 42758] [client 4.193.121.6:8206] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 01:56:17.268481 2026] [proxy_fcgi:error] [pid 42612:tid 42765] [client 4.193.121.6:8206] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 01:56:17.558464 2026] [proxy_fcgi:error] [pid 42612:tid 42769] [client 4.193.121.6:8206] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 01:56:17.646618 2026] [:error] [pid 42612:tid 42772] [client 4.193.121.6:8206] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-jQTCDyZvIG2oFcJ7iSwAAAQ8"]
[Tue Apr 28 01:56:18.010576 2026] [:error] [pid 31555:tid 31560] [client 4.193.121.6:8252] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-jQrJDZf3DNaSMAJ3B5AAAAAM"]
[Tue Apr 28 01:56:18.402222 2026] [:error] [pid 48914:tid 48933] [client 4.193.121.6:11547] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-jQnwuHR_nwT9alH8ecAAAAVA"]
[Tue Apr 28 01:56:18.756987 2026] [:error] [pid 42612:tid 42761] [client 4.193.121.6:19506] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-jQjCDyZvIG2oFcJ7iTAAAAQQ"]
[Tue Apr 28 01:58:22.756153 2026] [:error] [pid 48914:tid 48940] [client 177.129.252.47:14966] [client 177.129.252.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.129.252.47, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ae-jvnwuHR_nwT9alH8eowAAAVc"]
[Tue Apr 28 01:58:22.766825 2026] [proxy_fcgi:error] [pid 48914:tid 48940] [client 177.129.252.47:14966] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 03:07:59.937198 2026] [:error] [pid 13465:tid 13514] [client 185.194.178.102:34915] [client 185.194.178.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.102, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "ae-0D_19I-6GBJQxn_gPWwAAAFM"]
[Tue Apr 28 03:07:59.946069 2026] [proxy_fcgi:error] [pid 13465:tid 13514] [client 185.194.178.102:34915] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:29.713827 2026] [proxy_fcgi:error] [pid 14686:tid 14713] [client 51.103.73.149:29457] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:29.986515 2026] [proxy_fcgi:error] [pid 14686:tid 14696] [client 51.103.73.149:29457] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:30.465976 2026] [proxy_fcgi:error] [pid 14686:tid 14689] [client 51.103.73.149:29457] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:30.711196 2026] [proxy_fcgi:error] [pid 14686:tid 14703] [client 51.103.73.149:29457] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:31.235285 2026] [proxy_fcgi:error] [pid 14686:tid 14693] [client 51.103.73.149:29457] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:31.482620 2026] [proxy_fcgi:error] [pid 14686:tid 14702] [client 51.103.73.149:29457] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:31.725315 2026] [proxy_fcgi:error] [pid 14686:tid 14690] [client 51.103.73.149:29457] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:19:32.476509 2026] [:error] [pid 14686:tid 14692] [client 51.103.73.149:29457] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae_S5O-YPF1Xm7uiWQ4hCAAAAMM"]
[Tue Apr 28 05:19:33.557720 2026] [:error] [pid 56602:tid 56617] [client 51.103.73.149:1513] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae_S5fCwhMxzNW_lZSwg6QAAAQ0"]
[Tue Apr 28 05:19:34.728687 2026] [:error] [pid 14686:tid 14710] [client 51.103.73.149:24992] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae_S5u-YPF1Xm7uiWQ4hCwAAANU"]
[Tue Apr 28 05:19:35.875308 2026] [:error] [pid 56602:tid 56625] [client 51.103.73.149:20477] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "ae_S5_CwhMxzNW_lZSwg-gAAARU"]
[Tue Apr 28 10:53:12.635619 2026] [proxy_fcgi:error] [pid 33775:tid 33795] [client 51.103.73.149:6932] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:53:12.898110 2026] [proxy_fcgi:error] [pid 33775:tid 33784] [client 51.103.73.149:6932] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:53:13.408316 2026] [proxy_fcgi:error] [pid 33775:tid 33799] [client 51.103.73.149:6932] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:53:13.663112 2026] [proxy_fcgi:error] [pid 33775:tid 33788] [client 51.103.73.149:6932] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:53:14.174628 2026] [proxy_fcgi:error] [pid 33775:tid 33791] [client 51.103.73.149:6932] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:53:14.451054 2026] [proxy_fcgi:error] [pid 33775:tid 33802] [client 51.103.73.149:6932] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:53:14.706046 2026] [proxy_fcgi:error] [pid 33775:tid 33780] [client 51.103.73.149:6932] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:53:15.468996 2026] [:error] [pid 33775:tid 33797] [client 51.103.73.149:6932] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "afAhG5sYOcoQrq88YbXsYwAAANI"]
[Tue Apr 28 10:53:16.508713 2026] [:error] [pid 33777:tid 33839] [client 51.103.73.149:1686] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "afAhHLXUCFWqmordGGL6igAAAQQ"]
[Tue Apr 28 10:53:17.583615 2026] [:error] [pid 33775:tid 33786] [client 51.103.73.149:1880] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "afAhHZsYOcoQrq88YbXsZAAAAMc"]
[Tue Apr 28 10:53:18.714534 2026] [:error] [pid 33776:tid 33815] [client 51.103.73.149:1427] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "afAhHl-bEJ2CKP3iKADdlgAAAEc"]
[Tue Apr 28 20:04:49.971788 2026] [:error] [pid 33777:tid 33837] [client 180.190.73.61:37095] [client 180.190.73.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.73.61, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afCiYbXUCFWqmordGGLYowAAAQI"]
[Tue Apr 28 20:04:49.983157 2026] [proxy_fcgi:error] [pid 33777:tid 33837] [client 180.190.73.61:37095] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:12:00.894435 2026] [:error] [pid 50889:tid 50916] [client 94.247.172.129:23527] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.stratapluswa.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afDOQIzszBr00txEzGhqfQAAABg"]
[Tue Apr 28 23:41:36.952565 2026] [proxy_fcgi:error] [pid 33777:tid 33849] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:37.221282 2026] [proxy_fcgi:error] [pid 33777:tid 33856] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:37.490011 2026] [proxy_fcgi:error] [pid 33777:tid 33841] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:37.767557 2026] [proxy_fcgi:error] [pid 33777:tid 33853] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:38.037056 2026] [proxy_fcgi:error] [pid 33777:tid 33839] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:38.309707 2026] [proxy_fcgi:error] [pid 33777:tid 33845] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:38.578198 2026] [proxy_fcgi:error] [pid 33777:tid 33843] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:38.846741 2026] [proxy_fcgi:error] [pid 33777:tid 33838] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:39.124402 2026] [proxy_fcgi:error] [pid 33777:tid 33859] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:39.392524 2026] [proxy_fcgi:error] [pid 33777:tid 33854] [client 40.85.240.33:4057] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:41:39.657959 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:4057] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmpls.php"] [unique_id "afDVM7XUCFWqmordGGIq9QAAAQU"]
[Tue Apr 28 23:41:40.182944 2026] [:error] [pid 33776:tid 33820] [client 40.85.240.33:4075] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmpls.php"] [unique_id "afDVNF-bEJ2CKP3iKABSMgAAAEw"]
[Tue Apr 28 23:41:40.672945 2026] [:error] [pid 33776:tid 33832] [client 40.85.240.33:3980] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmpls.php"] [unique_id "afDVNF-bEJ2CKP3iKABSNgAAAFg"]
[Tue Apr 28 23:41:41.103056 2026] [:error] [pid 33776:tid 33822] [client 40.85.240.33:4076] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmpls.php"] [unique_id "afDVNV-bEJ2CKP3iKABSOAAAAE4"]
[Tue Apr 28 23:41:41.528479 2026] [:error] [pid 50889:tid 50894] [client 40.85.240.33:4033] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3.php"] [unique_id "afDVNYzszBr00txEzGhwIgAAAAI"]
[Tue Apr 28 23:41:42.029583 2026] [:error] [pid 33775:tid 33779] [client 40.85.240.33:4040] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3.php"] [unique_id "afDVNpsYOcoQrq88YbVEoAAAAMA"]
[Tue Apr 28 23:41:42.505258 2026] [:error] [pid 50889:tid 50895] [client 40.85.240.33:4060] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3.php"] [unique_id "afDVNozszBr00txEzGhwJQAAAAM"]
[Tue Apr 28 23:41:42.979925 2026] [:error] [pid 33775:tid 33781] [client 40.85.240.33:4043] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/n3.php"] [unique_id "afDVNpsYOcoQrq88YbVEpAAAAMI"]
[Tue Apr 28 23:41:43.497750 2026] [:error] [pid 33775:tid 33801] [client 40.85.240.33:4073] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afDVN5sYOcoQrq88YbVEpgAAANY"]
[Tue Apr 28 23:41:44.015260 2026] [:error] [pid 50889:tid 50906] [client 40.85.240.33:4055] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afDVOIzszBr00txEzGhwKAAAAA4"]
[Tue Apr 28 23:41:44.492654 2026] [:error] [pid 33777:tid 33849] [client 40.85.240.33:4085] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afDVOLXUCFWqmordGGIq_AAAAQ4"]
[Tue Apr 28 23:41:44.968534 2026] [:error] [pid 33777:tid 33842] [client 40.85.240.33:4094] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afDVOLXUCFWqmordGGIq_QAAAQc"]
[Tue Apr 28 23:41:45.485502 2026] [:error] [pid 50889:tid 50896] [client 40.85.240.33:3977] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDVOYzszBr00txEzGhwKwAAAAQ"]
[Tue Apr 28 23:41:45.952828 2026] [:error] [pid 33777:tid 33844] [client 40.85.240.33:4034] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDVObXUCFWqmordGGIq_wAAAQk"]
[Tue Apr 28 23:41:46.495778 2026] [:error] [pid 33777:tid 33841] [client 40.85.240.33:4044] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDVOrXUCFWqmordGGIrAQAAAQY"]
[Tue Apr 28 23:41:46.983073 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:4036] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDVOrXUCFWqmordGGIrAwAAARI"]
[Tue Apr 28 23:41:47.487703 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3934] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mo.php"] [unique_id "afDVO7XUCFWqmordGGIrBgAAARc"]
[Tue Apr 28 23:41:48.014535 2026] [:error] [pid 33777:tid 33854] [client 40.85.240.33:4081] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mo.php"] [unique_id "afDVPLXUCFWqmordGGIrCgAAARM"]
[Tue Apr 28 23:41:48.540321 2026] [:error] [pid 33777:tid 33835] [client 40.85.240.33:4059] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mo.php"] [unique_id "afDVPLXUCFWqmordGGIrDQAAAQA"]
[Tue Apr 28 23:41:49.021678 2026] [:error] [pid 33777:tid 33837] [client 40.85.240.33:4066] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mo.php"] [unique_id "afDVPbXUCFWqmordGGIrEAAAAQI"]
[Tue Apr 28 23:41:49.444193 2026] [:error] [pid 33777:tid 33849] [client 40.85.240.33:3973] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afDVPbXUCFWqmordGGIrEwAAAQ4"]
[Tue Apr 28 23:41:49.871022 2026] [:error] [pid 2741:tid 2746] [client 40.85.240.33:4084] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afDVPfp92FeOz1h6ILwoRAAAAUA"]
[Tue Apr 28 23:41:50.349150 2026] [:error] [pid 33777:tid 33841] [client 40.85.240.33:3983] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afDVPrXUCFWqmordGGIrFwAAAQY"]
[Tue Apr 28 23:41:50.823066 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:4077] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afDVPrXUCFWqmordGGIrGQAAARI"]
[Tue Apr 28 23:41:51.240370 2026] [:error] [pid 33864:tid 33889] [client 40.85.240.33:3971] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afDVPzXchLGZ4QggCslCKwAAAJc"]
[Tue Apr 28 23:41:51.723362 2026] [:error] [pid 2741:tid 2747] [client 40.85.240.33:4093] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afDVP_p92FeOz1h6ILwoRwAAAUE"]
[Tue Apr 28 23:41:52.212144 2026] [:error] [pid 33777:tid 33854] [client 40.85.240.33:4063] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afDVQLXUCFWqmordGGIrHgAAARM"]
[Tue Apr 28 23:41:52.660116 2026] [:error] [pid 33777:tid 33835] [client 40.85.240.33:4050] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afDVQLXUCFWqmordGGIrIAAAAQA"]
[Tue Apr 28 23:41:53.147585 2026] [:error] [pid 33864:tid 33879] [client 40.85.240.33:4086] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afDVQTXchLGZ4QggCslCLQAAAI0"]
[Tue Apr 28 23:41:53.624525 2026] [:error] [pid 33864:tid 33882] [client 40.85.240.33:3975] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afDVQTXchLGZ4QggCslCLwAAAJA"]
[Tue Apr 28 23:41:54.100408 2026] [:error] [pid 33777:tid 33849] [client 40.85.240.33:4026] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afDVQrXUCFWqmordGGIrJQAAAQ4"]
[Tue Apr 28 23:41:54.621152 2026] [:error] [pid 33777:tid 33841] [client 40.85.240.33:4048] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afDVQrXUCFWqmordGGIrJwAAAQY"]
[Tue Apr 28 23:41:55.145831 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:4074] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wdone1.php"] [unique_id "afDVQ_p92FeOz1h6ILwoSgAAAUI"]
[Tue Apr 28 23:41:55.618581 2026] [:error] [pid 33777:tid 33854] [client 40.85.240.33:4028] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wdone1.php"] [unique_id "afDVQ7XUCFWqmordGGIrKQAAARM"]
[Tue Apr 28 23:41:56.107483 2026] [:error] [pid 33775:tid 33802] [client 40.85.240.33:4047] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wdone1.php"] [unique_id "afDVRJsYOcoQrq88YbVErQAAANc"]
[Tue Apr 28 23:41:56.572864 2026] [:error] [pid 33775:tid 33803] [client 40.85.240.33:4095] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wdone1.php"] [unique_id "afDVRJsYOcoQrq88YbVErgAAANg"]
[Tue Apr 28 23:41:57.044959 2026] [:error] [pid 2741:tid 2765] [client 40.85.240.33:3976] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afDVRfp92FeOz1h6ILwoUQAAAVM"]
[Tue Apr 28 23:41:57.512019 2026] [:error] [pid 33777:tid 33837] [client 40.85.240.33:4083] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afDVRbXUCFWqmordGGIrLwAAAQI"]
[Tue Apr 28 23:41:58.006956 2026] [:error] [pid 33775:tid 33799] [client 40.85.240.33:3985] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afDVRpsYOcoQrq88YbVEsgAAANQ"]
[Tue Apr 28 23:41:58.519804 2026] [:error] [pid 2741:tid 2752] [client 40.85.240.33:3970] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afDVRvp92FeOz1h6ILwoXAAAAUY"]
[Tue Apr 28 23:41:59.053048 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:4092] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afDVR7XUCFWqmordGGIrMwAAARA"]
[Tue Apr 28 23:41:59.579538 2026] [:error] [pid 33864:tid 33871] [client 40.85.240.33:4088] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afDVRzXchLGZ4QggCslCOwAAAIU"]
[Tue Apr 28 23:42:00.057330 2026] [:error] [pid 2741:tid 2763] [client 40.85.240.33:4061] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afDVSPp92FeOz1h6ILwoXgAAAVE"]
[Tue Apr 28 23:42:00.526068 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:4039] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afDVSPp92FeOz1h6ILwoYAAAAUI"]
[Tue Apr 28 23:42:01.010660 2026] [:error] [pid 2741:tid 2757] [client 40.85.240.33:3981] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blox.php"] [unique_id "afDVSfp92FeOz1h6ILwoYgAAAUs"]
[Tue Apr 28 23:42:01.512375 2026] [:error] [pid 2741:tid 2762] [client 40.85.240.33:3986] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blox.php"] [unique_id "afDVSfp92FeOz1h6ILwoYwAAAVA"]
[Tue Apr 28 23:42:02.016414 2026] [:error] [pid 2741:tid 2750] [client 40.85.240.33:4045] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blox.php"] [unique_id "afDVSvp92FeOz1h6ILwoZAAAAUQ"]
[Tue Apr 28 23:42:02.500223 2026] [:error] [pid 33777:tid 33842] [client 40.85.240.33:4001] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blox.php"] [unique_id "afDVSrXUCFWqmordGGIrNAAAAQc"]
[Tue Apr 28 23:42:03.039452 2026] [:error] [pid 33777:tid 33847] [client 40.85.240.33:4052] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "afDVS7XUCFWqmordGGIrNgAAAQw"]
[Tue Apr 28 23:42:03.561754 2026] [:error] [pid 33777:tid 33841] [client 40.85.240.33:3978] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "afDVS7XUCFWqmordGGIrOAAAAQY"]
[Tue Apr 28 23:42:04.169050 2026] [:error] [pid 33777:tid 33855] [client 40.85.240.33:4067] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "afDVTLXUCFWqmordGGIrPAAAARQ"]
[Tue Apr 28 23:42:04.645966 2026] [:error] [pid 33777:tid 33854] [client 40.85.240.33:3908] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wgift1.php"] [unique_id "afDVTLXUCFWqmordGGIrPgAAARM"]
[Tue Apr 28 23:42:05.201141 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:4080] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "afDVTbXUCFWqmordGGIrQAAAAQM"]
[Tue Apr 28 23:42:05.754422 2026] [:error] [pid 33776:tid 33829] [client 40.85.240.33:4053] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "afDVTV-bEJ2CKP3iKABSQQAAAFU"]
[Tue Apr 28 23:42:06.398044 2026] [:error] [pid 33776:tid 33813] [client 40.85.240.33:4020] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "afDVTl-bEJ2CKP3iKABSQwAAAEU"]
[Tue Apr 28 23:42:06.911945 2026] [:error] [pid 50889:tid 50897] [client 40.85.240.33:4000] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "afDVTozszBr00txEzGhwNAAAAAU"]
[Tue Apr 28 23:42:07.351786 2026] [:error] [pid 33776:tid 33826] [client 40.85.240.33:4017] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelap.php"] [unique_id "afDVT1-bEJ2CKP3iKABSRAAAAFI"]
[Tue Apr 28 23:42:07.819160 2026] [:error] [pid 33776:tid 33812] [client 40.85.240.33:4065] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelap.php"] [unique_id "afDVT1-bEJ2CKP3iKABSRwAAAEQ"]
[Tue Apr 28 23:42:08.312480 2026] [:error] [pid 33777:tid 33835] [client 40.85.240.33:3909] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelap.php"] [unique_id "afDVULXUCFWqmordGGIrQgAAAQA"]
[Tue Apr 28 23:42:08.827395 2026] [:error] [pid 33776:tid 33816] [client 40.85.240.33:4006] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gelap.php"] [unique_id "afDVUF-bEJ2CKP3iKABSSwAAAEg"]
[Tue Apr 28 23:42:09.273582 2026] [:error] [pid 33777:tid 33837] [client 40.85.240.33:4004] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1vx.php"] [unique_id "afDVUbXUCFWqmordGGIrRAAAAQI"]
[Tue Apr 28 23:42:09.701317 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:4009] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1vx.php"] [unique_id "afDVUbXUCFWqmordGGIrRQAAARc"]
[Tue Apr 28 23:42:10.225260 2026] [:error] [pid 50889:tid 50892] [client 40.85.240.33:3929] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1vx.php"] [unique_id "afDVUozszBr00txEzGhwNwAAAAA"]
[Tue Apr 28 23:42:10.725185 2026] [:error] [pid 2741:tid 2765] [client 40.85.240.33:4027] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1vx.php"] [unique_id "afDVUvp92FeOz1h6ILwoZgAAAVM"]
[Tue Apr 28 23:42:11.181112 2026] [:error] [pid 33776:tid 33808] [client 40.85.240.33:3949] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "afDVU1-bEJ2CKP3iKABSTQAAAEA"]
[Tue Apr 28 23:42:11.675036 2026] [:error] [pid 33775:tid 33789] [client 40.85.240.33:4018] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "afDVU5sYOcoQrq88YbVEuAAAAMo"]
[Tue Apr 28 23:42:12.167140 2026] [:error] [pid 33775:tid 33786] [client 40.85.240.33:4046] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "afDVVJsYOcoQrq88YbVEugAAAMc"]
[Tue Apr 28 23:42:12.692083 2026] [:error] [pid 50889:tid 50896] [client 40.85.240.33:4042] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fe5.php"] [unique_id "afDVVIzszBr00txEzGhwOwAAAAQ"]
[Tue Apr 28 23:42:13.235008 2026] [:error] [pid 50889:tid 50915] [client 40.85.240.33:4031] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "afDVVYzszBr00txEzGhwPAAAABc"]
[Tue Apr 28 23:42:13.719606 2026] [:error] [pid 50889:tid 50912] [client 40.85.240.33:3999] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "afDVVYzszBr00txEzGhwPQAAABQ"]
[Tue Apr 28 23:42:14.238988 2026] [:error] [pid 33777:tid 33850] [client 40.85.240.33:4021] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "afDVVrXUCFWqmordGGIrTQAAAQ8"]
[Tue Apr 28 23:42:14.745002 2026] [:error] [pid 33777:tid 33859] [client 40.85.240.33:4024] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "afDVVrXUCFWqmordGGIrTwAAARg"]
[Tue Apr 28 23:42:15.244153 2026] [:error] [pid 50889:tid 50913] [client 40.85.240.33:3990] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDVV4zszBr00txEzGhwPgAAABU"]
[Tue Apr 28 23:42:15.752716 2026] [:error] [pid 50889:tid 50909] [client 40.85.240.33:3998] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDVV4zszBr00txEzGhwPwAAABE"]
[Tue Apr 28 23:42:16.288018 2026] [:error] [pid 50889:tid 50903] [client 40.85.240.33:4070] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDVWIzszBr00txEzGhwQAAAAAs"]
[Tue Apr 28 23:42:16.786360 2026] [:error] [pid 33776:tid 33813] [client 40.85.240.33:3979] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDVWF-bEJ2CKP3iKABSUAAAAEU"]
[Tue Apr 28 23:42:17.315947 2026] [:error] [pid 50889:tid 50902] [client 40.85.240.33:4011] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oylki.php"] [unique_id "afDVWYzszBr00txEzGhwQQAAAAo"]
[Tue Apr 28 23:42:17.789554 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:3912] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oylki.php"] [unique_id "afDVWbXUCFWqmordGGIrVQAAAQU"]
[Tue Apr 28 23:42:18.274098 2026] [:error] [pid 33864:tid 33880] [client 40.85.240.33:4090] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oylki.php"] [unique_id "afDVWjXchLGZ4QggCslCQAAAAI4"]
[Tue Apr 28 23:42:18.708494 2026] [:error] [pid 50889:tid 50900] [client 40.85.240.33:3982] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/oylki.php"] [unique_id "afDVWozszBr00txEzGhwQgAAAAg"]
[Tue Apr 28 23:42:19.164723 2026] [:error] [pid 33777:tid 33856] [client 40.85.240.33:4003] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about25.php"] [unique_id "afDVW7XUCFWqmordGGIrWwAAARU"]
[Tue Apr 28 23:42:19.654458 2026] [:error] [pid 50889:tid 50916] [client 40.85.240.33:4056] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about25.php"] [unique_id "afDVW4zszBr00txEzGhwQwAAABg"]
[Tue Apr 28 23:42:20.189130 2026] [:error] [pid 50889:tid 50910] [client 40.85.240.33:3991] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about25.php"] [unique_id "afDVXIzszBr00txEzGhwRAAAABI"]
[Tue Apr 28 23:42:20.682535 2026] [:error] [pid 33777:tid 33841] [client 40.85.240.33:4069] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about25.php"] [unique_id "afDVXLXUCFWqmordGGIrXgAAAQY"]
[Tue Apr 28 23:42:21.133883 2026] [:error] [pid 33777:tid 33843] [client 40.85.240.33:3974] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/path.php"] [unique_id "afDVXbXUCFWqmordGGIrYAAAAQg"]
[Tue Apr 28 23:42:21.613056 2026] [:error] [pid 33777:tid 33845] [client 40.85.240.33:3941] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/path.php"] [unique_id "afDVXbXUCFWqmordGGIrYgAAAQo"]
[Tue Apr 28 23:42:22.147503 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:4089] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/path.php"] [unique_id "afDVXrXUCFWqmordGGIrZAAAAQU"]
[Tue Apr 28 23:42:22.672658 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3969] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/path.php"] [unique_id "afDVXrXUCFWqmordGGIrZgAAAQM"]
[Tue Apr 28 23:42:23.147160 2026] [:error] [pid 50889:tid 50894] [client 40.85.240.33:4078] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "afDVX4zszBr00txEzGhwRgAAAAI"]
[Tue Apr 28 23:42:23.704379 2026] [:error] [pid 2741:tid 2753] [client 40.85.240.33:3857] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "afDVX_p92FeOz1h6ILwoZwAAAUc"]
[Tue Apr 28 23:42:24.244923 2026] [:error] [pid 33864:tid 33883] [client 40.85.240.33:3926] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "afDVYDXchLGZ4QggCslCQwAAAJE"]
[Tue Apr 28 23:42:24.742130 2026] [:error] [pid 33776:tid 33824] [client 40.85.240.33:4007] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/r4f_1.php"] [unique_id "afDVYF-bEJ2CKP3iKABSVQAAAFA"]
[Tue Apr 28 23:42:25.252400 2026] [:error] [pid 33864:tid 33890] [client 40.85.240.33:4072] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "afDVYTXchLGZ4QggCslCRgAAAJg"]
[Tue Apr 28 23:42:25.794545 2026] [:error] [pid 33775:tid 33794] [client 40.85.240.33:3924] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "afDVYZsYOcoQrq88YbVEvwAAAM8"]
[Tue Apr 28 23:42:26.297422 2026] [:error] [pid 33775:tid 33785] [client 40.85.240.33:3957] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "afDVYpsYOcoQrq88YbVEwQAAAMY"]
[Tue Apr 28 23:42:26.796412 2026] [:error] [pid 33864:tid 33870] [client 40.85.240.33:3988] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1.php"] [unique_id "afDVYjXchLGZ4QggCslCRwAAAIQ"]
[Tue Apr 28 23:42:27.311489 2026] [:error] [pid 33864:tid 33875] [client 40.85.240.33:3916] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/33.php"] [unique_id "afDVYzXchLGZ4QggCslCSQAAAIk"]
[Tue Apr 28 23:42:27.839118 2026] [:error] [pid 33776:tid 33819] [client 40.85.240.33:3984] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/33.php"] [unique_id "afDVY1-bEJ2CKP3iKABSWAAAAEs"]
[Tue Apr 28 23:42:28.318687 2026] [:error] [pid 50889:tid 50912] [client 40.85.240.33:4041] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/33.php"] [unique_id "afDVZIzszBr00txEzGhwUQAAABQ"]
[Tue Apr 28 23:42:28.763066 2026] [:error] [pid 2741:tid 2761] [client 40.85.240.33:3914] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/33.php"] [unique_id "afDVZPp92FeOz1h6ILwoagAAAU8"]
[Tue Apr 28 23:42:29.238991 2026] [:error] [pid 33864:tid 33878] [client 40.85.240.33:3995] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afDVZTXchLGZ4QggCslCSgAAAIw"]
[Tue Apr 28 23:42:29.770863 2026] [:error] [pid 50889:tid 50900] [client 40.85.240.33:3972] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afDVZYzszBr00txEzGhwVAAAAAg"]
[Tue Apr 28 23:42:30.202431 2026] [:error] [pid 50889:tid 50910] [client 40.85.240.33:4087] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afDVZozszBr00txEzGhwVQAAABI"]
[Tue Apr 28 23:42:30.675409 2026] [:error] [pid 33775:tid 33780] [client 40.85.240.33:3918] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afDVZpsYOcoQrq88YbVExgAAAME"]
[Tue Apr 28 23:42:31.315997 2026] [:error] [pid 33775:tid 33790] [client 40.85.240.33:4049] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afDVZ5sYOcoQrq88YbVEyAAAAMs"]
[Tue Apr 28 23:42:32.223251 2026] [:error] [pid 33775:tid 33783] [client 40.85.240.33:4051] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afDVaJsYOcoQrq88YbVEyQAAAMQ"]
[Tue Apr 28 23:42:33.063528 2026] [:error] [pid 50889:tid 50914] [client 40.85.240.33:4035] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afDVaYzszBr00txEzGhwWAAAABY"]
[Tue Apr 28 23:42:33.847096 2026] [:error] [pid 50889:tid 50911] [client 40.85.240.33:4071] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afDVaYzszBr00txEzGhwWQAAABM"]
[Tue Apr 28 23:42:34.971997 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:3992] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afDVaozszBr00txEzGhwXAAAAAY"]
[Tue Apr 28 23:42:35.695605 2026] [:error] [pid 33777:tid 33841] [client 40.85.240.33:3925] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afDVa7XUCFWqmordGGIrbQAAAQY"]
[Tue Apr 28 23:42:36.343756 2026] [:error] [pid 33864:tid 33876] [client 40.85.240.33:4012] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afDVbDXchLGZ4QggCslCSwAAAIo"]
[Tue Apr 28 23:42:37.017765 2026] [:error] [pid 33776:tid 33829] [client 40.85.240.33:3932] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afDVbV-bEJ2CKP3iKABSXwAAAFU"]
[Tue Apr 28 23:42:37.547463 2026] [:error] [pid 33776:tid 33813] [client 40.85.240.33:4091] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxin.php"] [unique_id "afDVbV-bEJ2CKP3iKABSYgAAAEU"]
[Tue Apr 28 23:42:38.196164 2026] [:error] [pid 50889:tid 50912] [client 40.85.240.33:4002] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxin.php"] [unique_id "afDVbozszBr00txEzGhwXgAAABQ"]
[Tue Apr 28 23:42:38.689408 2026] [:error] [pid 50889:tid 50913] [client 40.85.240.33:4019] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zxin.php"] [unique_id "afDVbozszBr00txEzGhwXwAAABU"]
[Tue Apr 28 23:42:39.192426 2026] [proxy_fcgi:error] [pid 33776:tid 33828] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:39.408029 2026] [proxy_fcgi:error] [pid 33776:tid 33812] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:39.632519 2026] [proxy_fcgi:error] [pid 33776:tid 33818] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:39.853400 2026] [proxy_fcgi:error] [pid 33776:tid 33816] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:40.075833 2026] [proxy_fcgi:error] [pid 33776:tid 33822] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:40.303250 2026] [proxy_fcgi:error] [pid 33776:tid 33819] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:40.523045 2026] [proxy_fcgi:error] [pid 33776:tid 33815] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:40.738543 2026] [proxy_fcgi:error] [pid 33776:tid 33808] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:40.994144 2026] [proxy_fcgi:error] [pid 33776:tid 33821] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:41.208721 2026] [proxy_fcgi:error] [pid 33776:tid 33832] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:41.423623 2026] [proxy_fcgi:error] [pid 33776:tid 33825] [client 40.85.240.33:4029] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:42:41.634981 2026] [:error] [pid 33776:tid 33809] [client 40.85.240.33:4029] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X57.php"] [unique_id "afDVcV-bEJ2CKP3iKABScAAAAEE"]
[Tue Apr 28 23:42:42.069490 2026] [:error] [pid 33777:tid 33843] [client 40.85.240.33:3960] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X57.php"] [unique_id "afDVcrXUCFWqmordGGIrcQAAAQg"]
[Tue Apr 28 23:42:42.500449 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:3955] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X57.php"] [unique_id "afDVcrXUCFWqmordGGIrdAAAARI"]
[Tue Apr 28 23:42:43.017997 2026] [:error] [pid 33777:tid 33845] [client 40.85.240.33:4025] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/X57.php"] [unique_id "afDVc7XUCFWqmordGGIrdQAAAQo"]
[Tue Apr 28 23:42:43.587938 2026] [:error] [pid 33776:tid 33820] [client 40.85.240.33:4082] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afDVc1-bEJ2CKP3iKABScQAAAEw"]
[Tue Apr 28 23:42:44.131278 2026] [:error] [pid 33776:tid 33826] [client 40.85.240.33:3849] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afDVdF-bEJ2CKP3iKABScgAAAFI"]
[Tue Apr 28 23:42:44.639022 2026] [:error] [pid 33776:tid 33828] [client 40.85.240.33:4005] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afDVdF-bEJ2CKP3iKABScwAAAFQ"]
[Tue Apr 28 23:42:45.124980 2026] [:error] [pid 50889:tid 50894] [client 40.85.240.33:3920] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afDVdYzszBr00txEzGhwaAAAAAI"]
[Tue Apr 28 23:42:45.648713 2026] [:error] [pid 2741:tid 2754] [client 40.85.240.33:3951] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/grsiuk.php"] [unique_id "afDVdfp92FeOz1h6ILwokQAAAUg"]
[Tue Apr 28 23:42:46.172318 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:3961] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/grsiuk.php"] [unique_id "afDVdvp92FeOz1h6ILwolAAAAUI"]
[Tue Apr 28 23:42:46.701163 2026] [:error] [pid 33776:tid 33824] [client 40.85.240.33:3930] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/grsiuk.php"] [unique_id "afDVdl-bEJ2CKP3iKABSdgAAAFA"]
[Tue Apr 28 23:42:47.199019 2026] [:error] [pid 33777:tid 33836] [client 40.85.240.33:4023] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/grsiuk.php"] [unique_id "afDVd7XUCFWqmordGGIreQAAAQE"]
[Tue Apr 28 23:42:47.625890 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:4013] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "afDVd7XUCFWqmordGGIregAAARc"]
[Tue Apr 28 23:42:48.101890 2026] [:error] [pid 50889:tid 50896] [client 40.85.240.33:3911] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "afDVeIzszBr00txEzGhwbAAAAAQ"]
[Tue Apr 28 23:42:48.628075 2026] [:error] [pid 33777:tid 33856] [client 40.85.240.33:3987] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "afDVeLXUCFWqmordGGIrewAAARU"]
[Tue Apr 28 23:42:49.160634 2026] [:error] [pid 33776:tid 33816] [client 40.85.240.33:3938] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/z.php"] [unique_id "afDVeV-bEJ2CKP3iKABSeAAAAEg"]
[Tue Apr 28 23:42:49.680009 2026] [:error] [pid 2741:tid 2760] [client 40.85.240.33:3906] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afDVefp92FeOz1h6ILwolgAAAU4"]
[Tue Apr 28 23:42:50.242336 2026] [:error] [pid 2741:tid 2759] [client 40.85.240.33:3922] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afDVevp92FeOz1h6ILwolwAAAU0"]
[Tue Apr 28 23:42:50.776443 2026] [:error] [pid 50889:tid 50915] [client 40.85.240.33:3907] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afDVeozszBr00txEzGhwbQAAABc"]
[Tue Apr 28 23:42:51.297082 2026] [:error] [pid 50889:tid 50913] [client 40.85.240.33:3840] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afDVe4zszBr00txEzGhwbwAAABU"]
[Tue Apr 28 23:42:51.854466 2026] [:error] [pid 33776:tid 33815] [client 40.85.240.33:4016] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk25_1.php"] [unique_id "afDVe1-bEJ2CKP3iKABSfAAAAEc"]
[Tue Apr 28 23:42:52.339083 2026] [:error] [pid 50889:tid 50903] [client 40.85.240.33:3958] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk25_1.php"] [unique_id "afDVfIzszBr00txEzGhwcwAAAAs"]
[Tue Apr 28 23:42:52.804780 2026] [:error] [pid 50889:tid 50902] [client 40.85.240.33:3940] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk25_1.php"] [unique_id "afDVfIzszBr00txEzGhwdgAAAAo"]
[Tue Apr 28 23:42:53.358884 2026] [:error] [pid 2741:tid 2770] [client 40.85.240.33:3959] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sk25_1.php"] [unique_id "afDVffp92FeOz1h6ILwomgAAAVg"]
[Tue Apr 28 23:42:53.863873 2026] [:error] [pid 33775:tid 33803] [client 40.85.240.33:3944] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/usep.php"] [unique_id "afDVfZsYOcoQrq88YbVE0gAAANg"]
[Tue Apr 28 23:42:54.343771 2026] [:error] [pid 2741:tid 2768] [client 40.85.240.33:3923] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/usep.php"] [unique_id "afDVfvp92FeOz1h6ILwonAAAAVY"]
[Tue Apr 28 23:42:54.867284 2026] [:error] [pid 33775:tid 33802] [client 40.85.240.33:3943] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/usep.php"] [unique_id "afDVfpsYOcoQrq88YbVE0wAAANc"]
[Tue Apr 28 23:42:55.399203 2026] [:error] [pid 33864:tid 33882] [client 40.85.240.33:3931] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/usep.php"] [unique_id "afDVfzXchLGZ4QggCslCUQAAAJA"]
[Tue Apr 28 23:42:55.897067 2026] [:error] [pid 33864:tid 33883] [client 40.85.240.33:4065] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "afDVfzXchLGZ4QggCslCUwAAAJE"]
[Tue Apr 28 23:42:56.335041 2026] [:error] [pid 33776:tid 33825] [client 40.85.240.33:4064] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "afDVgF-bEJ2CKP3iKABSgAAAAFE"]
[Tue Apr 28 23:42:56.819360 2026] [:error] [pid 33864:tid 33875] [client 40.85.240.33:3928] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "afDVgDXchLGZ4QggCslCVwAAAIk"]
[Tue Apr 28 23:42:57.415607 2026] [:error] [pid 33775:tid 33799] [client 40.85.240.33:3935] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "afDVgZsYOcoQrq88YbVE1QAAANQ"]
[Tue Apr 28 23:42:57.992192 2026] [:error] [pid 33775:tid 33796] [client 40.85.240.33:3939] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v4.php"] [unique_id "afDVgZsYOcoQrq88YbVE1gAAANE"]
[Tue Apr 28 23:42:58.471682 2026] [:error] [pid 33864:tid 33867] [client 40.85.240.33:3862] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v4.php"] [unique_id "afDVgjXchLGZ4QggCslCXAAAAIE"]
[Tue Apr 28 23:42:58.895965 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:4012] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v4.php"] [unique_id "afDVgrXUCFWqmordGGIrggAAARI"]
[Tue Apr 28 23:42:59.321352 2026] [:error] [pid 33777:tid 33850] [client 40.85.240.33:3993] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v4.php"] [unique_id "afDVg7XUCFWqmordGGIrgwAAAQ8"]
[Tue Apr 28 23:42:59.797163 2026] [:error] [pid 50889:tid 50899] [client 40.85.240.33:4022] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp4.php"] [unique_id "afDVg4zszBr00txEzGhwfwAAAAc"]
[Tue Apr 28 23:43:00.283398 2026] [:error] [pid 33864:tid 33881] [client 40.85.240.33:3919] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp4.php"] [unique_id "afDVhDXchLGZ4QggCslCYAAAAI8"]
[Tue Apr 28 23:43:00.763300 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:3860] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp4.php"] [unique_id "afDVhLXUCFWqmordGGIrhQAAAQU"]
[Tue Apr 28 23:43:01.249962 2026] [:error] [pid 2741:tid 2769] [client 40.85.240.33:3904] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp4.php"] [unique_id "afDVhfp92FeOz1h6ILwongAAAVc"]
[Tue Apr 28 23:43:01.674568 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3967] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDVhbXUCFWqmordGGIrhgAAAQM"]
[Tue Apr 28 23:43:02.168266 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:4058] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDVhrXUCFWqmordGGIriAAAARc"]
[Tue Apr 28 23:43:02.685043 2026] [:error] [pid 2741:tid 2749] [client 40.85.240.33:3913] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDVhvp92FeOz1h6ILwooAAAAUM"]
[Tue Apr 28 23:43:03.214142 2026] [:error] [pid 33776:tid 33810] [client 40.85.240.33:3945] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDVh1-bEJ2CKP3iKABSgQAAAEI"]
[Tue Apr 28 23:43:03.730530 2026] [:error] [pid 33776:tid 33829] [client 40.85.240.33:3946] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mamzi.php"] [unique_id "afDVh1-bEJ2CKP3iKABSggAAAFU"]
[Tue Apr 28 23:43:04.209658 2026] [:error] [pid 33777:tid 33855] [client 40.85.240.33:4037] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mamzi.php"] [unique_id "afDViLXUCFWqmordGGIrjgAAARQ"]
[Tue Apr 28 23:43:04.685336 2026] [:error] [pid 33777:tid 33852] [client 40.85.240.33:3952] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mamzi.php"] [unique_id "afDViLXUCFWqmordGGIrkQAAARE"]
[Tue Apr 28 23:43:05.183045 2026] [:error] [pid 33775:tid 33780] [client 40.85.240.33:3877] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mamzi.php"] [unique_id "afDViZsYOcoQrq88YbVE1wAAAME"]
[Tue Apr 28 23:43:05.664762 2026] [:error] [pid 33777:tid 33859] [client 40.85.240.33:3937] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpls.php"] [unique_id "afDVibXUCFWqmordGGIrlQAAARg"]
[Tue Apr 28 23:43:06.161607 2026] [:error] [pid 33777:tid 33849] [client 40.85.240.33:4032] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpls.php"] [unique_id "afDVirXUCFWqmordGGIrlwAAAQ4"]
[Tue Apr 28 23:43:06.642413 2026] [:error] [pid 33777:tid 33852] [client 40.85.240.33:3854] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpls.php"] [unique_id "afDVirXUCFWqmordGGIrmgAAARE"]
[Tue Apr 28 23:43:07.133494 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:3936] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpls.php"] [unique_id "afDVi7XUCFWqmordGGIrnQAAARI"]
[Tue Apr 28 23:43:07.552737 2026] [:error] [pid 33777:tid 33836] [client 40.85.240.33:3953] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xrp.php"] [unique_id "afDVi7XUCFWqmordGGIrnwAAAQE"]
[Tue Apr 28 23:43:08.026694 2026] [:error] [pid 33777:tid 33849] [client 40.85.240.33:3861] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xrp.php"] [unique_id "afDVjLXUCFWqmordGGIroQAAAQ4"]
[Tue Apr 28 23:43:08.546959 2026] [:error] [pid 33777:tid 33844] [client 40.85.240.33:4014] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xrp.php"] [unique_id "afDVjLXUCFWqmordGGIrowAAAQk"]
[Tue Apr 28 23:43:09.026387 2026] [:error] [pid 33864:tid 33884] [client 40.85.240.33:3910] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xrp.php"] [unique_id "afDVjTXchLGZ4QggCslCaAAAAJI"]
[Tue Apr 28 23:43:09.510093 2026] [:error] [pid 33775:tid 33784] [client 40.85.240.33:3843] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v2.php"] [unique_id "afDVjZsYOcoQrq88YbVE4wAAAMU"]
[Tue Apr 28 23:43:09.980345 2026] [:error] [pid 33775:tid 33794] [client 40.85.240.33:3847] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v2.php"] [unique_id "afDVjZsYOcoQrq88YbVE5AAAAM8"]
[Tue Apr 28 23:43:10.487398 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:3965] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v2.php"] [unique_id "afDVjozszBr00txEzGhwiQAAAAY"]
[Tue Apr 28 23:43:11.011801 2026] [:error] [pid 50889:tid 50909] [client 40.85.240.33:4008] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v2.php"] [unique_id "afDVj4zszBr00txEzGhwiwAAABE"]
[Tue Apr 28 23:43:11.492567 2026] [:error] [pid 33864:tid 33872] [client 40.85.240.33:3887] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afDVjzXchLGZ4QggCslCdAAAAIY"]
[Tue Apr 28 23:43:11.911963 2026] [:error] [pid 2741:tid 2768] [client 40.85.240.33:3885] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afDVj_p92FeOz1h6ILwoqgAAAVY"]
[Tue Apr 28 23:43:12.338273 2026] [:error] [pid 2741:tid 2763] [client 40.85.240.33:3797] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afDVkPp92FeOz1h6ILworgAAAVE"]
[Tue Apr 28 23:43:12.819281 2026] [:error] [pid 33775:tid 33796] [client 40.85.240.33:3876] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afDVkJsYOcoQrq88YbVE6wAAANE"]
[Tue Apr 28 23:43:13.341415 2026] [:error] [pid 33776:tid 33831] [client 40.85.240.33:3884] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afDVkV-bEJ2CKP3iKABShAAAAFc"]
[Tue Apr 28 23:43:13.865677 2026] [:error] [pid 2741:tid 2756] [client 40.85.240.33:3899] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afDVkfp92FeOz1h6ILwosQAAAUo"]
[Tue Apr 28 23:43:14.400289 2026] [:error] [pid 33864:tid 33870] [client 40.85.240.33:3964] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afDVkjXchLGZ4QggCslCegAAAIQ"]
[Tue Apr 28 23:43:14.925885 2026] [:error] [pid 33775:tid 33796] [client 40.85.240.33:3942] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afDVkpsYOcoQrq88YbVE8AAAANE"]
[Tue Apr 28 23:43:15.515205 2026] [:error] [pid 33775:tid 33791] [client 40.85.240.33:3784] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "afDVk5sYOcoQrq88YbVE8QAAAMw"]
[Tue Apr 28 23:43:16.062382 2026] [:error] [pid 33775:tid 33785] [client 40.85.240.33:3954] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "afDVlJsYOcoQrq88YbVE8wAAAMY"]
[Tue Apr 28 23:43:16.606905 2026] [:error] [pid 33775:tid 33781] [client 40.85.240.33:3968] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "afDVlJsYOcoQrq88YbVE9QAAAMI"]
[Tue Apr 28 23:43:17.100133 2026] [:error] [pid 33864:tid 33867] [client 40.85.240.33:3897] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/031.php"] [unique_id "afDVlTXchLGZ4QggCslCfQAAAIE"]
[Tue Apr 28 23:43:17.609275 2026] [:error] [pid 33864:tid 33885] [client 40.85.240.33:4054] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afDVlTXchLGZ4QggCslCfgAAAJM"]
[Tue Apr 28 23:43:18.075059 2026] [:error] [pid 2741:tid 2762] [client 40.85.240.33:3869] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afDVlvp92FeOz1h6ILwotgAAAVA"]
[Tue Apr 28 23:43:18.524176 2026] [:error] [pid 50889:tid 50901] [client 40.85.240.33:3994] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afDVlozszBr00txEzGhwjgAAAAk"]
[Tue Apr 28 23:43:19.032750 2026] [:error] [pid 33864:tid 33869] [client 40.85.240.33:3850] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afDVlzXchLGZ4QggCslCgAAAAIM"]
[Tue Apr 28 23:43:19.590368 2026] [:error] [pid 2741:tid 2759] [client 40.85.240.33:3997] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afDVl_p92FeOz1h6ILwouAAAAU0"]
[Tue Apr 28 23:43:20.071636 2026] [:error] [pid 33864:tid 33889] [client 40.85.240.33:3858] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afDVmDXchLGZ4QggCslCggAAAJc"]
[Tue Apr 28 23:43:20.504858 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3874] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afDVmLXUCFWqmordGGIrtgAAAQM"]
[Tue Apr 28 23:43:20.938351 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3905] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afDVmLXUCFWqmordGGIrtwAAARc"]
[Tue Apr 28 23:43:21.368162 2026] [:error] [pid 50889:tid 50902] [client 40.85.240.33:3868] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testo.php"] [unique_id "afDVmYzszBr00txEzGhwkgAAAAo"]
[Tue Apr 28 23:43:21.841079 2026] [:error] [pid 33777:tid 33852] [client 40.85.240.33:3879] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testo.php"] [unique_id "afDVmbXUCFWqmordGGIrugAAARE"]
[Tue Apr 28 23:43:22.313633 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:4030] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testo.php"] [unique_id "afDVmozszBr00txEzGhwlQAAAAY"]
[Tue Apr 28 23:43:22.803643 2026] [:error] [pid 33864:tid 33880] [client 40.85.240.33:3927] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/testo.php"] [unique_id "afDVmjXchLGZ4QggCslChAAAAI4"]
[Tue Apr 28 23:43:23.320426 2026] [:error] [pid 50889:tid 50910] [client 40.85.240.33:3881] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/row.php"] [unique_id "afDVm4zszBr00txEzGhwlwAAABI"]
[Tue Apr 28 23:43:23.819500 2026] [:error] [pid 33777:tid 33847] [client 40.85.240.33:3966] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/row.php"] [unique_id "afDVm7XUCFWqmordGGIrxAAAAQw"]
[Tue Apr 28 23:43:24.242166 2026] [:error] [pid 33777:tid 33857] [client 40.85.240.33:3842] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/row.php"] [unique_id "afDVnLXUCFWqmordGGIrxwAAARY"]
[Tue Apr 28 23:43:24.737893 2026] [:error] [pid 2741:tid 2756] [client 40.85.240.33:3841] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/row.php"] [unique_id "afDVnPp92FeOz1h6ILwovwAAAUo"]
[Tue Apr 28 23:43:25.273203 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:3796] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afDVnbXUCFWqmordGGIrzAAAARA"]
[Tue Apr 28 23:43:25.737331 2026] [:error] [pid 50889:tid 50897] [client 40.85.240.33:3888] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afDVnYzszBr00txEzGhwmQAAAAU"]
[Tue Apr 28 23:43:26.222347 2026] [:error] [pid 33775:tid 33785] [client 40.85.240.33:3864] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afDVnpsYOcoQrq88YbVE-gAAAMY"]
[Tue Apr 28 23:43:26.703668 2026] [:error] [pid 33775:tid 33798] [client 40.85.240.33:3816] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afDVnpsYOcoQrq88YbVE-wAAANM"]
[Tue Apr 28 23:43:27.181329 2026] [:error] [pid 2741:tid 2747] [client 40.85.240.33:3894] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afDVn_p92FeOz1h6ILwowgAAAUE"]
[Tue Apr 28 23:43:27.655145 2026] [:error] [pid 33864:tid 33870] [client 40.85.240.33:3818] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afDVnzXchLGZ4QggCslChwAAAIQ"]
[Tue Apr 28 23:43:28.101900 2026] [:error] [pid 33864:tid 33875] [client 40.85.240.33:3819] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afDVoDXchLGZ4QggCslCiAAAAIk"]
[Tue Apr 28 23:43:28.532566 2026] [:error] [pid 33777:tid 33846] [client 40.85.240.33:3875] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afDVoLXUCFWqmordGGIrzwAAAQs"]
[Tue Apr 28 23:43:28.967945 2026] [:error] [pid 33777:tid 33842] [client 40.85.240.33:4062] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "afDVoLXUCFWqmordGGIr0AAAAQc"]
[Tue Apr 28 23:43:29.406799 2026] [:error] [pid 33777:tid 33859] [client 40.85.240.33:3845] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "afDVobXUCFWqmordGGIr0QAAARg"]
[Tue Apr 28 23:43:29.837765 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3779] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "afDVobXUCFWqmordGGIr0wAAAQM"]
[Tue Apr 28 23:43:30.288404 2026] [:error] [pid 33775:tid 33784] [client 40.85.240.33:3880] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xqq.php"] [unique_id "afDVopsYOcoQrq88YbVE_wAAAMU"]
[Tue Apr 28 23:43:30.783916 2026] [:error] [pid 50889:tid 50905] [client 40.85.240.33:4010] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jmfi2.php"] [unique_id "afDVoozszBr00txEzGhwnQAAAA0"]
[Tue Apr 28 23:43:31.283576 2026] [:error] [pid 2741:tid 2764] [client 40.85.240.33:3948] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jmfi2.php"] [unique_id "afDVo_p92FeOz1h6ILwoyQAAAVI"]
[Tue Apr 28 23:43:31.774019 2026] [:error] [pid 2741:tid 2751] [client 40.85.240.33:3956] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jmfi2.php"] [unique_id "afDVo_p92FeOz1h6ILwoywAAAUU"]
[Tue Apr 28 23:43:32.312900 2026] [:error] [pid 2741:tid 2760] [client 40.85.240.33:3805] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jmfi2.php"] [unique_id "afDVpPp92FeOz1h6ILwozAAAAU4"]
[Tue Apr 28 23:43:32.800541 2026] [:error] [pid 2741:tid 2770] [client 40.85.240.33:4050] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afDVpPp92FeOz1h6ILwozQAAAVg"]
[Tue Apr 28 23:43:33.291822 2026] [:error] [pid 2741:tid 2756] [client 40.85.240.33:3921] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afDVpfp92FeOz1h6ILwozgAAAUo"]
[Tue Apr 28 23:43:33.815188 2026] [:error] [pid 2741:tid 2754] [client 40.85.240.33:3933] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afDVpfp92FeOz1h6ILwo0QAAAUg"]
[Tue Apr 28 23:43:34.311328 2026] [:error] [pid 33777:tid 33854] [client 40.85.240.33:3788] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afDVprXUCFWqmordGGIr1AAAARM"]
[Tue Apr 28 23:43:34.730412 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:3803] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/card.php"] [unique_id "afDVprXUCFWqmordGGIr1wAAARI"]
[Tue Apr 28 23:43:35.168946 2026] [:error] [pid 33864:tid 33877] [client 40.85.240.33:3846] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/card.php"] [unique_id "afDVpzXchLGZ4QggCslCjwAAAIs"]
[Tue Apr 28 23:43:35.611894 2026] [:error] [pid 2741:tid 2757] [client 40.85.240.33:3823] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/card.php"] [unique_id "afDVp_p92FeOz1h6ILwo0gAAAUs"]
[Tue Apr 28 23:43:36.096650 2026] [:error] [pid 2741:tid 2761] [client 40.85.240.33:3855] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/card.php"] [unique_id "afDVqPp92FeOz1h6ILwo0wAAAU8"]
[Tue Apr 28 23:43:36.614788 2026] [:error] [pid 33777:tid 33841] [client 40.85.240.33:3811] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mds.php"] [unique_id "afDVqLXUCFWqmordGGIr3AAAAQY"]
[Tue Apr 28 23:43:37.144931 2026] [:error] [pid 2741:tid 2750] [client 40.85.240.33:3856] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mds.php"] [unique_id "afDVqfp92FeOz1h6ILwo1gAAAUQ"]
[Tue Apr 28 23:43:37.703032 2026] [:error] [pid 33775:tid 33782] [client 40.85.240.33:3963] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mds.php"] [unique_id "afDVqZsYOcoQrq88YbVFBQAAAMM"]
[Tue Apr 28 23:43:38.193798 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:3873] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mds.php"] [unique_id "afDVqrXUCFWqmordGGIr3QAAARA"]
[Tue Apr 28 23:43:38.636666 2026] [:error] [pid 33776:tid 33810] [client 40.85.240.33:3778] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hey.php"] [unique_id "afDVql-bEJ2CKP3iKABSkAAAAEI"]
[Tue Apr 28 23:43:39.133349 2026] [:error] [pid 2741:tid 2768] [client 40.85.240.33:3806] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hey.php"] [unique_id "afDVq_p92FeOz1h6ILwo2wAAAVY"]
[Tue Apr 28 23:43:39.633325 2026] [:error] [pid 2741:tid 2758] [client 40.85.240.33:3870] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hey.php"] [unique_id "afDVq_p92FeOz1h6ILwo3wAAAUw"]
[Tue Apr 28 23:43:40.127428 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3867] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hey.php"] [unique_id "afDVrLXUCFWqmordGGIr4wAAARc"]
[Tue Apr 28 23:43:40.601621 2026] [:error] [pid 2741:tid 2757] [client 40.85.240.33:3882] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "afDVrPp92FeOz1h6ILwo5gAAAUs"]
[Tue Apr 28 23:43:41.066739 2026] [proxy_fcgi:error] [pid 33864:tid 33871] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:41.284056 2026] [proxy_fcgi:error] [pid 33864:tid 33882] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:41.502849 2026] [proxy_fcgi:error] [pid 33864:tid 33879] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:41.723342 2026] [proxy_fcgi:error] [pid 33864:tid 33881] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:41.940829 2026] [proxy_fcgi:error] [pid 33864:tid 33874] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:42.158407 2026] [proxy_fcgi:error] [pid 33864:tid 33884] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:42.390769 2026] [proxy_fcgi:error] [pid 33864:tid 33887] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:43.604067 2026] [proxy_fcgi:error] [pid 33864:tid 33886] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:43.822619 2026] [proxy_fcgi:error] [pid 33864:tid 33885] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:44.047365 2026] [proxy_fcgi:error] [pid 33864:tid 33883] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:44.275077 2026] [proxy_fcgi:error] [pid 33864:tid 33869] [client 40.85.240.33:3730] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:43:44.491649 2026] [:error] [pid 33864:tid 33890] [client 40.85.240.33:3730] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lgr.php"] [unique_id "afDVsDXchLGZ4QggCslCowAAAJg"]
[Tue Apr 28 23:43:44.978039 2026] [:error] [pid 33777:tid 33855] [client 40.85.240.33:3807] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lgr.php"] [unique_id "afDVsLXUCFWqmordGGIr5QAAARQ"]
[Tue Apr 28 23:43:45.491729 2026] [:error] [pid 33777:tid 33845] [client 40.85.240.33:3777] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lgr.php"] [unique_id "afDVsbXUCFWqmordGGIr6QAAAQo"]
[Tue Apr 28 23:43:46.077645 2026] [:error] [pid 33777:tid 33844] [client 40.85.240.33:3794] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lgr.php"] [unique_id "afDVsrXUCFWqmordGGIr6gAAAQk"]
[Tue Apr 28 23:43:46.598556 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3829] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an7.php"] [unique_id "afDVsrXUCFWqmordGGIr7QAAARc"]
[Tue Apr 28 23:43:47.073929 2026] [:error] [pid 33864:tid 33889] [client 40.85.240.33:3896] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an7.php"] [unique_id "afDVszXchLGZ4QggCslCpAAAAJc"]
[Tue Apr 28 23:43:47.589935 2026] [:error] [pid 2741:tid 2757] [client 40.85.240.33:3851] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an7.php"] [unique_id "afDVs_p92FeOz1h6ILwo8QAAAUs"]
[Tue Apr 28 23:43:48.081322 2026] [:error] [pid 33864:tid 33882] [client 40.85.240.33:3786] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/an7.php"] [unique_id "afDVtDXchLGZ4QggCslCpgAAAJA"]
[Tue Apr 28 23:43:48.606551 2026] [:error] [pid 50889:tid 50904] [client 40.85.240.33:3989] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "afDVtIzszBr00txEzGhwtQAAAAw"]
[Tue Apr 28 23:43:49.084783 2026] [:error] [pid 33775:tid 33789] [client 40.85.240.33:3853] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "afDVtZsYOcoQrq88YbVFCQAAAMo"]
[Tue Apr 28 23:43:49.524278 2026] [:error] [pid 33775:tid 33803] [client 40.85.240.33:3917] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "afDVtZsYOcoQrq88YbVFDAAAANg"]
[Tue Apr 28 23:43:50.117848 2026] [:error] [pid 2741:tid 2753] [client 40.85.240.33:3900] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file1.php"] [unique_id "afDVtvp92FeOz1h6ILwo9AAAAUc"]
[Tue Apr 28 23:43:50.651506 2026] [:error] [pid 50889:tid 50916] [client 40.85.240.33:4094] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luxe.php"] [unique_id "afDVtozszBr00txEzGhwuwAAABg"]
[Tue Apr 28 23:43:51.147115 2026] [:error] [pid 33777:tid 33843] [client 40.85.240.33:4068] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luxe.php"] [unique_id "afDVt7XUCFWqmordGGIr7gAAAQg"]
[Tue Apr 28 23:43:51.663058 2026] [:error] [pid 33777:tid 33847] [client 40.85.240.33:3878] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luxe.php"] [unique_id "afDVt7XUCFWqmordGGIr8AAAAQw"]
[Tue Apr 28 23:43:52.167055 2026] [:error] [pid 33777:tid 33839] [client 40.85.240.33:3891] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/luxe.php"] [unique_id "afDVuLXUCFWqmordGGIr9AAAAQQ"]
[Tue Apr 28 23:43:52.702648 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:3810] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afDVuLXUCFWqmordGGIr9wAAARA"]
[Tue Apr 28 23:43:53.293530 2026] [:error] [pid 50889:tid 50902] [client 40.85.240.33:4015] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afDVuYzszBr00txEzGhwwAAAAAo"]
[Tue Apr 28 23:43:53.803877 2026] [:error] [pid 33776:tid 33819] [client 40.85.240.33:3719] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afDVuV-bEJ2CKP3iKABSmAAAAEs"]
[Tue Apr 28 23:43:54.264326 2026] [:error] [pid 33776:tid 33815] [client 40.85.240.33:4079] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afDVul-bEJ2CKP3iKABSmQAAAEc"]
[Tue Apr 28 23:43:54.759107 2026] [:error] [pid 33864:tid 33870] [client 40.85.240.33:3815] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDVujXchLGZ4QggCslCqAAAAIQ"]
[Tue Apr 28 23:43:55.290896 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:3898] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDVu7XUCFWqmordGGIr_QAAAQU"]
[Tue Apr 28 23:43:55.748036 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3733] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDVu7XUCFWqmordGGIr_gAAARc"]
[Tue Apr 28 23:43:56.347636 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3826] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDVvLXUCFWqmordGGIsAAAAAQM"]
[Tue Apr 28 23:43:56.898911 2026] [:error] [pid 50889:tid 50894] [client 40.85.240.33:3915] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "afDVvIzszBr00txEzGhwxAAAAAI"]
[Tue Apr 28 23:43:57.411414 2026] [:error] [pid 33776:tid 33821] [client 40.85.240.33:3839] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "afDVvV-bEJ2CKP3iKABSmgAAAE0"]
[Tue Apr 28 23:43:57.892939 2026] [:error] [pid 33777:tid 33855] [client 40.85.240.33:3793] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "afDVvbXUCFWqmordGGIsAQAAARQ"]
[Tue Apr 28 23:43:58.422099 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:3872] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/inde.php"] [unique_id "afDVvrXUCFWqmordGGIsCQAAAQU"]
[Tue Apr 28 23:43:58.922875 2026] [:error] [pid 33777:tid 33837] [client 40.85.240.33:3789] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "afDVvrXUCFWqmordGGIsDQAAAQI"]
[Tue Apr 28 23:43:59.408606 2026] [:error] [pid 33864:tid 33886] [client 40.85.240.33:3889] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "afDVvzXchLGZ4QggCslCsAAAAJQ"]
[Tue Apr 28 23:43:59.919056 2026] [:error] [pid 2741:tid 2754] [client 40.85.240.33:3895] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "afDVv_p92FeOz1h6ILwo-AAAAUg"]
[Tue Apr 28 23:44:00.414412 2026] [:error] [pid 2741:tid 2757] [client 40.85.240.33:3804] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xtt.php"] [unique_id "afDVwPp92FeOz1h6ILwo-wAAAUs"]
[Tue Apr 28 23:44:00.905500 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:3814] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "afDVwPp92FeOz1h6ILwo_wAAAUI"]
[Tue Apr 28 23:44:01.330934 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:3859] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "afDVwYzszBr00txEzGhw0QAAAAY"]
[Tue Apr 28 23:44:01.763235 2026] [:error] [pid 33864:tid 33870] [client 40.85.240.33:3736] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "afDVwTXchLGZ4QggCslCugAAAIQ"]
[Tue Apr 28 23:44:02.293929 2026] [:error] [pid 50889:tid 50902] [client 40.85.240.33:3903] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/autoload_classmap.php"] [unique_id "afDVwozszBr00txEzGhw1AAAAAo"]
[Tue Apr 28 23:44:02.846220 2026] [:error] [pid 2741:tid 2756] [client 40.85.240.33:3866] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "afDVwvp92FeOz1h6ILwpAwAAAUo"]
[Tue Apr 28 23:44:03.370607 2026] [:error] [pid 33777:tid 33835] [client 40.85.240.33:3723] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "afDVw7XUCFWqmordGGIsFQAAAQA"]
[Tue Apr 28 23:44:03.898912 2026] [:error] [pid 33864:tid 33887] [client 40.85.240.33:3886] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "afDVwzXchLGZ4QggCslCvAAAAJU"]
[Tue Apr 28 23:44:04.377183 2026] [:error] [pid 33864:tid 33886] [client 40.85.240.33:3821] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/we2.php"] [unique_id "afDVxDXchLGZ4QggCslCvQAAAJQ"]
[Tue Apr 28 23:44:04.851215 2026] [:error] [pid 33864:tid 33866] [client 40.85.240.33:3802] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zicgg.php"] [unique_id "afDVxDXchLGZ4QggCslCvgAAAIA"]
[Tue Apr 28 23:44:05.367919 2026] [:error] [pid 50889:tid 50899] [client 40.85.240.33:3825] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zicgg.php"] [unique_id "afDVxYzszBr00txEzGhw1QAAAAc"]
[Tue Apr 28 23:44:05.908249 2026] [:error] [pid 50889:tid 50893] [client 40.85.240.33:3731] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zicgg.php"] [unique_id "afDVxYzszBr00txEzGhw2AAAAAE"]
[Tue Apr 28 23:44:06.421242 2026] [:error] [pid 33775:tid 33793] [client 40.85.240.33:3791] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zicgg.php"] [unique_id "afDVxpsYOcoQrq88YbVFEwAAAM4"]
[Tue Apr 28 23:44:06.951702 2026] [:error] [pid 50889:tid 50907] [client 40.85.240.33:3762] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pouhg.php"] [unique_id "afDVxozszBr00txEzGhw3AAAAA8"]
[Tue Apr 28 23:44:07.501180 2026] [:error] [pid 2741:tid 2754] [client 40.85.240.33:3792] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pouhg.php"] [unique_id "afDVx_p92FeOz1h6ILwpBgAAAUg"]
[Tue Apr 28 23:44:08.047326 2026] [:error] [pid 33775:tid 33781] [client 40.85.240.33:3739] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pouhg.php"] [unique_id "afDVyJsYOcoQrq88YbVFFAAAAMI"]
[Tue Apr 28 23:44:08.594703 2026] [:error] [pid 33776:tid 33828] [client 40.85.240.33:3798] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pouhg.php"] [unique_id "afDVyF-bEJ2CKP3iKABSpAAAAFQ"]
[Tue Apr 28 23:44:09.108096 2026] [:error] [pid 33776:tid 33818] [client 40.85.240.33:3769] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afDVyV-bEJ2CKP3iKABSpQAAAEo"]
[Tue Apr 28 23:44:09.550844 2026] [:error] [pid 2741:tid 2747] [client 40.85.240.33:3827] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afDVyfp92FeOz1h6ILwpBwAAAUE"]
[Tue Apr 28 23:44:09.987993 2026] [:error] [pid 2741:tid 2749] [client 40.85.240.33:3813] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afDVyfp92FeOz1h6ILwpCQAAAUM"]
[Tue Apr 28 23:44:10.486889 2026] [:error] [pid 33776:tid 33816] [client 40.85.240.33:3962] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afDVyl-bEJ2CKP3iKABSqAAAAEg"]
[Tue Apr 28 23:44:11.077474 2026] [:error] [pid 50889:tid 50914] [client 40.85.240.33:3735] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenon1337.php"] [unique_id "afDVy4zszBr00txEzGhw4AAAABY"]
[Tue Apr 28 23:44:11.698465 2026] [:error] [pid 2741:tid 2746] [client 40.85.240.33:3837] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenon1337.php"] [unique_id "afDVy_p92FeOz1h6ILwpCwAAAUA"]
[Tue Apr 28 23:44:12.280705 2026] [:error] [pid 50889:tid 50896] [client 40.85.240.33:3787] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenon1337.php"] [unique_id "afDVzIzszBr00txEzGhw4gAAAAQ"]
[Tue Apr 28 23:44:12.769294 2026] [:error] [pid 2741:tid 2767] [client 40.85.240.33:3808] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xenon1337.php"] [unique_id "afDVzPp92FeOz1h6ILwpDAAAAVU"]
[Tue Apr 28 23:44:13.214284 2026] [:error] [pid 33776:tid 33823] [client 40.85.240.33:3737] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afDVzV-bEJ2CKP3iKABSqgAAAE8"]
[Tue Apr 28 23:44:13.720555 2026] [:error] [pid 33777:tid 33854] [client 40.85.240.33:3883] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afDVzbXUCFWqmordGGIsHgAAARM"]
[Tue Apr 28 23:44:14.277690 2026] [:error] [pid 2741:tid 2759] [client 40.85.240.33:3651] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afDVzvp92FeOz1h6ILwpDQAAAU0"]
[Tue Apr 28 23:44:14.815979 2026] [:error] [pid 2741:tid 2753] [client 40.85.240.33:3871] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afDVzvp92FeOz1h6ILwpDgAAAUc"]
[Tue Apr 28 23:44:15.284134 2026] [:error] [pid 33775:tid 33787] [client 40.85.240.33:3844] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "afDVz5sYOcoQrq88YbVFHAAAAMg"]
[Tue Apr 28 23:44:15.716961 2026] [:error] [pid 33777:tid 33843] [client 40.85.240.33:3838] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "afDVz7XUCFWqmordGGIsIgAAAQg"]
[Tue Apr 28 23:44:16.207439 2026] [:error] [pid 33777:tid 33855] [client 40.85.240.33:3901] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "afDV0LXUCFWqmordGGIsIwAAARQ"]
[Tue Apr 28 23:44:16.776455 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:3776] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "afDV0LXUCFWqmordGGIsJQAAARI"]
[Tue Apr 28 23:44:17.260684 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:3771] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDV0bXUCFWqmordGGIsJwAAARA"]
[Tue Apr 28 23:44:17.740623 2026] [:error] [pid 33777:tid 33842] [client 40.85.240.33:3754] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDV0bXUCFWqmordGGIsKQAAAQc"]
[Tue Apr 28 23:44:18.223359 2026] [:error] [pid 2741:tid 2769] [client 40.85.240.33:3834] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDV0vp92FeOz1h6ILwpFgAAAVc"]
[Tue Apr 28 23:44:18.760654 2026] [:error] [pid 33777:tid 33856] [client 40.85.240.33:3716] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "afDV0rXUCFWqmordGGIsKgAAARU"]
[Tue Apr 28 23:44:19.300835 2026] [:error] [pid 33777:tid 33844] [client 40.85.240.33:3863] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cache.php"] [unique_id "afDV07XUCFWqmordGGIsLQAAAQk"]
[Tue Apr 28 23:44:19.827895 2026] [:error] [pid 50889:tid 50906] [client 40.85.240.33:3785] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cache.php"] [unique_id "afDV04zszBr00txEzGhw5gAAAA4"]
[Tue Apr 28 23:44:20.329559 2026] [:error] [pid 33777:tid 33836] [client 40.85.240.33:3756] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cache.php"] [unique_id "afDV1LXUCFWqmordGGIsLwAAAQE"]
[Tue Apr 28 23:44:20.756224 2026] [:error] [pid 33777:tid 33848] [client 40.85.240.33:3848] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cache.php"] [unique_id "afDV1LXUCFWqmordGGIsMQAAAQ0"]
[Tue Apr 28 23:44:21.274068 2026] [:error] [pid 33775:tid 33782] [client 40.85.240.33:3714] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "afDV1ZsYOcoQrq88YbVFHgAAAMM"]
[Tue Apr 28 23:44:21.747629 2026] [:error] [pid 33776:tid 33824] [client 40.85.240.33:3830] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "afDV1V-bEJ2CKP3iKABSrAAAAFA"]
[Tue Apr 28 23:44:22.297020 2026] [:error] [pid 33776:tid 33829] [client 40.85.240.33:3738] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "afDV1l-bEJ2CKP3iKABSrQAAAFU"]
[Tue Apr 28 23:44:22.825875 2026] [:error] [pid 50889:tid 50907] [client 40.85.240.33:3750] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error.php"] [unique_id "afDV1ozszBr00txEzGhw6QAAAA8"]
[Tue Apr 28 23:44:23.352818 2026] [:error] [pid 50889:tid 50909] [client 40.85.240.33:3781] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "afDV14zszBr00txEzGhw6gAAABE"]
[Tue Apr 28 23:44:23.833396 2026] [:error] [pid 50889:tid 50904] [client 40.85.240.33:3890] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "afDV14zszBr00txEzGhw7AAAAAw"]
[Tue Apr 28 23:44:24.296073 2026] [:error] [pid 33776:tid 33828] [client 40.85.240.33:3852] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "afDV2F-bEJ2CKP3iKABSrgAAAFQ"]
[Tue Apr 28 23:44:24.771196 2026] [:error] [pid 33776:tid 33812] [client 40.85.240.33:3741] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "afDV2F-bEJ2CKP3iKABSsAAAAEQ"]
[Tue Apr 28 23:44:25.315511 2026] [:error] [pid 2741:tid 2763] [client 40.85.240.33:3835] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cvrvk.php"] [unique_id "afDV2fp92FeOz1h6ILwpKwAAAVE"]
[Tue Apr 28 23:44:25.845596 2026] [:error] [pid 50889:tid 50892] [client 40.85.240.33:3742] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cvrvk.php"] [unique_id "afDV2YzszBr00txEzGhw7QAAAAA"]
[Tue Apr 28 23:44:26.453439 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:3782] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cvrvk.php"] [unique_id "afDV2rXUCFWqmordGGIsNQAAARA"]
[Tue Apr 28 23:44:27.008090 2026] [:error] [pid 33777:tid 33842] [client 40.85.240.33:3728] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cvrvk.php"] [unique_id "afDV27XUCFWqmordGGIsNwAAAQc"]
[Tue Apr 28 23:44:27.531101 2026] [:error] [pid 33777:tid 33839] [client 40.85.240.33:3950] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp.php"] [unique_id "afDV27XUCFWqmordGGIsOQAAAQQ"]
[Tue Apr 28 23:44:27.966373 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:3652] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp.php"] [unique_id "afDV27XUCFWqmordGGIsOwAAAQU"]
[Tue Apr 28 23:44:28.397209 2026] [:error] [pid 33776:tid 33817] [client 40.85.240.33:3757] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp.php"] [unique_id "afDV3F-bEJ2CKP3iKABSsgAAAEk"]
[Tue Apr 28 23:44:28.821416 2026] [:error] [pid 33776:tid 33819] [client 40.85.240.33:3696] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-wp.php"] [unique_id "afDV3F-bEJ2CKP3iKABStAAAAEs"]
[Tue Apr 28 23:44:29.391764 2026] [:error] [pid 50889:tid 50894] [client 40.85.240.33:3996] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "afDV3YzszBr00txEzGhw8AAAAAI"]
[Tue Apr 28 23:44:30.001676 2026] [:error] [pid 2741:tid 2754] [client 40.85.240.33:3768] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "afDV3vp92FeOz1h6ILwpLQAAAUg"]
[Tue Apr 28 23:44:30.531850 2026] [:error] [pid 2741:tid 2749] [client 40.85.240.33:4038] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "afDV3vp92FeOz1h6ILwpLwAAAUM"]
[Tue Apr 28 23:44:31.028340 2026] [:error] [pid 50889:tid 50901] [client 40.85.240.33:3758] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "afDV34zszBr00txEzGhw8wAAAAk"]
[Tue Apr 28 23:44:31.515584 2026] [:error] [pid 33864:tid 33874] [client 40.85.240.33:3893] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "afDV3zXchLGZ4QggCslCwwAAAIg"]
[Tue Apr 28 23:44:31.995509 2026] [:error] [pid 33777:tid 33848] [client 40.85.240.33:3590] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "afDV37XUCFWqmordGGIsQAAAAQ0"]
[Tue Apr 28 23:44:32.539406 2026] [:error] [pid 33777:tid 33852] [client 40.85.240.33:3809] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "afDV4LXUCFWqmordGGIsQgAAARE"]
[Tue Apr 28 23:44:33.015184 2026] [:error] [pid 33777:tid 33850] [client 40.85.240.33:3745] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hello.php"] [unique_id "afDV4bXUCFWqmordGGIsRAAAAQ8"]
[Tue Apr 28 23:44:33.470124 2026] [:error] [pid 33777:tid 33855] [client 40.85.240.33:3666] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "afDV4bXUCFWqmordGGIsSAAAARQ"]
[Tue Apr 28 23:44:33.976414 2026] [:error] [pid 33776:tid 33831] [client 40.85.240.33:3822] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "afDV4V-bEJ2CKP3iKABSugAAAFc"]
[Tue Apr 28 23:44:34.513958 2026] [:error] [pid 33776:tid 33813] [client 40.85.240.33:3713] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "afDV4l-bEJ2CKP3iKABSvAAAAEU"]
[Tue Apr 28 23:44:35.063765 2026] [:error] [pid 2741:tid 2759] [client 40.85.240.33:3865] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-links-opml.php"] [unique_id "afDV4_p92FeOz1h6ILwpNAAAAU0"]
[Tue Apr 28 23:44:35.591936 2026] [:error] [pid 2741:tid 2755] [client 40.85.240.33:3812] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "afDV4_p92FeOz1h6ILwpNgAAAUk"]
[Tue Apr 28 23:44:36.036687 2026] [:error] [pid 2741:tid 2764] [client 40.85.240.33:3790] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "afDV5Pp92FeOz1h6ILwpNwAAAVI"]
[Tue Apr 28 23:44:36.586493 2026] [:error] [pid 2741:tid 2760] [client 40.85.240.33:3831] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "afDV5Pp92FeOz1h6ILwpPAAAAU4"]
[Tue Apr 28 23:44:37.064746 2026] [:error] [pid 2741:tid 2751] [client 40.85.240.33:3679] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lti.php"] [unique_id "afDV5fp92FeOz1h6ILwpPgAAAUU"]
[Tue Apr 28 23:44:37.575120 2026] [:error] [pid 33864:tid 33887] [client 40.85.240.33:3657] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "afDV5TXchLGZ4QggCslCxAAAAJU"]
[Tue Apr 28 23:44:38.117796 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:3743] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "afDV5vp92FeOz1h6ILwpQwAAAUI"]
[Tue Apr 28 23:44:38.623158 2026] [:error] [pid 2741:tid 2759] [client 40.85.240.33:3670] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "afDV5vp92FeOz1h6ILwpRgAAAU0"]
[Tue Apr 28 23:44:39.135556 2026] [:error] [pid 2741:tid 2755] [client 40.85.240.33:3711] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "afDV5_p92FeOz1h6ILwpRwAAAUk"]
[Tue Apr 28 23:44:39.632713 2026] [:error] [pid 50889:tid 50907] [client 40.85.240.33:3680] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellalfa.php"] [unique_id "afDV54zszBr00txEzGhw-AAAAA8"]
[Tue Apr 28 23:44:40.125381 2026] [:error] [pid 33864:tid 33873] [client 40.85.240.33:3722] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellalfa.php"] [unique_id "afDV6DXchLGZ4QggCslCxwAAAIc"]
[Tue Apr 28 23:44:40.635402 2026] [:error] [pid 33864:tid 33890] [client 40.85.240.33:3902] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellalfa.php"] [unique_id "afDV6DXchLGZ4QggCslCyQAAAJg"]
[Tue Apr 28 23:44:41.227142 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:3691] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shellalfa.php"] [unique_id "afDV6YzszBr00txEzGhw-gAAAAY"]
[Tue Apr 28 23:44:41.829800 2026] [:error] [pid 50889:tid 50904] [client 40.85.240.33:3832] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "afDV6YzszBr00txEzGhw-wAAAAw"]
[Tue Apr 28 23:44:42.395367 2026] [:error] [pid 33776:tid 33814] [client 40.85.240.33:3752] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "afDV6l-bEJ2CKP3iKABSwAAAAEY"]
[Tue Apr 28 23:44:42.926181 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3744] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "afDV6rXUCFWqmordGGIsTAAAARc"]
[Tue Apr 28 23:44:43.431763 2026] [:error] [pid 33777:tid 33836] [client 40.85.240.33:3820] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless11.php"] [unique_id "afDV67XUCFWqmordGGIsTQAAAQE"]
[Tue Apr 28 23:44:43.976489 2026] [:error] [pid 33777:tid 33848] [client 40.85.240.33:3726] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "afDV67XUCFWqmordGGIsTwAAAQ0"]
[Tue Apr 28 23:44:44.524906 2026] [proxy_fcgi:error] [pid 33775:tid 33789] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:44.792420 2026] [proxy_fcgi:error] [pid 33775:tid 33794] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:45.063700 2026] [proxy_fcgi:error] [pid 33775:tid 33800] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:45.331622 2026] [proxy_fcgi:error] [pid 33775:tid 33797] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:45.647864 2026] [proxy_fcgi:error] [pid 33775:tid 33780] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:45.912380 2026] [proxy_fcgi:error] [pid 33775:tid 33799] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:46.177840 2026] [proxy_fcgi:error] [pid 33775:tid 33802] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:46.453746 2026] [proxy_fcgi:error] [pid 33775:tid 33786] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:46.724145 2026] [proxy_fcgi:error] [pid 33775:tid 33783] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:47.001512 2026] [proxy_fcgi:error] [pid 33775:tid 33795] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:47.729853 2026] [proxy_fcgi:error] [pid 33775:tid 33782] [client 40.85.240.33:3712] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:44:47.994992 2026] [:error] [pid 33775:tid 33788] [client 40.85.240.33:3712] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afDV75sYOcoQrq88YbVFMwAAAMk"]
[Tue Apr 28 23:44:48.560750 2026] [:error] [pid 33777:tid 33844] [client 40.85.240.33:3780] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afDV8LXUCFWqmordGGIsYgAAAQk"]
[Tue Apr 28 23:44:49.157219 2026] [:error] [pid 2741:tid 2768] [client 40.85.240.33:3783] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afDV8fp92FeOz1h6ILwpUAAAAVY"]
[Tue Apr 28 23:44:49.660085 2026] [:error] [pid 2741:tid 2758] [client 40.85.240.33:3732] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afDV8fp92FeOz1h6ILwpUgAAAUw"]
[Tue Apr 28 23:44:50.233977 2026] [:error] [pid 2741:tid 2764] [client 40.85.240.33:3795] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "afDV8vp92FeOz1h6ILwpVQAAAVI"]
[Tue Apr 28 23:44:50.846418 2026] [:error] [pid 2741:tid 2769] [client 40.85.240.33:3765] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "afDV8vp92FeOz1h6ILwpVwAAAVc"]
[Tue Apr 28 23:44:51.358796 2026] [:error] [pid 33777:tid 33837] [client 40.85.240.33:3766] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "afDV87XUCFWqmordGGIsbAAAAQI"]
[Tue Apr 28 23:44:51.867723 2026] [:error] [pid 2741:tid 2751] [client 40.85.240.33:3721] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "afDV8_p92FeOz1h6ILwpWQAAAUU"]
[Tue Apr 28 23:44:52.360875 2026] [:error] [pid 33776:tid 33813] [client 40.85.240.33:3665] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afDV9F-bEJ2CKP3iKABSyQAAAEU"]
[Tue Apr 28 23:44:52.855003 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3734] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afDV9LXUCFWqmordGGIsbwAAAQM"]
[Tue Apr 28 23:44:53.404877 2026] [:error] [pid 33777:tid 33846] [client 40.85.240.33:3748] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afDV9bXUCFWqmordGGIscgAAAQs"]
[Tue Apr 28 23:44:53.943378 2026] [:error] [pid 33864:tid 33887] [client 40.85.240.33:3591] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afDV9TXchLGZ4QggCslC0AAAAJU"]
[Tue Apr 28 23:44:54.587146 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:3705] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afDV9rXUCFWqmordGGIsdQAAAQU"]
[Tue Apr 28 23:44:55.101663 2026] [:error] [pid 33777:tid 33856] [client 40.85.240.33:3659] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afDV97XUCFWqmordGGIsdwAAARU"]
[Tue Apr 28 23:44:55.587354 2026] [:error] [pid 33777:tid 33839] [client 40.85.240.33:4020] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afDV97XUCFWqmordGGIseQAAAQQ"]
[Tue Apr 28 23:44:56.064744 2026] [:error] [pid 33776:tid 33812] [client 40.85.240.33:3774] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afDV-F-bEJ2CKP3iKABSzwAAAEQ"]
[Tue Apr 28 23:44:56.537001 2026] [:error] [pid 50889:tid 50904] [client 40.85.240.33:3646] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afDV-IzszBr00txEzGhxBAAAAAw"]
[Tue Apr 28 23:44:57.027247 2026] [:error] [pid 2741:tid 2765] [client 40.85.240.33:3693] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afDV-fp92FeOz1h6ILwpYAAAAVM"]
[Tue Apr 28 23:44:57.533474 2026] [:error] [pid 33776:tid 33815] [client 40.85.240.33:3749] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afDV-V-bEJ2CKP3iKABS0gAAAEc"]
[Tue Apr 28 23:44:58.114519 2026] [:error] [pid 33864:tid 33873] [client 40.85.240.33:3703] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afDV-jXchLGZ4QggCslC0wAAAIc"]
[Tue Apr 28 23:44:58.631687 2026] [:error] [pid 33864:tid 33885] [client 40.85.240.33:3699] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owl.php"] [unique_id "afDV-jXchLGZ4QggCslC1AAAAJM"]
[Tue Apr 28 23:44:59.140388 2026] [:error] [pid 33776:tid 33825] [client 40.85.240.33:3824] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owl.php"] [unique_id "afDV-1-bEJ2CKP3iKABS1QAAAFE"]
[Tue Apr 28 23:44:59.616162 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:3799] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owl.php"] [unique_id "afDV-_p92FeOz1h6ILwpYQAAAUI"]
[Tue Apr 28 23:45:00.106296 2026] [:error] [pid 33864:tid 33872] [client 40.85.240.33:3817] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/owl.php"] [unique_id "afDV_DXchLGZ4QggCslC1gAAAIY"]
[Tue Apr 28 23:45:00.564924 2026] [:error] [pid 2741:tid 2749] [client 40.85.240.33:3833] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afDV_Pp92FeOz1h6ILwpYgAAAUM"]
[Tue Apr 28 23:45:01.022694 2026] [:error] [pid 33864:tid 33878] [client 40.85.240.33:3801] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afDV_TXchLGZ4QggCslC1wAAAIw"]
[Tue Apr 28 23:45:01.576998 2026] [:error] [pid 33776:tid 33813] [client 40.85.240.33:3715] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afDV_V-bEJ2CKP3iKABS2QAAAEU"]
[Tue Apr 28 23:45:02.101438 2026] [:error] [pid 33864:tid 33880] [client 40.85.240.33:3725] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afDV_jXchLGZ4QggCslC2QAAAI4"]
[Tue Apr 28 23:45:02.631929 2026] [:error] [pid 2741:tid 2747] [client 40.85.240.33:3595] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afDV_vp92FeOz1h6ILwpZwAAAUE"]
[Tue Apr 28 23:45:03.224540 2026] [:error] [pid 33864:tid 33879] [client 40.85.240.33:3751] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afDV_zXchLGZ4QggCslC2gAAAI0"]
[Tue Apr 28 23:45:03.764149 2026] [:error] [pid 2741:tid 2755] [client 40.85.240.33:3650] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afDV__p92FeOz1h6ILwpaQAAAUk"]
[Tue Apr 28 23:45:04.247377 2026] [:error] [pid 33776:tid 33814] [client 40.85.240.33:3587] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afDWAF-bEJ2CKP3iKABS3AAAAEY"]
[Tue Apr 28 23:45:04.695426 2026] [:error] [pid 50889:tid 50892] [client 40.85.240.33:3656] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afDWAIzszBr00txEzGhxBgAAAAA"]
[Tue Apr 28 23:45:05.169229 2026] [:error] [pid 2741:tid 2758] [client 40.85.240.33:3675] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afDWAfp92FeOz1h6ILwpawAAAUw"]
[Tue Apr 28 23:45:05.717216 2026] [:error] [pid 33775:tid 33792] [client 40.85.240.33:3655] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afDWAZsYOcoQrq88YbVFRQAAAM0"]
[Tue Apr 28 23:45:06.276981 2026] [:error] [pid 2741:tid 2752] [client 40.85.240.33:3767] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afDWAvp92FeOz1h6ILwpbQAAAUY"]
[Tue Apr 28 23:45:06.810438 2026] [:error] [pid 2741:tid 2751] [client 40.85.240.33:3677] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afDWAvp92FeOz1h6ILwpbwAAAUU"]
[Tue Apr 28 23:45:07.379008 2026] [:error] [pid 33776:tid 33811] [client 40.85.240.33:3712] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afDWA1-bEJ2CKP3iKABS4QAAAEM"]
[Tue Apr 28 23:45:07.919197 2026] [:error] [pid 50889:tid 50914] [client 40.85.240.33:3724] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afDWA4zszBr00txEzGhxCwAAABY"]
[Tue Apr 28 23:45:08.395412 2026] [:error] [pid 33864:tid 33874] [client 40.85.240.33:3541] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afDWBDXchLGZ4QggCslC3AAAAIg"]
[Tue Apr 28 23:45:08.977378 2026] [:error] [pid 33777:tid 33859] [client 40.85.240.33:3753] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afDWBLXUCFWqmordGGIsjQAAARg"]
[Tue Apr 28 23:45:09.580264 2026] [:error] [pid 33864:tid 33887] [client 40.85.240.33:3599] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afDWBTXchLGZ4QggCslC3QAAAJU"]
[Tue Apr 28 23:45:10.162937 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:3761] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afDWBrXUCFWqmordGGIskQAAARA"]
[Tue Apr 28 23:45:10.727127 2026] [:error] [pid 2741:tid 2752] [client 40.85.240.33:3746] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afDWBvp92FeOz1h6ILwpdgAAAUY"]
[Tue Apr 28 23:45:11.334340 2026] [:error] [pid 33777:tid 33842] [client 40.85.240.33:3688] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afDWB7XUCFWqmordGGIskwAAAQc"]
[Tue Apr 28 23:45:11.834405 2026] [:error] [pid 33777:tid 33836] [client 40.85.240.33:3720] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afDWB7XUCFWqmordGGIslAAAAQE"]
[Tue Apr 28 23:45:12.423029 2026] [:error] [pid 33777:tid 33840] [client 40.85.240.33:3686] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afDWCLXUCFWqmordGGIslgAAAQU"]
[Tue Apr 28 23:45:12.987078 2026] [:error] [pid 2741:tid 2765] [client 40.85.240.33:3770] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afDWCPp92FeOz1h6ILwpeQAAAVM"]
[Tue Apr 28 23:45:13.595320 2026] [:error] [pid 33776:tid 33829] [client 40.85.240.33:3836] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afDWCV-bEJ2CKP3iKABS5AAAAFU"]
[Tue Apr 28 23:45:14.173661 2026] [:error] [pid 2741:tid 2747] [client 40.85.240.33:3755] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afDWCvp92FeOz1h6ILwpfAAAAUE"]
[Tue Apr 28 23:45:14.742660 2026] [:error] [pid 2741:tid 2755] [client 40.85.240.33:3747] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afDWCvp92FeOz1h6ILwpgAAAAUk"]
[Tue Apr 28 23:45:15.282367 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3717] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afDWC7XUCFWqmordGGIsnQAAARc"]
[Tue Apr 28 23:45:15.732537 2026] [:error] [pid 33864:tid 33886] [client 40.85.240.33:3618] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "afDWCzXchLGZ4QggCslC3gAAAJQ"]
[Tue Apr 28 23:45:16.264659 2026] [:error] [pid 2741:tid 2751] [client 40.85.240.33:3649] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "afDWDPp92FeOz1h6ILwphAAAAUU"]
[Tue Apr 28 23:45:16.841190 2026] [:error] [pid 50889:tid 50900] [client 40.85.240.33:3740] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "afDWDIzszBr00txEzGhxEAAAAAg"]
[Tue Apr 28 23:45:17.475358 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3648] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lo.php"] [unique_id "afDWDbXUCFWqmordGGIsoAAAAQM"]
[Tue Apr 28 23:45:18.149111 2026] [:error] [pid 33777:tid 33836] [client 40.85.240.33:3653] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afDWDrXUCFWqmordGGIsowAAAQE"]
[Tue Apr 28 23:45:18.666568 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:3763] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afDWDvp92FeOz1h6ILwpiQAAAUI"]
[Tue Apr 28 23:45:19.089761 2026] [:error] [pid 50889:tid 50911] [client 40.85.240.33:3604] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afDWD4zszBr00txEzGhxFgAAABM"]
[Tue Apr 28 23:45:19.595500 2026] [:error] [pid 50889:tid 50910] [client 40.85.240.33:3729] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afDWD4zszBr00txEzGhxFwAAABI"]
[Tue Apr 28 23:45:20.126854 2026] [:error] [pid 33864:tid 33880] [client 40.85.240.33:3892] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "afDWEDXchLGZ4QggCslC5gAAAI4"]
[Tue Apr 28 23:45:20.634716 2026] [:error] [pid 33775:tid 33782] [client 40.85.240.33:3718] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "afDWEJsYOcoQrq88YbVFSgAAAMM"]
[Tue Apr 28 23:45:21.147509 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:3615] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "afDWEbXUCFWqmordGGIsqgAAARI"]
[Tue Apr 28 23:45:21.689348 2026] [:error] [pid 50889:tid 50901] [client 40.85.240.33:3671] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bless5.php"] [unique_id "afDWEYzszBr00txEzGhxGwAAAAk"]
[Tue Apr 28 23:45:22.114856 2026] [:error] [pid 50889:tid 50897] [client 40.85.240.33:3702] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afDWEozszBr00txEzGhxHAAAAAU"]
[Tue Apr 28 23:45:22.591581 2026] [:error] [pid 33777:tid 33848] [client 40.85.240.33:3586] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afDWErXUCFWqmordGGIsrAAAAQ0"]
[Tue Apr 28 23:45:23.161465 2026] [:error] [pid 33864:tid 33879] [client 40.85.240.33:3612] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afDWEzXchLGZ4QggCslC5wAAAI0"]
[Tue Apr 28 23:45:23.718099 2026] [:error] [pid 33775:tid 33785] [client 40.85.240.33:3701] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afDWE5sYOcoQrq88YbVFTwAAAMY"]
[Tue Apr 28 23:45:24.192057 2026] [:error] [pid 33776:tid 33824] [client 40.85.240.33:3669] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afDWFF-bEJ2CKP3iKABS7wAAAFA"]
[Tue Apr 28 23:45:24.672842 2026] [:error] [pid 2741:tid 2752] [client 40.85.240.33:3589] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afDWFPp92FeOz1h6ILwpjQAAAUY"]
[Tue Apr 28 23:45:25.206197 2026] [:error] [pid 33777:tid 33856] [client 40.85.240.33:3764] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afDWFbXUCFWqmordGGIssgAAARU"]
[Tue Apr 28 23:45:25.779501 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:3727] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afDWFYzszBr00txEzGhxIwAAAAY"]
[Tue Apr 28 23:45:26.320734 2026] [:error] [pid 50889:tid 50911] [client 40.85.240.33:3660] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afDWFozszBr00txEzGhxJAAAABM"]
[Tue Apr 28 23:45:26.873113 2026] [:error] [pid 33864:tid 33875] [client 40.85.240.33:3678] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afDWFjXchLGZ4QggCslC6gAAAIk"]
[Tue Apr 28 23:45:27.366844 2026] [:error] [pid 33864:tid 33876] [client 40.85.240.33:3704] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afDWFzXchLGZ4QggCslC6wAAAIo"]
[Tue Apr 28 23:45:27.794013 2026] [:error] [pid 33776:tid 33828] [client 40.85.240.33:3532] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afDWF1-bEJ2CKP3iKABS8gAAAFQ"]
[Tue Apr 28 23:45:28.235055 2026] [:error] [pid 33775:tid 33781] [client 40.85.240.33:3692] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afDWGJsYOcoQrq88YbVFUwAAAMI"]
[Tue Apr 28 23:45:28.719854 2026] [:error] [pid 50889:tid 50897] [client 40.85.240.33:3597] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afDWGIzszBr00txEzGhxJwAAAAU"]
[Tue Apr 28 23:45:29.246464 2026] [:error] [pid 33864:tid 33887] [client 40.85.240.33:3676] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afDWGTXchLGZ4QggCslC7gAAAJU"]
[Tue Apr 28 23:45:29.724894 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:3775] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afDWGfp92FeOz1h6ILwpkAAAAUI"]
[Tue Apr 28 23:45:30.206529 2026] [:error] [pid 2741:tid 2753] [client 40.85.240.33:3600] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afDWGvp92FeOz1h6ILwpkQAAAUc"]
[Tue Apr 28 23:45:30.687819 2026] [:error] [pid 33777:tid 33859] [client 40.85.240.33:3697] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afDWGrXUCFWqmordGGIswQAAARg"]
[Tue Apr 28 23:45:31.164451 2026] [:error] [pid 33776:tid 33817] [client 40.85.240.33:3530] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afDWG1-bEJ2CKP3iKABS9QAAAEk"]
[Tue Apr 28 23:45:31.656634 2026] [:error] [pid 2741:tid 2746] [client 40.85.240.33:3622] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afDWG_p92FeOz1h6ILwpkwAAAUA"]
[Tue Apr 28 23:45:32.162312 2026] [:error] [pid 33864:tid 33885] [client 40.85.240.33:3672] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afDWHDXchLGZ4QggCslC9AAAAJM"]
[Tue Apr 28 23:45:32.666818 2026] [:error] [pid 33777:tid 33838] [client 40.85.240.33:3546] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afDWHLXUCFWqmordGGIsxQAAAQM"]
[Tue Apr 28 23:45:33.102532 2026] [:error] [pid 33777:tid 33842] [client 40.85.240.33:3542] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afDWHbXUCFWqmordGGIsxwAAAQc"]
[Tue Apr 28 23:45:33.568302 2026] [:error] [pid 33864:tid 33880] [client 40.85.240.33:3760] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afDWHTXchLGZ4QggCslC-gAAAI4"]
[Tue Apr 28 23:45:34.091440 2026] [:error] [pid 33777:tid 33835] [client 40.85.240.33:3965] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afDWHrXUCFWqmordGGIsyQAAAQA"]
[Tue Apr 28 23:45:34.572353 2026] [:error] [pid 50889:tid 50892] [client 40.85.240.33:3773] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afDWHozszBr00txEzGhxKgAAAAA"]
[Tue Apr 28 23:45:35.015417 2026] [:error] [pid 33864:tid 33876] [client 40.85.240.33:3708] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afDWHzXchLGZ4QggCslC_AAAAIo"]
[Tue Apr 28 23:45:35.511708 2026] [:error] [pid 50889:tid 50909] [client 40.85.240.33:3610] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afDWH4zszBr00txEzGhxKwAAABE"]
[Tue Apr 28 23:45:36.095432 2026] [:error] [pid 33864:tid 33887] [client 40.85.240.33:3633] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afDWIDXchLGZ4QggCslC_wAAAJU"]
[Tue Apr 28 23:45:36.584510 2026] [:error] [pid 33775:tid 33783] [client 40.85.240.33:3706] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afDWIJsYOcoQrq88YbVFVgAAAMQ"]
[Tue Apr 28 23:45:37.144865 2026] [:error] [pid 33864:tid 33866] [client 40.85.240.33:3642] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afDWITXchLGZ4QggCslDAgAAAIA"]
[Tue Apr 28 23:45:37.630092 2026] [:error] [pid 2741:tid 2760] [client 40.85.240.33:3685] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afDWIfp92FeOz1h6ILwplwAAAU4"]
[Tue Apr 28 23:45:38.178354 2026] [:error] [pid 2741:tid 2754] [client 40.85.240.33:3601] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afDWIvp92FeOz1h6ILwpmwAAAUg"]
[Tue Apr 28 23:45:38.709167 2026] [:error] [pid 33864:tid 33869] [client 40.85.240.33:3828] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afDWIjXchLGZ4QggCslDBAAAAIM"]
[Tue Apr 28 23:45:39.203541 2026] [:error] [pid 2741:tid 2749] [client 40.85.240.33:3602] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afDWI_p92FeOz1h6ILwpngAAAUM"]
[Tue Apr 28 23:45:39.704577 2026] [:error] [pid 33775:tid 33786] [client 40.85.240.33:3690] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afDWI5sYOcoQrq88YbVFWAAAAMc"]
[Tue Apr 28 23:45:40.248395 2026] [:error] [pid 33864:tid 33868] [client 40.85.240.33:3593] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zzkhe.php"] [unique_id "afDWJDXchLGZ4QggCslDBwAAAII"]
[Tue Apr 28 23:45:40.780589 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:3709] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zzkhe.php"] [unique_id "afDWJPp92FeOz1h6ILwpoQAAAUI"]
[Tue Apr 28 23:45:41.298127 2026] [:error] [pid 50889:tid 50906] [client 40.85.240.33:3759] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zzkhe.php"] [unique_id "afDWJYzszBr00txEzGhxMwAAAA4"]
[Tue Apr 28 23:45:41.773283 2026] [:error] [pid 2741:tid 2756] [client 40.85.240.33:3772] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zzkhe.php"] [unique_id "afDWJfp92FeOz1h6ILwpowAAAUo"]
[Tue Apr 28 23:45:42.300953 2026] [:error] [pid 33775:tid 33795] [client 40.85.240.33:3698] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xm.php"] [unique_id "afDWJpsYOcoQrq88YbVFWQAAANA"]
[Tue Apr 28 23:45:42.857796 2026] [:error] [pid 33775:tid 33787] [client 40.85.240.33:3594] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xm.php"] [unique_id "afDWJpsYOcoQrq88YbVFWwAAAMg"]
[Tue Apr 28 23:45:43.421756 2026] [:error] [pid 50889:tid 50908] [client 40.85.240.33:3668] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xm.php"] [unique_id "afDWJ4zszBr00txEzGhxNgAAABA"]
[Tue Apr 28 23:45:43.900631 2026] [:error] [pid 33777:tid 33843] [client 40.85.240.33:3526] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xm.php"] [unique_id "afDWJ7XUCFWqmordGGIszAAAAQg"]
[Tue Apr 28 23:45:44.355309 2026] [:error] [pid 33777:tid 33854] [client 40.85.240.33:3694] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afDWKLXUCFWqmordGGIszQAAARM"]
[Tue Apr 28 23:45:44.834687 2026] [:error] [pid 33777:tid 33839] [client 40.85.240.33:3645] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afDWKLXUCFWqmordGGIs0QAAAQQ"]
[Tue Apr 28 23:45:45.333499 2026] [:error] [pid 33777:tid 33844] [client 40.85.240.33:3524] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afDWKbXUCFWqmordGGIs0wAAAQk"]
[Tue Apr 28 23:45:45.760002 2026] [:error] [pid 33864:tid 33881] [client 40.85.240.33:3707] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afDWKTXchLGZ4QggCslDCQAAAI8"]
[Tue Apr 28 23:45:46.246068 2026] [:error] [pid 33776:tid 33824] [client 40.85.240.33:3667] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "afDWKl-bEJ2CKP3iKABS-QAAAFA"]
[Tue Apr 28 23:45:46.726852 2026] [:error] [pid 2741:tid 2765] [client 40.85.240.33:3687] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "afDWKvp92FeOz1h6ILwprAAAAVM"]
[Tue Apr 28 23:45:47.211341 2026] [proxy_fcgi:error] [pid 33776:tid 33827] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:47.476085 2026] [proxy_fcgi:error] [pid 33776:tid 33813] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:47.734997 2026] [proxy_fcgi:error] [pid 33776:tid 33823] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:47.993703 2026] [proxy_fcgi:error] [pid 33776:tid 33829] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:48.252641 2026] [proxy_fcgi:error] [pid 33776:tid 33830] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:48.510875 2026] [proxy_fcgi:error] [pid 33776:tid 33816] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:48.770373 2026] [proxy_fcgi:error] [pid 33776:tid 33826] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:49.028963 2026] [proxy_fcgi:error] [pid 33776:tid 33818] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:49.289077 2026] [proxy_fcgi:error] [pid 33776:tid 33828] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:49.548200 2026] [proxy_fcgi:error] [pid 33776:tid 33814] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:49.806919 2026] [proxy_fcgi:error] [pid 33776:tid 33808] [client 40.85.240.33:3608] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 23:45:50.068554 2026] [:error] [pid 33776:tid 33817] [client 40.85.240.33:3608] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afDWLl-bEJ2CKP3iKABTBgAAAEk"]
[Tue Apr 28 23:45:50.598479 2026] [:error] [pid 2741:tid 2766] [client 40.85.240.33:3683] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afDWLvp92FeOz1h6ILwptAAAAVQ"]
[Tue Apr 28 23:45:51.117188 2026] [:error] [pid 2741:tid 2757] [client 40.85.240.33:3617] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afDWL_p92FeOz1h6ILwptgAAAUs"]
[Tue Apr 28 23:45:51.689811 2026] [:error] [pid 33864:tid 33873] [client 40.85.240.33:4073] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afDWLzXchLGZ4QggCslDDAAAAIc"]
[Tue Apr 28 23:45:52.207784 2026] [:error] [pid 50889:tid 50905] [client 40.85.240.33:3525] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afDWMIzszBr00txEzGhxOgAAAA0"]
[Tue Apr 28 23:45:52.726894 2026] [:error] [pid 33776:tid 33815] [client 40.85.240.33:3663] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afDWMF-bEJ2CKP3iKABTCAAAAEc"]
[Tue Apr 28 23:45:53.211420 2026] [:error] [pid 33776:tid 33822] [client 40.85.240.33:3625] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afDWMV-bEJ2CKP3iKABTCQAAAE4"]
[Tue Apr 28 23:45:53.643393 2026] [:error] [pid 33775:tid 33788] [client 40.85.240.33:3643] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afDWMZsYOcoQrq88YbVFXQAAAMk"]
[Tue Apr 28 23:45:54.126889 2026] [:error] [pid 2741:tid 2759] [client 40.85.240.33:3934] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "afDWMvp92FeOz1h6ILwptwAAAU0"]
[Tue Apr 28 23:45:54.610538 2026] [:error] [pid 50889:tid 50895] [client 40.85.240.33:3977] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "afDWMozszBr00txEzGhxPwAAAAM"]
[Tue Apr 28 23:45:55.034629 2026] [:error] [pid 50889:tid 50894] [client 40.85.240.33:3521] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "afDWM4zszBr00txEzGhxQQAAAAI"]
[Tue Apr 28 23:45:55.457249 2026] [:error] [pid 33776:tid 33825] [client 40.85.240.33:4060] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wolv2.php"] [unique_id "afDWM1-bEJ2CKP3iKABTCwAAAFE"]
[Tue Apr 28 23:45:55.882818 2026] [:error] [pid 50889:tid 50901] [client 40.85.240.33:3620] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afDWM4zszBr00txEzGhxQwAAAAk"]
[Tue Apr 28 23:45:56.305727 2026] [:error] [pid 33776:tid 33809] [client 40.85.240.33:3329] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afDWNF-bEJ2CKP3iKABTDQAAAEE"]
[Tue Apr 28 23:45:56.743814 2026] [:error] [pid 33864:tid 33871] [client 40.85.240.33:3621] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afDWNDXchLGZ4QggCslDEwAAAIU"]
[Tue Apr 28 23:45:57.225474 2026] [:error] [pid 33777:tid 33839] [client 40.85.240.33:3555] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afDWNbXUCFWqmordGGIs4QAAAQQ"]
[Tue Apr 28 23:45:57.696404 2026] [:error] [pid 50889:tid 50913] [client 40.85.240.33:4085] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afDWNYzszBr00txEzGhxSQAAABU"]
[Tue Apr 28 23:45:58.186889 2026] [:error] [pid 33776:tid 33811] [client 40.85.240.33:3598] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afDWNl-bEJ2CKP3iKABTDgAAAEM"]
[Tue Apr 28 23:45:58.703212 2026] [:error] [pid 33864:tid 33878] [client 40.85.240.33:3689] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afDWNjXchLGZ4QggCslDFQAAAIw"]
[Tue Apr 28 23:45:59.233602 2026] [:error] [pid 2741:tid 2762] [client 40.85.240.33:3596] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afDWN_p92FeOz1h6ILwpuwAAAVA"]
[Tue Apr 28 23:45:59.722293 2026] [:error] [pid 33776:tid 33819] [client 40.85.240.33:3732] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xml.php"] [unique_id "afDWN1-bEJ2CKP3iKABTFQAAAEs"]
[Tue Apr 28 23:46:00.200642 2026] [:error] [pid 2741:tid 2765] [client 40.85.240.33:3588] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xml.php"] [unique_id "afDWOPp92FeOz1h6ILwpwgAAAVM"]
[Tue Apr 28 23:46:00.677683 2026] [:error] [pid 33775:tid 33779] [client 40.85.240.33:3973] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xml.php"] [unique_id "afDWOJsYOcoQrq88YbVFXgAAAMA"]
[Tue Apr 28 23:46:01.117783 2026] [:error] [pid 50889:tid 50899] [client 40.85.240.33:4063] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xml.php"] [unique_id "afDWOYzszBr00txEzGhxSwAAAAc"]
[Tue Apr 28 23:46:01.557049 2026] [:error] [pid 2741:tid 2753] [client 40.85.240.33:3616] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon3.php"] [unique_id "afDWOfp92FeOz1h6ILwpxAAAAUc"]
[Tue Apr 28 23:46:02.062598 2026] [:error] [pid 33864:tid 33888] [client 40.85.240.33:3531] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon3.php"] [unique_id "afDWOjXchLGZ4QggCslDGgAAAJY"]
[Tue Apr 28 23:46:02.599515 2026] [:error] [pid 33864:tid 33886] [client 40.85.240.33:4066] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon3.php"] [unique_id "afDWOjXchLGZ4QggCslDHgAAAJQ"]
[Tue Apr 28 23:46:03.061946 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:3550] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moon3.php"] [unique_id "afDWO4zszBr00txEzGhxTgAAAAY"]
[Tue Apr 28 23:46:03.483600 2026] [:error] [pid 50889:tid 50904] [client 40.85.240.33:3971] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "afDWO4zszBr00txEzGhxTwAAAAw"]
[Tue Apr 28 23:46:03.957644 2026] [:error] [pid 33864:tid 33883] [client 40.85.240.33:3976] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "afDWOzXchLGZ4QggCslDJAAAAJE"]
[Tue Apr 28 23:46:04.431103 2026] [:error] [pid 50889:tid 50905] [client 40.85.240.33:3658] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "afDWPIzszBr00txEzGhxUAAAAA0"]
[Tue Apr 28 23:46:04.935727 2026] [:error] [pid 50889:tid 50895] [client 40.85.240.33:3585] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "afDWPIzszBr00txEzGhxUwAAAAM"]
[Tue Apr 28 23:46:05.482452 2026] [:error] [pid 2741:tid 2757] [client 40.85.240.33:3614] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afDWPfp92FeOz1h6ILwpyAAAAUs"]
[Tue Apr 28 23:46:06.017564 2026] [:error] [pid 50889:tid 50915] [client 40.85.240.33:4048] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afDWPozszBr00txEzGhxVwAAABc"]
[Tue Apr 28 23:46:06.567805 2026] [:error] [pid 33777:tid 33851] [client 40.85.240.33:3626] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afDWPrXUCFWqmordGGIs5AAAARA"]
[Tue Apr 28 23:46:07.052010 2026] [:error] [pid 2741:tid 2759] [client 40.85.240.33:4083] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afDWP_p92FeOz1h6ILwpygAAAU0"]
[Tue Apr 28 23:46:07.504967 2026] [:error] [pid 2741:tid 2762] [client 40.85.240.33:3607] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/revealability.php"] [unique_id "afDWP_p92FeOz1h6ILwpywAAAVA"]
[Tue Apr 28 23:46:07.983215 2026] [:error] [pid 33776:tid 33817] [client 40.85.240.33:3970] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/revealability.php"] [unique_id "afDWP1-bEJ2CKP3iKABTGgAAAEk"]
[Tue Apr 28 23:46:08.480787 2026] [:error] [pid 33776:tid 33820] [client 40.85.240.33:3800] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/revealability.php"] [unique_id "afDWQF-bEJ2CKP3iKABTGwAAAEw"]
[Tue Apr 28 23:46:08.912263 2026] [:error] [pid 33864:tid 33884] [client 40.85.240.33:3613] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/revealability.php"] [unique_id "afDWQDXchLGZ4QggCslDLQAAAJI"]
[Tue Apr 28 23:46:09.346746 2026] [:error] [pid 50889:tid 50898] [client 40.85.240.33:3605] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afDWQYzszBr00txEzGhxYQAAAAY"]
[Tue Apr 28 23:46:09.823701 2026] [:error] [pid 33864:tid 33869] [client 40.85.240.33:4092] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afDWQTXchLGZ4QggCslDLwAAAIM"]
[Tue Apr 28 23:46:10.298749 2026] [:error] [pid 2741:tid 2752] [client 40.85.240.33:4045] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afDWQvp92FeOz1h6ILwpzgAAAUY"]
[Tue Apr 28 23:46:10.773198 2026] [:error] [pid 33864:tid 33871] [client 40.85.240.33:3609] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afDWQjXchLGZ4QggCslDMgAAAIU"]
[Tue Apr 28 23:46:11.305638 2026] [:error] [pid 50889:tid 50910] [client 40.85.240.33:3628] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afDWQ4zszBr00txEzGhxZQAAABI"]
[Tue Apr 28 23:46:11.837432 2026] [:error] [pid 50889:tid 50915] [client 40.85.240.33:4074] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afDWQ4zszBr00txEzGhxZwAAABc"]
[Tue Apr 28 23:46:12.373122 2026] [:error] [pid 33776:tid 33825] [client 40.85.240.33:3623] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afDWRF-bEJ2CKP3iKABTHwAAAFE"]
[Tue Apr 28 23:46:12.811642 2026] [:error] [pid 33864:tid 33870] [client 40.85.240.33:4033] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afDWRDXchLGZ4QggCslDNQAAAIQ"]
[Tue Apr 28 23:46:13.224919 2026] [:error] [pid 33776:tid 33809] [client 40.85.240.33:3947] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afDWRV-bEJ2CKP3iKABTIQAAAEE"]
[Tue Apr 28 23:46:13.642679 2026] [:error] [pid 50889:tid 50892] [client 40.85.240.33:4095] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afDWRYzszBr00txEzGhxaAAAAAA"]
[Tue Apr 28 23:46:14.074188 2026] [:error] [pid 33864:tid 33887] [client 40.85.240.33:4084] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afDWRjXchLGZ4QggCslDNwAAAJU"]
[Tue Apr 28 23:46:14.561557 2026] [:error] [pid 33864:tid 33886] [client 40.85.240.33:3661] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afDWRjXchLGZ4QggCslDOQAAAJQ"]
[Tue Apr 28 23:46:15.079744 2026] [:error] [pid 33776:tid 33831] [client 40.85.240.33:3544] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afDWR1-bEJ2CKP3iKABTJwAAAFc"]
[Tue Apr 28 23:46:15.593681 2026] [:error] [pid 2741:tid 2764] [client 40.85.240.33:3983] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afDWR_p92FeOz1h6ILwp0AAAAVI"]
[Tue Apr 28 23:46:16.060615 2026] [:error] [pid 2741:tid 2751] [client 40.85.240.33:3374] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afDWSPp92FeOz1h6ILwp0gAAAUU"]
[Tue Apr 28 23:46:16.532540 2026] [:error] [pid 33864:tid 33874] [client 40.85.240.33:3909] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afDWSDXchLGZ4QggCslDOwAAAIg"]
[Tue Apr 28 23:46:17.007397 2026] [:error] [pid 33777:tid 33856] [client 40.85.240.33:3975] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afDWSbXUCFWqmordGGIs5QAAARU"]
[Tue Apr 28 23:46:17.476579 2026] [:error] [pid 2741:tid 2756] [client 40.85.240.33:3929] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afDWSfp92FeOz1h6ILwp1QAAAUo"]
[Tue Apr 28 23:46:17.993175 2026] [:error] [pid 33776:tid 33824] [client 40.85.240.33:3603] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afDWSV-bEJ2CKP3iKABTKgAAAFA"]
[Tue Apr 28 23:46:18.467993 2026] [:error] [pid 2741:tid 2750] [client 40.85.240.33:4036] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afDWSvp92FeOz1h6ILwp1wAAAUQ"]
[Tue Apr 28 23:46:18.946189 2026] [:error] [pid 2741:tid 2763] [client 40.85.240.33:3986] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.1.php"] [unique_id "afDWSvp92FeOz1h6ILwp2QAAAVE"]
[Tue Apr 28 23:46:19.475074 2026] [:error] [pid 2741:tid 2760] [client 40.85.240.33:4086] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.1.php"] [unique_id "afDWS_p92FeOz1h6ILwp2wAAAU4"]
[Tue Apr 28 23:46:19.969985 2026] [:error] [pid 2741:tid 2758] [client 40.85.240.33:3584] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.1.php"] [unique_id "afDWS_p92FeOz1h6ILwp3AAAAUw"]
[Tue Apr 28 23:46:20.387905 2026] [:error] [pid 33864:tid 33866] [client 40.85.240.33:4009] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.1.php"] [unique_id "afDWTDXchLGZ4QggCslDPQAAAIA"]
[Tue Apr 28 23:46:20.873475 2026] [:error] [pid 33776:tid 33815] [client 40.85.240.33:3627] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afDWTF-bEJ2CKP3iKABTLQAAAEc"]
[Tue Apr 28 23:46:21.340430 2026] [:error] [pid 50889:tid 50900] [client 40.85.240.33:4000] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afDWTYzszBr00txEzGhxbwAAAAg"]
[Tue Apr 28 23:46:21.858805 2026] [:error] [pid 50889:tid 50901] [client 40.85.240.33:3533] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afDWTYzszBr00txEzGhxcQAAAAk"]
[Tue Apr 28 23:46:22.335365 2026] [:error] [pid 2741:tid 2768] [client 40.85.240.33:3636] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afDWTvp92FeOz1h6ILwp3wAAAVY"]
[Tue Apr 28 23:46:22.810971 2026] [:error] [pid 50889:tid 50895] [client 40.85.240.33:3985] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/academy.php"] [unique_id "afDWTozszBr00txEzGhxdAAAAAM"]
[Tue Apr 28 23:46:23.337151 2026] [:error] [pid 50889:tid 50910] [client 40.85.240.33:3619] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/academy.php"] [unique_id "afDWT4zszBr00txEzGhxdQAAABI"]
[Tue Apr 28 23:46:23.857433 2026] [:error] [pid 2741:tid 2752] [client 40.85.240.33:4075] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/academy.php"] [unique_id "afDWT_p92FeOz1h6ILwp4gAAAUY"]
[Tue Apr 28 23:46:24.324354 2026] [:error] [pid 2741:tid 2765] [client 40.85.240.33:4046] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/academy.php"] [unique_id "afDWUPp92FeOz1h6ILwp4wAAAVM"]
[Tue Apr 28 23:46:24.797463 2026] [:error] [pid 2741:tid 2748] [client 40.85.240.33:4081] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xml.php"] [unique_id "afDWUPp92FeOz1h6ILwp5QAAAUI"]
[Tue Apr 28 23:46:25.320574 2026] [:error] [pid 2741:tid 2767] [client 40.85.240.33:4088] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xml.php"] [unique_id "afDWUfp92FeOz1h6ILwp5gAAAVU"]
[Tue Apr 28 23:46:25.819411 2026] [:error] [pid 2741:tid 2753] [client 40.85.240.33:4006] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xml.php"] [unique_id "afDWUfp92FeOz1h6ILwp5wAAAUc"]
[Tue Apr 28 23:46:26.246846 2026] [:error] [pid 50889:tid 50902] [client 40.85.240.33:3549] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xml.php"] [unique_id "afDWUozszBr00txEzGhxfAAAAAo"]
[Tue Apr 28 23:46:26.668841 2026] [:error] [pid 33775:tid 33796] [client 40.85.240.33:3639] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afDWUpsYOcoQrq88YbVFYQAAANE"]
[Tue Apr 28 23:46:27.110534 2026] [:error] [pid 33775:tid 33781] [client 40.85.240.33:3539] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afDWU5sYOcoQrq88YbVFYwAAAMI"]
[Tue Apr 28 23:46:27.578788 2026] [:error] [pid 33864:tid 33878] [client 40.85.240.33:3908] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afDWUzXchLGZ4QggCslDQAAAAIw"]
[Tue Apr 28 23:46:28.057856 2026] [:error] [pid 33864:tid 33879] [client 40.85.240.33:4067] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afDWVDXchLGZ4QggCslDQQAAAI0"]
[Tue Apr 28 23:46:28.479668 2026] [:error] [pid 33777:tid 33853] [client 40.85.240.33:3606] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afDWVLXUCFWqmordGGIs6AAAARI"]
[Tue Apr 28 23:46:28.944587 2026] [:error] [pid 50889:tid 50900] [client 40.85.240.33:4052] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afDWVIzszBr00txEzGhxgAAAAAg"]
[Tue Apr 28 23:46:29.431095 2026] [:error] [pid 50889:tid 50909] [client 40.85.240.33:4027] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afDWVYzszBr00txEzGhxggAAABE"]
[Tue Apr 28 23:46:29.899749 2026] [:error] [pid 33864:tid 33868] [client 40.85.240.33:4043] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afDWVTXchLGZ4QggCslDQgAAAII"]
[Tue Apr 28 23:46:30.376591 2026] [:error] [pid 50889:tid 50916] [client 40.85.240.33:3528] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afDWVozszBr00txEzGhxhQAAABg"]
[Tue Apr 28 23:46:30.839298 2026] [:error] [pid 50889:tid 50894] [client 40.85.240.33:4078] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afDWVozszBr00txEzGhxhgAAAAI"]
[Tue Apr 28 23:46:31.321317 2026] [:error] [pid 33776:tid 33826] [client 40.85.240.33:3981] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afDWV1-bEJ2CKP3iKABTOQAAAFI"]
[Tue Apr 28 23:46:31.784452 2026] [:error] [pid 33777:tid 33857] [client 40.85.240.33:3999] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afDWV7XUCFWqmordGGIs6QAAARY"]
[Tue Apr 28 23:46:32.281698 2026] [:error] [pid 33776:tid 33817] [client 40.85.240.33:4031] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afDWWF-bEJ2CKP3iKABTPgAAAEk"]
[Tue Apr 28 23:46:32.715614 2026] [:error] [pid 33777:tid 33858] [client 40.85.240.33:3949] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afDWWLXUCFWqmordGGIs6wAAARc"]
[Tue Apr 28 23:46:33.151751 2026] [:error] [pid 50889:tid 50907] [client 40.85.240.33:3353] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afDWWYzszBr00txEzGhxigAAAA8"]
[Tue Apr 28 23:46:33.579729 2026] [:error] [pid 33777:tid 33835] [client 40.85.240.33:3566] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afDWWbXUCFWqmordGGIs7AAAAQA"]
[Tue Apr 28 23:46:34.064314 2026] [:error] [pid 2741:tid 2756] [client 40.85.240.33:3575] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afDWWvp92FeOz1h6ILwp6wAAAUo"]
[Tue Apr 28 23:46:34.551627 2026] [:error] [pid 33776:tid 33820] [client 40.85.240.33:3634] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afDWWl-bEJ2CKP3iKABTRAAAAEw"]
[Tue Apr 28 23:46:35.033422 2026] [:error] [pid 33776:tid 33813] [client 40.85.240.33:4055] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afDWW1-bEJ2CKP3iKABTRwAAAEU"]
[Tue Apr 28 23:46:35.509836 2026] [:error] [pid 2741:tid 2750] [client 40.85.240.33:4090] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afDWW_p92FeOz1h6ILwp7QAAAUQ"]
[Tue Apr 28 23:46:35.989152 2026] [:error] [pid 33776:tid 33811] [client 40.85.240.33:4057] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afDWW1-bEJ2CKP3iKABTSQAAAEM"]
[Tue Apr 28 23:46:36.537477 2026] [:error] [pid 33776:tid 33823] [client 40.85.240.33:3568] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afDWXF-bEJ2CKP3iKABTSgAAAE8"]
[Tue Apr 28 23:46:37.023730 2026] [:error] [pid 50889:tid 50892] [client 40.85.240.33:3710] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afDWXYzszBr00txEzGhxjgAAAAA"]
[Tue Apr 28 23:46:37.498431 2026] [:error] [pid 33776:tid 33819] [client 40.85.240.33:4001] [client 40.85.240.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afDWXV-bEJ2CKP3iKABTTQAAAEs"]
[Wed Apr 29 02:53:54.917154 2026] [:error] [pid 35342:tid 35351] [client 34.106.158.203:54224] [client 34.106.158.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "afECQu7D5-OXGLQYxO4BRAAAAwc"]
[Wed Apr 29 10:27:15.673668 2026] [proxy_fcgi:error] [pid 61628:tid 61647] [client 20.12.211.211:4663] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 10:27:15.878776 2026] [proxy_fcgi:error] [pid 61628:tid 61656] [client 20.12.211.211:4663] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 10:27:16.382796 2026] [proxy_fcgi:error] [pid 61628:tid 61644] [client 20.12.211.211:4663] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 10:27:16.685988 2026] [proxy_fcgi:error] [pid 61628:tid 61642] [client 20.12.211.211:4663] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 10:27:17.114778 2026] [proxy_fcgi:error] [pid 61628:tid 61637] [client 20.12.211.211:4663] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 10:27:17.308050 2026] [proxy_fcgi:error] [pid 61628:tid 61650] [client 20.12.211.211:4663] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 10:27:17.501735 2026] [proxy_fcgi:error] [pid 61628:tid 61641] [client 20.12.211.211:4663] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 10:27:17.884896 2026] [:error] [pid 61628:tid 61648] [client 20.12.211.211:4663] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFshfXzdLVcrP-YPZgJjwAAAM8"]
[Wed Apr 29 10:27:20.335630 2026] [:error] [pid 61541:tid 61608] [client 20.12.211.211:4483] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFsiFoqNK1GZvjPpy5UsAAAAgg"]
[Wed Apr 29 10:27:26.745456 2026] [:error] [pid 61540:tid 61584] [client 20.12.211.211:4616] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFsjuQ8cJB7pQslzIeZwQAAAIs"]
[Wed Apr 29 10:27:28.929655 2026] [:error] [pid 61540:tid 61594] [client 20.12.211.211:4660] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFskOQ8cJB7pQslzIeZzQAAAJU"]
[Wed Apr 29 15:08:01.203395 2026] [:error] [pid 45054:tid 45061] [client 180.191.234.116:53454] [client 180.191.234.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.234.116, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afGuUYtL6SUL31r23c-exAAAAoU"]
[Wed Apr 29 15:08:01.214452 2026] [proxy_fcgi:error] [pid 45054:tid 45061] [client 180.191.234.116:53454] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 15:38:25.066508 2026] [:error] [pid 45085:tid 45105] [client 45.119.85.39:64679] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG1cdS7eNjgd8gD6Zz0VQAAAtI"], referer: https://www.google.com
[Wed Apr 29 15:38:25.066578 2026] [:error] [pid 45085:tid 45105] [client 45.119.85.39:64679] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 146"] [hostname "stratapluswa.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG1cdS7eNjgd8gD6Zz0VQAAAtI"], referer: https://www.google.com
[Wed Apr 29 22:42:16.633329 2026] [:error] [pid 21536:tid 21542] [client 8.229.92.107:38258] [client 8.229.92.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "afIYyCREaVkH9P5H_LQzzQAAAIQ"]
[Thu Apr 30 04:21:22.513642 2026] [proxy_fcgi:error] [pid 18112:tid 18150] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:22.753381 2026] [proxy_fcgi:error] [pid 18112:tid 18166] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:22.993091 2026] [proxy_fcgi:error] [pid 18112:tid 18157] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:23.233795 2026] [proxy_fcgi:error] [pid 18112:tid 18155] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:23.473548 2026] [proxy_fcgi:error] [pid 18112:tid 18159] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:23.718904 2026] [proxy_fcgi:error] [pid 18112:tid 18160] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:23.958983 2026] [proxy_fcgi:error] [pid 18112:tid 18163] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:24.198988 2026] [proxy_fcgi:error] [pid 18112:tid 18172] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:24.439709 2026] [proxy_fcgi:error] [pid 18112:tid 18162] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:24.679226 2026] [proxy_fcgi:error] [pid 18112:tid 18174] [client 172.161.19.100:19017] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 04:21:25.154203 2026] [:error] [pid 18112:tid 18170] [client 172.161.19.100:19017] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afJoRSUrJv3y8j6Lm1uS0QAAAFQ"]
[Thu Apr 30 04:21:26.235518 2026] [:error] [pid 18113:tid 18198] [client 172.161.19.100:15904] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afJoRniIjwsVGkvz5IlIugAAAJU"]
[Thu Apr 30 04:21:27.351657 2026] [:error] [pid 18112:tid 18171] [client 172.161.19.100:13439] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afJoRyUrJv3y8j6Lm1uS0gAAAFU"]
[Thu Apr 30 04:21:28.344572 2026] [:error] [pid 52350:tid 52381] [client 172.161.19.100:14083] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afJoSP1j4GHE9hm7bfcj3gAAARc"]
[Thu Apr 30 08:26:02.063075 2026] [:error] [pid 18220:tid 18234] [client 45.183.224.227:46595] [client 45.183.224.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.183.224.227, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afKhmsyESVSfAPebmxYBgwAAAMs"]
[Thu Apr 30 08:26:02.078638 2026] [proxy_fcgi:error] [pid 18220:tid 18234] [client 45.183.224.227:46595] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 10:40:23.258432 2026] [:error] [pid 52350:tid 52379] [client 172.161.19.100:12316] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function/function.php"] [unique_id "afLBF_1j4GHE9hm7bfduLwAAARU"]
[Thu Apr 30 10:40:24.201457 2026] [:error] [pid 18220:tid 18224] [client 172.161.19.100:16182] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function/function.php"] [unique_id "afLBGMyESVSfAPebmxYPRwAAAME"]
[Thu Apr 30 10:40:25.364684 2026] [:error] [pid 18220:tid 18225] [client 172.161.19.100:12327] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function/function.php"] [unique_id "afLBGcyESVSfAPebmxYPSAAAAMI"]
[Thu Apr 30 10:40:26.572042 2026] [:error] [pid 53641:tid 53674] [client 172.161.19.100:12045] [client 172.161.19.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/function/function.php"] [unique_id "afLBGmC119wja3QGeAGWMwAAAZY"]
[Thu Apr 30 20:32:04.843029 2026] [autoindex:error] [pid 5733:tid 5809] [client 80.241.213.248:58201] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 01 04:56:40.725036 2026] [:error] [pid 38016:tid 38090] [client 92.53.64.155:58723] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "afPCCJFc1DCPy0LM72bbSwAAAIw"]
[Fri May 01 17:42:06.531625 2026] [:error] [pid 33791:tid 33796] [client 34.123.236.48:55261] [client 34.123.236.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.236.48, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afR1bm9ixd-moLycM9DU9gAAAAI"]
[Fri May 01 17:42:06.540893 2026] [proxy_fcgi:error] [pid 33791:tid 33796] [client 34.123.236.48:55261] AH01071: Got error 'Primary script unknown'
[Fri May 01 17:42:08.951168 2026] [:error] [pid 33791:tid 33810] [client 34.123.236.48:55261] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afR1cG9ixd-moLycM9DVBgAAABA"]
[Fri May 01 17:42:09.425410 2026] [:error] [pid 33791:tid 33818] [client 34.123.236.48:56881] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afR1cW9ixd-moLycM9DVCQAAABg"]
[Fri May 01 17:42:09.856751 2026] [:error] [pid 24995:tid 25013] [client 34.123.236.48:50711] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afR1cedJG9WB_Q_ne0ucDAAAAE4"]
[Fri May 01 17:42:10.389001 2026] [:error] [pid 33791:tid 33794] [client 34.123.236.48:49443] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afR1cm9ixd-moLycM9DVDAAAAAA"]
[Fri May 01 17:42:10.850432 2026] [:error] [pid 33791:tid 33800] [client 34.123.236.48:49910] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afR1cm9ixd-moLycM9DVDQAAAAY"]
[Fri May 01 17:42:11.318139 2026] [:error] [pid 24995:tid 25001] [client 34.123.236.48:59132] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afR1c-dJG9WB_Q_ne0ucDQAAAEI"]
[Fri May 01 17:42:11.795106 2026] [:error] [pid 24995:tid 25005] [client 34.123.236.48:58151] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afR1c-dJG9WB_Q_ne0ucDgAAAEY"]
[Sat May 02 00:46:54.882656 2026] [:error] [pid 25085:tid 25114] [client 120.61.224.59:55509] [client 120.61.224.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.61.224.59, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afTY_vuD8fWRiE0RX0ElZQAAAVc"]
[Sat May 02 00:46:54.894716 2026] [proxy_fcgi:error] [pid 25085:tid 25114] [client 120.61.224.59:55509] AH01071: Got error 'Primary script unknown'
[Sat May 02 01:41:14.554307 2026] [:error] [pid 50214:tid 50219] [client 160.30.179.124:55774] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "afTluos0pgrtfZkbhjOZRAAAAYE"]
[Sat May 02 02:50:43.349339 2026] [:error] [pid 25320:tid 25324] [client 45.45.237.9:52586] [client 45.45.237.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "afT2A1c3wJ-3-XaXB3pnHQAAAQE"]
[Sat May 02 02:50:43.442252 2026] [:error] [pid 25320:tid 25337] [client 45.45.237.9:52600] [client 45.45.237.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "afT2A1c3wJ-3-XaXB3pnHgAAAQ4"]
[Sat May 02 07:01:16.698699 2026] [:error] [pid 53436:tid 53511] [client 82.21.141.5:42308] [client 82.21.141.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "afUwvK9N0xp8fccVM0BwhwAAAIw"]
[Sat May 02 12:35:12.719498 2026] [:error] [pid 22846:tid 22850] [client 192.96.159.129:59752] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "afV_AIm1Ms03Mfhp3abXLwAAAQI"]
[Sun May 03 19:51:41.722541 2026] [:error] [pid 37246:tid 37264] [client 157.245.159.39:53356] [client 157.245.159.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.159.39, incrementing ddos counter"] [hostname "www.stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afc2zThvYFGNwhnPamoligAAAQ4"], referer: https://www.storitlimited.co.uk//wp-login.php
[Sun May 03 19:51:41.734782 2026] [proxy_fcgi:error] [pid 37246:tid 37264] [client 157.245.159.39:53356] AH01071: Got error 'Primary script unknown', referer: https://www.storitlimited.co.uk//wp-login.php
[Mon May 04 05:50:10.453497 2026] [proxy_fcgi:error] [pid 57046:tid 57064] [client 91.217.249.215:56689] AH01071: Got error 'Primary script unknown'
[Mon May 04 09:31:17.541452 2026] [proxy_fcgi:error] [pid 12051:tid 12065] [client 20.9.90.138:7245] AH01071: Got error 'Primary script unknown'
[Mon May 04 09:31:19.177201 2026] [:error] [pid 12051:tid 12071] [client 20.9.90.138:7245] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "aff25-rVB-w_PyOHK6lV8gAAAVI"]
[Mon May 04 09:31:19.994762 2026] [:error] [pid 33186:tid 33189] [client 20.9.90.138:7617] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "aff257qlqe0DcmBS9VzfsgAAAAA"]
[Mon May 04 09:31:20.768703 2026] [:error] [pid 33186:tid 33200] [client 20.9.90.138:7642] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "aff26Lqlqe0DcmBS9VzfyQAAAAs"]
[Mon May 04 09:31:22.242095 2026] [:error] [pid 11958:tid 11982] [client 20.9.90.138:7678] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zwso.php"] [unique_id "aff26jAK_o2NLEdfAUk4jAAAAFU"]
[Mon May 04 13:10:40.428307 2026] [proxy_fcgi:error] [pid 64610:tid 64632] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:40.578796 2026] [proxy_fcgi:error] [pid 64610:tid 64617] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:40.730616 2026] [proxy_fcgi:error] [pid 64610:tid 64627] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:40.907766 2026] [proxy_fcgi:error] [pid 64610:tid 64618] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:41.057290 2026] [proxy_fcgi:error] [pid 64610:tid 64625] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:41.534228 2026] [proxy_fcgi:error] [pid 64610:tid 64621] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:41.931625 2026] [proxy_fcgi:error] [pid 64610:tid 64614] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:42.104019 2026] [proxy_fcgi:error] [pid 64610:tid 64631] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:42.255743 2026] [proxy_fcgi:error] [pid 64610:tid 64628] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:42.416812 2026] [proxy_fcgi:error] [pid 64610:tid 64623] [client 52.231.69.156:2117] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:10:42.719459 2026] [:error] [pid 64610:tid 64627] [client 52.231.69.156:2117] [client 52.231.69.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afgqUmhJ7aZW62UOoWhUNwAAAQ8"]
[Mon May 04 13:10:43.312299 2026] [:error] [pid 64610:tid 64630] [client 52.231.69.156:2488] [client 52.231.69.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afgqU2hJ7aZW62UOoWhUQAAAARI"]
[Mon May 04 13:10:43.900619 2026] [:error] [pid 64610:tid 64623] [client 52.231.69.156:2443] [client 52.231.69.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afgqU2hJ7aZW62UOoWhUUQAAAQs"]
[Mon May 04 13:10:44.461812 2026] [:error] [pid 64610:tid 64630] [client 52.231.69.156:2491] [client 52.231.69.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "afgqVGhJ7aZW62UOoWhUVQAAARI"]
[Mon May 04 15:45:06.453806 2026] [:error] [pid 3341:tid 3368] [client 136.107.232.91:64454] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "afhOgk9o3_LordU0wW7qWAAAAJg"]
[Mon May 04 15:45:06.881058 2026] [:error] [pid 61150:tid 61155] [client 136.107.232.91:49251] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "afhOgu8QXWVLiwIGVpc8WwAAAUI"]
[Mon May 04 15:45:07.309298 2026] [:error] [pid 3341:tid 3356] [client 136.107.232.91:50901] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg09o3_LordU0wW7qgQAAAIw"]
[Mon May 04 19:03:29.381522 2026] [:error] [pid 61044:tid 61125] [client 79.117.241.99:60099] [client 79.117.241.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.117.241.99, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afh9AUw8w2zZZXI6H1uLawAAABc"]
[Mon May 04 19:03:29.393605 2026] [proxy_fcgi:error] [pid 61044:tid 61125] [client 79.117.241.99:60099] AH01071: Got error 'Primary script unknown'
[Mon May 04 20:24:07.833307 2026] [:error] [pid 61043:tid 61086] [client 34.24.211.32:54320] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP558-LwtfURjiAbC9LgAAAEs"]
[Mon May 04 21:00:28.790509 2026] [:error] [pid 61043:tid 61094] [client 209.87.169.6:23789] [client 209.87.169.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afiYbJ8-LwtfURjiAbDFXgAAAFM"]
[Mon May 04 22:59:38.568777 2026] [:error] [pid 61150:tid 61177] [client 104.23.239.96:11853] [client 104.23.239.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afi0Wu8QXWVLiwIGVpedIwAAAVg"]
[Mon May 04 22:59:40.038492 2026] [:error] [pid 61043:tid 61075] [client 172.71.144.143:11247] [client 172.71.144.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afi0XJ8-LwtfURjiAbDeIwAAAEA"]
[Mon May 04 23:02:48.334909 2026] [:error] [pid 3341:tid 3365] [client 172.70.240.82:10589] [client 172.70.240.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afi1GE9o3_LordU0wW6LeQAAAJU"]
[Mon May 04 23:22:24.532821 2026] [:error] [pid 32471:tid 32494] [client 172.71.148.28:11785] [client 172.71.148.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afi5sHmjpb9EYq6AqhKJDAAAARQ"]
[Tue May 05 06:04:25.871198 2026] [proxy_fcgi:error] [pid 41055:tid 41062] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:26.081632 2026] [proxy_fcgi:error] [pid 41055:tid 41075] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:26.292685 2026] [proxy_fcgi:error] [pid 41055:tid 41078] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:26.503509 2026] [proxy_fcgi:error] [pid 41055:tid 41082] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:26.714375 2026] [proxy_fcgi:error] [pid 41055:tid 41064] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:26.924142 2026] [proxy_fcgi:error] [pid 41055:tid 41072] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:27.135043 2026] [proxy_fcgi:error] [pid 41055:tid 41066] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:27.346785 2026] [proxy_fcgi:error] [pid 41055:tid 41073] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:27.556740 2026] [proxy_fcgi:error] [pid 41055:tid 41065] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:27.767473 2026] [proxy_fcgi:error] [pid 41055:tid 41077] [client 4.204.197.96:30795] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:04:27.977782 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:30795] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "afkX6yepFwKgA_SKOHi4zAAAAQU"]
[Tue May 05 06:04:28.390326 2026] [:error] [pid 39071:tid 39094] [client 4.204.197.96:30786] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "afkX7IvmnRMz9gRzix1cyQAAAA4"]
[Tue May 05 06:04:28.807810 2026] [:error] [pid 39072:tid 39110] [client 4.204.197.96:30806] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "afkX7PolSHl4aAnrIovgYgAAAEM"]
[Tue May 05 06:04:29.221154 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30734] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "afkX7TaPrgTaiOD_15tHCgAAAMY"]
[Tue May 05 06:04:29.633779 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:30804] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "afkX7TaPrgTaiOD_15tHCwAAAMw"]
[Tue May 05 06:04:30.052317 2026] [:error] [pid 39071:tid 39102] [client 4.204.197.96:30813] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "afkX7ovmnRMz9gRzix1cygAAABY"]
[Tue May 05 06:04:30.465771 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30807] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "afkX7jaPrgTaiOD_15tHDQAAAM4"]
[Tue May 05 06:04:30.877294 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:30788] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "afkX7jaPrgTaiOD_15tHDwAAANM"]
[Tue May 05 06:04:31.291223 2026] [:error] [pid 39178:tid 39201] [client 4.204.197.96:30727] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "afkX7zaPrgTaiOD_15tHEgAAANU"]
[Tue May 05 06:04:31.702506 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:30752] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "afkX7zaPrgTaiOD_15tHFQAAAMc"]
[Tue May 05 06:04:32.114276 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:30828] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "afkX8DaPrgTaiOD_15tHFwAAAMU"]
[Tue May 05 06:04:32.525866 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30842] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "afkX8DaPrgTaiOD_15tHGQAAANI"]
[Tue May 05 06:04:32.936550 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:30818] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afkX8DaPrgTaiOD_15tHGwAAAMg"]
[Tue May 05 06:04:33.346442 2026] [:error] [pid 41055:tid 41072] [client 4.204.197.96:30824] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afkX8SepFwKgA_SKOHi40QAAAQ4"]
[Tue May 05 06:04:33.758304 2026] [:error] [pid 41055:tid 41066] [client 4.204.197.96:30826] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afkX8SepFwKgA_SKOHi40wAAAQg"]
[Tue May 05 06:04:34.172924 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:30822] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "afkX8jaPrgTaiOD_15tHIwAAANM"]
[Tue May 05 06:04:34.586069 2026] [:error] [pid 41055:tid 41073] [client 4.204.197.96:30829] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afkX8iepFwKgA_SKOHi41AAAAQ8"]
[Tue May 05 06:04:34.999430 2026] [:error] [pid 39178:tid 39201] [client 4.204.197.96:30797] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afkX8jaPrgTaiOD_15tHJgAAANU"]
[Tue May 05 06:04:35.414390 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:30760] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afkX8zaPrgTaiOD_15tHKQAAAMc"]
[Tue May 05 06:04:35.834226 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:30781] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "afkX8zaPrgTaiOD_15tHKwAAAMU"]
[Tue May 05 06:04:36.245926 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:30805] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "afkX9DaPrgTaiOD_15tHLgAAAMQ"]
[Tue May 05 06:04:36.658378 2026] [:error] [pid 39073:tid 39143] [client 4.204.197.96:30729] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "afkX9P0kT1BNjk46Bkcd4QAAAIk"]
[Tue May 05 06:04:37.069807 2026] [:error] [pid 39071:tid 39103] [client 4.204.197.96:30846] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "afkX9YvmnRMz9gRzix1czQAAABc"]
[Tue May 05 06:04:37.481778 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:30725] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "afkX9SepFwKgA_SKOHi42gAAAQs"]
[Tue May 05 06:04:37.896596 2026] [:error] [pid 39073:tid 39150] [client 4.204.197.96:30799] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tires.php"] [unique_id "afkX9f0kT1BNjk46Bkcd4wAAAJA"]
[Tue May 05 06:04:38.309906 2026] [:error] [pid 39073:tid 39151] [client 4.204.197.96:30722] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tires.php"] [unique_id "afkX9v0kT1BNjk46Bkcd5QAAAJE"]
[Tue May 05 06:04:38.723470 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:30801] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tires.php"] [unique_id "afkX9v0kT1BNjk46Bkcd5wAAAJg"]
[Tue May 05 06:04:39.136136 2026] [:error] [pid 39072:tid 39120] [client 4.204.197.96:30833] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tires.php"] [unique_id "afkX9_olSHl4aAnrIovgZQAAAE0"]
[Tue May 05 06:04:39.552150 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30819] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-slss.php"] [unique_id "afkX9_0kT1BNjk46Bkcd6AAAAIw"]
[Tue May 05 06:04:39.965649 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30815] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-slss.php"] [unique_id "afkX9zaPrgTaiOD_15tHOQAAAM4"]
[Tue May 05 06:04:40.377584 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:30845] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-slss.php"] [unique_id "afkX-P0kT1BNjk46Bkcd6gAAAIo"]
[Tue May 05 06:04:40.789111 2026] [:error] [pid 39072:tid 39108] [client 4.204.197.96:30740] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-slss.php"] [unique_id "afkX-PolSHl4aAnrIovgaAAAAEE"]
[Tue May 05 06:04:41.201110 2026] [:error] [pid 39073:tid 39137] [client 4.204.197.96:30823] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afkX-f0kT1BNjk46Bkcd6wAAAIM"]
[Tue May 05 06:04:41.611345 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:30770] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afkX-TaPrgTaiOD_15tHPQAAANE"]
[Tue May 05 06:04:42.024927 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:30811] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afkX-jaPrgTaiOD_15tHQAAAAMc"]
[Tue May 05 06:04:42.445114 2026] [:error] [pid 39072:tid 39128] [client 4.204.197.96:30847] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "afkX-volSHl4aAnrIovgbQAAAFU"]
[Tue May 05 06:04:42.857966 2026] [:error] [pid 39072:tid 39129] [client 4.204.197.96:30790] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "afkX-volSHl4aAnrIovgcAAAAFY"]
[Tue May 05 06:04:43.273757 2026] [:error] [pid 39178:tid 39201] [client 4.204.197.96:30831] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "afkX-zaPrgTaiOD_15tHRQAAANU"]
[Tue May 05 06:04:43.689710 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:30733] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "afkX-zaPrgTaiOD_15tHRgAAAMg"]
[Tue May 05 06:04:44.102874 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:30817] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "afkX_DaPrgTaiOD_15tHSQAAANE"]
[Tue May 05 06:04:44.515619 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:30812] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afkX_P0kT1BNjk46Bkcd8AAAAII"]
[Tue May 05 06:04:44.926629 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:30785] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afkX_DaPrgTaiOD_15tHSwAAANc"]
[Tue May 05 06:04:45.337286 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:30834] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afkX_TaPrgTaiOD_15tHTQAAANM"]
[Tue May 05 06:04:45.747150 2026] [:error] [pid 41055:tid 41076] [client 4.204.197.96:30837] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file59.php"] [unique_id "afkX_SepFwKgA_SKOHi43gAAARI"]
[Tue May 05 06:04:46.158856 2026] [:error] [pid 39072:tid 39125] [client 4.204.197.96:30713] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "afkX_volSHl4aAnrIovgcwAAAFI"]
[Tue May 05 06:04:46.570365 2026] [:error] [pid 39073:tid 39141] [client 4.204.197.96:30810] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "afkX_v0kT1BNjk46Bkcd8wAAAIc"]
[Tue May 05 06:04:46.982437 2026] [:error] [pid 39073:tid 39152] [client 4.204.197.96:30757] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "afkX_v0kT1BNjk46Bkcd9QAAAJI"]
[Tue May 05 06:04:47.394972 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:30661] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "afkX_zaPrgTaiOD_15tHUQAAAMA"]
[Tue May 05 06:04:47.811810 2026] [:error] [pid 39072:tid 39109] [client 4.204.197.96:30803] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkX__olSHl4aAnrIovgeAAAAEI"]
[Tue May 05 06:04:48.231170 2026] [:error] [pid 39073:tid 39135] [client 4.204.197.96:30656] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkYAP0kT1BNjk46Bkcd9gAAAIE"]
[Tue May 05 06:04:48.641680 2026] [:error] [pid 39073:tid 39148] [client 4.204.197.96:30745] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkYAP0kT1BNjk46Bkcd9wAAAI4"]
[Tue May 05 06:04:49.063681 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:30839] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkYATaPrgTaiOD_15tHVAAAANc"]
[Tue May 05 06:04:49.476047 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:30724] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afkYAf0kT1BNjk46Bkcd_AAAAII"]
[Tue May 05 06:04:49.893118 2026] [:error] [pid 39072:tid 39124] [client 4.204.197.96:30844] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afkYAfolSHl4aAnrIovgfAAAAFE"]
[Tue May 05 06:04:50.311940 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30827] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afkYAv0kT1BNjk46Bkcd_wAAAIw"]
[Tue May 05 06:04:50.724804 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:30753] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/333.php"] [unique_id "afkYAvolSHl4aAnrIovgfQAAAFQ"]
[Tue May 05 06:04:51.141021 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:30736] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afkYA_0kT1BNjk46BkceAgAAAIg"]
[Tue May 05 06:04:51.560150 2026] [:error] [pid 41055:tid 41059] [client 4.204.197.96:30744] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afkYAyepFwKgA_SKOHi44AAAAQE"]
[Tue May 05 06:04:51.972900 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:30840] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afkYA_0kT1BNjk46BkceBgAAAIU"]
[Tue May 05 06:04:52.384069 2026] [:error] [pid 39073:tid 39138] [client 4.204.197.96:30758] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "afkYBP0kT1BNjk46BkceCAAAAIQ"]
[Tue May 05 06:04:52.800365 2026] [:error] [pid 39071:tid 39099] [client 4.204.197.96:30751] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afkYBIvmnRMz9gRzix1c2AAAABM"]
[Tue May 05 06:04:53.217628 2026] [:error] [pid 41055:tid 41070] [client 4.204.197.96:30841] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afkYBSepFwKgA_SKOHi44gAAAQw"]
[Tue May 05 06:04:53.627914 2026] [:error] [pid 39072:tid 39129] [client 4.204.197.96:30802] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afkYBfolSHl4aAnrIovghQAAAFY"]
[Tue May 05 06:04:54.050223 2026] [:error] [pid 39072:tid 39116] [client 4.204.197.96:30723] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "afkYBvolSHl4aAnrIovghgAAAEk"]
[Tue May 05 06:04:54.461873 2026] [:error] [pid 39071:tid 39103] [client 4.204.197.96:30796] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afkYBovmnRMz9gRzix1c2gAAABc"]
[Tue May 05 06:04:54.879659 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:30750] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afkYBiepFwKgA_SKOHi45AAAAQs"]
[Tue May 05 06:04:55.294131 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:30791] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afkYBzaPrgTaiOD_15tHXAAAANg"]
[Tue May 05 06:04:55.707684 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:30738] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ton.php"] [unique_id "afkYBzaPrgTaiOD_15tHYQAAANc"]
[Tue May 05 06:04:56.122757 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:30666] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asas.php"] [unique_id "afkYCDaPrgTaiOD_15tHYwAAAMU"]
[Tue May 05 06:04:56.535462 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:30681] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asas.php"] [unique_id "afkYCDaPrgTaiOD_15tHZQAAANY"]
[Tue May 05 06:04:56.947563 2026] [:error] [pid 39071:tid 39093] [client 4.204.197.96:30735] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asas.php"] [unique_id "afkYCIvmnRMz9gRzix1c3AAAAA0"]
[Tue May 05 06:04:57.360834 2026] [:error] [pid 39073:tid 39148] [client 4.204.197.96:30814] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asas.php"] [unique_id "afkYCf0kT1BNjk46BkceCgAAAI4"]
[Tue May 05 06:04:57.776999 2026] [:error] [pid 39072:tid 39128] [client 4.204.197.96:30784] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afkYCfolSHl4aAnrIovgiQAAAFU"]
[Tue May 05 06:04:58.189633 2026] [:error] [pid 39073:tid 39134] [client 4.204.197.96:30832] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afkYCv0kT1BNjk46BkceDAAAAIA"]
[Tue May 05 06:04:58.605952 2026] [:error] [pid 39071:tid 39100] [client 4.204.197.96:30792] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afkYCovmnRMz9gRzix1c3wAAABQ"]
[Tue May 05 06:04:59.017069 2026] [:error] [pid 39073:tid 39153] [client 4.204.197.96:30671] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kikikoko.php"] [unique_id "afkYC_0kT1BNjk46BkceDQAAAJM"]
[Tue May 05 06:04:59.433745 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:30726] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "afkYCyepFwKgA_SKOHi46gAAAQU"]
[Tue May 05 06:04:59.846364 2026] [:error] [pid 39073:tid 39156] [client 4.204.197.96:30793] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "afkYC_0kT1BNjk46BkceDgAAAJY"]
[Tue May 05 06:05:00.259530 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:30809] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "afkYDDaPrgTaiOD_15tHaAAAAMA"]
[Tue May 05 06:05:00.673880 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:30739] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "afkYDDaPrgTaiOD_15tHagAAAME"]
[Tue May 05 06:05:01.085062 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:30779] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "afkYDTaPrgTaiOD_15tHbAAAAMQ"]
[Tue May 05 06:05:01.499177 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:30808] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "afkYDTaPrgTaiOD_15tHbQAAAM8"]
[Tue May 05 06:05:01.911297 2026] [:error] [pid 39072:tid 39113] [client 4.204.197.96:30825] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "afkYDfolSHl4aAnrIovgjQAAAEY"]
[Tue May 05 06:05:02.328854 2026] [:error] [pid 39071:tid 39096] [client 4.204.197.96:30798] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adoms.php"] [unique_id "afkYDovmnRMz9gRzix1c4AAAABA"]
[Tue May 05 06:05:02.746869 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:30756] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymn.php"] [unique_id "afkYDjaPrgTaiOD_15tHcgAAAMA"]
[Tue May 05 06:05:03.160118 2026] [:error] [pid 39073:tid 39154] [client 4.204.197.96:30759] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymn.php"] [unique_id "afkYD_0kT1BNjk46BkceEQAAAJQ"]
[Tue May 05 06:05:03.572759 2026] [:error] [pid 41055:tid 41058] [client 4.204.197.96:30754] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymn.php"] [unique_id "afkYDyepFwKgA_SKOHi47gAAAQA"]
[Tue May 05 06:05:03.983992 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:30746] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tymn.php"] [unique_id "afkYDyepFwKgA_SKOHi47wAAAQs"]
[Tue May 05 06:05:04.396587 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:30771] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "afkYEP0kT1BNjk46BkceEwAAAJg"]
[Tue May 05 06:05:04.809476 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:30693] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "afkYEP0kT1BNjk46BkceFQAAAIg"]
[Tue May 05 06:05:05.220824 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:30731] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "afkYETaPrgTaiOD_15tHdQAAANE"]
[Tue May 05 06:05:05.631607 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:30737] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/eetu.php"] [unique_id "afkYETaPrgTaiOD_15tHdwAAANg"]
[Tue May 05 06:05:06.056571 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30721] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "afkYEjaPrgTaiOD_15tHeQAAAM4"]
[Tue May 05 06:05:06.470798 2026] [:error] [pid 39071:tid 39097] [client 4.204.197.96:30663] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "afkYEovmnRMz9gRzix1c4gAAABE"]
[Tue May 05 06:05:06.881777 2026] [:error] [pid 39073:tid 39143] [client 4.204.197.96:30593] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "afkYEv0kT1BNjk46BkceFwAAAIk"]
[Tue May 05 06:05:07.293526 2026] [:error] [pid 39178:tid 39191] [client 4.204.197.96:30783] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dx.php"] [unique_id "afkYEzaPrgTaiOD_15tHewAAAMs"]
[Tue May 05 06:05:07.704955 2026] [:error] [pid 39178:tid 39200] [client 4.204.197.96:30687] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkYEzaPrgTaiOD_15tHfQAAANQ"]
[Tue May 05 06:05:08.123413 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:30667] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkYFDaPrgTaiOD_15tHgAAAAMI"]
[Tue May 05 06:05:08.544233 2026] [:error] [pid 39072:tid 39115] [client 4.204.197.96:30732] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkYFPolSHl4aAnrIovgkgAAAEg"]
[Tue May 05 06:05:08.959881 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:30712] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkYFDaPrgTaiOD_15tHgQAAANA"]
[Tue May 05 06:05:09.376602 2026] [:error] [pid 39073:tid 39157] [client 4.204.197.96:30772] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "afkYFf0kT1BNjk46BkceGgAAAJc"]
[Tue May 05 06:05:09.791743 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:30773] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "afkYFTaPrgTaiOD_15tHggAAANE"]
[Tue May 05 06:05:10.204044 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:30710] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "afkYFjaPrgTaiOD_15tHgwAAAMc"]
[Tue May 05 06:05:10.616054 2026] [:error] [pid 41055:tid 41058] [client 4.204.197.96:30683] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file61.php"] [unique_id "afkYFiepFwKgA_SKOHi49AAAAQA"]
[Tue May 05 06:05:11.029487 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:30674] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "afkYF_olSHl4aAnrIovglwAAAFQ"]
[Tue May 05 06:05:11.441808 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30821] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "afkYFzaPrgTaiOD_15tHhQAAAM4"]
[Tue May 05 06:05:11.855971 2026] [:error] [pid 39071:tid 39103] [client 4.204.197.96:30747] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "afkYF4vmnRMz9gRzix1c5AAAABc"]
[Tue May 05 06:05:12.279839 2026] [:error] [pid 39072:tid 39114] [client 4.204.197.96:30743] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xx.php"] [unique_id "afkYGPolSHl4aAnrIovgmgAAAEc"]
[Tue May 05 06:05:12.694084 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:30838] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "afkYGCepFwKgA_SKOHi49gAAARE"]
[Tue May 05 06:05:13.122570 2026] [:error] [pid 39071:tid 39100] [client 4.204.197.96:30763] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "afkYGYvmnRMz9gRzix1c5QAAABQ"]
[Tue May 05 06:05:13.537909 2026] [:error] [pid 39072:tid 39121] [client 4.204.197.96:30604] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "afkYGfolSHl4aAnrIovgoAAAAE4"]
[Tue May 05 06:05:13.950215 2026] [:error] [pid 39072:tid 39107] [client 4.204.197.96:30670] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Jcrop.php"] [unique_id "afkYGfolSHl4aAnrIovgoQAAAEA"]
[Tue May 05 06:05:14.363961 2026] [:error] [pid 41055:tid 41067] [client 4.204.197.96:30835] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "afkYGiepFwKgA_SKOHi4-AAAAQk"]
[Tue May 05 06:05:14.774060 2026] [:error] [pid 39073:tid 39135] [client 4.204.197.96:30830] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "afkYGv0kT1BNjk46BkceIwAAAIE"]
[Tue May 05 06:05:15.186126 2026] [:error] [pid 39073:tid 39156] [client 4.204.197.96:30748] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "afkYG_0kT1BNjk46BkceJQAAAJY"]
[Tue May 05 06:05:15.598763 2026] [:error] [pid 39073:tid 39138] [client 4.204.197.96:30769] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new4.php"] [unique_id "afkYG_0kT1BNjk46BkceJwAAAIQ"]
[Tue May 05 06:05:16.019816 2026] [:error] [pid 39073:tid 39140] [client 4.204.197.96:30714] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "afkYHP0kT1BNjk46BkceKwAAAIY"]
[Tue May 05 06:05:16.433258 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:30668] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "afkYHDaPrgTaiOD_15tHhwAAAMw"]
[Tue May 05 06:05:16.848038 2026] [:error] [pid 39072:tid 39128] [client 4.204.197.96:30730] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "afkYHPolSHl4aAnrIovgrQAAAFU"]
[Tue May 05 06:05:17.260107 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:30662] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "afkYHf0kT1BNjk46BkceLAAAAIg"]
[Tue May 05 06:05:17.681784 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30836] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "afkYHTaPrgTaiOD_15tHigAAAMY"]
[Tue May 05 06:05:18.097782 2026] [:error] [pid 41055:tid 41072] [client 4.204.197.96:30820] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "afkYHiepFwKgA_SKOHi4-gAAAQ4"]
[Tue May 05 06:05:18.511417 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:30843] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "afkYHjaPrgTaiOD_15tHjQAAANA"]
[Tue May 05 06:05:18.923193 2026] [:error] [pid 41055:tid 41059] [client 4.204.197.96:30764] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "afkYHiepFwKgA_SKOHi4_QAAAQE"]
[Tue May 05 06:05:19.333863 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:30767] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jk.php"] [unique_id "afkYHyepFwKgA_SKOHi4_wAAAQs"]
[Tue May 05 06:05:19.745880 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:30787] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jk.php"] [unique_id "afkYHzaPrgTaiOD_15tHjgAAAME"]
[Tue May 05 06:05:20.158114 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:30658] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jk.php"] [unique_id "afkYICepFwKgA_SKOHi5AAAAAQI"]
[Tue May 05 06:05:20.574854 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30676] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jk.php"] [unique_id "afkYIDaPrgTaiOD_15tHkQAAANI"]
[Tue May 05 06:05:20.985132 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:30657] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gcqoa.php"] [unique_id "afkYIDaPrgTaiOD_15tHkgAAAMQ"]
[Tue May 05 06:05:21.395434 2026] [:error] [pid 41055:tid 41070] [client 4.204.197.96:30728] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gcqoa.php"] [unique_id "afkYISepFwKgA_SKOHi5AQAAAQw"]
[Tue May 05 06:05:21.814164 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:30741] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gcqoa.php"] [unique_id "afkYITaPrgTaiOD_15tHlgAAAMU"]
[Tue May 05 06:05:22.226985 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:30592] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gcqoa.php"] [unique_id "afkYIjaPrgTaiOD_15tHmAAAAMw"]
[Tue May 05 06:05:22.654712 2026] [:error] [pid 39178:tid 39201] [client 4.204.197.96:30685] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "afkYIjaPrgTaiOD_15tHmgAAANU"]
[Tue May 05 06:05:23.069137 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:30718] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "afkYIzaPrgTaiOD_15tHnAAAAMg"]
[Tue May 05 06:05:23.482454 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:30633] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "afkYIzaPrgTaiOD_15tHnwAAAMc"]
[Tue May 05 06:05:23.895466 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:30597] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-editor.php"] [unique_id "afkYIzaPrgTaiOD_15tHoQAAAM8"]
[Tue May 05 06:05:24.309139 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30765] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-install.php"] [unique_id "afkYJP0kT1BNjk46BkceMAAAAIw"]
[Tue May 05 06:05:24.721825 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:30611] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-install.php"] [unique_id "afkYJCepFwKgA_SKOHi5AwAAARE"]
[Tue May 05 06:05:25.134781 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30675] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-install.php"] [unique_id "afkYJTaPrgTaiOD_15tHpAAAAMY"]
[Tue May 05 06:05:25.553474 2026] [:error] [pid 39073:tid 39140] [client 4.204.197.96:30720] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin-install.php"] [unique_id "afkYJf0kT1BNjk46BkceMwAAAIY"]
[Tue May 05 06:05:25.972994 2026] [:error] [pid 39073:tid 39150] [client 4.204.197.96:30673] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profile.php"] [unique_id "afkYJf0kT1BNjk46BkceNAAAAJA"]
[Tue May 05 06:05:26.386695 2026] [:error] [pid 39072:tid 39119] [client 4.204.197.96:30659] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profile.php"] [unique_id "afkYJvolSHl4aAnrIovgsQAAAEw"]
[Tue May 05 06:05:26.798746 2026] [:error] [pid 41055:tid 41073] [client 4.204.197.96:30766] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/profile.php"] [unique_id "afkYJiepFwKgA_SKOHi5BQAAAQ8"]
[Tue May 05 06:05:27.222854 2026] [proxy_fcgi:error] [pid 41055:tid 41072] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:27.434532 2026] [proxy_fcgi:error] [pid 41055:tid 41076] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:27.647548 2026] [proxy_fcgi:error] [pid 41055:tid 41061] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:27.857808 2026] [proxy_fcgi:error] [pid 41055:tid 41065] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:28.067506 2026] [proxy_fcgi:error] [pid 41055:tid 41059] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:28.277872 2026] [proxy_fcgi:error] [pid 41055:tid 41058] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:28.487760 2026] [proxy_fcgi:error] [pid 41055:tid 41081] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:28.698841 2026] [proxy_fcgi:error] [pid 41055:tid 41060] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:28.911801 2026] [proxy_fcgi:error] [pid 41055:tid 41070] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:29.122517 2026] [proxy_fcgi:error] [pid 41055:tid 41078] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:29.333669 2026] [proxy_fcgi:error] [pid 41055:tid 41062] [client 4.204.197.96:30761] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:05:29.540798 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:30761] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afkYKSepFwKgA_SKOHi5FAAAARE"]
[Tue May 05 06:05:29.962096 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:30789] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afkYKSepFwKgA_SKOHi5FgAAARU"]
[Tue May 05 06:05:30.375564 2026] [:error] [pid 39071:tid 39089] [client 4.204.197.96:30680] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afkYKovmnRMz9gRzix1c7gAAAAk"]
[Tue May 05 06:05:30.789068 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30669] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Sanskrit.php"] [unique_id "afkYKjaPrgTaiOD_15tHsQAAANI"]
[Tue May 05 06:05:31.201672 2026] [:error] [pid 39071:tid 39103] [client 4.204.197.96:30677] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afkYK4vmnRMz9gRzix1c7wAAABc"]
[Tue May 05 06:05:31.613512 2026] [:error] [pid 41055:tid 41080] [client 4.204.197.96:30594] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afkYKyepFwKgA_SKOHi5GQAAARY"]
[Tue May 05 06:05:32.025417 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:30535] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afkYLIvmnRMz9gRzix1c8AAAAAg"]
[Tue May 05 06:05:32.436993 2026] [:error] [pid 41055:tid 41076] [client 4.204.197.96:30653] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ffile.php"] [unique_id "afkYLCepFwKgA_SKOHi5GgAAARI"]
[Tue May 05 06:05:32.851078 2026] [:error] [pid 39178:tid 39190] [client 4.204.197.96:30636] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afkYLDaPrgTaiOD_15tHtgAAAMo"]
[Tue May 05 06:05:33.270465 2026] [:error] [pid 41055:tid 41059] [client 4.204.197.96:30778] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afkYLSepFwKgA_SKOHi5GwAAAQE"]
[Tue May 05 06:05:33.692913 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:30706] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afkYLSepFwKgA_SKOHi5HAAAAQ0"]
[Tue May 05 06:05:34.109953 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30474] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/layout.php"] [unique_id "afkYLjaPrgTaiOD_15tHuAAAAM4"]
[Tue May 05 06:05:34.524804 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:30613] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afkYLiepFwKgA_SKOHi5HgAAAQI"]
[Tue May 05 06:05:34.939137 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:30664] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afkYLiepFwKgA_SKOHi5IAAAARQ"]
[Tue May 05 06:05:35.358818 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:30623] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afkYLyepFwKgA_SKOHi5IgAAARE"]
[Tue May 05 06:05:35.772671 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30691] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1index.php"] [unique_id "afkYLzaPrgTaiOD_15tHuQAAAMY"]
[Tue May 05 06:05:36.186890 2026] [:error] [pid 39071:tid 39083] [client 4.204.197.96:30598] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "afkYMIvmnRMz9gRzix1c9gAAAAM"]
[Tue May 05 06:05:36.601532 2026] [:error] [pid 39073:tid 39134] [client 4.204.197.96:30679] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "afkYMP0kT1BNjk46BkceOwAAAIA"]
[Tue May 05 06:05:37.017430 2026] [:error] [pid 39071:tid 39084] [client 4.204.197.96:30684] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "afkYMYvmnRMz9gRzix1c-AAAAAQ"]
[Tue May 05 06:05:37.430024 2026] [:error] [pid 39071:tid 39094] [client 4.204.197.96:30660] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "afkYMYvmnRMz9gRzix1c-gAAAA4"]
[Tue May 05 06:05:37.849523 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:30682] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "afkYMfolSHl4aAnrIovgtwAAAFQ"]
[Tue May 05 06:05:38.261534 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:30552] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "afkYMiepFwKgA_SKOHi5JQAAAQo"]
[Tue May 05 06:05:38.678945 2026] [:error] [pid 39071:tid 39092] [client 4.204.197.96:30609] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "afkYMovmnRMz9gRzix1c_AAAAAw"]
[Tue May 05 06:05:39.090194 2026] [:error] [pid 39073:tid 39155] [client 4.204.197.96:30775] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xozx.php"] [unique_id "afkYM_0kT1BNjk46BkceQAAAAJU"]
[Tue May 05 06:05:39.516373 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:30711] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afkYM4vmnRMz9gRzix1c_wAAAAg"]
[Tue May 05 06:05:39.927838 2026] [:error] [pid 39071:tid 39100] [client 4.204.197.96:30816] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afkYM4vmnRMz9gRzix1dAAAAABQ"]
[Tue May 05 06:05:40.344935 2026] [:error] [pid 39071:tid 39085] [client 4.204.197.96:30776] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afkYNIvmnRMz9gRzix1dAgAAAAU"]
[Tue May 05 06:05:40.758317 2026] [:error] [pid 39071:tid 39084] [client 4.204.197.96:30627] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/less.php"] [unique_id "afkYNIvmnRMz9gRzix1dAwAAAAQ"]
[Tue May 05 06:05:41.182976 2026] [:error] [pid 39071:tid 39095] [client 4.204.197.96:30696] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afkYNYvmnRMz9gRzix1dBQAAAA8"]
[Tue May 05 06:05:41.594922 2026] [:error] [pid 39071:tid 39080] [client 4.204.197.96:30694] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afkYNYvmnRMz9gRzix1dBwAAAAA"]
[Tue May 05 06:05:42.009225 2026] [:error] [pid 39073:tid 39145] [client 4.204.197.96:30700] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afkYNv0kT1BNjk46BkceQgAAAIs"]
[Tue May 05 06:05:42.422193 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:30742] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "afkYNiepFwKgA_SKOHi5JwAAARQ"]
[Tue May 05 06:05:42.838840 2026] [:error] [pid 39072:tid 39131] [client 4.204.197.96:30774] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afkYNvolSHl4aAnrIovguQAAAFg"]
[Tue May 05 06:05:43.260665 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:30698] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afkYN4vmnRMz9gRzix1dCgAAAAg"]
[Tue May 05 06:05:43.671617 2026] [:error] [pid 39071:tid 39100] [client 4.204.197.96:30709] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afkYN4vmnRMz9gRzix1dCwAAABQ"]
[Tue May 05 06:05:44.089922 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30686] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "afkYODaPrgTaiOD_15tHwQAAAMY"]
[Tue May 05 06:05:44.511255 2026] [:error] [pid 39072:tid 39117] [client 4.204.197.96:30639] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afkYOPolSHl4aAnrIovgugAAAEo"]
[Tue May 05 06:05:44.921588 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:30536] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afkYODaPrgTaiOD_15tHwwAAAME"]
[Tue May 05 06:05:45.338950 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:30777] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afkYOTaPrgTaiOD_15tHxQAAANc"]
[Tue May 05 06:05:45.750746 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:30641] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/popo.php"] [unique_id "afkYOTaPrgTaiOD_15tHxgAAANg"]
[Tue May 05 06:05:46.161273 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:30800] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "afkYOjaPrgTaiOD_15tHyAAAAMQ"]
[Tue May 05 06:05:46.573772 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:30716] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "afkYOjaPrgTaiOD_15tHygAAANA"]
[Tue May 05 06:05:46.984546 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:30782] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "afkYOjaPrgTaiOD_15tHzAAAANE"]
[Tue May 05 06:05:47.396096 2026] [:error] [pid 39071:tid 39097] [client 4.204.197.96:30780] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wander.php"] [unique_id "afkYO4vmnRMz9gRzix1dEAAAABE"]
[Tue May 05 06:05:47.807306 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:30762] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afkYOzaPrgTaiOD_15tHzwAAAMg"]
[Tue May 05 06:05:48.219578 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:30692] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afkYPDaPrgTaiOD_15tH0QAAANM"]
[Tue May 05 06:05:48.641735 2026] [:error] [pid 39072:tid 39128] [client 4.204.197.96:30704] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afkYPPolSHl4aAnrIovgvQAAAFU"]
[Tue May 05 06:05:49.053967 2026] [:error] [pid 39073:tid 39149] [client 4.204.197.96:30543] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-db.php"] [unique_id "afkYPf0kT1BNjk46BkceQwAAAI8"]
[Tue May 05 06:05:49.468118 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:30628] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afkYPTaPrgTaiOD_15tH2AAAAMw"]
[Tue May 05 06:05:49.882619 2026] [:error] [pid 39071:tid 39090] [client 4.204.197.96:30529] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afkYPYvmnRMz9gRzix1dEwAAAAo"]
[Tue May 05 06:05:50.297210 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:30586] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afkYPjaPrgTaiOD_15tH2gAAAMI"]
[Tue May 05 06:05:50.712557 2026] [:error] [pid 39073:tid 39140] [client 4.204.197.96:30564] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/domains.php"] [unique_id "afkYPv0kT1BNjk46BkceRQAAAIY"]
[Tue May 05 06:05:51.126472 2026] [:error] [pid 39071:tid 39094] [client 4.204.197.96:30612] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afkYP4vmnRMz9gRzix1dFgAAAA4"]
[Tue May 05 06:05:51.539926 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:30602] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afkYPyepFwKgA_SKOHi5MQAAARQ"]
[Tue May 05 06:05:51.950849 2026] [:error] [pid 41055:tid 41081] [client 4.204.197.96:30655] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afkYPyepFwKgA_SKOHi5MwAAARc"]
[Tue May 05 06:05:52.362658 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:30643] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "afkYQCepFwKgA_SKOHi5NgAAARE"]
[Tue May 05 06:05:52.777903 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:30717] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afkYQDaPrgTaiOD_15tH3AAAAME"]
[Tue May 05 06:05:53.198453 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:30648] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afkYQYvmnRMz9gRzix1dGAAAAAg"]
[Tue May 05 06:05:53.616390 2026] [:error] [pid 39071:tid 39101] [client 4.204.197.96:30650] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afkYQYvmnRMz9gRzix1dGgAAABU"]
[Tue May 05 06:05:54.027391 2026] [:error] [pid 39071:tid 39103] [client 4.204.197.96:30707] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ouh.php"] [unique_id "afkYQovmnRMz9gRzix1dGwAAABc"]
[Tue May 05 06:05:54.444212 2026] [:error] [pid 39071:tid 39085] [client 4.204.197.96:30644] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "afkYQovmnRMz9gRzix1dHQAAAAU"]
[Tue May 05 06:05:54.856913 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:30702] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "afkYQiepFwKgA_SKOHi5OgAAARU"]
[Tue May 05 06:05:55.268849 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:30654] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "afkYQzaPrgTaiOD_15tH3gAAANA"]
[Tue May 05 06:05:55.681363 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:30695] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "afkYQzaPrgTaiOD_15tH3wAAAMg"]
[Tue May 05 06:05:56.095528 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:30618] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sko.php"] [unique_id "afkYRDaPrgTaiOD_15tH4AAAANM"]
[Tue May 05 06:05:56.509626 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:30642] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sko.php"] [unique_id "afkYRDaPrgTaiOD_15tH4gAAAMA"]
[Tue May 05 06:05:56.931653 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:30678] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sko.php"] [unique_id "afkYRDaPrgTaiOD_15tH5AAAANY"]
[Tue May 05 06:05:57.346454 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:30688] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sko.php"] [unique_id "afkYRf0kT1BNjk46BkceSQAAAIo"]
[Tue May 05 06:05:57.761607 2026] [:error] [pid 41055:tid 41073] [client 4.204.197.96:30562] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "afkYRSepFwKgA_SKOHi5PAAAAQ8"]
[Tue May 05 06:05:58.174917 2026] [:error] [pid 39178:tid 39193] [client 4.204.197.96:30708] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "afkYRjaPrgTaiOD_15tH6wAAAM0"]
[Tue May 05 06:05:58.587948 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:30665] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "afkYRiepFwKgA_SKOHi5PQAAAQU"]
[Tue May 05 06:05:59.005895 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:30490] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "afkYRyepFwKgA_SKOHi5PgAAAQ0"]
[Tue May 05 06:05:59.417712 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:30483] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afkYRyepFwKgA_SKOHi5QAAAARM"]
[Tue May 05 06:05:59.832379 2026] [:error] [pid 39071:tid 39100] [client 4.204.197.96:30755] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afkYR4vmnRMz9gRzix1dIQAAABQ"]
[Tue May 05 06:06:00.245011 2026] [:error] [pid 39073:tid 39141] [client 4.204.197.96:30601] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afkYSP0kT1BNjk46BkceSwAAAIc"]
[Tue May 05 06:06:00.657182 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30468] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-cliner.php"] [unique_id "afkYSDaPrgTaiOD_15tH8QAAANI"]
[Tue May 05 06:06:01.068870 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30616] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afkYSTaPrgTaiOD_15tH8gAAAM4"]
[Tue May 05 06:06:01.479676 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:30531] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afkYSSepFwKgA_SKOHi5RgAAAQo"]
[Tue May 05 06:06:01.899698 2026] [:error] [pid 41055:tid 41076] [client 4.204.197.96:30620] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afkYSSepFwKgA_SKOHi5SgAAARI"]
[Tue May 05 06:06:02.313905 2026] [:error] [pid 41055:tid 41065] [client 4.204.197.96:30599] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-sx10.php"] [unique_id "afkYSiepFwKgA_SKOHi5TAAAAQc"]
[Tue May 05 06:06:02.725475 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:30645] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afkYSiepFwKgA_SKOHi5TwAAAQ0"]
[Tue May 05 06:06:03.134905 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:30634] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afkYS_0kT1BNjk46BkceTQAAAIU"]
[Tue May 05 06:06:03.550728 2026] [:error] [pid 41055:tid 41074] [client 4.204.197.96:30794] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afkYSyepFwKgA_SKOHi5UgAAARA"]
[Tue May 05 06:06:03.961206 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30622] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/packed.php"] [unique_id "afkYSzaPrgTaiOD_15tH9QAAANI"]
[Tue May 05 06:06:04.373299 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30630] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afkYTDaPrgTaiOD_15tH9wAAAM4"]
[Tue May 05 06:06:04.783434 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:30617] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afkYTDaPrgTaiOD_15tH-AAAANg"]
[Tue May 05 06:06:05.200719 2026] [:error] [pid 39178:tid 39189] [client 4.204.197.96:30563] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afkYTTaPrgTaiOD_15tH-wAAAMk"]
[Tue May 05 06:06:05.613285 2026] [:error] [pid 39178:tid 39193] [client 4.204.197.96:30715] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "afkYTTaPrgTaiOD_15tH_gAAAM0"]
[Tue May 05 06:06:06.024346 2026] [:error] [pid 39071:tid 39098] [client 4.204.197.96:30624] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afkYTovmnRMz9gRzix1dJAAAABI"]
[Tue May 05 06:06:06.433636 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:30749] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afkYTjaPrgTaiOD_15tIAQAAAMQ"]
[Tue May 05 06:06:06.851548 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:30672] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afkYTjaPrgTaiOD_15tIAgAAAMw"]
[Tue May 05 06:06:07.263786 2026] [:error] [pid 39073:tid 39157] [client 4.204.197.96:30699] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cc13.php"] [unique_id "afkYT_0kT1BNjk46BkceUQAAAJc"]
[Tue May 05 06:06:07.678107 2026] [:error] [pid 39072:tid 39117] [client 4.204.197.96:30556] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fileas.php"] [unique_id "afkYT_olSHl4aAnrIovgyQAAAEo"]
[Tue May 05 06:06:08.090549 2026] [:error] [pid 39071:tid 39095] [client 4.204.197.96:30614] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fileas.php"] [unique_id "afkYUIvmnRMz9gRzix1dJgAAAA8"]
[Tue May 05 06:06:08.502095 2026] [:error] [pid 39071:tid 39090] [client 4.204.197.96:30703] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fileas.php"] [unique_id "afkYUIvmnRMz9gRzix1dKAAAAAo"]
[Tue May 05 06:06:08.912221 2026] [:error] [pid 39072:tid 39119] [client 4.204.197.96:30542] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fileas.php"] [unique_id "afkYUPolSHl4aAnrIovgygAAAEw"]
[Tue May 05 06:06:09.329879 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:30595] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afkYUf0kT1BNjk46BkceVAAAAIg"]
[Tue May 05 06:06:09.742428 2026] [:error] [pid 39072:tid 39123] [client 4.204.197.96:30637] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afkYUfolSHl4aAnrIovg0AAAAFA"]
[Tue May 05 06:06:10.156468 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:30635] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afkYUjaPrgTaiOD_15tICgAAANc"]
[Tue May 05 06:06:10.571748 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:30640] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "afkYUjaPrgTaiOD_15tIDAAAANM"]
[Tue May 05 06:06:10.986574 2026] [:error] [pid 39178:tid 39190] [client 4.204.197.96:30532] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afkYUjaPrgTaiOD_15tIDgAAAMo"]
[Tue May 05 06:06:11.399978 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30652] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afkYUzaPrgTaiOD_15tIEAAAANI"]
[Tue May 05 06:06:11.811114 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:30546] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afkYU_0kT1BNjk46BkceVwAAAIo"]
[Tue May 05 06:06:12.224190 2026] [:error] [pid 39071:tid 39080] [client 4.204.197.96:30619] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/v3.php"] [unique_id "afkYVIvmnRMz9gRzix1dLAAAAAA"]
[Tue May 05 06:06:12.647908 2026] [:error] [pid 39072:tid 39109] [client 4.204.197.96:30547] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afkYVPolSHl4aAnrIovg1gAAAEI"]
[Tue May 05 06:06:13.059897 2026] [:error] [pid 39072:tid 39113] [client 4.204.197.96:30697] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afkYVfolSHl4aAnrIovg1wAAAEY"]
[Tue May 05 06:06:13.471807 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:30584] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afkYVf0kT1BNjk46BkceWgAAAIU"]
[Tue May 05 06:06:13.887852 2026] [:error] [pid 39178:tid 39189] [client 4.204.197.96:30479] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/06.php"] [unique_id "afkYVTaPrgTaiOD_15tIFQAAAMk"]
[Tue May 05 06:06:14.301008 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:30607] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afkYVjaPrgTaiOD_15tIGAAAANc"]
[Tue May 05 06:06:14.712480 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:30719] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afkYVjaPrgTaiOD_15tIGQAAAM8"]
[Tue May 05 06:06:15.125453 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:30638] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afkYVyepFwKgA_SKOHi5aAAAAQI"]
[Tue May 05 06:06:15.537553 2026] [:error] [pid 39073:tid 39149] [client 4.204.197.96:30558] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wkdec.php"] [unique_id "afkYV_0kT1BNjk46BkceXgAAAI8"]
[Tue May 05 06:06:15.948726 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30578] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afkYV_0kT1BNjk46BkceXwAAAIw"]
[Tue May 05 06:06:16.364765 2026] [:error] [pid 39071:tid 39081] [client 4.204.197.96:30689] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afkYWIvmnRMz9gRzix1dLwAAAAE"]
[Tue May 05 06:06:16.777003 2026] [:error] [pid 39072:tid 39125] [client 4.204.197.96:30548] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afkYWPolSHl4aAnrIovg5QAAAFI"]
[Tue May 05 06:06:17.188655 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:30545] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "afkYWf0kT1BNjk46BkceYgAAAJg"]
[Tue May 05 06:06:17.600283 2026] [:error] [pid 39072:tid 39111] [client 4.204.197.96:30615] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afkYWfolSHl4aAnrIovg6AAAAEQ"]
[Tue May 05 06:06:18.018126 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:30572] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afkYWjaPrgTaiOD_15tIHwAAAM4"]
[Tue May 05 06:06:18.453591 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:30631] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afkYWjaPrgTaiOD_15tIIQAAAMg"]
[Tue May 05 06:06:18.867007 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:30574] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sbhu.php"] [unique_id "afkYWjaPrgTaiOD_15tIIwAAANg"]
[Tue May 05 06:06:19.280752 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30557] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afkYWzaPrgTaiOD_15tIJAAAAMY"]
[Tue May 05 06:06:19.704204 2026] [:error] [pid 39072:tid 39107] [client 4.204.197.96:30561] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afkYW_olSHl4aAnrIovg6wAAAEA"]
[Tue May 05 06:06:20.115912 2026] [:error] [pid 41055:tid 41061] [client 4.204.197.96:30807] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afkYXCepFwKgA_SKOHi5agAAAQM"]
[Tue May 05 06:06:20.528007 2026] [:error] [pid 41055:tid 41067] [client 4.204.197.96:30559] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xy.php"] [unique_id "afkYXCepFwKgA_SKOHi5awAAAQk"]
[Tue May 05 06:06:20.941208 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:30690] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afkYXPolSHl4aAnrIovg7QAAAFQ"]
[Tue May 05 06:06:21.351682 2026] [:error] [pid 39071:tid 39086] [client 4.204.197.96:30534] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afkYXYvmnRMz9gRzix1dNQAAAAY"]
[Tue May 05 06:06:21.763397 2026] [:error] [pid 39073:tid 39135] [client 4.204.197.96:30553] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afkYXf0kT1BNjk46BkceZAAAAIE"]
[Tue May 05 06:06:22.175677 2026] [:error] [pid 39073:tid 39157] [client 4.204.197.96:30589] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/opts.php"] [unique_id "afkYXv0kT1BNjk46BkceZgAAAJc"]
[Tue May 05 06:06:22.589660 2026] [:error] [pid 39072:tid 39114] [client 4.204.197.96:30646] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "afkYXvolSHl4aAnrIovg7wAAAEc"]
[Tue May 05 06:06:23.005814 2026] [:error] [pid 41055:tid 41062] [client 4.204.197.96:30605] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "afkYXyepFwKgA_SKOHi5bwAAAQQ"]
[Tue May 05 06:06:23.418143 2026] [:error] [pid 41055:tid 41059] [client 4.204.197.96:30533] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "afkYXyepFwKgA_SKOHi5cQAAAQE"]
[Tue May 05 06:06:23.857678 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:30537] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "afkYXyepFwKgA_SKOHi5cgAAARQ"]
[Tue May 05 06:06:24.269079 2026] [:error] [pid 41055:tid 41082] [client 4.204.197.96:30596] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afkYYCepFwKgA_SKOHi5dAAAARg"]
[Tue May 05 06:06:24.680777 2026] [:error] [pid 41055:tid 41072] [client 4.204.197.96:30551] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afkYYCepFwKgA_SKOHi5dgAAAQ4"]
[Tue May 05 06:06:25.097763 2026] [:error] [pid 41055:tid 41074] [client 4.204.197.96:30568] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afkYYSepFwKgA_SKOHi5eQAAARA"]
[Tue May 05 06:06:25.510814 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:30541] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hook.php"] [unique_id "afkYYSepFwKgA_SKOHi5ewAAAQI"]
[Tue May 05 06:06:25.926051 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:30580] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/racs3.php"] [unique_id "afkYYSepFwKgA_SKOHi5fQAAARU"]
[Tue May 05 06:06:26.337343 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30539] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/racs3.php"] [unique_id "afkYYv0kT1BNjk46BkceaQAAAIw"]
[Tue May 05 06:06:26.757296 2026] [:error] [pid 39072:tid 39117] [client 4.204.197.96:30576] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/racs3.php"] [unique_id "afkYYvolSHl4aAnrIovg8gAAAEo"]
[Tue May 05 06:06:27.168983 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:30632] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/racs3.php"] [unique_id "afkYY_0kT1BNjk46BkcebAAAAII"]
[Tue May 05 06:06:27.580623 2026] [:error] [pid 39071:tid 39085] [client 4.204.197.96:30554] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zzkhe.php"] [unique_id "afkYY4vmnRMz9gRzix1dNwAAAAU"]
[Tue May 05 06:06:28.036896 2026] [:error] [pid 39073:tid 39155] [client 4.204.197.96:30582] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zzkhe.php"] [unique_id "afkYZP0kT1BNjk46BkcebwAAAJU"]
[Tue May 05 06:06:28.801251 2026] [:error] [pid 39071:tid 39103] [client 4.204.197.96:30482] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zzkhe.php"] [unique_id "afkYZIvmnRMz9gRzix1dOQAAABc"]
[Tue May 05 06:06:29.481878 2026] [proxy_fcgi:error] [pid 39071:tid 39081] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:29.692324 2026] [proxy_fcgi:error] [pid 39071:tid 39083] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:29.902753 2026] [proxy_fcgi:error] [pid 39071:tid 39082] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:30.127621 2026] [proxy_fcgi:error] [pid 39071:tid 39094] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:30.354091 2026] [proxy_fcgi:error] [pid 39071:tid 39090] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:30.579851 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:30.792372 2026] [proxy_fcgi:error] [pid 39071:tid 39092] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:31.002230 2026] [proxy_fcgi:error] [pid 39071:tid 39095] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:31.212375 2026] [proxy_fcgi:error] [pid 39071:tid 39084] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:31.436248 2026] [proxy_fcgi:error] [pid 39071:tid 39086] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:31.647873 2026] [proxy_fcgi:error] [pid 39071:tid 39089] [client 4.204.197.96:30651] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:06:31.854940 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:30651] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "afkYZ4vmnRMz9gRzix1dSAAAAAg"]
[Tue May 05 06:06:32.410993 2026] [:error] [pid 39073:tid 39153] [client 4.204.197.96:30497] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "afkYaP0kT1BNjk46BkcecgAAAJM"]
[Tue May 05 06:06:32.827869 2026] [:error] [pid 39073:tid 39156] [client 4.204.197.96:30464] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "afkYaP0kT1BNjk46BkcecwAAAJY"]
[Tue May 05 06:06:33.238515 2026] [:error] [pid 39073:tid 39138] [client 4.204.197.96:30565] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/myfile.php"] [unique_id "afkYaf0kT1BNjk46BkcedQAAAIQ"]
[Tue May 05 06:06:33.652293 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:30705] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afkYaSepFwKgA_SKOHi5fwAAARU"]
[Tue May 05 06:06:34.070402 2026] [:error] [pid 39072:tid 39122] [client 4.204.197.96:30600] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afkYavolSHl4aAnrIovg_QAAAE8"]
[Tue May 05 06:06:34.482190 2026] [:error] [pid 41055:tid 41061] [client 4.204.197.96:30504] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afkYaiepFwKgA_SKOHi5gQAAAQM"]
[Tue May 05 06:06:34.893473 2026] [:error] [pid 39072:tid 39117] [client 4.204.197.96:30571] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/system.php"] [unique_id "afkYavolSHl4aAnrIovg_gAAAEo"]
[Tue May 05 06:06:35.305682 2026] [:error] [pid 39072:tid 39113] [client 4.204.197.96:30517] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasfu.php"] [unique_id "afkYa_olSHl4aAnrIovg_wAAAEY"]
[Tue May 05 06:06:35.720884 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:30538] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasfu.php"] [unique_id "afkYayepFwKgA_SKOHi5ggAAARE"]
[Tue May 05 06:06:36.136615 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:30579] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasfu.php"] [unique_id "afkYbP0kT1BNjk46BkceegAAAIU"]
[Tue May 05 06:06:36.548718 2026] [:error] [pid 39072:tid 39109] [client 4.204.197.96:30566] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yasfu.php"] [unique_id "afkYbPolSHl4aAnrIovhBQAAAEI"]
[Tue May 05 06:06:36.967127 2026] [:error] [pid 39071:tid 39090] [client 4.204.197.96:30626] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afkYbIvmnRMz9gRzix1dUAAAAAo"]
[Tue May 05 06:06:37.379320 2026] [:error] [pid 39072:tid 39119] [client 4.204.197.96:30530] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afkYbfolSHl4aAnrIovhBgAAAEw"]
[Tue May 05 06:06:37.794089 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30407] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afkYbf0kT1BNjk46BkceewAAAIw"]
[Tue May 05 06:06:38.211040 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:30494] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "afkYbvolSHl4aAnrIovhBwAAAFM"]
[Tue May 05 06:06:38.629655 2026] [:error] [pid 39072:tid 39112] [client 4.204.197.96:30606] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afkYbvolSHl4aAnrIovhCAAAAEU"]
[Tue May 05 06:06:39.042829 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:30471] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afkYbzaPrgTaiOD_15tIMwAAANE"]
[Tue May 05 06:06:39.456600 2026] [:error] [pid 39072:tid 39124] [client 4.204.197.96:30570] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afkYb_olSHl4aAnrIovhCQAAAFE"]
[Tue May 05 06:06:39.868659 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:30499] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-update.php"] [unique_id "afkYb_0kT1BNjk46BkcefAAAAII"]
[Tue May 05 06:06:40.281142 2026] [:error] [pid 39072:tid 39110] [client 4.204.197.96:30591] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afkYcPolSHl4aAnrIovhDAAAAEM"]
[Tue May 05 06:06:40.691587 2026] [:error] [pid 39073:tid 39138] [client 4.204.197.96:30588] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afkYcP0kT1BNjk46BkcefwAAAIQ"]
[Tue May 05 06:06:41.109601 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:30513] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afkYcf0kT1BNjk46BkcegAAAAJg"]
[Tue May 05 06:06:41.521510 2026] [:error] [pid 39072:tid 39125] [client 4.204.197.96:30486] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ok.php"] [unique_id "afkYcfolSHl4aAnrIovhDwAAAFI"]
[Tue May 05 06:06:41.938776 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:30768] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lala.php"] [unique_id "afkYcTaPrgTaiOD_15tINQAAANA"]
[Tue May 05 06:06:42.351319 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:30516] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lala.php"] [unique_id "afkYcjaPrgTaiOD_15tINwAAANY"]
[Tue May 05 06:06:42.763628 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:30603] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lala.php"] [unique_id "afkYciepFwKgA_SKOHi5iQAAAQ0"]
[Tue May 05 06:06:43.179014 2026] [:error] [pid 39178:tid 39183] [client 4.204.197.96:30417] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lala.php"] [unique_id "afkYczaPrgTaiOD_15tIOwAAAMM"]
[Tue May 05 06:06:43.594998 2026] [:error] [pid 41055:tid 41074] [client 4.204.197.96:30465] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afkYcyepFwKgA_SKOHi5jAAAARA"]
[Tue May 05 06:06:44.029781 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:30610] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afkYdPolSHl4aAnrIovhEwAAAFM"]
[Tue May 05 06:06:44.447430 2026] [:error] [pid 39178:tid 39191] [client 4.204.197.96:30484] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afkYdDaPrgTaiOD_15tIPQAAAMs"]
[Tue May 05 06:06:44.861182 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:30492] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/shell20211028.php"] [unique_id "afkYdDaPrgTaiOD_15tIPwAAAMg"]
[Tue May 05 06:06:45.278892 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:30621] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afkYdTaPrgTaiOD_15tIQgAAANM"]
[Tue May 05 06:06:45.691200 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:30618] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afkYdTaPrgTaiOD_15tIRQAAANY"]
[Tue May 05 06:06:46.104081 2026] [:error] [pid 41055:tid 41070] [client 4.204.197.96:30528] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afkYdiepFwKgA_SKOHi5kwAAAQw"]
[Tue May 05 06:06:46.515077 2026] [:error] [pid 39178:tid 39200] [client 4.204.197.96:30520] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/clirp.php"] [unique_id "afkYdjaPrgTaiOD_15tIRwAAANQ"]
[Tue May 05 06:06:46.927419 2026] [:error] [pid 39178:tid 39191] [client 4.204.197.96:30526] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rendi59.php"] [unique_id "afkYdjaPrgTaiOD_15tISAAAAMs"]
[Tue May 05 06:06:47.339554 2026] [:error] [pid 39072:tid 39123] [client 4.204.197.96:30523] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rendi59.php"] [unique_id "afkYd_olSHl4aAnrIovhFgAAAFA"]
[Tue May 05 06:06:47.750033 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:30426] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rendi59.php"] [unique_id "afkYd_0kT1BNjk46BkceigAAAJg"]
[Tue May 05 06:06:48.161674 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:30522] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rendi59.php"] [unique_id "afkYeCepFwKgA_SKOHi5lgAAARQ"]
[Tue May 05 06:06:48.574024 2026] [:error] [pid 39071:tid 39086] [client 4.204.197.96:30647] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "afkYeIvmnRMz9gRzix1dVgAAAAY"]
[Tue May 05 06:06:48.992365 2026] [:error] [pid 39071:tid 39095] [client 4.204.197.96:30701] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "afkYeIvmnRMz9gRzix1dVwAAAA8"]
[Tue May 05 06:06:49.411125 2026] [:error] [pid 39072:tid 39109] [client 4.204.197.96:30503] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "afkYefolSHl4aAnrIovhHAAAAEI"]
[Tue May 05 06:06:49.824621 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:30519] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gptsh.php"] [unique_id "afkYefolSHl4aAnrIovhHQAAAFM"]
[Tue May 05 06:06:50.241689 2026] [:error] [pid 41055:tid 41073] [client 4.204.197.96:30475] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afkYeiepFwKgA_SKOHi5mAAAAQ8"]
[Tue May 05 06:06:50.654415 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:30467] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afkYev0kT1BNjk46BkcemAAAAJg"]
[Tue May 05 06:06:51.067181 2026] [:error] [pid 39072:tid 39124] [client 4.204.197.96:30473] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afkYe_olSHl4aAnrIovhIgAAAFE"]
[Tue May 05 06:06:51.485607 2026] [:error] [pid 39072:tid 39123] [client 4.204.197.96:30620] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tox.php"] [unique_id "afkYe_olSHl4aAnrIovhJAAAAFA"]
[Tue May 05 06:06:51.897735 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:30560] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file9.php"] [unique_id "afkYe_0kT1BNjk46BkcemgAAAIo"]
[Tue May 05 06:06:52.317489 2026] [:error] [pid 39072:tid 39108] [client 4.204.197.96:30469] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file9.php"] [unique_id "afkYfPolSHl4aAnrIovhJwAAAEE"]
[Tue May 05 06:06:52.731352 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:30485] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file9.php"] [unique_id "afkYfPolSHl4aAnrIovhLAAAAFM"]
[Tue May 05 06:06:53.145930 2026] [:error] [pid 39073:tid 39151] [client 4.204.197.96:30581] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file9.php"] [unique_id "afkYff0kT1BNjk46BkcenAAAAJE"]
[Tue May 05 06:06:53.560811 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:30549] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afkYff0kT1BNjk46BkcenwAAAIU"]
[Tue May 05 06:06:53.978963 2026] [:error] [pid 41055:tid 41061] [client 4.204.197.96:30567] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afkYfSepFwKgA_SKOHi5mgAAAQM"]
[Tue May 05 06:06:54.392675 2026] [:error] [pid 41055:tid 41070] [client 4.204.197.96:30510] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afkYfiepFwKgA_SKOHi5mwAAAQw"]
[Tue May 05 06:06:54.806417 2026] [:error] [pid 39072:tid 39115] [client 4.204.197.96:30496] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccu.php"] [unique_id "afkYfvolSHl4aAnrIovhLQAAAEg"]
[Tue May 05 06:06:55.218818 2026] [:error] [pid 39178:tid 39190] [client 4.204.197.96:30550] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-x7.php"] [unique_id "afkYfzaPrgTaiOD_15tIVAAAAMo"]
[Tue May 05 06:06:55.631105 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:30649] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-x7.php"] [unique_id "afkYf4vmnRMz9gRzix1dWQAAAAg"]
[Tue May 05 06:06:56.041960 2026] [:error] [pid 41055:tid 41081] [client 4.204.197.96:30585] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-x7.php"] [unique_id "afkYgCepFwKgA_SKOHi5nwAAARc"]
[Tue May 05 06:06:56.460029 2026] [:error] [pid 39071:tid 39091] [client 4.204.197.96:30577] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-x7.php"] [unique_id "afkYgIvmnRMz9gRzix1dXQAAAAs"]
[Tue May 05 06:06:56.876379 2026] [:error] [pid 41055:tid 41082] [client 4.204.197.96:30525] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afkYgCepFwKgA_SKOHi5qwAAARg"]
[Tue May 05 06:06:57.288407 2026] [:error] [pid 39073:tid 39151] [client 4.204.197.96:30498] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afkYgf0kT1BNjk46BkcepgAAAJE"]
[Tue May 05 06:06:57.700995 2026] [:error] [pid 39071:tid 39082] [client 4.204.197.96:30488] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afkYgYvmnRMz9gRzix1dYgAAAAI"]
[Tue May 05 06:06:58.125643 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:30337] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-aaa.php"] [unique_id "afkYgjaPrgTaiOD_15tIVQAAANg"]
[Tue May 05 06:06:58.538884 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:30444] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkYgiepFwKgA_SKOHi5rgAAAQI"]
[Tue May 05 06:06:58.990112 2026] [:error] [pid 41055:tid 41061] [client 4.204.197.96:30472] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkYgiepFwKgA_SKOHi5rwAAAQM"]
[Tue May 05 06:06:59.401927 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:30555] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkYgyepFwKgA_SKOHi5sAAAARM"]
[Tue May 05 06:06:59.813583 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:30435] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkYgyepFwKgA_SKOHi5sgAAAQs"]
[Tue May 05 06:07:00.274836 2026] [:error] [pid 41055:tid 41076] [client 4.204.197.96:30544] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afkYhCepFwKgA_SKOHi5tQAAARI"]
[Tue May 05 06:07:00.686654 2026] [:error] [pid 41055:tid 41064] [client 4.204.197.96:30590] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afkYhCepFwKgA_SKOHi5uAAAAQY"]
[Tue May 05 06:07:01.099531 2026] [:error] [pid 41055:tid 41066] [client 4.204.197.96:30573] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afkYhSepFwKgA_SKOHi5uQAAAQg"]
[Tue May 05 06:07:01.540889 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30404] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file5.php"] [unique_id "afkYhTaPrgTaiOD_15tIVwAAANI"]
[Tue May 05 06:07:01.969151 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:30348] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afkYhTaPrgTaiOD_15tIWAAAANA"]
[Tue May 05 06:07:02.406590 2026] [:error] [pid 39178:tid 39200] [client 4.204.197.96:30583] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afkYhjaPrgTaiOD_15tIWQAAANQ"]
[Tue May 05 06:07:02.822764 2026] [:error] [pid 39071:tid 39089] [client 4.204.197.96:30629] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afkYhovmnRMz9gRzix1dZQAAAAk"]
[Tue May 05 06:07:03.234173 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:30540] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xrm.php"] [unique_id "afkYhzaPrgTaiOD_15tIXgAAAME"]
[Tue May 05 06:07:03.654739 2026] [:error] [pid 41055:tid 41067] [client 4.204.197.96:30515] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afkYhyepFwKgA_SKOHi5uwAAAQk"]
[Tue May 05 06:07:04.066357 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:30512] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afkYiDaPrgTaiOD_15tIYAAAAMQ"]
[Tue May 05 06:07:04.482351 2026] [:error] [pid 39178:tid 39189] [client 4.204.197.96:30437] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afkYiDaPrgTaiOD_15tIYgAAAMk"]
[Tue May 05 06:07:04.894447 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:30558] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-asudo.php"] [unique_id "afkYiDaPrgTaiOD_15tIZQAAAMI"]
[Tue May 05 06:07:05.307043 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:30500] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afkYiTaPrgTaiOD_15tIZwAAAM8"]
[Tue May 05 06:07:05.721868 2026] [:error] [pid 39072:tid 39118] [client 4.204.197.96:30487] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afkYifolSHl4aAnrIovhMQAAAEs"]
[Tue May 05 06:07:06.133893 2026] [:error] [pid 39071:tid 39101] [client 4.204.197.96:30441] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afkYiovmnRMz9gRzix1dZgAAABU"]
[Tue May 05 06:07:06.549695 2026] [:error] [pid 41055:tid 41072] [client 4.204.197.96:30608] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file3.php"] [unique_id "afkYiiepFwKgA_SKOHi5vgAAAQ4"]
[Tue May 05 06:07:06.967453 2026] [:error] [pid 41055:tid 41082] [client 4.204.197.96:30502] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afkYiiepFwKgA_SKOHi5vwAAARg"]
[Tue May 05 06:07:07.382423 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:30428] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afkYizaPrgTaiOD_15tIbwAAAMQ"]
[Tue May 05 06:07:07.794409 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:30421] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afkYiyepFwKgA_SKOHi5wgAAARM"]
[Tue May 05 06:07:08.214074 2026] [:error] [pid 39072:tid 39119] [client 4.204.197.96:30455] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/G-In.php"] [unique_id "afkYjPolSHl4aAnrIovhNAAAAEw"]
[Tue May 05 06:07:08.626201 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30424] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afkYjP0kT1BNjk46BkceqwAAAIw"]
[Tue May 05 06:07:09.041226 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:30587] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afkYjTaPrgTaiOD_15tIdAAAAM8"]
[Tue May 05 06:07:09.457272 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:30448] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afkYjf0kT1BNjk46BkcerAAAAII"]
[Tue May 05 06:07:09.868640 2026] [:error] [pid 39073:tid 39153] [client 4.204.197.96:30511] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-gr.php"] [unique_id "afkYjf0kT1BNjk46BkcerQAAAJM"]
[Tue May 05 06:07:10.286660 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:30429] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afkYjv0kT1BNjk46BkcerwAAAIg"]
[Tue May 05 06:07:10.699995 2026] [:error] [pid 39071:tid 39087] [client 4.204.197.96:30625] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afkYjovmnRMz9gRzix1daQAAAAc"]
[Tue May 05 06:07:11.118007 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:30373] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afkYj_0kT1BNjk46BkcesgAAAIU"]
[Tue May 05 06:07:11.538147 2026] [:error] [pid 39073:tid 39134] [client 4.204.197.96:30433] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mans.php"] [unique_id "afkYj_0kT1BNjk46BkceswAAAIA"]
[Tue May 05 06:07:11.950392 2026] [:error] [pid 39072:tid 39107] [client 4.204.197.96:30826] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "afkYj_olSHl4aAnrIovhNgAAAEA"]
[Tue May 05 06:07:12.362882 2026] [:error] [pid 39073:tid 39157] [client 4.204.197.96:30470] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "afkYkP0kT1BNjk46BkcetAAAAJc"]
[Tue May 05 06:07:12.775657 2026] [:error] [pid 39073:tid 39154] [client 4.204.197.96:30466] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "afkYkP0kT1BNjk46BkcetQAAAJQ"]
[Tue May 05 06:07:13.188285 2026] [:error] [pid 39073:tid 39156] [client 4.204.197.96:30518] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-2019.php"] [unique_id "afkYkf0kT1BNjk46BkcetgAAAJY"]
[Tue May 05 06:07:13.599299 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:30478] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afkYkf0kT1BNjk46BkcetwAAAIo"]
[Tue May 05 06:07:14.016048 2026] [:error] [pid 39072:tid 39110] [client 4.204.197.96:30449] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afkYkvolSHl4aAnrIovhOQAAAEM"]
[Tue May 05 06:07:14.430821 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:30442] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afkYkiepFwKgA_SKOHi5yAAAAQI"]
[Tue May 05 06:07:14.848842 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:30477] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "afkYkiepFwKgA_SKOHi5yQAAAQs"]
[Tue May 05 06:07:15.260294 2026] [:error] [pid 39071:tid 39086] [client 4.204.197.96:30575] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afkYk4vmnRMz9gRzix1dbAAAAAY"]
[Tue May 05 06:07:15.673989 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:30402] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afkYk_0kT1BNjk46BkceugAAAIw"]
[Tue May 05 06:07:16.091485 2026] [:error] [pid 39072:tid 39113] [client 4.204.197.96:30450] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afkYlPolSHl4aAnrIovhPQAAAEY"]
[Tue May 05 06:07:16.506057 2026] [:error] [pid 39071:tid 39089] [client 4.204.197.96:30379] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-acc.php"] [unique_id "afkYlIvmnRMz9gRzix1dbgAAAAk"]
[Tue May 05 06:07:16.928972 2026] [:error] [pid 39178:tid 39190] [client 4.204.197.96:30613] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afkYlDaPrgTaiOD_15tIegAAAMo"]
[Tue May 05 06:07:17.342381 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:30362] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afkYlTaPrgTaiOD_15tIfQAAANE"]
[Tue May 05 06:07:17.755127 2026] [:error] [pid 39073:tid 39137] [client 4.204.197.96:30495] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afkYlf0kT1BNjk46BkcevQAAAIM"]
[Tue May 05 06:07:18.166904 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:30521] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-trackback.php"] [unique_id "afkYlv0kT1BNjk46BkcevwAAAIU"]
[Tue May 05 06:07:18.582096 2026] [:error] [pid 39073:tid 39145] [client 4.204.197.96:30423] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afkYlv0kT1BNjk46BkcewAAAAIs"]
[Tue May 05 06:07:18.996335 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:30507] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afkYliepFwKgA_SKOHi50AAAAQU"]
[Tue May 05 06:07:19.407848 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30493] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afkYlzaPrgTaiOD_15tIgAAAAMY"]
[Tue May 05 06:07:19.820639 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:30438] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-xx.php"] [unique_id "afkYlzaPrgTaiOD_15tIgQAAANY"]
[Tue May 05 06:07:20.232724 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:30409] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afkYmP0kT1BNjk46BkcewQAAAIo"]
[Tue May 05 06:07:20.642348 2026] [:error] [pid 41055:tid 41072] [client 4.204.197.96:30336] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afkYmCepFwKgA_SKOHi50gAAAQ4"]
[Tue May 05 06:07:21.059497 2026] [:error] [pid 41055:tid 41065] [client 4.204.197.96:30414] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afkYmSepFwKgA_SKOHi50wAAAQc"]
[Tue May 05 06:07:21.471590 2026] [:error] [pid 39071:tid 39085] [client 4.204.197.96:30346] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/555.php"] [unique_id "afkYmYvmnRMz9gRzix1dcQAAAAU"]
[Tue May 05 06:07:21.885012 2026] [:error] [pid 39073:tid 39148] [client 4.204.197.96:30415] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afkYmf0kT1BNjk46BkcexQAAAI4"]
[Tue May 05 06:07:22.297923 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:30400] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afkYmiepFwKgA_SKOHi51gAAARQ"]
[Tue May 05 06:07:22.710879 2026] [:error] [pid 39178:tid 39201] [client 4.204.197.96:30422] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afkYmjaPrgTaiOD_15tIhQAAANU"]
[Tue May 05 06:07:23.121196 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:30345] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-conflg.php"] [unique_id "afkYmzaPrgTaiOD_15tIhgAAAMI"]
[Tue May 05 06:07:23.534444 2026] [:error] [pid 41055:tid 41062] [client 4.204.197.96:30394] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afkYmyepFwKgA_SKOHi52gAAAQQ"]
[Tue May 05 06:07:23.951660 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:30569] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afkYmyepFwKgA_SKOHi53QAAAQ0"]
[Tue May 05 06:07:24.364579 2026] [:error] [pid 39178:tid 39189] [client 4.204.197.96:30508] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afkYnDaPrgTaiOD_15tIiQAAAMk"]
[Tue May 05 06:07:24.776785 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:30405] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-Blogs.php"] [unique_id "afkYnP0kT1BNjk46BkcexwAAAIg"]
[Tue May 05 06:07:25.230550 2026] [:error] [pid 39073:tid 39152] [client 4.204.197.96:30440] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afkYnf0kT1BNjk46BkceyAAAAJI"]
[Tue May 05 06:07:25.653303 2026] [:error] [pid 39073:tid 39145] [client 4.204.197.96:30406] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afkYnf0kT1BNjk46BkceyQAAAIs"]
[Tue May 05 06:07:26.063287 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:30434] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afkYnjaPrgTaiOD_15tIigAAAMY"]
[Tue May 05 06:07:26.475692 2026] [:error] [pid 39178:tid 39200] [client 4.204.197.96:30416] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp_ok.php"] [unique_id "afkYnjaPrgTaiOD_15tIiwAAANQ"]
[Tue May 05 06:07:26.891973 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:30524] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afkYnjaPrgTaiOD_15tIjAAAANI"]
[Tue May 05 06:07:27.314408 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:30295] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afkYnyepFwKgA_SKOHi55AAAARU"]
[Tue May 05 06:07:27.732533 2026] [:error] [pid 39071:tid 39090] [client 4.204.197.96:30376] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afkYn4vmnRMz9gRzix1ddAAAAAo"]
[Tue May 05 06:07:28.143563 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:30355] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afkYoCepFwKgA_SKOHi55gAAAQU"]
[Tue May 05 06:07:28.554663 2026] [:error] [pid 39073:tid 39147] [client 4.204.197.96:30430] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afkYoP0kT1BNjk46BkcezAAAAI0"]
[Tue May 05 06:07:28.971372 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:30480] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afkYoDaPrgTaiOD_15tIkgAAAMI"]
[Tue May 05 06:07:29.384962 2026] [:error] [pid 39073:tid 39156] [client 4.204.197.96:30460] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afkYof0kT1BNjk46BkcezgAAAJY"]
[Tue May 05 06:07:29.806218 2026] [:error] [pid 39178:tid 39193] [client 4.204.197.96:30366] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file88.php"] [unique_id "afkYoTaPrgTaiOD_15tIkwAAAM0"]
[Tue May 05 06:07:30.219171 2026] [:error] [pid 39073:tid 39150] [client 4.204.197.96:30343] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "afkYov0kT1BNjk46Bkce0AAAAJA"]
[Tue May 05 06:07:30.635326 2026] [:error] [pid 41055:tid 41074] [client 4.204.197.96:30368] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file32.php"] [unique_id "afkYoiepFwKgA_SKOHi56wAAARA"]
[Tue May 05 06:07:31.060105 2026] [proxy_fcgi:error] [pid 41055:tid 41068] [client 4.204.197.96:30431] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:07:31.271880 2026] [proxy_fcgi:error] [pid 41055:tid 41081] [client 4.204.197.96:30431] AH01071: Got error 'Primary script unknown'
[Tue May 05 06:07:31.483861 2026] [proxy_fcgi:error] [pid 41055:tid 41062] [client 4.204.197.96:30431] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:26.354311 2026] [proxy_fcgi:error] [pid 39073:tid 39157] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:26.645288 2026] [proxy_fcgi:error] [pid 39073:tid 39145] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:26.927328 2026] [proxy_fcgi:error] [pid 39073:tid 39157] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:27.207672 2026] [proxy_fcgi:error] [pid 39073:tid 39137] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:27.484740 2026] [proxy_fcgi:error] [pid 39073:tid 39144] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:27.799334 2026] [proxy_fcgi:error] [pid 39073:tid 39150] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:28.075295 2026] [proxy_fcgi:error] [pid 39073:tid 39152] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:28.405699 2026] [proxy_fcgi:error] [pid 39073:tid 39144] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:28.977617 2026] [proxy_fcgi:error] [pid 39073:tid 39155] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:29.256138 2026] [proxy_fcgi:error] [pid 39073:tid 39139] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:29.530540 2026] [proxy_fcgi:error] [pid 39073:tid 39150] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:29.798860 2026] [proxy_fcgi:error] [pid 39073:tid 39154] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:30.075769 2026] [proxy_fcgi:error] [pid 39073:tid 39153] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:30.356300 2026] [proxy_fcgi:error] [pid 39073:tid 39151] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:30.636310 2026] [proxy_fcgi:error] [pid 39073:tid 39135] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:30.916843 2026] [proxy_fcgi:error] [pid 39073:tid 39158] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:31.189304 2026] [proxy_fcgi:error] [pid 39073:tid 39137] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:31.461165 2026] [proxy_fcgi:error] [pid 39073:tid 39155] [client 45.86.200.87:29381] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:35.462077 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.87:29381] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkwy_0kT1BNjk46BkeIyQAAAJU"]
[Tue May 05 07:50:36.850035 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.111:36861] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkwzPolSHl4aAnrIotNcgAAAEE"]
[Tue May 05 07:50:39.302301 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 185.82.72.4:39351] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:40.158811 2026] [:error] [pid 39071:tid 39097] [client 185.82.72.4:39351] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkw0IvmnRMz9gRzix28VwAAABE"]
[Tue May 05 07:50:41.039973 2026] [proxy_fcgi:error] [pid 39071:tid 39083] [client 45.86.200.97:30927] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:41.345825 2026] [proxy_fcgi:error] [pid 39071:tid 39087] [client 45.86.200.97:30927] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:41.642209 2026] [:error] [pid 39071:tid 39086] [client 45.86.200.97:30927] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkw0YvmnRMz9gRzix28fwAAAAY"]
[Tue May 05 07:50:42.508304 2026] [proxy_fcgi:error] [pid 53856:tid 53868] [client 45.86.200.73:58631] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:43.929112 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.73:58631] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkw03G_NPOxSH0O9aRFPwAAAUU"]
[Tue May 05 07:50:44.746543 2026] [:error] [pid 53856:tid 53872] [client 185.82.72.3:43555] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkw1HG_NPOxSH0O9aRFcgAAAUc"]
[Tue May 05 07:50:45.287945 2026] [:error] [pid 39073:tid 39148] [client 45.86.200.78:20961] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkw1f0kT1BNjk46BkeJywAAAI4"]
[Tue May 05 07:50:46.937988 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.108:61297] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkw1nG_NPOxSH0O9aRGAAAAAUk"]
[Tue May 05 07:50:48.609360 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.55:60403] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkw2DaPrgTaiOD_15vQWQAAANc"]
[Tue May 05 07:50:50.249748 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.91:24061] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkw2volSHl4aAnrIotOzgAAAEs"]
[Tue May 05 07:50:51.055686 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.105:29101] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkw2_0kT1BNjk46BkeKLwAAAJY"]
[Tue May 05 07:50:51.600310 2026] [proxy_fcgi:error] [pid 39072:tid 39123] [client 45.86.200.106:60533] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:52.154848 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.106:60533] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/filemanager.php"] [unique_id "afkw3PolSHl4aAnrIotO_AAAAEU"]
[Tue May 05 07:50:52.704082 2026] [proxy_fcgi:error] [pid 39178:tid 39181] [client 45.86.200.98:34653] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:52.978244 2026] [proxy_fcgi:error] [pid 39178:tid 39184] [client 45.86.200.98:34653] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:53.278094 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.98:34653] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkw3TaPrgTaiOD_15vQ5QAAAMI"]
[Tue May 05 07:50:54.103735 2026] [:error] [pid 39073:tid 39145] [client 45.86.200.99:29863] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkw3v0kT1BNjk46BkeKiAAAAIs"]
[Tue May 05 07:50:54.653519 2026] [proxy_fcgi:error] [pid 39072:tid 39122] [client 185.82.72.4:59497] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:54.942363 2026] [:error] [pid 39072:tid 39116] [client 185.82.72.4:59497] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkw3volSHl4aAnrIotPSgAAAEk"]
[Tue May 05 07:50:55.528298 2026] [proxy_fcgi:error] [pid 53856:tid 53888] [client 45.86.200.83:65523] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:56.359882 2026] [proxy_fcgi:error] [pid 53856:tid 53869] [client 45.86.200.83:65523] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:57.235909 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.83:65523] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkw4XG_NPOxSH0O9aRILwAAAUA"]
[Tue May 05 07:50:58.900290 2026] [proxy_fcgi:error] [pid 39072:tid 39118] [client 45.86.200.104:45017] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:59.172135 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.104:45017] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkw4_olSHl4aAnrIotPugAAAEo"]
[Tue May 05 07:50:59.735797 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.103:43639] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:00.298347 2026] [:error] [pid 39071:tid 39103] [client 45.86.200.103:43639] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afkw5IvmnRMz9gRzix2-iwAAABc"]
[Tue May 05 07:51:01.122318 2026] [:error] [pid 41055:tid 41059] [client 45.86.200.74:21653] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afkw5SepFwKgA_SKOHg0-QAAAQE"]
[Tue May 05 07:51:01.967290 2026] [proxy_fcgi:error] [pid 41055:tid 41079] [client 45.86.200.81:63841] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:02.287292 2026] [proxy_fcgi:error] [pid 41055:tid 41073] [client 45.86.200.81:63841] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:02.841095 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.81:63841] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkw5iepFwKgA_SKOHg1IwAAARM"]
[Tue May 05 07:51:04.779146 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.84:35813] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkw6IvmnRMz9gRzix2_BgAAAAw"]
[Tue May 05 07:51:05.631837 2026] [:error] [pid 39072:tid 39124] [client 45.86.200.98:32039] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkw6folSHl4aAnrIotQSgAAAFE"]
[Tue May 05 07:51:06.174406 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.86:34121] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkw6ovmnRMz9gRzix2_MgAAAAg"]
[Tue May 05 07:51:06.734811 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.77:40267] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkw6nG_NPOxSH0O9aRKYAAAAU0"]
[Tue May 05 07:51:07.845359 2026] [proxy_fcgi:error] [pid 39178:tid 39184] [client 45.86.200.79:53349] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:08.137271 2026] [:error] [pid 39178:tid 39194] [client 45.86.200.79:53349] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afkw7DaPrgTaiOD_15vSbQAAAM4"]
[Tue May 05 07:51:08.678293 2026] [:error] [pid 39178:tid 39200] [client 45.86.200.56:26331] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afkw7DaPrgTaiOD_15vSfAAAANQ"]
[Tue May 05 07:51:09.216046 2026] [:error] [pid 39072:tid 39125] [client 45.86.200.53:57173] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkw7folSHl4aAnrIotQoAAAAFI"]
[Tue May 05 07:51:10.381463 2026] [proxy_fcgi:error] [pid 39178:tid 39189] [client 45.86.200.100:21333] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:10.987291 2026] [proxy_fcgi:error] [pid 39178:tid 39185] [client 45.86.200.100:21333] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:11.296507 2026] [proxy_fcgi:error] [pid 39178:tid 39199] [client 45.86.200.100:21333] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:12.180168 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.100:21333] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afkw8DaPrgTaiOD_15vS8gAAAMU"]
[Tue May 05 07:51:13.584216 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.85:49487] [client 45.86.200.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.85, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkw8f0kT1BNjk46BkeM9gAAAIQ"]
[Tue May 05 07:51:13.862307 2026] [proxy_fcgi:error] [pid 39073:tid 39147] [client 45.86.200.85:49487] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:15.261656 2026] [proxy_fcgi:error] [pid 39073:tid 39140] [client 45.86.200.85:49487] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:15.549856 2026] [proxy_fcgi:error] [pid 39073:tid 39149] [client 45.86.200.85:49487] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:16.906161 2026] [:error] [pid 39073:tid 39145] [client 45.86.200.85:49487] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkw9P0kT1BNjk46BkeNaQAAAIs"]
[Tue May 05 07:51:17.729541 2026] [proxy_fcgi:error] [pid 53856:tid 53871] [client 45.86.200.107:33427] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:18.006454 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.107:33427] [client 45.86.200.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.107, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkw9nG_NPOxSH0O9aRMFAAAAUQ"]
[Tue May 05 07:51:18.552717 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.107:33427] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/item.php"] [unique_id "afkw9nG_NPOxSH0O9aRMIQAAAVE"]
[Tue May 05 07:51:20.403307 2026] [proxy_fcgi:error] [pid 39072:tid 39125] [client 45.86.200.102:38039] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:21.247123 2026] [proxy_fcgi:error] [pid 39072:tid 39114] [client 45.86.200.102:38039] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:21.822196 2026] [proxy_fcgi:error] [pid 39072:tid 39110] [client 45.86.200.102:38039] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:22.404198 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.102:38039] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkw-volSHl4aAnrIotSRAAAAE8"]
[Tue May 05 07:51:24.027829 2026] [proxy_fcgi:error] [pid 39178:tid 39187] [client 45.86.200.102:61571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:24.877307 2026] [proxy_fcgi:error] [pid 39178:tid 39199] [client 45.86.200.102:61571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:25.431978 2026] [proxy_fcgi:error] [pid 39178:tid 39191] [client 45.86.200.102:61571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:25.987954 2026] [proxy_fcgi:error] [pid 39178:tid 39195] [client 45.86.200.102:61571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:26.252418 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.102:61571] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkw_jaPrgTaiOD_15vUUAAAANc"]
[Tue May 05 07:51:26.800172 2026] [proxy_fcgi:error] [pid 39072:tid 39122] [client 45.86.200.99:39903] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:27.080153 2026] [proxy_fcgi:error] [pid 39072:tid 39118] [client 45.86.200.99:39903] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:27.365408 2026] [:error] [pid 39072:tid 39120] [client 45.86.200.99:39903] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkw__olSHl4aAnrIotS4gAAAE0"]
[Tue May 05 07:51:29.230290 2026] [proxy_fcgi:error] [pid 53856:tid 53877] [client 45.86.200.54:43161] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:29.815217 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.54:43161] [client 45.86.200.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.54, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afkxAXG_NPOxSH0O9aRNewAAAUw"]
[Tue May 05 07:51:30.094557 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.54:43161] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkxAnG_NPOxSH0O9aRNhQAAAUw"]
[Tue May 05 07:51:34.514359 2026] [proxy_fcgi:error] [pid 39071:tid 39091] [client 45.86.200.102:59389] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:35.640287 2026] [proxy_fcgi:error] [pid 39071:tid 39102] [client 45.86.200.102:59389] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:36.255307 2026] [proxy_fcgi:error] [pid 39071:tid 39102] [client 45.86.200.102:59389] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:36.529553 2026] [:error] [pid 39071:tid 39080] [client 45.86.200.102:59389] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkxCIvmnRMz9gRzix3CUwAAAAA"]
[Tue May 05 07:51:37.074425 2026] [proxy_fcgi:error] [pid 39071:tid 39095] [client 45.86.200.81:64107] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:37.892118 2026] [:error] [pid 39071:tid 39097] [client 45.86.200.81:64107] [client 45.86.200.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.81, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkxCYvmnRMz9gRzix3CegAAABE"]
[Tue May 05 07:51:38.179301 2026] [proxy_fcgi:error] [pid 39071:tid 39104] [client 45.86.200.81:64107] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:38.458295 2026] [proxy_fcgi:error] [pid 39071:tid 39084] [client 45.86.200.81:64107] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:38.776284 2026] [proxy_fcgi:error] [pid 39071:tid 39082] [client 45.86.200.81:64107] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:39.055342 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.81:64107] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afkxC4vmnRMz9gRzix3CmAAAAAE"]
[Tue May 05 07:51:39.620295 2026] [proxy_fcgi:error] [pid 39071:tid 39101] [client 45.86.200.105:53805] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:39.890279 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.105:53805] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afkxC4vmnRMz9gRzix3CqwAAAAg"]
[Tue May 05 07:51:40.715590 2026] [proxy_fcgi:error] [pid 39072:tid 39124] [client 45.86.200.111:42773] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:40.995280 2026] [:error] [pid 39072:tid 39131] [client 45.86.200.111:42773] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkxDPolSHl4aAnrIotVDAAAAFg"]
[Tue May 05 07:51:42.090116 2026] [proxy_fcgi:error] [pid 53856:tid 53875] [client 45.86.200.92:25703] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:42.362942 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.92:25703] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkxDnG_NPOxSH0O9aRO4QAAAVI"]
[Tue May 05 07:51:42.944907 2026] [:error] [pid 39073:tid 39145] [client 45.86.200.83:51599] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "afkxDv0kT1BNjk46BkeQpgAAAIs"]
[Tue May 05 07:51:43.500609 2026] [proxy_fcgi:error] [pid 39178:tid 39202] [client 45.86.200.78:29587] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:43.788298 2026] [proxy_fcgi:error] [pid 39178:tid 39185] [client 45.86.200.78:29587] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:44.891138 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.78:29587] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afkxEDaPrgTaiOD_15vWtQAAANI"]
[Tue May 05 07:51:45.722446 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.96:45261] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "afkxESepFwKgA_SKOHg6FQAAARU"]
[Tue May 05 07:51:46.274338 2026] [proxy_fcgi:error] [pid 53856:tid 53886] [client 45.86.200.74:32201] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:47.096065 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.74:32201] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/edit.php"] [unique_id "afkxE3G_NPOxSH0O9aRPeAAAAUA"]
[Tue May 05 07:51:47.644975 2026] [proxy_fcgi:error] [pid 39071:tid 39091] [client 45.86.200.110:57335] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:48.215289 2026] [proxy_fcgi:error] [pid 39071:tid 39103] [client 45.86.200.110:57335] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:48.485214 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.110:57335] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "afkxFIvmnRMz9gRzix3DWQAAAAE"]
[Tue May 05 07:51:49.029971 2026] [proxy_fcgi:error] [pid 53856:tid 53883] [client 45.86.200.106:42317] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:49.573459 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.106:42317] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/click.php"] [unique_id "afkxFXG_NPOxSH0O9aRPugAAAVI"]
[Tue May 05 07:51:50.114320 2026] [proxy_fcgi:error] [pid 53856:tid 53879] [client 45.86.200.102:59789] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:50.942514 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.102:59789] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "afkxFnG_NPOxSH0O9aRP5QAAAU0"]
[Tue May 05 07:51:52.894353 2026] [proxy_fcgi:error] [pid 41055:tid 41060] [client 45.86.200.95:40063] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:53.438031 2026] [proxy_fcgi:error] [pid 41055:tid 41069] [client 45.86.200.95:40063] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:53.708378 2026] [proxy_fcgi:error] [pid 41055:tid 41061] [client 45.86.200.95:40063] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:54.296650 2026] [proxy_fcgi:error] [pid 41055:tid 41068] [client 45.86.200.95:40063] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:54.568349 2026] [:error] [pid 41055:tid 41058] [client 45.86.200.95:40063] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "afkxGiepFwKgA_SKOHg7OwAAAQA"]
[Tue May 05 07:51:55.134910 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.101:60897] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "afkxG_olSHl4aAnrIotW2QAAAE8"]
[Tue May 05 07:51:55.690786 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.81:55847] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "afkxG_olSHl4aAnrIotW8AAAAFA"]
[Tue May 05 07:51:57.270315 2026] [:error] [pid 39178:tid 39189] [client 45.86.200.85:63299] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "afkxHTaPrgTaiOD_15vYMQAAAMk"]
[Tue May 05 07:51:57.816988 2026] [proxy_fcgi:error] [pid 53856:tid 53883] [client 45.86.200.92:23789] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:58.097662 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.92:23789] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "afkxHnG_NPOxSH0O9aRQ0QAAAVI"]
[Tue May 05 07:51:58.663244 2026] [:error] [pid 39072:tid 39129] [client 185.82.72.3:50465] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afkxHvolSHl4aAnrIotXWAAAAFY"]
[Tue May 05 07:51:59.229304 2026] [proxy_fcgi:error] [pid 39072:tid 39129] [client 45.86.200.83:36695] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:51:59.790852 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.83:36695] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afkxH_olSHl4aAnrIotXjwAAAFU"]
[Tue May 05 07:52:00.340195 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.86:41983] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "afkxIP0kT1BNjk46BkeSuQAAAII"]
[Tue May 05 07:52:00.930294 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.101:50639] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "afkxIPolSHl4aAnrIotXwQAAAFU"]
[Tue May 05 07:52:01.473281 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.103:61567] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "afkxISepFwKgA_SKOHg7zgAAARc"]
[Tue May 05 07:52:02.300728 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.96:28179] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "afkxInG_NPOxSH0O9aRRowAAAUM"]
[Tue May 05 07:52:03.396497 2026] [:error] [pid 39178:tid 39201] [client 45.86.200.90:37851] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "afkxIzaPrgTaiOD_15vY5gAAANU"]
[Tue May 05 07:52:04.986310 2026] [proxy_fcgi:error] [pid 39071:tid 39092] [client 45.86.200.80:33749] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:05.822302 2026] [proxy_fcgi:error] [pid 39071:tid 39103] [client 45.86.200.80:33749] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:06.091369 2026] [:error] [pid 39071:tid 39086] [client 45.86.200.80:33749] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "afkxJovmnRMz9gRzix3EkgAAAAY"]
[Tue May 05 07:52:06.920289 2026] [proxy_fcgi:error] [pid 53856:tid 53878] [client 45.86.200.57:32777] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:07.203831 2026] [proxy_fcgi:error] [pid 53856:tid 53883] [client 45.86.200.57:32777] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:08.306435 2026] [proxy_fcgi:error] [pid 53856:tid 53884] [client 45.86.200.57:32777] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:08.583074 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.57:32777] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "afkxKHG_NPOxSH0O9aRSzAAAAVI"]
[Tue May 05 07:52:10.362383 2026] [proxy_fcgi:error] [pid 41055:tid 41081] [client 45.86.200.110:61573] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:11.204390 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.110:61573] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "afkxKyepFwKgA_SKOHg81wAAAQQ"]
[Tue May 05 07:52:11.747635 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.87:35959] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "afkxKzaPrgTaiOD_15vZ0wAAANc"]
[Tue May 05 07:52:13.428207 2026] [:error] [pid 39071:tid 39098] [client 45.86.200.60:31749] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afkxLYvmnRMz9gRzix3FMgAAABI"]
[Tue May 05 07:52:14.542313 2026] [proxy_fcgi:error] [pid 39178:tid 39181] [client 45.86.200.85:42265] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:14.825408 2026] [proxy_fcgi:error] [pid 39178:tid 39191] [client 45.86.200.85:42265] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:15.100297 2026] [proxy_fcgi:error] [pid 39178:tid 39201] [client 45.86.200.85:42265] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:15.375290 2026] [proxy_fcgi:error] [pid 39178:tid 39189] [client 45.86.200.85:42265] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:16.754328 2026] [:error] [pid 39178:tid 39196] [client 45.86.200.85:42265] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "afkxMDaPrgTaiOD_15vaUwAAANA"]
[Tue May 05 07:52:17.293636 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.99:48387] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "afkxMSepFwKgA_SKOHg9pgAAAQs"]
[Tue May 05 07:52:17.856250 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.101:40889] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "afkxMYvmnRMz9gRzix3FiwAAAAw"]
[Tue May 05 07:52:18.405110 2026] [:error] [pid 39178:tid 39197] [client 45.86.200.60:22819] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "afkxMjaPrgTaiOD_15vagwAAANE"]
[Tue May 05 07:52:20.119692 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.89:64507] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "afkxNCepFwKgA_SKOHg9-gAAAQQ"]
[Tue May 05 07:52:21.716085 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.97:24683] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "afkxNXG_NPOxSH0O9aRUoAAAAUQ"]
[Tue May 05 07:52:22.534918 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.75:64843] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "afkxNnG_NPOxSH0O9aRUwQAAAUU"]
[Tue May 05 07:52:24.227863 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.58:35013] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "afkxOP0kT1BNjk46BkeVVQAAAJY"]
[Tue May 05 07:52:24.763294 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.82:34249] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "afkxOHG_NPOxSH0O9aRVDgAAAUU"]
[Tue May 05 07:52:26.312422 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.57:36509] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "afkxOiepFwKgA_SKOHg-xQAAAQI"]
[Tue May 05 07:52:27.418517 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.74:61161] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "afkxOzaPrgTaiOD_15vbcgAAAMc"]
[Tue May 05 07:52:28.260659 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.99:27125] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "afkxPHG_NPOxSH0O9aRVeQAAAVY"]
[Tue May 05 07:52:28.846601 2026] [proxy_fcgi:error] [pid 41055:tid 41078] [client 185.82.72.3:65317] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:29.409495 2026] [:error] [pid 41055:tid 41067] [client 185.82.72.3:65317] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "afkxPSepFwKgA_SKOHg_LgAAAQk"]
[Tue May 05 07:52:30.544037 2026] [:error] [pid 39178:tid 39186] [client 45.86.200.82:38707] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "afkxPjaPrgTaiOD_15vbzwAAAMY"]
[Tue May 05 07:52:32.121295 2026] [proxy_fcgi:error] [pid 53856:tid 53886] [client 45.86.200.105:59319] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:32.672470 2026] [proxy_fcgi:error] [pid 53856:tid 53883] [client 45.86.200.105:59319] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:32.946049 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.105:59319] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "afkxQHG_NPOxSH0O9aRWDQAAAVU"]
[Tue May 05 07:52:33.769314 2026] [proxy_fcgi:error] [pid 39073:tid 39137] [client 45.86.200.112:36319] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:34.051590 2026] [proxy_fcgi:error] [pid 39073:tid 39134] [client 45.86.200.112:36319] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:38.632534 2026] [proxy_fcgi:error] [pid 39073:tid 39134] [client 45.86.200.112:36319] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:38.900450 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.112:36319] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "afkxRv0kT1BNjk46BkeWywAAAJg"]
[Tue May 05 07:52:39.454297 2026] [proxy_fcgi:error] [pid 41055:tid 41081] [client 45.86.200.95:42427] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:39.732514 2026] [:error] [pid 41055:tid 41058] [client 45.86.200.95:42427] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "afkxRyepFwKgA_SKOHhAdAAAAQA"]
[Tue May 05 07:52:41.967293 2026] [proxy_fcgi:error] [pid 39072:tid 39126] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:42.256317 2026] [proxy_fcgi:error] [pid 39072:tid 39125] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:42.554298 2026] [proxy_fcgi:error] [pid 39072:tid 39131] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:49.218319 2026] [proxy_fcgi:error] [pid 39072:tid 39113] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:50.100427 2026] [proxy_fcgi:error] [pid 39072:tid 39131] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:50.420452 2026] [proxy_fcgi:error] [pid 39072:tid 39111] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:50.717311 2026] [proxy_fcgi:error] [pid 39072:tid 39118] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:51.022310 2026] [proxy_fcgi:error] [pid 39072:tid 39119] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:51.875794 2026] [proxy_fcgi:error] [pid 39072:tid 39116] [client 45.86.200.108:40073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:52.144213 2026] [:error] [pid 39072:tid 39129] [client 45.86.200.108:40073] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "afkxVPolSHl4aAnrIoteoQAAAFY"]
[Tue May 05 07:52:52.684768 2026] [:error] [pid 39072:tid 39107] [client 45.86.200.98:55409] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "afkxVPolSHl4aAnrIotergAAAEA"]
[Tue May 05 07:52:56.445325 2026] [proxy_fcgi:error] [pid 39178:tid 39193] [client 45.86.200.90:32647] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:56.715583 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.90:32647] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "afkxWDaPrgTaiOD_15vd_AAAAMo"]
[Tue May 05 07:52:57.528303 2026] [proxy_fcgi:error] [pid 41055:tid 41063] [client 45.86.200.103:52263] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:52:57.793728 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.103:52263] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "afkxWSepFwKgA_SKOHhCWwAAAQI"]
[Tue May 05 07:52:58.339629 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.53:64803] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "afkxWjaPrgTaiOD_15veHQAAAMM"]
[Tue May 05 07:52:59.994873 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.105:29911] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afkxW4vmnRMz9gRzix3KCgAAAAM"]
[Tue May 05 07:53:00.536921 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.97:44693] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "afkxXPolSHl4aAnrIotfqAAAAEY"]
[Tue May 05 07:53:01.905485 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.111:21529] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:02.471559 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.111:21529] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "afkxXovmnRMz9gRzix3KbwAAAAM"]
[Tue May 05 07:53:03.281299 2026] [proxy_fcgi:error] [pid 53856:tid 53871] [client 45.86.200.52:30303] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:03.840393 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.52:30303] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/function.php"] [unique_id "afkxX3G_NPOxSH0O9aRbbgAAAUg"]
[Tue May 05 07:53:04.374434 2026] [:error] [pid 41055:tid 41067] [client 45.86.200.101:41907] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "afkxYCepFwKgA_SKOHhDEQAAAQk"]
[Tue May 05 07:53:12.546339 2026] [proxy_fcgi:error] [pid 39071:tid 39091] [client 45.86.200.93:54431] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:12.818327 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.93:54431] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "afkxaIvmnRMz9gRzix3MCQAAAAg"]
[Tue May 05 07:53:13.352880 2026] [:error] [pid 39178:tid 39202] [client 45.86.200.55:39767] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "afkxaTaPrgTaiOD_15vfZgAAANY"]
[Tue May 05 07:53:14.466349 2026] [proxy_fcgi:error] [pid 39178:tid 39197] [client 45.86.200.51:41045] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:14.758310 2026] [proxy_fcgi:error] [pid 39178:tid 39202] [client 45.86.200.51:41045] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:15.338296 2026] [proxy_fcgi:error] [pid 39178:tid 39193] [client 45.86.200.51:41045] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:15.891619 2026] [:error] [pid 39178:tid 39196] [client 45.86.200.51:41045] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "afkxazaPrgTaiOD_15vfrwAAANA"]
[Tue May 05 07:53:16.440357 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.79:56643] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "afkxbPolSHl4aAnrIothiwAAAEQ"]
[Tue May 05 07:53:18.117329 2026] [proxy_fcgi:error] [pid 39071:tid 39095] [client 45.86.200.52:20359] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:18.397999 2026] [proxy_fcgi:error] [pid 39071:tid 39090] [client 45.86.200.52:20359] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:18.974218 2026] [proxy_fcgi:error] [pid 39071:tid 39086] [client 45.86.200.52:20359] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:19.244750 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.52:20359] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/index.php"] [unique_id "afkxb4vmnRMz9gRzix3MwQAAAAg"]
[Tue May 05 07:53:19.780281 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.92:20537] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "afkxbyepFwKgA_SKOHhEyAAAARE"]
[Tue May 05 07:53:20.329887 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.83:53037] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "afkxcHG_NPOxSH0O9aRd-AAAAVQ"]
[Tue May 05 07:53:21.992302 2026] [proxy_fcgi:error] [pid 39071:tid 39087] [client 45.86.200.106:45919] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:22.260662 2026] [:error] [pid 39071:tid 39104] [client 45.86.200.106:45919] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "afkxcovmnRMz9gRzix3NDwAAABg"]
[Tue May 05 07:53:23.088372 2026] [:error] [pid 39178:tid 39202] [client 45.86.200.74:21487] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "afkxczaPrgTaiOD_15vghQAAANY"]
[Tue May 05 07:53:23.678414 2026] [proxy_fcgi:error] [pid 39071:tid 39084] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:23.977358 2026] [proxy_fcgi:error] [pid 39071:tid 39096] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:24.603315 2026] [proxy_fcgi:error] [pid 39071:tid 39094] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:25.756094 2026] [:error] [pid 39071:tid 39091] [client 45.86.200.59:42169] [client 45.86.200.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.59, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/js/wp-login.php"] [unique_id "afkxdYvmnRMz9gRzix3NbwAAAAs"]
[Tue May 05 07:53:26.325549 2026] [:error] [pid 39071:tid 39102] [client 45.86.200.59:42169] File does not exist: /home/stratapluswacom/public_html/worm.PhP
[Tue May 05 07:53:26.636342 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:26.930317 2026] [proxy_fcgi:error] [pid 39071:tid 39100] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:27.215308 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:27.495524 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.59:42169] [client 45.86.200.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.59, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "afkxd4vmnRMz9gRzix3NnAAAABU"]
[Tue May 05 07:53:27.820288 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:28.423976 2026] [proxy_fcgi:error] [pid 39071:tid 39097] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:28.716315 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:29.303299 2026] [proxy_fcgi:error] [pid 39071:tid 39102] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:29.877295 2026] [proxy_fcgi:error] [pid 39071:tid 39101] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:30.750301 2026] [proxy_fcgi:error] [pid 39071:tid 39101] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:32.813319 2026] [proxy_fcgi:error] [pid 39071:tid 39084] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:33.113330 2026] [proxy_fcgi:error] [pid 39071:tid 39086] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:33.972345 2026] [proxy_fcgi:error] [pid 39071:tid 39093] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:34.570133 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:34.864297 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.59:42169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:35.177269 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.59:42169] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "afkxf4vmnRMz9gRzix3OWwAAAAQ"]
[Tue May 05 07:53:36.035763 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.84:53691] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:36.322456 2026] [proxy_fcgi:error] [pid 39071:tid 39080] [client 45.86.200.84:53691] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:36.599072 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.84:53691] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "afkxgIvmnRMz9gRzix3OfwAAABM"]
[Tue May 05 07:53:37.451297 2026] [proxy_fcgi:error] [pid 53856:tid 53885] [client 45.86.200.100:44575] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:37.720629 2026] [:error] [pid 53856:tid 53880] [client 45.86.200.100:44575] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "afkxgXG_NPOxSH0O9aRgfAAAAU8"]
[Tue May 05 07:53:38.876302 2026] [proxy_fcgi:error] [pid 39073:tid 39154] [client 45.86.200.80:63831] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:39.444345 2026] [proxy_fcgi:error] [pid 39073:tid 39136] [client 45.86.200.80:63831] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:39.764756 2026] [proxy_fcgi:error] [pid 39073:tid 39153] [client 45.86.200.80:63831] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:40.042616 2026] [proxy_fcgi:error] [pid 39073:tid 39145] [client 45.86.200.80:63831] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:40.366306 2026] [proxy_fcgi:error] [pid 39073:tid 39139] [client 45.86.200.80:63831] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:40.918527 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.80:63831] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "afkxhP0kT1BNjk46Bked0gAAAII"]
[Tue May 05 07:53:41.477346 2026] [proxy_fcgi:error] [pid 41055:tid 41059] [client 185.82.72.3:21053] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:41.776795 2026] [proxy_fcgi:error] [pid 41055:tid 41059] [client 185.82.72.3:21053] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:42.047125 2026] [:error] [pid 41055:tid 41068] [client 185.82.72.3:21053] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "afkxhiepFwKgA_SKOHhH_gAAAQo"]
[Tue May 05 07:53:42.915600 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.85:38747] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "afkxhnG_NPOxSH0O9aRhXgAAAUY"]
[Tue May 05 07:53:43.766562 2026] [proxy_fcgi:error] [pid 39178:tid 39195] [client 45.86.200.86:53767] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:44.601283 2026] [proxy_fcgi:error] [pid 39178:tid 39181] [client 45.86.200.86:53767] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:44.892292 2026] [proxy_fcgi:error] [pid 39178:tid 39200] [client 45.86.200.86:53767] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:45.205252 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.86:53767] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "afkxiTaPrgTaiOD_15vi-QAAAMo"]
[Tue May 05 07:53:45.747828 2026] [:error] [pid 39073:tid 39149] [client 45.86.200.98:20485] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "afkxif0kT1BNjk46BkeeRwAAAI8"]
[Tue May 05 07:53:47.716331 2026] [proxy_fcgi:error] [pid 39071:tid 39089] [client 45.86.200.91:39865] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:48.270443 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.91:39865] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "afkxjIvmnRMz9gRzix3PvQAAAAw"]
[Tue May 05 07:53:49.116333 2026] [:error] [pid 39073:tid 39157] [client 45.86.200.77:44129] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "afkxjf0kT1BNjk46BkeeqAAAAJc"]
[Tue May 05 07:53:49.949334 2026] [proxy_fcgi:error] [pid 39071:tid 39081] [client 45.86.200.104:31077] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:50.250300 2026] [proxy_fcgi:error] [pid 39071:tid 39080] [client 45.86.200.104:31077] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:50.521286 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.104:31077] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "afkxjovmnRMz9gRzix3P6wAAAAw"]
[Tue May 05 07:53:52.437558 2026] [proxy_fcgi:error] [pid 39073:tid 39144] [client 45.86.200.56:53711] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:52.731586 2026] [proxy_fcgi:error] [pid 39073:tid 39155] [client 45.86.200.56:53711] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:53.315111 2026] [proxy_fcgi:error] [pid 39073:tid 39142] [client 45.86.200.56:53711] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:54.184155 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.56:53711] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "afkxkv0kT1BNjk46BkefTAAAAIU"]
[Tue May 05 07:53:55.827994 2026] [proxy_fcgi:error] [pid 39178:tid 39193] [client 45.86.200.80:49079] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:56.654299 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.80:49079] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "afkxlDaPrgTaiOD_15vkVwAAANg"]
[Tue May 05 07:53:57.503316 2026] [proxy_fcgi:error] [pid 39072:tid 39110] [client 185.82.72.3:44571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:58.460292 2026] [proxy_fcgi:error] [pid 39072:tid 39115] [client 185.82.72.3:44571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:58.758051 2026] [proxy_fcgi:error] [pid 39072:tid 39121] [client 185.82.72.3:44571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:53:59.365627 2026] [:error] [pid 39072:tid 39112] [client 185.82.72.3:44571] [client 185.82.72.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.3, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "afkxl_olSHl4aAnrIotmJwAAAEU"]
[Tue May 05 07:53:59.972294 2026] [proxy_fcgi:error] [pid 39072:tid 39123] [client 185.82.72.3:44571] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:54:00.982786 2026] [:error] [pid 39072:tid 39114] [client 185.82.72.3:44571] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "afkxmPolSHl4aAnrIotmaQAAAEc"]
[Tue May 05 07:54:01.577300 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.109:38969] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:54:01.870065 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.109:38969] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "afkxmYvmnRMz9gRzix3RFgAAAAM"]
[Tue May 05 07:54:02.430270 2026] [proxy_fcgi:error] [pid 39178:tid 39196] [client 45.86.200.86:64721] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:54:02.986536 2026] [proxy_fcgi:error] [pid 39178:tid 39200] [client 45.86.200.86:64721] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:54:03.528062 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.86:64721] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "afkxmzaPrgTaiOD_15vk_QAAAMc"]
[Tue May 05 07:54:05.461300 2026] [proxy_fcgi:error] [pid 39073:tid 39141] [client 45.86.200.112:24997] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:54:19.171485 2026] [proxy_fcgi:error] [pid 39073:tid 39136] [client 45.86.200.112:24997] AH01071: Got error 'Primary script unknown'
[Tue May 05 13:10:17.960307 2026] [:error] [pid 25835:tid 25854] [client 172.71.172.24:13913] [client 172.71.172.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afl7uVDT5nGJyh1439x0lQAAARE"]
[Tue May 05 13:16:32.867808 2026] [:error] [pid 54732:tid 54734] [client 172.71.148.28:13332] [client 172.71.148.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afl9MLGgYlDOb3nfuJSDBgAAAEA"]
[Tue May 05 13:19:07.977021 2026] [:error] [pid 25745:tid 25820] [client 172.71.172.25:13037] [client 172.71.172.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afl9y5sd7hb7vrvCNBnxPAAAANM"]
[Tue May 05 13:24:31.208822 2026] [:error] [pid 54732:tid 54738] [client 172.68.195.237:11697] [client 172.68.195.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afl_D7GgYlDOb3nfuJSHYAAAAEQ"]
[Tue May 05 13:59:46.789312 2026] [:error] [pid 25745:tid 25815] [client 172.71.148.28:11370] [client 172.71.148.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmHUpsd7hb7vrvCNBn76QAAAM4"]
[Tue May 05 14:07:24.897145 2026] [:error] [pid 25743:tid 25756] [client 172.71.148.29:12516] [client 172.71.148.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmJHG-PCMRhF5DdUnOR-wAAAAk"]
[Tue May 05 14:25:26.434507 2026] [:error] [pid 25835:tid 25848] [client 172.71.172.24:11198] [client 172.71.172.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmNVlDT5nGJyh1439yNkwAAAQs"]
[Tue May 05 14:42:17.117310 2026] [:error] [pid 25744:tid 25792] [client 172.71.164.48:10651] [client 172.71.164.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmRSSR8IuyzjkW06OOnYgAAAJI"]
[Tue May 05 14:47:10.465303 2026] [:error] [pid 54732:tid 54741] [client 162.158.87.85:10001] [client 162.158.87.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmSbrGgYlDOb3nfuJSxLAAAAEc"]
[Tue May 05 15:06:54.577047 2026] [:error] [pid 25745:tid 25802] [client 162.158.87.85:11506] [client 162.158.87.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmXDpsd7hb7vrvCNBkOEgAAAME"]
[Tue May 05 15:47:34.771032 2026] [:error] [pid 54732:tid 54743] [client 104.23.239.96:11489] [client 104.23.239.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmglrGgYlDOb3nfuJTPZAAAAEk"]
[Tue May 05 16:02:32.869285 2026] [:error] [pid 25745:tid 25822] [client 124.217.112.230:43084] [client 124.217.112.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.112.230, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afmkGJsd7hb7vrvCNBkdUAAAANU"]
[Tue May 05 16:02:32.880886 2026] [proxy_fcgi:error] [pid 25745:tid 25822] [client 124.217.112.230:43084] AH01071: Got error 'Primary script unknown'
[Tue May 05 16:44:45.188492 2026] [:error] [pid 25835:tid 25852] [client 172.70.243.109:13031] [client 172.70.243.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afmt_VDT5nGJyh1439y4igAAAQ8"]
[Tue May 05 19:25:46.990520 2026] [:error] [pid 25744:tid 25795] [client 172.71.144.142:11417] [client 172.71.144.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afnTuiR8IuyzjkW06OPhEAAAAJU"]
[Tue May 05 20:24:48.383205 2026] [:error] [pid 54732:tid 54752] [client 172.71.144.143:10653] [client 172.71.144.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afnhkLGgYlDOb3nfuJQhJAAAAFI"]
[Tue May 05 21:07:17.987586 2026] [:error] [pid 2324:tid 2347] [client 172.71.164.48:12618] [client 172.71.164.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afnrhWqe2hrcI52A1HyMPQAAAVU"]
[Tue May 05 21:58:39.213957 2026] [:error] [pid 25743:tid 25757] [client 162.158.111.125:12920] [client 162.158.111.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afn3j2-PCMRhF5DdUnP9nQAAAAo"]
[Wed May 06 00:41:22.641454 2026] [:error] [pid 2324:tid 2343] [client 162.158.87.85:9447] [client 162.158.87.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afodsmqe2hrcI52A1HzSGgAAAVE"]
[Wed May 06 00:51:36.494696 2026] [:error] [pid 25745:tid 25820] [client 172.71.172.25:12503] [client 172.71.172.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afogGJsd7hb7vrvCNBlpgAAAANM"]
[Wed May 06 01:22:08.051441 2026] [:error] [pid 2324:tid 2341] [client 172.70.240.83:9485] [client 172.70.240.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afonQGqe2hrcI52A1HzfPAAAAU8"]
[Wed May 06 01:41:33.085647 2026] [:error] [pid 2324:tid 2334] [client 34.134.205.254:45694] [client 34.134.205.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "aforzWqe2hrcI52A1HzmeAAAAUg"]
[Wed May 06 01:52:01.387225 2026] [:error] [pid 25745:tid 25818] [client 172.70.246.55:11545] [client 172.70.246.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afouQZsd7hb7vrvCNBlv3wAAANE"]
[Wed May 06 02:40:11.038482 2026] [:error] [pid 25835:tid 25857] [client 172.70.243.110:13529] [client 172.70.243.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afo5i1DT5nGJyh1439wULAAAARQ"]
[Wed May 06 02:47:49.386047 2026] [:error] [pid 54732:tid 54734] [client 162.158.94.81:10911] [client 162.158.94.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afo7VbGgYlDOb3nfuJRgIwAAAEA"]
[Wed May 06 03:07:12.192007 2026] [:error] [pid 25743:tid 25749] [client 172.71.148.29:13578] [client 172.71.148.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "afo_4G-PCMRhF5DdUnNM1QAAAAI"]
[Wed May 06 10:20:04.470089 2026] [:error] [pid 9789:tid 9807] [client 134.199.166.32:62312] [client 134.199.166.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.166.32, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "afqlVD_YStPJSCHPkUUkGgAAAFA"]
[Wed May 06 10:20:04.482638 2026] [proxy_fcgi:error] [pid 9789:tid 9807] [client 134.199.166.32:62312] AH01071: Got error 'Primary script unknown'
[Wed May 06 11:35:13.356793 2026] [:error] [pid 13443:tid 13458] [client 24.48.106.22:58937] [client 24.48.106.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.48.106.22, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afq28QCyfZallDmsQrd4ZAAAAU0"]
[Wed May 06 11:35:13.369210 2026] [proxy_fcgi:error] [pid 13443:tid 13458] [client 24.48.106.22:58937] AH01071: Got error 'Primary script unknown'
[Wed May 06 11:45:34.320876 2026] [:error] [pid 592:tid 606] [client 178.128.66.188:59192] [client 178.128.66.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.66.188, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "afq5XpiX28mb6xLi2PyFegAAAoo"]
[Wed May 06 11:45:34.332668 2026] [proxy_fcgi:error] [pid 592:tid 606] [client 178.128.66.188:59192] AH01071: Got error 'Primary script unknown'
[Wed May 06 23:42:10.815513 2026] [:error] [pid 9789:tid 9805] [client 103.178.79.88:51462] [client 103.178.79.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.88, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afthUj_YStPJSCHPkUW3cwAAAE4"]
[Wed May 06 23:42:10.827082 2026] [proxy_fcgi:error] [pid 9789:tid 9805] [client 103.178.79.88:51462] AH01071: Got error 'Primary script unknown'
[Thu May 07 05:14:37.620211 2026] [:error] [pid 29605:tid 29614] [client 173.239.214.225:26393] [client 173.239.214.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afuvPYnxrTjETioEY0TZlwAAAAA"]
[Thu May 07 06:12:00.013627 2026] [:error] [pid 4539:tid 4546] [client 176.78.80.229:64133] [client 176.78.80.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.78.80.229, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afu8sIPEZE1565sDGnw1lgAAAQU"]
[Thu May 07 06:12:00.028242 2026] [proxy_fcgi:error] [pid 4539:tid 4546] [client 176.78.80.229:64133] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:32.107822 2026] [proxy_fcgi:error] [pid 4539:tid 4558] [client 172.202.28.4:1027] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:32.840225 2026] [proxy_fcgi:error] [pid 4539:tid 4553] [client 172.202.28.4:1027] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:33.399579 2026] [proxy_fcgi:error] [pid 4539:tid 4558] [client 172.202.28.4:1027] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:33.590285 2026] [proxy_fcgi:error] [pid 4539:tid 4556] [client 172.202.28.4:1027] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:33.969432 2026] [proxy_fcgi:error] [pid 4539:tid 4550] [client 172.202.28.4:1027] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:34.160167 2026] [proxy_fcgi:error] [pid 4539:tid 4561] [client 172.202.28.4:1027] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:34.350989 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 172.202.28.4:1027] AH01071: Got error 'Primary script unknown'
[Thu May 07 06:45:34.726500 2026] [:error] [pid 4539:tid 4551] [client 172.202.28.4:1027] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvEjoPEZE1565sDGnxNYQAAAQo"]
[Thu May 07 06:45:35.489866 2026] [:error] [pid 29710:tid 29712] [client 172.202.28.4:1272] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvEj_0atTQld9Y2ht_6igAAAMA"]
[Thu May 07 06:45:36.264839 2026] [:error] [pid 29605:tid 29630] [client 172.202.28.4:1037] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvEkInxrTjETioEY0TxCwAAABA"]
[Thu May 07 06:45:37.013790 2026] [:error] [pid 29606:tid 29648] [client 172.202.28.4:1073] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvEkRR5HjZ1PlSAiKt1eQAAAEc"]
[Thu May 07 12:41:20.174959 2026] [proxy_fcgi:error] [pid 1143:tid 1166] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:20.393505 2026] [proxy_fcgi:error] [pid 1143:tid 1160] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:20.612684 2026] [proxy_fcgi:error] [pid 1143:tid 1145] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:20.833582 2026] [proxy_fcgi:error] [pid 1143:tid 1164] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:21.052379 2026] [proxy_fcgi:error] [pid 1143:tid 1162] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:21.271520 2026] [proxy_fcgi:error] [pid 1143:tid 1168] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:21.711330 2026] [proxy_fcgi:error] [pid 1143:tid 1151] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:21.930094 2026] [proxy_fcgi:error] [pid 1143:tid 1163] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:22.149048 2026] [proxy_fcgi:error] [pid 1143:tid 1153] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:22.367384 2026] [proxy_fcgi:error] [pid 1143:tid 1147] [client 172.202.28.4:1048] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:41:22.582053 2026] [:error] [pid 1143:tid 1146] [client 172.202.28.4:1048] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "afwX8pb7qeI8X5VYRr6BvAAAAQE"]
[Thu May 07 12:41:23.480146 2026] [:error] [pid 56064:tid 56080] [client 172.202.28.4:11448] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "afwX8ysGkZZUEf_7QCMpuwAAAAs"]
[Thu May 07 12:41:24.380308 2026] [:error] [pid 56066:tid 56126] [client 172.202.28.4:11415] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "afwX9EYS8DGwDvklLv639gAAAMM"]
[Thu May 07 12:41:25.159581 2026] [:error] [pid 1143:tid 1169] [client 172.202.28.4:11443] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "afwX9Zb7qeI8X5VYRr6BvwAAARg"]
[Thu May 07 23:34:32.729722 2026] [:error] [pid 12374:tid 12381] [client 4.193.137.131:1442] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xleet.php"] [unique_id "afyxCBo3QnNcFDMfKt18BQAAAYM"]
[Thu May 07 23:34:33.090534 2026] [:error] [pid 15631:tid 15707] [client 4.193.137.131:1424] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xleet.php"] [unique_id "afyxCXvP1GkPUuuLfqVmrgAAANQ"]
[Thu May 07 23:34:33.451104 2026] [:error] [pid 15630:tid 15676] [client 4.193.137.131:1443] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xleet.php"] [unique_id "afyxCXTithRAi4821qvYxQAAAJA"]
[Thu May 07 23:34:33.817584 2026] [:error] [pid 15630:tid 15667] [client 4.193.137.131:1409] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xleet.php"] [unique_id "afyxCXTithRAi4821qvYxwAAAIc"]
[Fri May 08 01:43:14.786807 2026] [:error] [pid 28098:tid 28123] [client 49.36.181.140:50411] [client 49.36.181.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.181.140, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "afzPMsvhwfljlt8trSpDpwAAAFc"]
[Fri May 08 01:43:14.797774 2026] [proxy_fcgi:error] [pid 28098:tid 28123] [client 49.36.181.140:50411] AH01071: Got error 'Primary script unknown'
[Fri May 08 02:09:42.054775 2026] [:error] [pid 12374:tid 12401] [client 34.6.5.215:49734] [client 34.6.5.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "afzVZho3QnNcFDMfKt2JyAAAAZc"]
[Fri May 08 11:41:51.263477 2026] [:error] [pid 61356:tid 61400] [client 34.92.86.152:37866] [client 34.92.86.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af1bf4x3vpB8oWhUq2Pl9QAAAcw"]
[Fri May 08 15:28:56.668663 2026] [:error] [pid 61356:tid 61407] [client 34.122.144.100:56202] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2QuIx3vpB8oWhUq2M09wAAAdM"]
[Fri May 08 22:54:35.915229 2026] [:error] [pid 51009:tid 51077] [client 34.126.207.133:58896] [client 34.126.207.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af35K-B0GbUWhxgzX9VjewAAAIE"]
[Fri May 08 23:24:52.939862 2026] [:error] [pid 61356:tid 61412] [client 34.65.110.164:47696] [client 34.65.110.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af4ARIx3vpB8oWhUq2P2RAAAAdg"]
[Sat May 09 01:16:20.222474 2026] [:error] [pid 51009:tid 51090] [client 54.152.184.5:40426] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af4aZOB0GbUWhxgzX9WJzgAAAI4"]
[Sat May 09 01:16:21.259824 2026] [:error] [pid 51009:tid 51077] [client 54.152.184.5:40442] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4aZeB0GbUWhxgzX9WJ1QAAAIE"]
[Sat May 09 01:16:22.095884 2026] [proxy_fcgi:error] [pid 61355:tid 61367] [client 54.152.184.5:40454] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:16:22.318549 2026] [proxy_fcgi:error] [pid 61355:tid 61385] [client 54.152.184.5:40454] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:16:22.529647 2026] [proxy_fcgi:error] [pid 61355:tid 61384] [client 54.152.184.5:40454] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:16:22.740919 2026] [proxy_fcgi:error] [pid 61355:tid 61361] [client 54.152.184.5:40454] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:16:22.952037 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 54.152.184.5:40454] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:16:23.162323 2026] [proxy_fcgi:error] [pid 61355:tid 61370] [client 54.152.184.5:40454] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:16:23.370364 2026] [:error] [pid 61355:tid 61380] [client 54.152.184.5:40454] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/test.php"] [unique_id "af4aZ_khJTi30CBXmMkhkQAAAZM"]
[Sat May 09 01:16:24.194637 2026] [:error] [pid 51113:tid 51136] [client 54.152.184.5:40470] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpinfo"] [unique_id "af4aaEQfs7sWtqkpQIeYlQAAANU"]
[Sat May 09 01:16:25.028928 2026] [:error] [pid 51008:tid 51064] [client 54.152.184.5:40486] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/p.php"] [unique_id "af4aaXB58C2Y1tgLtuLUnQAAAE8"]
[Sat May 09 01:16:25.854386 2026] [:error] [pid 61317:tid 61329] [client 54.152.184.5:40498] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/debug.php"] [unique_id "af4aac-fFk_CedOCOYsFpQAAAUk"]
[Sat May 09 01:16:26.681337 2026] [:error] [pid 61356:tid 61406] [client 54.152.184.5:40516] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4aaox3vpB8oWhUq2MdgQAAAdI"]
[Sat May 09 01:16:27.508181 2026] [:error] [pid 61356:tid 61411] [client 54.152.184.5:40534] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4aa4x3vpB8oWhUq2MdgwAAAdc"]
[Sat May 09 01:16:28.335089 2026] [:error] [pid 61356:tid 61399] [client 54.152.184.5:40542] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4abIx3vpB8oWhUq2MdiQAAAcs"]
[Sat May 09 01:16:29.162592 2026] [:error] [pid 61355:tid 61369] [client 54.152.184.5:52122] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4abfkhJTi30CBXmMkhqAAAAYg"]
[Sat May 09 01:16:29.992196 2026] [:error] [pid 61356:tid 61395] [client 54.152.184.5:52142] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4abYx3vpB8oWhUq2MdjQAAAcc"]
[Sat May 09 01:16:30.826881 2026] [:error] [pid 61355:tid 61376] [client 54.152.184.5:52156] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4abvkhJTi30CBXmMkhrQAAAY8"]
[Sat May 09 01:16:31.654920 2026] [:error] [pid 61355:tid 61380] [client 54.152.184.5:52174] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/info"] [unique_id "af4ab_khJTi30CBXmMkhrgAAAZM"]
[Sat May 09 01:16:32.484675 2026] [:error] [pid 61356:tid 61393] [client 54.152.184.5:52180] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/php-info.php"] [unique_id "af4acIx3vpB8oWhUq2MdmAAAAcU"]
[Sat May 09 01:16:33.307705 2026] [:error] [pid 61356:tid 61407] [client 54.152.184.5:52192] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpversion.php"] [unique_id "af4acYx3vpB8oWhUq2MdpQAAAdM"]
[Sat May 09 01:16:34.138538 2026] [:error] [pid 34318:tid 34329] [client 54.152.184.5:52214] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/_phpinfo.php"] [unique_id "af4acsr3guirgJiKhzAAUQAAAQk"]
[Sat May 09 01:16:34.966895 2026] [:error] [pid 61355:tid 61362] [client 54.152.184.5:52244] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4acvkhJTi30CBXmMkhtAAAAYE"]
[Sat May 09 01:16:35.796107 2026] [:error] [pid 51007:tid 51045] [client 54.152.184.5:52262] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/server-info.php"] [unique_id "af4ac1MagSGstWKyzzUWZAAAABc"]
[Sat May 09 01:16:36.630584 2026] [:error] [pid 61355:tid 61383] [client 54.152.184.5:52284] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/server-status.php"] [unique_id "af4adPkhJTi30CBXmMkhuwAAAZY"]
[Sat May 09 01:16:37.459659 2026] [:error] [pid 61317:tid 61335] [client 54.152.184.5:52306] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4adc-fFk_CedOCOYsFuAAAAU8"]
[Sat May 09 01:16:38.287157 2026] [:error] [pid 61355:tid 61377] [client 54.152.184.5:52324] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/_environment"] [unique_id "af4advkhJTi30CBXmMkhwgAAAZA"]
[Sat May 09 01:16:39.113062 2026] [:error] [pid 61356:tid 61401] [client 54.152.184.5:47362] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4ad4x3vpB8oWhUq2MdtgAAAc0"]
[Sat May 09 01:16:39.949665 2026] [:error] [pid 51007:tid 51033] [client 54.152.184.5:47382] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4ad1MagSGstWKyzzUWagAAAAs"]
[Sat May 09 01:16:40.783259 2026] [:error] [pid 61317:tid 61328] [client 54.152.184.5:47406] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4aeM-fFk_CedOCOYsF6wAAAUg"]
[Sat May 09 01:16:41.607643 2026] [:error] [pid 61355:tid 61379] [client 54.152.184.5:47418] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4aefkhJTi30CBXmMkhxQAAAZI"]
[Sat May 09 01:16:42.434735 2026] [:error] [pid 61355:tid 61372] [client 54.152.184.5:47436] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4aevkhJTi30CBXmMkhzgAAAYs"]
[Sat May 09 01:16:43.262070 2026] [:error] [pid 61355:tid 61367] [client 54.152.184.5:47440] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4ae_khJTi30CBXmMkh1gAAAYY"]
[Sat May 09 01:16:44.087529 2026] [:error] [pid 61355:tid 61371] [client 54.152.184.5:47462] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4afPkhJTi30CBXmMkh2wAAAYo"]
[Sat May 09 01:16:44.910786 2026] [:error] [pid 34318:tid 34323] [client 54.152.184.5:47472] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4afMr3guirgJiKhzAAbwAAAQM"]
[Sat May 09 01:16:45.733966 2026] [:error] [pid 61355:tid 61379] [client 54.152.184.5:47486] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpinfo.php~"] [unique_id "af4affkhJTi30CBXmMkh6gAAAZI"]
[Sat May 09 01:16:46.558614 2026] [:error] [pid 51007:tid 51041] [client 54.152.184.5:47500] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/info.php.bak"] [unique_id "af4aflMagSGstWKyzzUWcwAAABM"]
[Sat May 09 01:16:47.382455 2026] [:error] [pid 51009:tid 51094] [client 54.152.184.5:47524] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4af-B0GbUWhxgzX9WKFwAAAJI"]
[Sat May 09 01:16:48.207698 2026] [:error] [pid 61355:tid 61367] [client 54.152.184.5:47542] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4agPkhJTi30CBXmMkh-QAAAYY"]
[Sat May 09 01:16:49.033388 2026] [:error] [pid 51009:tid 51099] [client 54.152.184.5:57814] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4ageB0GbUWhxgzX9WKJQAAAJc"]
[Sat May 09 01:16:49.859418 2026] [:error] [pid 51007:tid 51042] [client 54.152.184.5:57828] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4agVMagSGstWKyzzUWhwAAABQ"]
[Sat May 09 01:16:50.683791 2026] [:error] [pid 61355:tid 61362] [client 54.152.184.5:57848] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4agvkhJTi30CBXmMkiAgAAAYE"]
[Sat May 09 01:16:51.508282 2026] [:error] [pid 34318:tid 34326] [client 54.152.184.5:57868] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4ag8r3guirgJiKhzAAmAAAAQY"]
[Sat May 09 01:16:52.332754 2026] [:error] [pid 61355:tid 61363] [client 54.152.184.5:57886] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4ahPkhJTi30CBXmMkiBwAAAYI"]
[Sat May 09 01:16:53.157190 2026] [:error] [pid 61355:tid 61370] [client 54.152.184.5:57906] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4ahfkhJTi30CBXmMkiEgAAAYk"]
[Sat May 09 01:16:53.984048 2026] [:error] [pid 61317:tid 61341] [client 54.152.184.5:57932] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4ahc-fFk_CedOCOYsGQgAAAVU"]
[Sat May 09 01:16:54.807560 2026] [:error] [pid 51008:tid 51062] [client 54.152.184.5:57938] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4ahnB58C2Y1tgLtuLUuAAAAE0"]
[Sat May 09 01:16:55.635513 2026] [:error] [pid 61317:tid 61343] [client 54.152.184.5:57956] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4ah8-fFk_CedOCOYsGSQAAAVc"]
[Sat May 09 01:16:56.466950 2026] [:error] [pid 61355:tid 61377] [client 54.152.184.5:57966] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4aiPkhJTi30CBXmMkiOwAAAZA"]
[Sat May 09 01:16:57.294598 2026] [:error] [pid 51007:tid 51033] [client 54.152.184.5:57994] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4aiVMagSGstWKyzzUWlwAAAAs"]
[Sat May 09 01:16:58.120068 2026] [:error] [pid 61317:tid 61331] [client 54.152.184.5:58008] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4ais-fFk_CedOCOYsGUgAAAUs"]
[Sat May 09 01:16:58.945299 2026] [:error] [pid 34318:tid 34337] [client 54.152.184.5:54796] [client 54.152.184.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4aisr3guirgJiKhzAApgAAARE"]
[Sat May 09 01:30:53.724352 2026] [:error] [pid 61356:tid 61401] [client 13.52.104.234:50490] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af4dzYx3vpB8oWhUq2Mm0AAAAc0"]
[Sat May 09 01:30:54.571708 2026] [:error] [pid 51009:tid 51098] [client 13.52.104.234:50502] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4dzuB0GbUWhxgzX9WQSAAAAJY"]
[Sat May 09 01:30:55.273643 2026] [proxy_fcgi:error] [pid 51009:tid 51084] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:55.457964 2026] [proxy_fcgi:error] [pid 51009:tid 51079] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:55.627591 2026] [proxy_fcgi:error] [pid 51009:tid 51093] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:55.808306 2026] [proxy_fcgi:error] [pid 51009:tid 51087] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:55.991371 2026] [proxy_fcgi:error] [pid 51009:tid 51091] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:56.160494 2026] [proxy_fcgi:error] [pid 51009:tid 51092] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:56.344008 2026] [proxy_fcgi:error] [pid 51009:tid 51079] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:56.697793 2026] [proxy_fcgi:error] [pid 51009:tid 51076] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:56.867801 2026] [proxy_fcgi:error] [pid 51009:tid 51098] [client 13.52.104.234:44260] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:30:57.216447 2026] [:error] [pid 51009:tid 51092] [client 13.52.104.234:44260] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4d0eB0GbUWhxgzX9WQewAAAJA"]
[Sat May 09 01:30:57.881037 2026] [:error] [pid 61356:tid 61408] [client 13.52.104.234:44284] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4d0Yx3vpB8oWhUq2Mm2AAAAdQ"]
[Sat May 09 01:30:58.553148 2026] [:error] [pid 61355:tid 61378] [client 13.52.104.234:44298] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4d0vkhJTi30CBXmMkuFAAAAZE"]
[Sat May 09 01:30:59.229407 2026] [:error] [pid 51009:tid 51078] [client 13.52.104.234:44308] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4d0-B0GbUWhxgzX9WQlQAAAII"]
[Sat May 09 01:30:59.901195 2026] [:error] [pid 51009:tid 51098] [client 13.52.104.234:44336] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4d0-B0GbUWhxgzX9WQnQAAAJY"]
[Sat May 09 01:31:00.607108 2026] [:error] [pid 51009:tid 51088] [client 13.52.104.234:44358] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info"] [unique_id "af4d1OB0GbUWhxgzX9WQpAAAAIw"]
[Sat May 09 01:31:01.283671 2026] [:error] [pid 61317:tid 61337] [client 13.52.104.234:44372] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php-info.php"] [unique_id "af4d1c-fFk_CedOCOYsLbQAAAVE"]
[Sat May 09 01:31:01.984477 2026] [:error] [pid 61356:tid 61406] [client 13.52.104.234:44388] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpversion.php"] [unique_id "af4d1Yx3vpB8oWhUq2Mm3QAAAdI"]
[Sat May 09 01:31:02.645015 2026] [:error] [pid 61317:tid 61328] [client 13.52.104.234:44406] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/_phpinfo.php"] [unique_id "af4d1s-fFk_CedOCOYsLcAAAAUg"]
[Sat May 09 01:31:03.305054 2026] [:error] [pid 61317:tid 61327] [client 13.52.104.234:44424] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4d18-fFk_CedOCOYsLdAAAAUc"]
[Sat May 09 01:31:04.018892 2026] [:error] [pid 61355:tid 61377] [client 13.52.104.234:44448] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/server-info.php"] [unique_id "af4d2PkhJTi30CBXmMkuIAAAAZA"]
[Sat May 09 01:31:08.558445 2026] [:error] [pid 61355:tid 61370] [client 13.52.104.234:49632] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/server-status.php"] [unique_id "af4d3PkhJTi30CBXmMkuNAAAAYk"]
[Sat May 09 01:31:09.216271 2026] [:error] [pid 61355:tid 61362] [client 13.52.104.234:49644] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4d3fkhJTi30CBXmMkuPQAAAYE"]
[Sat May 09 01:31:09.872983 2026] [:error] [pid 51113:tid 51115] [client 13.52.104.234:49660] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/_environment"] [unique_id "af4d3UQfs7sWtqkpQIeavQAAAMA"]
[Sat May 09 01:31:10.531231 2026] [:error] [pid 51007:tid 51041] [client 13.52.104.234:49690] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4d3lMagSGstWKyzzUaJwAAABM"]
[Sat May 09 01:31:11.189201 2026] [:error] [pid 51008:tid 51055] [client 13.52.104.234:49714] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4d33B58C2Y1tgLtuLaVwAAAEY"]
[Sat May 09 01:31:11.846558 2026] [:error] [pid 51009:tid 51076] [client 13.52.104.234:49728] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4d3-B0GbUWhxgzX9WRGAAAAIA"]
[Sat May 09 01:31:12.495061 2026] [:error] [pid 61356:tid 61392] [client 13.52.104.234:49736] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4d4Ix3vpB8oWhUq2MnCQAAAcQ"]
[Sat May 09 01:31:13.152305 2026] [:error] [pid 61356:tid 61396] [client 13.52.104.234:49756] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4d4Yx3vpB8oWhUq2MnDwAAAcg"]
[Sat May 09 01:31:13.812387 2026] [:error] [pid 61355:tid 61361] [client 13.52.104.234:49778] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4d4fkhJTi30CBXmMkuVwAAAYA"]
[Sat May 09 01:31:14.477210 2026] [:error] [pid 61317:tid 61335] [client 13.52.104.234:46782] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4d4s-fFk_CedOCOYsLhQAAAU8"]
[Sat May 09 01:31:15.132657 2026] [:error] [pid 61317:tid 61340] [client 13.52.104.234:46802] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4d48-fFk_CedOCOYsLhgAAAVQ"]
[Sat May 09 01:31:15.788106 2026] [:error] [pid 61356:tid 61401] [client 13.52.104.234:46818] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo.php~"] [unique_id "af4d44x3vpB8oWhUq2MnJgAAAc0"]
[Sat May 09 01:31:16.475885 2026] [:error] [pid 61355:tid 61380] [client 13.52.104.234:46836] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php.bak"] [unique_id "af4d5PkhJTi30CBXmMkuaQAAAZM"]
[Sat May 09 01:31:17.132624 2026] [:error] [pid 61355:tid 61375] [client 13.52.104.234:46856] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4d5fkhJTi30CBXmMkubwAAAY4"]
[Sat May 09 01:31:17.794272 2026] [:error] [pid 61317:tid 61338] [client 13.52.104.234:46874] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4d5c-fFk_CedOCOYsLjQAAAVI"]
[Sat May 09 01:31:18.452707 2026] [:error] [pid 61356:tid 61410] [client 13.52.104.234:46886] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4d5ox3vpB8oWhUq2MnNAAAAdY"]
[Sat May 09 01:31:19.117158 2026] [:error] [pid 61317:tid 61336] [client 13.52.104.234:46914] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4d58-fFk_CedOCOYsLkgAAAVA"]
[Sat May 09 01:31:19.773425 2026] [:error] [pid 61317:tid 61327] [client 13.52.104.234:46932] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4d58-fFk_CedOCOYsLlwAAAUc"]
[Sat May 09 01:31:20.434175 2026] [:error] [pid 51009:tid 51087] [client 13.52.104.234:46948] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4d6OB0GbUWhxgzX9WRGQAAAIs"]
[Sat May 09 01:31:21.095787 2026] [:error] [pid 61356:tid 61396] [client 13.52.104.234:46970] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4d6Yx3vpB8oWhUq2MnRQAAAcg"]
[Sat May 09 01:31:21.760358 2026] [:error] [pid 61355:tid 61364] [client 13.52.104.234:47002] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4d6fkhJTi30CBXmMkuiAAAAYM"]
[Sat May 09 01:31:22.417826 2026] [:error] [pid 51009:tid 51097] [client 13.52.104.234:47012] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4d6uB0GbUWhxgzX9WRGgAAAJU"]
[Sat May 09 01:31:23.074522 2026] [:error] [pid 51009:tid 51095] [client 13.52.104.234:47034] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4d6-B0GbUWhxgzX9WRHAAAAJM"]
[Sat May 09 01:31:23.732249 2026] [:error] [pid 51009:tid 51091] [client 13.52.104.234:47058] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4d6-B0GbUWhxgzX9WRIAAAAI8"]
[Sat May 09 01:31:24.393616 2026] [:error] [pid 61317:tid 61321] [client 13.52.104.234:47084] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4d7M-fFk_CedOCOYsLnAAAAUE"]
[Sat May 09 01:31:25.049175 2026] [:error] [pid 61356:tid 61392] [client 13.52.104.234:52010] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4d7Yx3vpB8oWhUq2MnUgAAAcQ"]
[Sat May 09 01:31:25.708584 2026] [:error] [pid 61355:tid 61364] [client 13.52.104.234:52036] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4d7fkhJTi30CBXmMkurAAAAYM"]
[Sat May 09 01:31:26.366344 2026] [:error] [pid 61317:tid 61337] [client 13.52.104.234:52060] [client 13.52.104.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4d7s-fFk_CedOCOYsLowAAAVE"]
[Sat May 09 03:30:44.397160 2026] [:error] [pid 7460:tid 7562] [client 54.152.184.5:46770] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af455IM57Qlx1SEvlleiOQAAAIw"]
[Sat May 09 03:30:45.449004 2026] [:error] [pid 7458:tid 7502] [client 54.152.184.5:46792] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env"] [unique_id "af455YF0gkBOg9_OBdxhRAAAAAk"]
[Sat May 09 03:30:46.295093 2026] [:error] [pid 7459:tid 7543] [client 54.152.184.5:46812] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.local"] [unique_id "af455jMmHx_wknzWc2aH1wAAAFQ"]
[Sat May 09 03:30:47.131360 2026] [:error] [pid 7458:tid 7504] [client 54.152.184.5:46830] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.production"] [unique_id "af4554F0gkBOg9_OBdxhTAAAAAs"]
[Sat May 09 03:30:47.960610 2026] [:error] [pid 7460:tid 7563] [client 54.152.184.5:46844] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "af4554M57Qlx1SEvlleiPwAAAI0"]
[Sat May 09 03:30:48.799143 2026] [:error] [pid 7459:tid 7527] [client 54.152.184.5:49142] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.development"] [unique_id "af456DMmHx_wknzWc2aH6gAAAEQ"]
[Sat May 09 03:30:49.626905 2026] [:error] [pid 7577:tid 7586] [client 54.152.184.5:49164] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.test"] [unique_id "af456RyoeQ6NE55oepPQKAAAAMc"]
[Sat May 09 03:30:50.477280 2026] [:error] [pid 7460:tid 7573] [client 54.152.184.5:49182] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.remote"] [unique_id "af456oM57Qlx1SEvlleiSQAAAJc"]
[Sat May 09 03:30:52.751348 2026] [:error] [pid 7460:tid 7564] [client 54.152.184.5:49216] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "af457IM57Qlx1SEvlleiUAAAAI4"]
[Sat May 09 03:30:53.578557 2026] [:error] [pid 7460:tid 7567] [client 54.152.184.5:49242] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.save"] [unique_id "af457YM57Qlx1SEvlleiVAAAAJE"]
[Sat May 09 03:30:54.409992 2026] [:error] [pid 7577:tid 7591] [client 54.152.184.5:49264] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.old"] [unique_id "af457hyoeQ6NE55oepPQQAAAAMw"]
[Sat May 09 03:30:55.244703 2026] [:error] [pid 7459:tid 7528] [client 54.152.184.5:49292] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "af457zMmHx_wknzWc2aH_QAAAEU"]
[Sat May 09 03:30:56.080228 2026] [:error] [pid 7577:tid 7591] [client 54.152.184.5:49308] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.example"] [unique_id "af458ByoeQ6NE55oepPQTAAAAMw"]
[Sat May 09 03:30:56.909709 2026] [:error] [pid 7459:tid 7526] [client 54.152.184.5:49330] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "af458DMmHx_wknzWc2aIAQAAAEM"]
[Sat May 09 03:30:57.736290 2026] [:error] [pid 7460:tid 7557] [client 54.152.184.5:49342] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "af458YM57Qlx1SEvlleiZQAAAIc"]
[Sat May 09 03:30:58.562865 2026] [:error] [pid 7460:tid 7571] [client 54.152.184.5:49360] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.stage"] [unique_id "af458oM57Qlx1SEvlleiagAAAJU"]
[Sat May 09 03:30:59.392905 2026] [:error] [pid 7458:tid 7503] [client 54.152.184.5:42180] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.ci"] [unique_id "af4584F0gkBOg9_OBdxhdQAAAAo"]
[Sat May 09 03:31:00.216913 2026] [:error] [pid 7460:tid 7555] [client 54.152.184.5:42198] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.docker"] [unique_id "af459IM57Qlx1SEvlleidgAAAIU"]
[Sat May 09 03:31:01.044198 2026] [:error] [pid 7577:tid 7592] [client 54.152.184.5:42226] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.live"] [unique_id "af459RyoeQ6NE55oepPQYAAAAM0"]
[Sat May 09 03:31:01.875156 2026] [:error] [pid 7460:tid 7564] [client 54.152.184.5:42238] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.preprod"] [unique_id "af459YM57Qlx1SEvlleifwAAAI4"]
[Sat May 09 03:31:02.705762 2026] [:error] [pid 7460:tid 7552] [client 54.152.184.5:42262] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.uat"] [unique_id "af459oM57Qlx1SEvlleihgAAAII"]
[Sat May 09 03:31:03.534384 2026] [:error] [pid 7460:tid 7574] [client 54.152.184.5:42278] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "af4594M57Qlx1SEvlleiiwAAAJg"]
[Sat May 09 03:31:04.363643 2026] [:error] [pid 7458:tid 7510] [client 54.152.184.5:42302] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "af45-IF0gkBOg9_OBdxhfQAAABE"]
[Sat May 09 03:31:05.196497 2026] [:error] [pid 7459:tid 7530] [client 54.152.184.5:42324] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env~"] [unique_id "af45-TMmHx_wknzWc2aIGAAAAEc"]
[Sat May 09 03:31:06.022068 2026] [:error] [pid 7459:tid 7543] [client 54.152.184.5:42344] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env1"] [unique_id "af45-jMmHx_wknzWc2aIHAAAAFQ"]
[Sat May 09 03:31:06.851044 2026] [:error] [pid 7577:tid 7591] [client 54.152.184.5:42354] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env2"] [unique_id "af45-hyoeQ6NE55oepPQeQAAAMw"]
[Sat May 09 03:31:07.676852 2026] [:error] [pid 7458:tid 7504] [client 54.152.184.5:42368] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env_copy"] [unique_id "af45-4F0gkBOg9_OBdxhkAAAAAs"]
[Sat May 09 03:31:08.506119 2026] [:error] [pid 7460:tid 7560] [client 54.152.184.5:42394] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.txt"] [unique_id "af45_IM57Qlx1SEvlleiqAAAAIo"]
[Sat May 09 03:31:09.334273 2026] [:error] [pid 7459:tid 7542] [client 54.152.184.5:36228] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.json"] [unique_id "af45_TMmHx_wknzWc2aILAAAAFM"]
[Sat May 09 03:31:10.163131 2026] [:error] [pid 7459:tid 7523] [client 54.152.184.5:36248] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.yaml"] [unique_id "af45_jMmHx_wknzWc2aIMAAAAEA"]
[Sat May 09 03:31:10.991553 2026] [:error] [pid 7460:tid 7570] [client 54.152.184.5:36266] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.env.yml"] [unique_id "af45_oM57Qlx1SEvlleisAAAAJQ"]
[Sat May 09 03:31:11.818866 2026] [:error] [pid 7460:tid 7555] [client 54.152.184.5:36278] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/app/.env"] [unique_id "af45_4M57Qlx1SEvlleiuAAAAIU"]
[Sat May 09 03:31:12.647766 2026] [:error] [pid 7577:tid 7593] [client 54.152.184.5:36304] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/apps/.env"] [unique_id "af46AByoeQ6NE55oepPQhgAAAM4"]
[Sat May 09 03:31:13.477198 2026] [:error] [pid 7458:tid 7506] [client 54.152.184.5:36322] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/api/.env"] [unique_id "af46AYF0gkBOg9_OBdxhowAAAA0"]
[Sat May 09 03:31:14.305760 2026] [:error] [pid 7577:tid 7597] [client 54.152.184.5:36336] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/web/.env"] [unique_id "af46AhyoeQ6NE55oepPQjgAAANI"]
[Sat May 09 03:31:15.130143 2026] [:error] [pid 7458:tid 7505] [client 54.152.184.5:36362] [client 54.152.184.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/site/.env"] [unique_id "af46A4F0gkBOg9_OBdxhqAAAAAw"]
[Sat May 09 04:00:19.714366 2026] [:error] [pid 9184:tid 9209] [client 45.130.83.105:41593] [client 45.130.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.105, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "af5A04jfODqb_i0Fm99KmwAAAAw"]
[Sat May 09 04:00:19.728587 2026] [proxy_fcgi:error] [pid 9184:tid 9209] [client 45.130.83.105:41593] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:01:51.710093 2026] [:error] [pid 9187:tid 9261] [client 13.52.104.234:45600] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af5PPxC7An6gkXsRsaHUhwAAAIg"]
[Sat May 09 05:01:52.539778 2026] [:error] [pid 9293:tid 9308] [client 13.52.104.234:45628] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "af5PQJR__qEzV5O6Z2OxJAAAAMs"]
[Sat May 09 05:01:53.199534 2026] [:error] [pid 9663:tid 9681] [client 13.52.104.234:45656] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "af5PQZcWIu01SCxbjwu9QAAAAQ8"]
[Sat May 09 05:01:53.857656 2026] [:error] [pid 9184:tid 9216] [client 13.52.104.234:45666] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "af5PQYjfODqb_i0Fm99VDwAAABM"]
[Sat May 09 05:01:54.517791 2026] [:error] [pid 9293:tid 9316] [client 13.52.104.234:56034] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "af5PQpR__qEzV5O6Z2OxJgAAANM"]
[Sat May 09 05:01:55.167685 2026] [:error] [pid 9663:tid 9689] [client 13.52.104.234:56048] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.development"] [unique_id "af5PQ5cWIu01SCxbjwu9RQAAARc"]
[Sat May 09 05:01:55.826222 2026] [:error] [pid 9187:tid 9253] [client 13.52.104.234:56062] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.test"] [unique_id "af5PQxC7An6gkXsRsaHUkAAAAIA"]
[Sat May 09 05:01:56.484112 2026] [:error] [pid 9293:tid 9309] [client 13.52.104.234:56082] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.remote"] [unique_id "af5PRJR__qEzV5O6Z2OxKAAAAMw"]
[Sat May 09 05:01:57.139737 2026] [:error] [pid 9187:tid 9275] [client 13.52.104.234:56096] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "af5PRRC7An6gkXsRsaHUlAAAAJY"]
[Sat May 09 05:01:57.797748 2026] [:error] [pid 9663:tid 9676] [client 13.52.104.234:56114] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "af5PRZcWIu01SCxbjwu9RgAAAQo"]
[Sat May 09 05:01:58.457219 2026] [:error] [pid 9293:tid 9301] [client 13.52.104.234:56124] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.save"] [unique_id "af5PRpR__qEzV5O6Z2OxLQAAAMQ"]
[Sat May 09 05:01:59.110665 2026] [:error] [pid 9186:tid 9228] [client 13.52.104.234:56136] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.old"] [unique_id "af5PRxW4eFOEw1mKOgJvUAAAAEI"]
[Sat May 09 05:01:59.764417 2026] [:error] [pid 9920:tid 9938] [client 13.52.104.234:56150] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.sample"] [unique_id "af5PR0xitGYhlzgZb5ZOMwAAAdA"]
[Sat May 09 05:02:00.423274 2026] [:error] [pid 9293:tid 9321] [client 13.52.104.234:56170] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.example"] [unique_id "af5PSJR__qEzV5O6Z2OxMAAAANg"]
[Sat May 09 05:02:01.083307 2026] [:error] [pid 9187:tid 9258] [client 13.52.104.234:56190] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dev"] [unique_id "af5PSRC7An6gkXsRsaHUnAAAAIU"]
[Sat May 09 05:02:01.741652 2026] [:error] [pid 9187:tid 9263] [client 13.52.104.234:56210] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.prod"] [unique_id "af5PSRC7An6gkXsRsaHUngAAAIo"]
[Sat May 09 05:02:02.397834 2026] [:error] [pid 9187:tid 9275] [client 13.52.104.234:56240] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.stage"] [unique_id "af5PShC7An6gkXsRsaHUowAAAJY"]
[Sat May 09 05:02:03.057771 2026] [:error] [pid 9293:tid 9307] [client 13.52.104.234:56266] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.ci"] [unique_id "af5PS5R__qEzV5O6Z2OxMgAAAMo"]
[Sat May 09 05:02:03.712272 2026] [:error] [pid 9920:tid 9930] [client 13.52.104.234:56282] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.docker"] [unique_id "af5PS0xitGYhlzgZb5ZOOQAAAcg"]
[Sat May 09 05:02:04.364755 2026] [:error] [pid 9760:tid 9779] [client 13.52.104.234:56302] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.live"] [unique_id "af5PTGIkCp-C_fh0s7IAfwAAAU0"]
[Sat May 09 05:02:05.021174 2026] [:error] [pid 9663:tid 9676] [client 13.52.104.234:36032] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.preprod"] [unique_id "af5PTZcWIu01SCxbjwu9VAAAAQo"]
[Sat May 09 05:02:05.680342 2026] [:error] [pid 9663:tid 9679] [client 13.52.104.234:36052] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.uat"] [unique_id "af5PTZcWIu01SCxbjwu9WwAAAQ0"]
[Sat May 09 05:02:06.337569 2026] [:error] [pid 9293:tid 9313] [client 13.52.104.234:36070] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.dist"] [unique_id "af5PTpR__qEzV5O6Z2OxNQAAANA"]
[Sat May 09 05:02:06.995542 2026] [:error] [pid 9833:tid 9859] [client 13.52.104.234:36084] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.swp"] [unique_id "af5PTiM9JmxIS0KGZUAsKQAAAZU"]
[Sat May 09 05:02:07.653872 2026] [:error] [pid 9760:tid 9766] [client 13.52.104.234:36094] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env~"] [unique_id "af5PT2IkCp-C_fh0s7IAgwAAAUA"]
[Sat May 09 05:02:08.314097 2026] [:error] [pid 9760:tid 9767] [client 13.52.104.234:36096] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env1"] [unique_id "af5PUGIkCp-C_fh0s7IAhQAAAUE"]
[Sat May 09 05:02:08.968003 2026] [:error] [pid 9187:tid 9268] [client 13.52.104.234:36112] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env2"] [unique_id "af5PUBC7An6gkXsRsaHUpwAAAI8"]
[Sat May 09 05:02:09.624733 2026] [:error] [pid 9920:tid 9946] [client 13.52.104.234:36126] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env_copy"] [unique_id "af5PUUxitGYhlzgZb5ZOQgAAAdg"]
[Sat May 09 05:02:10.283333 2026] [:error] [pid 9663:tid 9675] [client 13.52.104.234:36140] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.txt"] [unique_id "af5PUpcWIu01SCxbjwu9XwAAAQk"]
[Sat May 09 05:02:10.941641 2026] [:error] [pid 9293:tid 9303] [client 13.52.104.234:36148] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.json"] [unique_id "af5PUpR__qEzV5O6Z2OxQwAAAMY"]
[Sat May 09 05:02:11.605399 2026] [:error] [pid 9920:tid 9932] [client 13.52.104.234:36172] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.yaml"] [unique_id "af5PU0xitGYhlzgZb5ZORAAAAco"]
[Sat May 09 05:02:12.270725 2026] [:error] [pid 9187:tid 9253] [client 13.52.104.234:36182] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.yml"] [unique_id "af5PVBC7An6gkXsRsaHUqgAAAIA"]
[Sat May 09 05:02:12.929116 2026] [:error] [pid 9187:tid 9272] [client 13.52.104.234:36202] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "af5PVBC7An6gkXsRsaHUrgAAAJM"]
[Sat May 09 05:02:13.588930 2026] [:error] [pid 9187:tid 9255] [client 13.52.104.234:36232] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/apps/.env"] [unique_id "af5PVRC7An6gkXsRsaHUrwAAAII"]
[Sat May 09 05:02:14.244500 2026] [:error] [pid 9920:tid 9932] [client 13.52.104.234:36238] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "af5PVkxitGYhlzgZb5ZOUwAAAco"]
[Sat May 09 05:02:14.898128 2026] [:error] [pid 9293:tid 9318] [client 13.52.104.234:54902] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/web/.env"] [unique_id "af5PVpR__qEzV5O6Z2OxWAAAANU"]
[Sat May 09 05:02:15.555978 2026] [:error] [pid 9833:tid 9853] [client 13.52.104.234:54920] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/site/.env"] [unique_id "af5PVyM9JmxIS0KGZUAsLgAAAY8"]
[Sat May 09 05:02:16.215093 2026] [:error] [pid 9920:tid 9933] [client 13.52.104.234:54936] [client 13.52.104.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/public/.env"] [unique_id "af5PWExitGYhlzgZb5ZOWgAAAcs"]
[Sat May 09 05:41:31.135334 2026] [:error] [pid 9663:tid 9683] [client 103.18.6.209:35566] [client 103.18.6.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.18.6.209, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "af5Yi5cWIu01SCxbjwvIOQAAARE"]
[Sat May 09 05:41:31.142908 2026] [proxy_fcgi:error] [pid 9663:tid 9683] [client 103.18.6.209:35566] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:41:33.286943 2026] [:error] [pid 9187:tid 9269] [client 103.18.6.209:35558] [client 103.18.6.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.18.6.209, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "af5YjRC7An6gkXsRsaHkeAAAAJA"]
[Sat May 09 05:41:33.291354 2026] [proxy_fcgi:error] [pid 9187:tid 9269] [client 103.18.6.209:35558] AH01071: Got error 'Primary script unknown'
[Sat May 09 10:19:49.568606 2026] [:error] [pid 9186:tid 9234] [client 20.151.175.120:23490] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "af6ZxRW4eFOEw1mKOgKjgwAAAEg"]
[Sat May 09 10:19:50.421111 2026] [:error] [pid 9293:tid 9311] [client 20.151.175.120:23503] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "af6ZxpR__qEzV5O6Z2M6jwAAAM4"]
[Sat May 09 10:19:51.245751 2026] [:error] [pid 9186:tid 9245] [client 20.151.175.120:23491] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "af6ZxxW4eFOEw1mKOgKjtAAAAFM"]
[Sat May 09 10:19:52.096820 2026] [:error] [pid 9920:tid 9931] [client 20.151.175.120:23438] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "af6ZyExitGYhlzgZb5agRAAAAck"]
[Sat May 09 20:06:27.747960 2026] [:error] [pid 55353:tid 55357] [client 112.207.182.252:10164] [client 112.207.182.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.207.182.252, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "af8jQyDuyNO3XosoIYQpMwAAAQI"]
[Sat May 09 20:06:27.761451 2026] [proxy_fcgi:error] [pid 55353:tid 55357] [client 112.207.182.252:10164] AH01071: Got error 'Primary script unknown'
[Sun May 10 00:33:16.199733 2026] [:error] [pid 55191:tid 55293] [client 34.19.206.233:48424] [client 34.19.206.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "af9hzPMcqx1kfQsw7c4vyQAAAJA"]
[Sun May 10 19:59:39.551450 2026] [:error] [pid 16096:tid 16121] [client 77.243.27.144:4447] [client 77.243.27.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.243.27.144, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agBzK68wyxcrT50p9kvRUgAAAFQ"]
[Sun May 10 19:59:39.561483 2026] [proxy_fcgi:error] [pid 16096:tid 16121] [client 77.243.27.144:4447] AH01071: Got error 'Primary script unknown'
[Sun May 10 21:40:33.546575 2026] [autoindex:error] [pid 16136:tid 16154] [client 20.5.8.136:57034] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon May 11 06:23:28.386809 2026] [:error] [pid 9335:tid 9348] [client 34.154.163.2:42318] [client 34.154.163.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agEFYHmXqumINT8bKREg9QAAAQs"]
[Mon May 11 08:34:52.154798 2026] [:error] [pid 65261:tid 65331] [client 57.151.128.80:56522] [client 57.151.128.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.151.128.80, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agEkLJu_9uQJeFrcOstIoAAAAIg"]
[Mon May 11 11:39:51.568446 2026] [:error] [pid 35052:tid 35079] [client 34.88.220.107:59058] [client 34.88.220.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agFPh-HjpNNnFJrMXu3MfwAAAVg"]
[Mon May 11 11:48:42.374817 2026] [:error] [pid 65366:tid 65380] [client 34.130.134.132:58414] [client 34.130.134.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agFRmqhVGdYzapDtv-Eg3QAAAMs"]
[Mon May 11 13:34:12.385829 2026] [:error] [pid 9335:tid 9346] [client 34.154.81.79:54000] [client 34.154.81.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agFqVHmXqumINT8bKRF1RwAAAQk"]
[Mon May 11 18:13:38.291094 2026] [:error] [pid 4645:tid 4663] [client 103.158.183.57:51605] [client 103.158.183.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.158.183.57, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agGr0ny4dxn8-Cx5vOWicwAAAE8"]
[Mon May 11 18:13:38.303285 2026] [proxy_fcgi:error] [pid 4645:tid 4663] [client 103.158.183.57:51605] AH01071: Got error 'Primary script unknown'
[Tue May 12 15:56:45.659365 2026] [:error] [pid 39956:tid 39969] [client 182.176.103.190:60265] [client 182.176.103.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.176.103.190, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agLdPY2K3wZDsNji3Mz7EgAAAAQ"]
[Tue May 12 15:56:45.671412 2026] [proxy_fcgi:error] [pid 39956:tid 39969] [client 182.176.103.190:60265] AH01071: Got error 'Primary script unknown'
[Wed May 13 04:34:32.193628 2026] [:error] [pid 23787:tid 23863] [client 124.109.53.158:15399] [client 124.109.53.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.109.53.158, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agOO2B1cs5wE7VT6wiqN3QAAAI8"]
[Wed May 13 04:34:32.207929 2026] [proxy_fcgi:error] [pid 23787:tid 23863] [client 124.109.53.158:15399] AH01071: Got error 'Primary script unknown'
[Wed May 13 11:16:53.983864 2026] [:error] [pid 3259:tid 3261] [client 60.53.32.76:11690] [client 60.53.32.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.53.32.76, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agPtJeWJB4YwcPVLeArOjgAAAQA"]
[Wed May 13 11:16:53.995863 2026] [proxy_fcgi:error] [pid 3259:tid 3261] [client 60.53.32.76:11690] AH01071: Got error 'Primary script unknown'
[Wed May 13 21:08:04.751378 2026] [:error] [pid 12426:tid 12436] [client 45.3.34.46:62755] [client 45.3.34.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.svn/wc.db"] [unique_id "agR3tLPw24RslX3LIcYdWwAAAMg"]
[Wed May 13 23:29:07.844157 2026] [:error] [pid 12337:tid 12354] [client 134.209.102.117:57408] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/dump.sql"] [unique_id "agSYww9W0E4_X4qzYUFxbgAAAAw"]
[Wed May 13 23:29:07.844160 2026] [:error] [pid 12426:tid 12442] [client 134.209.102.117:57393] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/translate.sql"] [unique_id "agSYw7Pw24RslX3LIcZM9wAAAM4"]
[Wed May 13 23:29:07.844364 2026] [:error] [pid 12426:tid 12437] [client 134.209.102.117:57410] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/database.sql"] [unique_id "agSYw7Pw24RslX3LIcZM9gAAAMk"]
[Wed May 13 23:29:07.844638 2026] [:error] [pid 12338:tid 12391] [client 134.209.102.117:57398] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/db.sql"] [unique_id "agSYw8UJ87l42ffPr4wbawAAAFY"]
[Wed May 13 23:29:07.844866 2026] [:error] [pid 12337:tid 12365] [client 134.209.102.117:57414] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/mysqldump.sql"] [unique_id "agSYww9W0E4_X4qzYUFxbwAAABc"]
[Wed May 13 23:29:07.845713 2026] [:error] [pid 12426:tid 12445] [client 134.209.102.117:57400] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/1.sql"] [unique_id "agSYw7Pw24RslX3LIcZM-AAAANE"]
[Wed May 13 23:29:07.845720 2026] [:error] [pid 12426:tid 12452] [client 134.209.102.117:57401] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/backup.sql"] [unique_id "agSYw7Pw24RslX3LIcZM-QAAANg"]
[Wed May 13 23:29:07.847160 2026] [:error] [pid 12337:tid 12348] [client 134.209.102.117:57413] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".com.au.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au.sql"] [unique_id "agSYww9W0E4_X4qzYUFxcAAAAAY"]
[Wed May 13 23:29:07.848570 2026] [:error] [pid 12337:tid 12349] [client 134.209.102.117:57421] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/site.sql"] [unique_id "agSYww9W0E4_X4qzYUFxcgAAAAc"]
[Wed May 13 23:29:07.848581 2026] [:error] [pid 12337:tid 12361] [client 134.209.102.117:57420] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/mysql.sql"] [unique_id "agSYww9W0E4_X4qzYUFxcQAAABM"]
[Wed May 13 23:29:07.848850 2026] [:error] [pid 12426:tid 12435] [client 134.209.102.117:57418] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/localhost.sql"] [unique_id "agSYw7Pw24RslX3LIcZM-gAAAMc"]
[Wed May 13 23:29:07.849762 2026] [:error] [pid 12338:tid 12374] [client 134.209.102.117:57415] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".com.au_db.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/stratapluswa.com.au_db.sql"] [unique_id "agSYw8UJ87l42ffPr4wbbAAAAEU"]
[Wed May 13 23:29:07.850460 2026] [:error] [pid 12338:tid 12382] [client 134.209.102.117:57416] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/data.sql"] [unique_id "agSYw8UJ87l42ffPr4wbbgAAAE0"]
[Wed May 13 23:29:07.850567 2026] [:error] [pid 12338:tid 12376] [client 134.209.102.117:57417] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/db_backup.sql"] [unique_id "agSYw8UJ87l42ffPr4wbbQAAAEc"]
[Wed May 13 23:29:07.852074 2026] [:error] [pid 12340:tid 12416] [client 134.209.102.117:57419] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/dbdump.sql"] [unique_id "agSYw8rxSPfvmN7BQjKI1wAAAJQ"]
[Wed May 13 23:29:07.852081 2026] [:error] [pid 12337:tid 12342] [client 134.209.102.117:57422] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/sql.sql"] [unique_id "agSYww9W0E4_X4qzYUFxdAAAAAA"]
[Wed May 13 23:29:07.852423 2026] [:error] [pid 12337:tid 12363] [client 134.209.102.117:57424] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/temp.sql"] [unique_id "agSYww9W0E4_X4qzYUFxcwAAABU"]
[Wed May 13 23:29:08.818353 2026] [:error] [pid 12340:tid 12401] [client 134.209.102.117:57485] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/users.sql"] [unique_id "agSYxMrxSPfvmN7BQjKI2wAAAIU"]
[Wed May 13 23:29:08.818353 2026] [:error] [pid 12340:tid 12419] [client 134.209.102.117:57488] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/wp-content/mysql.sql"] [unique_id "agSYxMrxSPfvmN7BQjKI2gAAAJc"]
[Wed May 13 23:29:08.818452 2026] [:error] [pid 12340:tid 12398] [client 134.209.102.117:57486] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/www.sql"] [unique_id "agSYxMrxSPfvmN7BQjKI2QAAAII"]
[Wed May 13 23:29:08.818454 2026] [:error] [pid 12340:tid 12402] [client 134.209.102.117:57487] [client 134.209.102.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/wp-content/uploads/dump.sql"] [unique_id "agSYxMrxSPfvmN7BQjKI2AAAAIY"]
[Thu May 14 06:37:07.084565 2026] [:error] [pid 63033:tid 63057] [client 195.175.38.54:50862] [client 195.175.38.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.175.38.54, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agT9E1MY49UWn5BpqVZnOgAAARY"]
[Thu May 14 06:37:07.103615 2026] [proxy_fcgi:error] [pid 63033:tid 63057] [client 195.175.38.54:50862] AH01071: Got error 'Primary script unknown'
[Thu May 14 07:03:29.686604 2026] [:error] [pid 47721:tid 47733] [client 172.64.223.151:10909] [client 172.64.223.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "agUDQXEmh7_G0hfOa6smBAAAAYo"]
[Thu May 14 21:27:59.178524 2026] [:error] [pid 11582:tid 11629] [client 104.23.221.111:12280] [client 104.23.221.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.stratapluswa.com.au"] [uri "/"] [unique_id "agXN3_uw2cmFDpGcKhA6ugAAAEQ"]
[Fri May 15 03:04:02.997124 2026] [:error] [pid 63033:tid 63036] [client 81.243.101.220:55510] [client 81.243.101.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.243.101.220, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agYcolMY49UWn5BpqVYedAAAAQE"]
[Fri May 15 03:04:03.008138 2026] [proxy_fcgi:error] [pid 63033:tid 63036] [client 81.243.101.220:55510] AH01071: Got error 'Primary script unknown'
[Fri May 15 08:07:41.476431 2026] [:error] [pid 1188:tid 1216] [client 34.154.226.75:43930] [client 34.154.226.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agZjzdY68iW8yuNkNzPakQAAABM"]
[Fri May 15 09:52:22.791875 2026] [:error] [pid 1190:tid 1276] [client 35.203.118.91:56614] [client 35.203.118.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agZ8VtqiXrD7hne4gFbIOAAAAJg"]
[Fri May 15 09:59:30.847429 2026] [:error] [pid 50531:tid 50543] [client 34.50.174.144:34534] [client 34.50.174.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agZ-Ah3WbFwE6voqGzrkLAAAAQo"]
[Fri May 15 10:03:42.534653 2026] [:error] [pid 51234:tid 51239] [client 38.154.90.45:38363] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stratapluswa.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/robots.txt"] [unique_id "agZ-_t72N9CbeiqcqgPV_wAAAUM"]
[Fri May 15 10:03:42.543030 2026] [:error] [pid 51234:tid 51252] [client 38.154.90.45:33957] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stratapluswa.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "agZ-_t72N9CbeiqcqgPWAAAAAVA"]
[Fri May 15 10:03:42.557723 2026] [:error] [pid 1188:tid 1201] [client 38.154.90.45:56236] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stratapluswa.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/sitemap.xml"] [unique_id "agZ-_tY68iW8yuNkNzPxKgAAAAQ"]
[Fri May 15 10:03:43.895515 2026] [:error] [pid 1295:tid 1307] [client 38.154.90.45:60067] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stratapluswa.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/robots.txt"] [unique_id "agZ-_9mMhqLvs0GYixkclwAAAMk"]
[Fri May 15 10:03:43.913403 2026] [:error] [pid 1295:tid 1309] [client 38.154.90.45:56876] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stratapluswa.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/sitemap.xml"] [unique_id "agZ-_9mMhqLvs0GYixkcmAAAAMs"]
[Fri May 15 10:03:44.512225 2026] [:error] [pid 51234:tid 51242] [client 38.154.90.45:58331] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stratapluswa.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "agZ_AN72N9CbeiqcqgPWAgAAAUY"]
[Fri May 15 12:05:51.728179 2026] [:error] [pid 1188:tid 1198] [client 34.126.162.121:32884] [client 34.126.162.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agabn9Y68iW8yuNkNzP88wAAAAE"]
[Sat May 16 00:30:43.075669 2026] [:error] [pid 30272:tid 30293] [client 147.91.216.3:58390] [client 147.91.216.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.91.216.3, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agdKM3vc_jSFaQ_7_wcdawAAAZM"]
[Sat May 16 00:30:43.087809 2026] [proxy_fcgi:error] [pid 30272:tid 30293] [client 147.91.216.3:58390] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:45.521769 2026] [proxy_fcgi:error] [pid 30240:tid 30264] [client 20.219.50.182:1276] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:45.665655 2026] [proxy_fcgi:error] [pid 30240:tid 30265] [client 20.219.50.182:1276] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:45.965288 2026] [proxy_fcgi:error] [pid 30240:tid 30257] [client 20.219.50.182:1276] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:46.109172 2026] [proxy_fcgi:error] [pid 30240:tid 30258] [client 20.219.50.182:1276] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:46.395857 2026] [proxy_fcgi:error] [pid 30240:tid 30246] [client 20.219.50.182:1276] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:46.539163 2026] [proxy_fcgi:error] [pid 30240:tid 30244] [client 20.219.50.182:1276] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:46.682803 2026] [proxy_fcgi:error] [pid 30240:tid 30262] [client 20.219.50.182:1276] AH01071: Got error 'Primary script unknown'
[Sat May 16 00:39:47.108016 2026] [:error] [pid 30240:tid 30255] [client 20.219.50.182:1276] [client 20.219.50.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agdMU68ckHvaA6bpewuC7QAAAU0"]
[Sat May 16 00:39:47.699605 2026] [:error] [pid 30240:tid 30250] [client 20.219.50.182:4760] [client 20.219.50.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agdMU68ckHvaA6bpewuC7gAAAUg"]
[Sat May 16 00:39:48.328560 2026] [:error] [pid 30240:tid 30260] [client 20.219.50.182:6361] [client 20.219.50.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agdMVK8ckHvaA6bpewuC7wAAAVI"]
[Sat May 16 00:39:48.911442 2026] [:error] [pid 9305:tid 9340] [client 20.219.50.182:6336] [client 20.219.50.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agdMVN5FZyBmdCM8GsGfRwAAAEI"]
[Sat May 16 01:59:20.316578 2026] [:error] [pid 9304:tid 9321] [client 158.173.67.139:48581] [client 158.173.67.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.139, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "agde-NzcINh7UFIbVoGtSgAAAAs"]
[Sat May 16 01:59:20.326774 2026] [proxy_fcgi:error] [pid 9304:tid 9321] [client 158.173.67.139:48581] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:40.663580 2026] [proxy_fcgi:error] [pid 9307:tid 9386] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:40.930947 2026] [proxy_fcgi:error] [pid 9307:tid 9369] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:41.053848 2026] [proxy_fcgi:error] [pid 9307:tid 9374] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:41.176375 2026] [proxy_fcgi:error] [pid 9307:tid 9368] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:41.422759 2026] [proxy_fcgi:error] [pid 9307:tid 9373] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:41.688743 2026] [proxy_fcgi:error] [pid 9307:tid 9384] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:41.813455 2026] [proxy_fcgi:error] [pid 9307:tid 9377] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:41.953380 2026] [proxy_fcgi:error] [pid 9307:tid 9370] [client 23.101.2.193:1091] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:39:42.072759 2026] [:error] [pid 9307:tid 9376] [client 23.101.2.193:1091] [client 23.101.2.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agdobiC43jY1IRzK5VZ1cAAAAMs"]
[Sat May 16 02:39:42.566951 2026] [:error] [pid 59522:tid 59569] [client 23.101.2.193:1090] [client 23.101.2.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agdoboKyKAkpeBAoLCZcfQAAA84"]
[Sat May 16 02:39:43.118228 2026] [:error] [pid 59522:tid 59579] [client 23.101.2.193:1431] [client 23.101.2.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agdob4KyKAkpeBAoLCZcfwAAA9g"]
[Sat May 16 02:39:43.664695 2026] [:error] [pid 59522:tid 59561] [client 23.101.2.193:1088] [client 23.101.2.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agdob4KyKAkpeBAoLCZcggAAA8Y"]
[Sat May 16 02:45:15.869847 2026] [proxy_fcgi:error] [pid 59522:tid 59574] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:15.966447 2026] [proxy_fcgi:error] [pid 59522:tid 59575] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:16.058598 2026] [proxy_fcgi:error] [pid 59522:tid 59566] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:16.171660 2026] [proxy_fcgi:error] [pid 59522:tid 59558] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:16.263708 2026] [proxy_fcgi:error] [pid 59522:tid 59561] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:16.366291 2026] [proxy_fcgi:error] [pid 59522:tid 59559] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:16.556732 2026] [proxy_fcgi:error] [pid 59522:tid 59573] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:16.648474 2026] [proxy_fcgi:error] [pid 59522:tid 59571] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:16.753616 2026] [proxy_fcgi:error] [pid 59522:tid 59579] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:18.199866 2026] [proxy_fcgi:error] [pid 59522:tid 59557] [client 40.65.144.153:10838] AH01071: Got error 'Primary script unknown'
[Sat May 16 02:45:18.288073 2026] [:error] [pid 59522:tid 59562] [client 40.65.144.153:10838] [client 40.65.144.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agdpvoKyKAkpeBAoLCZeqQAAA8c"]
[Sat May 16 02:45:18.654985 2026] [:error] [pid 59522:tid 59567] [client 40.65.144.153:10333] [client 40.65.144.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agdpvoKyKAkpeBAoLCZeqgAAA8w"]
[Sat May 16 02:45:19.047380 2026] [:error] [pid 59522:tid 59576] [client 40.65.144.153:13370] [client 40.65.144.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agdpv4KyKAkpeBAoLCZeqwAAA9U"]
[Sat May 16 02:45:19.503978 2026] [:error] [pid 9307:tid 9383] [client 40.65.144.153:10326] [client 40.65.144.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agdpvyC43jY1IRzK5VZ10wAAANI"]
[Sat May 16 06:06:54.658581 2026] [proxy_fcgi:error] [pid 24869:tid 24922] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:55.042762 2026] [proxy_fcgi:error] [pid 24869:tid 24929] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:55.371514 2026] [proxy_fcgi:error] [pid 24869:tid 24926] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:55.699084 2026] [proxy_fcgi:error] [pid 24869:tid 24914] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:56.113588 2026] [proxy_fcgi:error] [pid 24869:tid 24920] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:56.460896 2026] [proxy_fcgi:error] [pid 24869:tid 24928] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:56.823050 2026] [proxy_fcgi:error] [pid 24869:tid 24923] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:57.225337 2026] [proxy_fcgi:error] [pid 24869:tid 24932] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:57.553381 2026] [proxy_fcgi:error] [pid 24869:tid 24924] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:57.886023 2026] [proxy_fcgi:error] [pid 24869:tid 24909] [client 20.195.182.164:19106] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:06:58.246730 2026] [:error] [pid 24869:tid 24910] [client 20.195.182.164:19106] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ageZAuxo3FMprMltYl7_igAAAEI"]
[Sat May 16 06:06:59.024032 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:10920] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ageZA9zTTsu77r3UIsm88wAAAQE"]
[Sat May 16 06:07:00.205104 2026] [:error] [pid 24874:tid 24947] [client 20.195.182.164:23412] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ageZBMiii6x3XidYGHGbWwAAAIw"]
[Sat May 16 06:07:01.820657 2026] [:error] [pid 24874:tid 24954] [client 20.195.182.164:10932] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ageZBciii6x3XidYGHGbXAAAAJM"]
[Sat May 16 06:07:02.599858 2026] [:error] [pid 24874:tid 24956] [client 20.195.182.164:11762] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "ageZBsiii6x3XidYGHGbXQAAAJU"]
[Sat May 16 06:07:03.941646 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:12477] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "ageZB9zTTsu77r3UIsm8-AAAARg"]
[Sat May 16 06:07:04.988957 2026] [:error] [pid 24874:tid 24957] [client 20.195.182.164:16551] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "ageZCMiii6x3XidYGHGbYgAAAJY"]
[Sat May 16 06:07:06.259639 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:10470] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "ageZCtzTTsu77r3UIsm8-wAAAQA"]
[Sat May 16 06:07:07.089033 2026] [:error] [pid 5602:tid 5611] [client 20.195.182.164:4193] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "ageZC9zTTsu77r3UIsm8_QAAAQc"]
[Sat May 16 06:07:07.733892 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:19132] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "ageZC9zTTsu77r3UIsm8_wAAARI"]
[Sat May 16 06:07:08.855458 2026] [:error] [pid 5602:tid 5616] [client 20.195.182.164:4189] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "ageZDNzTTsu77r3UIsm9AgAAAQw"]
[Sat May 16 06:07:09.784990 2026] [:error] [pid 5602:tid 5624] [client 20.195.182.164:17088] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "ageZDdzTTsu77r3UIsm9AwAAARQ"]
[Sat May 16 06:07:11.257482 2026] [:error] [pid 5602:tid 5621] [client 20.195.182.164:10436] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "ageZD9zTTsu77r3UIsm9BgAAARE"]
[Sat May 16 06:07:12.077181 2026] [:error] [pid 24867:tid 24893] [client 20.195.182.164:16569] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "ageZECDgFLCgyKq-zmbsOQAAAAw"]
[Sat May 16 06:07:12.903007 2026] [:error] [pid 24874:tid 24949] [client 20.195.182.164:12750] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "ageZEMiii6x3XidYGHGbZgAAAI4"]
[Sat May 16 06:07:13.761109 2026] [:error] [pid 5602:tid 5615] [client 20.195.182.164:18431] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "ageZEdzTTsu77r3UIsm9CAAAAQs"]
[Sat May 16 06:07:15.123886 2026] [:error] [pid 24874:tid 24952] [client 20.195.182.164:17031] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "ageZE8iii6x3XidYGHGbaQAAAJE"]
[Sat May 16 06:07:16.176354 2026] [:error] [pid 24869:tid 24920] [client 20.195.182.164:16562] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "ageZFOxo3FMprMltYl7_jwAAAEw"]
[Sat May 16 06:07:17.837985 2026] [:error] [pid 5602:tid 5624] [client 20.195.182.164:12755] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "ageZFdzTTsu77r3UIsm9DgAAARQ"]
[Sat May 16 06:07:19.567662 2026] [:error] [pid 5602:tid 5618] [client 20.195.182.164:18363] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "ageZF9zTTsu77r3UIsm9EwAAAQ4"]
[Sat May 16 06:07:20.721830 2026] [:error] [pid 24874:tid 24945] [client 20.195.182.164:26342] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ageZGMiii6x3XidYGHGbbAAAAIo"]
[Sat May 16 06:07:22.370212 2026] [:error] [pid 24874:tid 24944] [client 20.195.182.164:17111] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ageZGsiii6x3XidYGHGbbwAAAIk"]
[Sat May 16 06:07:23.333372 2026] [:error] [pid 5602:tid 5610] [client 20.195.182.164:11716] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ageZG9zTTsu77r3UIsm9GgAAAQY"]
[Sat May 16 06:07:24.061905 2026] [:error] [pid 24874:tid 24953] [client 20.195.182.164:19073] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ageZHMiii6x3XidYGHGbdAAAAJI"]
[Sat May 16 06:07:29.879714 2026] [:error] [pid 24869:tid 24916] [client 20.195.182.164:19094] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "ageZIexo3FMprMltYl7_mQAAAEg"]
[Sat May 16 06:07:32.863338 2026] [:error] [pid 5602:tid 5627] [client 20.195.182.164:17122] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "ageZJNzTTsu77r3UIsm9JwAAARc"]
[Sat May 16 06:08:01.929116 2026] [proxy_fcgi:error] [pid 24867:tid 24883] [client 20.195.182.164:22704] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:02.268827 2026] [proxy_fcgi:error] [pid 24867:tid 24890] [client 20.195.182.164:22704] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:02.591087 2026] [proxy_fcgi:error] [pid 24867:tid 24895] [client 20.195.182.164:22704] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:03.009894 2026] [proxy_fcgi:error] [pid 24867:tid 24894] [client 20.195.182.164:22704] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:03.390432 2026] [proxy_fcgi:error] [pid 24867:tid 24884] [client 20.195.182.164:22704] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:03.761816 2026] [:error] [pid 24867:tid 24882] [client 20.195.182.164:22704] [client 20.195.182.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "ageZQyDgFLCgyKq-zmbsVgAAAAE"]
[Sat May 16 06:08:04.678989 2026] [proxy_fcgi:error] [pid 24874:tid 24942] [client 20.195.182.164:26958] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:05.048059 2026] [proxy_fcgi:error] [pid 24874:tid 24952] [client 20.195.182.164:26958] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:05.384272 2026] [proxy_fcgi:error] [pid 24874:tid 24958] [client 20.195.182.164:26958] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:05.742701 2026] [proxy_fcgi:error] [pid 24874:tid 24945] [client 20.195.182.164:26958] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:06.068695 2026] [proxy_fcgi:error] [pid 24874:tid 24959] [client 20.195.182.164:26958] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:06.423279 2026] [proxy_fcgi:error] [pid 24874:tid 24935] [client 20.195.182.164:26958] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:08:06.743685 2026] [:error] [pid 24874:tid 24953] [client 20.195.182.164:26958] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "ageZRsiii6x3XidYGHGbkgAAAJI"]
[Sat May 16 06:08:07.571254 2026] [:error] [pid 24874:tid 24939] [client 20.195.182.164:22688] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "ageZR8iii6x3XidYGHGblQAAAIQ"]
[Sat May 16 06:08:08.392678 2026] [:error] [pid 24874:tid 24942] [client 20.195.182.164:26974] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "ageZSMiii6x3XidYGHGbmAAAAIc"]
[Sat May 16 06:08:09.226057 2026] [:error] [pid 24867:tid 24898] [client 20.195.182.164:26063] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fone1.php"] [unique_id "ageZSSDgFLCgyKq-zmbsXAAAABE"]
[Sat May 16 06:08:10.422281 2026] [:error] [pid 24867:tid 24896] [client 20.195.182.164:26976] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "ageZSiDgFLCgyKq-zmbsYgAAAA8"]
[Sat May 16 06:08:11.666772 2026] [:error] [pid 24867:tid 24888] [client 20.195.182.164:27778] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "ageZSyDgFLCgyKq-zmbsZgAAAAc"]
[Sat May 16 06:08:12.684650 2026] [:error] [pid 24874:tid 24945] [client 20.195.182.164:11722] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "ageZTMiii6x3XidYGHGbnAAAAIo"]
[Sat May 16 06:08:13.598218 2026] [:error] [pid 24874:tid 24937] [client 20.195.182.164:16565] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "ageZTciii6x3XidYGHGbngAAAII"]
[Sat May 16 06:08:14.831933 2026] [:error] [pid 24867:tid 24897] [client 20.195.182.164:7821] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ageZTiDgFLCgyKq-zmbsaQAAABA"]
[Sat May 16 06:08:18.247527 2026] [:error] [pid 5602:tid 5617] [client 20.195.182.164:12479] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ageZUtzTTsu77r3UIsm9XAAAAQ0"]
[Sat May 16 06:08:23.184307 2026] [:error] [pid 24869:tid 24922] [client 20.195.182.164:19076] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ageZV-xo3FMprMltYl7_tQAAAE4"]
[Sat May 16 06:08:28.025964 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:27143] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ng.php"] [unique_id "ageZXNzTTsu77r3UIsm9dAAAAQE"]
[Sat May 16 06:08:28.935507 2026] [:error] [pid 24867:tid 24896] [client 20.195.182.164:26065] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "ageZXCDgFLCgyKq-zmbsfQAAAA8"]
[Sat May 16 06:08:30.150087 2026] [:error] [pid 24867:tid 24894] [client 20.195.182.164:7824] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "ageZXiDgFLCgyKq-zmbsfgAAAA0"]
[Sat May 16 06:08:31.020868 2026] [:error] [pid 5602:tid 5621] [client 20.195.182.164:27825] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "ageZX9zTTsu77r3UIsm9dwAAARE"]
[Sat May 16 06:08:32.249382 2026] [:error] [pid 24979:tid 24994] [client 20.195.182.164:23357] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "ageZYLvSFUQiwLaOL2oqigAAAM0"]
[Sat May 16 06:08:33.445303 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:23354] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ageZYdzTTsu77r3UIsm9fAAAAQo"]
[Sat May 16 06:08:34.277890 2026] [:error] [pid 5602:tid 5608] [client 20.195.182.164:22716] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ageZYtzTTsu77r3UIsm9fgAAAQQ"]
[Sat May 16 06:08:35.180935 2026] [:error] [pid 24867:tid 24902] [client 20.195.182.164:27198] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ageZYyDgFLCgyKq-zmbsgwAAABU"]
[Sat May 16 06:08:36.419441 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:6758] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "ageZZNzTTsu77r3UIsm9hAAAARI"]
[Sat May 16 06:08:37.694041 2026] [:error] [pid 5602:tid 5627] [client 20.195.182.164:27828] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ageZZdzTTsu77r3UIsm9hgAAARc"]
[Sat May 16 06:08:39.085825 2026] [:error] [pid 5602:tid 5616] [client 20.195.182.164:23319] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ageZZ9zTTsu77r3UIsm9iwAAAQw"]
[Sat May 16 06:08:40.513583 2026] [:error] [pid 24979:tid 24983] [client 20.195.182.164:26992] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ageZaLvSFUQiwLaOL2oqjQAAAMI"]
[Sat May 16 06:08:41.260390 2026] [:error] [pid 24867:tid 24904] [client 20.195.182.164:26350] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "ageZaSDgFLCgyKq-zmbsiQAAABc"]
[Sat May 16 06:08:43.838201 2026] [:error] [pid 24869:tid 24927] [client 20.195.182.164:25014] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ageZa-xo3FMprMltYl7_vAAAAFM"]
[Sat May 16 06:08:45.469465 2026] [:error] [pid 24867:tid 24894] [client 20.195.182.164:19092] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ageZbSDgFLCgyKq-zmbsjAAAAA0"]
[Sat May 16 06:08:46.791924 2026] [:error] [pid 24874:tid 24957] [client 20.195.182.164:18341] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ageZbsiii6x3XidYGHGbrQAAAJY"]
[Sat May 16 06:08:49.359786 2026] [:error] [pid 5602:tid 5607] [client 20.195.182.164:16515] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ageZcdzTTsu77r3UIsm9oAAAAQM"]
[Sat May 16 06:08:50.391545 2026] [:error] [pid 24869:tid 24932] [client 20.195.182.164:27167] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "ageZcuxo3FMprMltYl7_wQAAAFg"]
[Sat May 16 06:08:52.168908 2026] [:error] [pid 24867:tid 24898] [client 20.195.182.164:23339] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "ageZdCDgFLCgyKq-zmbskQAAABE"]
[Sat May 16 06:08:53.084399 2026] [:error] [pid 24874:tid 24951] [client 20.195.182.164:24980] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "ageZdciii6x3XidYGHGbsAAAAJA"]
[Sat May 16 06:08:54.371154 2026] [:error] [pid 5602:tid 5615] [client 20.195.182.164:18348] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "ageZdtzTTsu77r3UIsm9oQAAAQs"]
[Sat May 16 06:08:55.258874 2026] [:error] [pid 24869:tid 24909] [client 20.195.182.164:19185] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ageZd-xo3FMprMltYl7_xQAAAEE"]
[Sat May 16 06:08:56.654371 2026] [:error] [pid 24869:tid 24927] [client 20.195.182.164:27003] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ageZeOxo3FMprMltYl7_yAAAAFM"]
[Sat May 16 06:08:58.428180 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:19158] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ageZetzTTsu77r3UIsm9pQAAAQE"]
[Sat May 16 06:08:59.353858 2026] [:error] [pid 5602:tid 5617] [client 20.195.182.164:27146] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "ageZe9zTTsu77r3UIsm9qQAAAQ0"]
[Sat May 16 06:09:00.123247 2026] [:error] [pid 5602:tid 5606] [client 20.195.182.164:16009] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "ageZfNzTTsu77r3UIsm9qgAAAQI"]
[Sat May 16 06:09:01.302545 2026] [:error] [pid 24869:tid 24916] [client 20.195.182.164:16066] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "ageZfexo3FMprMltYl7_ywAAAEg"]
[Sat May 16 06:09:03.031649 2026] [:error] [pid 24874:tid 24954] [client 20.195.182.164:7600] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "ageZf8iii6x3XidYGHGbtQAAAJM"]
[Sat May 16 06:09:03.983327 2026] [:error] [pid 24979:tid 24997] [client 20.195.182.164:9157] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "ageZf7vSFUQiwLaOL2oqoAAAANA"]
[Sat May 16 06:09:05.427425 2026] [:error] [pid 24869:tid 24931] [client 20.195.182.164:27152] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "ageZgexo3FMprMltYl7_zgAAAFc"]
[Sat May 16 06:09:07.770182 2026] [proxy_fcgi:error] [pid 24979:tid 25002] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:08.165543 2026] [proxy_fcgi:error] [pid 24979:tid 24998] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:08.883913 2026] [proxy_fcgi:error] [pid 24979:tid 24984] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:09.199557 2026] [proxy_fcgi:error] [pid 24979:tid 25000] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:09.546686 2026] [proxy_fcgi:error] [pid 24979:tid 24981] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:09.859931 2026] [proxy_fcgi:error] [pid 24979:tid 24998] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:10.311430 2026] [proxy_fcgi:error] [pid 24979:tid 24992] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:10.647548 2026] [proxy_fcgi:error] [pid 24979:tid 24988] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:10.960446 2026] [proxy_fcgi:error] [pid 24979:tid 24989] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:11.272858 2026] [proxy_fcgi:error] [pid 24979:tid 24990] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:11.585038 2026] [proxy_fcgi:error] [pid 24979:tid 24997] [client 20.195.182.164:16063] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:09:11.908661 2026] [:error] [pid 24979:tid 25004] [client 20.195.182.164:16063] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ageZh7vSFUQiwLaOL2oqvgAAANc"]
[Sat May 16 06:09:13.752370 2026] [:error] [pid 5602:tid 5621] [client 20.195.182.164:23946] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ageZidzTTsu77r3UIsm9uQAAARE"]
[Sat May 16 06:09:14.812521 2026] [:error] [pid 24867:tid 24890] [client 20.195.182.164:3259] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ageZiiDgFLCgyKq-zmbsnwAAAAk"]
[Sat May 16 06:09:16.045684 2026] [:error] [pid 5602:tid 5615] [client 20.195.182.164:27776] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ageZjNzTTsu77r3UIsm9uwAAAQs"]
[Sat May 16 06:09:16.918798 2026] [:error] [pid 24869:tid 24924] [client 20.195.182.164:27160] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ageZjOxo3FMprMltYl7_2QAAAFA"]
[Sat May 16 06:09:18.081053 2026] [:error] [pid 5602:tid 5626] [client 20.195.182.164:3248] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ageZjtzTTsu77r3UIsm9vwAAARY"]
[Sat May 16 06:09:19.048927 2026] [:error] [pid 5602:tid 5623] [client 20.195.182.164:26089] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ageZj9zTTsu77r3UIsm9wgAAARM"]
[Sat May 16 06:09:20.045516 2026] [:error] [pid 5602:tid 5624] [client 20.195.182.164:25800] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "ageZkNzTTsu77r3UIsm9xwAAARQ"]
[Sat May 16 06:09:20.749451 2026] [:error] [pid 5602:tid 5609] [client 20.195.182.164:6749] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "ageZkNzTTsu77r3UIsm9ygAAAQU"]
[Sat May 16 06:09:21.677696 2026] [:error] [pid 24867:tid 24886] [client 20.195.182.164:19142] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "ageZkSDgFLCgyKq-zmbsowAAAAU"]
[Sat May 16 06:09:22.574713 2026] [:error] [pid 24867:tid 24903] [client 20.195.182.164:23352] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "ageZkiDgFLCgyKq-zmbspgAAABY"]
[Sat May 16 06:09:24.230529 2026] [:error] [pid 24869:tid 24909] [client 20.195.182.164:3223] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "ageZlOxo3FMprMltYl7_2gAAAEE"]
[Sat May 16 06:09:25.178003 2026] [:error] [pid 24867:tid 24894] [client 20.195.182.164:3208] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geforce.php"] [unique_id "ageZlSDgFLCgyKq-zmbspwAAAA0"]
[Sat May 16 06:09:26.455145 2026] [:error] [pid 24867:tid 24889] [client 20.195.182.164:16061] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geforce.php"] [unique_id "ageZliDgFLCgyKq-zmbsqQAAAAg"]
[Sat May 16 06:09:28.063824 2026] [:error] [pid 24867:tid 24890] [client 20.195.182.164:23329] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geforce.php"] [unique_id "ageZmCDgFLCgyKq-zmbsrAAAAAk"]
[Sat May 16 06:09:29.490354 2026] [:error] [pid 24874:tid 24957] [client 20.195.182.164:13999] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/geforce.php"] [unique_id "ageZmciii6x3XidYGHGbzgAAAJY"]
[Sat May 16 06:09:30.418195 2026] [:error] [pid 5602:tid 5607] [client 20.195.182.164:8670] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dostshell.php"] [unique_id "ageZmtzTTsu77r3UIsm91AAAAQM"]
[Sat May 16 06:09:31.199350 2026] [:error] [pid 24979:tid 24992] [client 20.195.182.164:21890] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dostshell.php"] [unique_id "ageZm7vSFUQiwLaOL2oqygAAAMs"]
[Sat May 16 06:09:32.391022 2026] [:error] [pid 24874:tid 24958] [client 20.195.182.164:8656] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dostshell.php"] [unique_id "ageZnMiii6x3XidYGHGbzwAAAJc"]
[Sat May 16 06:09:33.229950 2026] [:error] [pid 24979:tid 24983] [client 20.195.182.164:25757] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dostshell.php"] [unique_id "ageZnbvSFUQiwLaOL2oqzAAAAMI"]
[Sat May 16 06:09:34.277871 2026] [:error] [pid 24874:tid 24940] [client 20.195.182.164:9152] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "ageZnsiii6x3XidYGHGb0QAAAIU"]
[Sat May 16 06:09:37.173663 2026] [:error] [pid 5602:tid 5612] [client 20.195.182.164:6693] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "ageZodzTTsu77r3UIsm92QAAAQg"]
[Sat May 16 06:09:38.924800 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:8675] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "ageZotzTTsu77r3UIsm93QAAAQo"]
[Sat May 16 06:09:40.583015 2026] [:error] [pid 24867:tid 24900] [client 20.195.182.164:26070] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "ageZpCDgFLCgyKq-zmbssQAAABM"]
[Sat May 16 06:09:41.717592 2026] [:error] [pid 5602:tid 5606] [client 20.195.182.164:8652] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mar.php"] [unique_id "ageZpdzTTsu77r3UIsm94QAAAQI"]
[Sat May 16 06:09:43.252159 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:23970] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mar.php"] [unique_id "ageZp9zTTsu77r3UIsm95AAAAQA"]
[Sat May 16 06:09:44.190216 2026] [:error] [pid 5602:tid 5613] [client 20.195.182.164:14278] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mar.php"] [unique_id "ageZqNzTTsu77r3UIsm96QAAAQk"]
[Sat May 16 06:09:45.117759 2026] [:error] [pid 5602:tid 5619] [client 20.195.182.164:14325] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mar.php"] [unique_id "ageZqdzTTsu77r3UIsm96wAAAQ8"]
[Sat May 16 06:09:45.921821 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:3897] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "ageZqdzTTsu77r3UIsm98AAAAQE"]
[Sat May 16 06:09:47.043156 2026] [:error] [pid 5602:tid 5621] [client 20.195.182.164:26733] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "ageZq9zTTsu77r3UIsm98wAAARE"]
[Sat May 16 06:09:48.271456 2026] [:error] [pid 24979:tid 25002] [client 20.195.182.164:6663] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "ageZrLvSFUQiwLaOL2oq1AAAANU"]
[Sat May 16 06:09:49.918507 2026] [:error] [pid 24979:tid 24990] [client 20.195.182.164:26739] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/casp1.php"] [unique_id "ageZrbvSFUQiwLaOL2oq2wAAAMk"]
[Sat May 16 06:09:53.927155 2026] [:error] [pid 5602:tid 5616] [client 20.195.182.164:12518] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "ageZsdzTTsu77r3UIsm9-AAAAQw"]
[Sat May 16 06:09:55.832038 2026] [:error] [pid 24874:tid 24936] [client 20.195.182.164:25748] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "ageZs8iii6x3XidYGHGb1QAAAIE"]
[Sat May 16 06:09:56.786900 2026] [:error] [pid 24869:tid 24932] [client 20.195.182.164:23014] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "ageZtOxo3FMprMltYl7_5QAAAFg"]
[Sat May 16 06:10:03.738488 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:6711] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "ageZu9zTTsu77r3UIsm-AwAAARI"]
[Sat May 16 06:10:04.984671 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:2970] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ageZvNzTTsu77r3UIsm-BgAAAQo"]
[Sat May 16 06:10:06.738672 2026] [:error] [pid 24869:tid 24926] [client 20.195.182.164:8659] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ageZvuxo3FMprMltYl7_6wAAAFI"]
[Sat May 16 06:10:09.221898 2026] [:error] [pid 24867:tid 24893] [client 20.195.182.164:25748] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ageZwSDgFLCgyKq-zmbstwAAAAw"]
[Sat May 16 06:10:10.189016 2026] [:error] [pid 24979:tid 25005] [client 20.195.182.164:26900] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ms-edit.php"] [unique_id "ageZwrvSFUQiwLaOL2oq9wAAANg"]
[Sat May 16 06:10:11.479465 2026] [proxy_fcgi:error] [pid 24979:tid 24988] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:11.844213 2026] [proxy_fcgi:error] [pid 24979:tid 24992] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:12.302179 2026] [proxy_fcgi:error] [pid 24979:tid 24983] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:12.663972 2026] [proxy_fcgi:error] [pid 24979:tid 24997] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:13.031578 2026] [proxy_fcgi:error] [pid 24979:tid 24996] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:13.427184 2026] [proxy_fcgi:error] [pid 24979:tid 25005] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:13.825186 2026] [proxy_fcgi:error] [pid 24979:tid 25002] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:14.210761 2026] [proxy_fcgi:error] [pid 24979:tid 24988] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:14.536783 2026] [proxy_fcgi:error] [pid 24979:tid 25003] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:14.865253 2026] [proxy_fcgi:error] [pid 24979:tid 24984] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:15.230637 2026] [proxy_fcgi:error] [pid 24979:tid 24999] [client 20.195.182.164:6713] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:10:15.542574 2026] [:error] [pid 24979:tid 24986] [client 20.195.182.164:6713] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ageZx7vSFUQiwLaOL2orCwAAAMU"]
[Sat May 16 06:10:16.391899 2026] [:error] [pid 5602:tid 5627] [client 20.195.182.164:18564] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ageZyNzTTsu77r3UIsm-IwAAARc"]
[Sat May 16 06:10:17.940215 2026] [:error] [pid 24867:tid 24905] [client 20.195.182.164:5457] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ageZySDgFLCgyKq-zmbsugAAABg"]
[Sat May 16 06:10:21.278618 2026] [:error] [pid 5602:tid 5616] [client 20.195.182.164:6713] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "ageZzdzTTsu77r3UIsm-LAAAAQw"]
[Sat May 16 06:10:24.786566 2026] [:error] [pid 24869:tid 24911] [client 20.195.182.164:18869] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "ageZ0Oxo3FMprMltYl7_8wAAAEM"]
[Sat May 16 06:10:27.590264 2026] [:error] [pid 5602:tid 5616] [client 20.195.182.164:11926] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "ageZ09zTTsu77r3UIsm-MwAAAQw"]
[Sat May 16 06:10:31.692069 2026] [:error] [pid 5602:tid 5617] [client 20.195.182.164:26024] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "ageZ19zTTsu77r3UIsm-OgAAAQ0"]
[Sat May 16 06:10:34.170582 2026] [:error] [pid 24874:tid 24946] [client 20.195.182.164:7368] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "ageZ2siii6x3XidYGHGb3wAAAIs"]
[Sat May 16 06:10:37.825542 2026] [:error] [pid 24979:tid 24982] [client 20.195.182.164:7370] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "ageZ3bvSFUQiwLaOL2orGQAAAME"]
[Sat May 16 06:10:39.441597 2026] [:error] [pid 24869:tid 24928] [client 20.195.182.164:2926] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "ageZ3-xo3FMprMltYl7_9wAAAFQ"]
[Sat May 16 06:10:40.246176 2026] [:error] [pid 24874:tid 24953] [client 20.195.182.164:11921] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "ageZ4Miii6x3XidYGHGb5AAAAJI"]
[Sat May 16 06:10:41.582775 2026] [:error] [pid 24874:tid 24950] [client 20.195.182.164:8591] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "ageZ4ciii6x3XidYGHGb5wAAAI8"]
[Sat May 16 06:10:42.380505 2026] [:error] [pid 24867:tid 24899] [client 20.195.182.164:8092] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ageZ4iDgFLCgyKq-zmbsxAAAABI"]
[Sat May 16 06:10:43.552359 2026] [:error] [pid 24869:tid 24922] [client 20.195.182.164:27731] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ageZ4-xo3FMprMltYl7_-AAAAE4"]
[Sat May 16 06:10:44.730137 2026] [:error] [pid 5602:tid 5618] [client 20.195.182.164:7393] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ageZ5NzTTsu77r3UIsm-SAAAAQ4"]
[Sat May 16 06:10:46.822035 2026] [:error] [pid 24867:tid 24888] [client 20.195.182.164:9380] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "ageZ5iDgFLCgyKq-zmbsxgAAAAc"]
[Sat May 16 06:10:48.061401 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:18604] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ageZ6NzTTsu77r3UIsm-TQAAAQo"]
[Sat May 16 06:10:50.040995 2026] [:error] [pid 5602:tid 5627] [client 20.195.182.164:5468] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ageZ6tzTTsu77r3UIsm-VAAAARc"]
[Sat May 16 06:10:51.212190 2026] [:error] [pid 24874:tid 24942] [client 20.195.182.164:18566] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ageZ68iii6x3XidYGHGb6gAAAIc"]
[Sat May 16 06:10:52.947143 2026] [:error] [pid 24867:tid 24894] [client 20.195.182.164:4109] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "ageZ7CDgFLCgyKq-zmbsygAAAA0"]
[Sat May 16 06:10:55.285886 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:12279] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "ageZ79zTTsu77r3UIsm-XAAAARI"]
[Sat May 16 06:10:56.874865 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:15592] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "ageZ8NzTTsu77r3UIsm-XwAAARg"]
[Sat May 16 06:10:58.206556 2026] [:error] [pid 24979:tid 24992] [client 20.195.182.164:9145] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "ageZ8rvSFUQiwLaOL2orJAAAAMs"]
[Sat May 16 06:10:59.778871 2026] [:error] [pid 5602:tid 5620] [client 20.195.182.164:4106] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "ageZ89zTTsu77r3UIsm-YAAAARA"]
[Sat May 16 06:11:00.989849 2026] [:error] [pid 24979:tid 24985] [client 20.195.182.164:2750] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ageZ9LvSFUQiwLaOL2orJwAAAMQ"]
[Sat May 16 06:11:02.577930 2026] [:error] [pid 5602:tid 5624] [client 20.195.182.164:18851] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ageZ9tzTTsu77r3UIsm-ZwAAARQ"]
[Sat May 16 06:11:03.496920 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:9401] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ageZ99zTTsu77r3UIsm-aQAAARI"]
[Sat May 16 06:11:04.526208 2026] [:error] [pid 24867:tid 24901] [client 20.195.182.164:27589] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "ageZ-CDgFLCgyKq-zmbszAAAABQ"]
[Sat May 16 06:11:06.838967 2026] [:error] [pid 5602:tid 5612] [client 20.195.182.164:18852] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ageZ-tzTTsu77r3UIsm-bgAAAQg"]
[Sat May 16 06:11:08.745636 2026] [:error] [pid 5602:tid 5623] [client 20.195.182.164:24261] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ageZ_NzTTsu77r3UIsm-dwAAARM"]
[Sat May 16 06:11:09.752321 2026] [:error] [pid 24979:tid 24987] [client 20.195.182.164:4135] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ageZ_bvSFUQiwLaOL2orKwAAAMY"]
[Sat May 16 06:11:10.615091 2026] [:error] [pid 24869:tid 24913] [client 20.195.182.164:9123] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "ageZ_uxo3FMprMltYl4AAAAAAEU"]
[Sat May 16 06:11:11.878134 2026] [:error] [pid 5602:tid 5624] [client 20.195.182.164:27619] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "ageZ_9zTTsu77r3UIsm-gAAAARQ"]
[Sat May 16 06:11:13.289845 2026] [:error] [pid 24867:tid 24891] [client 20.195.182.164:18906] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "ageaASDgFLCgyKq-zmbszQAAAAo"]
[Sat May 16 06:11:14.865195 2026] [:error] [pid 24869:tid 24908] [client 20.195.182.164:27646] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wps.php"] [unique_id "ageaAuxo3FMprMltYl4AAgAAAEA"]
[Sat May 16 06:11:17.107183 2026] [proxy_fcgi:error] [pid 5602:tid 5606] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:17.434374 2026] [proxy_fcgi:error] [pid 5602:tid 5605] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:17.762334 2026] [proxy_fcgi:error] [pid 5602:tid 5616] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:18.259999 2026] [proxy_fcgi:error] [pid 5602:tid 5628] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:18.786065 2026] [proxy_fcgi:error] [pid 5602:tid 5623] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:19.125309 2026] [proxy_fcgi:error] [pid 5602:tid 5604] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:19.463208 2026] [proxy_fcgi:error] [pid 5602:tid 5621] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:19.831804 2026] [proxy_fcgi:error] [pid 5602:tid 5620] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:20.181841 2026] [proxy_fcgi:error] [pid 5602:tid 5611] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:20.511943 2026] [proxy_fcgi:error] [pid 5602:tid 5624] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:20.966379 2026] [proxy_fcgi:error] [pid 5602:tid 5627] [client 20.195.182.164:19620] AH01071: Got error 'Primary script unknown'
[Sat May 16 06:11:21.431268 2026] [:error] [pid 5602:tid 5606] [client 20.195.182.164:19620] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ageaCdzTTsu77r3UIsm-kwAAAQI"]
[Sat May 16 06:11:22.766789 2026] [:error] [pid 24874:tid 24946] [client 20.195.182.164:23274] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ageaCsiii6x3XidYGHGb9wAAAIs"]
[Sat May 16 06:11:24.066707 2026] [:error] [pid 24979:tid 25005] [client 20.195.182.164:23259] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ageaDLvSFUQiwLaOL2orMAAAANg"]
[Sat May 16 06:11:24.972738 2026] [:error] [pid 24874:tid 24953] [client 20.195.182.164:19634] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ageaDMiii6x3XidYGHGb-QAAAJI"]
[Sat May 16 06:11:26.347751 2026] [:error] [pid 24979:tid 24991] [client 20.195.182.164:6237] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "ageaDrvSFUQiwLaOL2orMwAAAMo"]
[Sat May 16 06:11:28.507742 2026] [:error] [pid 24867:tid 24900] [client 20.195.182.164:27642] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "ageaECDgFLCgyKq-zmbs1gAAABM"]
[Sat May 16 06:11:29.304505 2026] [:error] [pid 5602:tid 5623] [client 20.195.182.164:22180] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "ageaEdzTTsu77r3UIsm-lQAAARM"]
[Sat May 16 06:11:30.118181 2026] [:error] [pid 24979:tid 24989] [client 20.195.182.164:6240] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "ageaErvSFUQiwLaOL2orNAAAAMg"]
[Sat May 16 06:11:31.261512 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:4452] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "ageaE9zTTsu77r3UIsm-mwAAAQo"]
[Sat May 16 06:11:32.059451 2026] [:error] [pid 5602:tid 5615] [client 20.195.182.164:2735] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "ageaFNzTTsu77r3UIsm-nAAAAQs"]
[Sat May 16 06:11:33.404520 2026] [:error] [pid 24874:tid 24943] [client 20.195.182.164:2722] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "ageaFciii6x3XidYGHGcDAAAAIg"]
[Sat May 16 06:11:34.290495 2026] [:error] [pid 5602:tid 5626] [client 20.195.182.164:27615] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "ageaFtzTTsu77r3UIsm-oAAAARY"]
[Sat May 16 06:11:35.865916 2026] [:error] [pid 24979:tid 24986] [client 20.195.182.164:27626] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "ageaF7vSFUQiwLaOL2orNgAAAMU"]
[Sat May 16 06:11:38.447865 2026] [:error] [pid 24979:tid 24984] [client 20.195.182.164:3063] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "ageaGrvSFUQiwLaOL2orNwAAAMM"]
[Sat May 16 06:11:40.048661 2026] [:error] [pid 24979:tid 24987] [client 20.195.182.164:14567] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "ageaHLvSFUQiwLaOL2orOAAAAMY"]
[Sat May 16 06:11:41.215179 2026] [:error] [pid 24867:tid 24889] [client 20.195.182.164:19590] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "ageaHSDgFLCgyKq-zmbs2AAAAAg"]
[Sat May 16 06:11:43.888631 2026] [:error] [pid 5602:tid 5626] [client 20.195.182.164:3906] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "ageaH9zTTsu77r3UIsm-sgAAARY"]
[Sat May 16 06:11:45.278970 2026] [:error] [pid 24869:tid 24920] [client 20.195.182.164:24494] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "ageaIexo3FMprMltYl4ACwAAAEw"]
[Sat May 16 06:11:47.079328 2026] [:error] [pid 5602:tid 5608] [client 20.195.182.164:3029] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "ageaI9zTTsu77r3UIsm-twAAAQQ"]
[Sat May 16 06:11:49.416043 2026] [:error] [pid 24869:tid 24908] [client 20.195.182.164:14755] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "ageaJexo3FMprMltYl4ADgAAAEA"]
[Sat May 16 06:11:50.824632 2026] [:error] [pid 24869:tid 24927] [client 20.195.182.164:4105] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "ageaJuxo3FMprMltYl4ADwAAAFM"]
[Sat May 16 06:11:54.164882 2026] [:error] [pid 24867:tid 24891] [client 20.195.182.164:8224] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "ageaKiDgFLCgyKq-zmbs2gAAAAo"]
[Sat May 16 06:11:55.273887 2026] [:error] [pid 24867:tid 24890] [client 20.195.182.164:8103] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "ageaKyDgFLCgyKq-zmbs3AAAAAk"]
[Sat May 16 06:11:56.596052 2026] [:error] [pid 24874:tid 24938] [client 20.195.182.164:6218] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "ageaLMiii6x3XidYGHGcHAAAAIM"]
[Sat May 16 06:11:58.199029 2026] [:error] [pid 24869:tid 24931] [client 20.195.182.164:16608] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "ageaLuxo3FMprMltYl4AFwAAAFc"]
[Sat May 16 06:11:59.362113 2026] [:error] [pid 24867:tid 24899] [client 20.195.182.164:9137] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "ageaLyDgFLCgyKq-zmbs3wAAABI"]
[Sat May 16 06:12:00.300655 2026] [:error] [pid 24874:tid 24941] [client 20.195.182.164:27614] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "ageaMMiii6x3XidYGHGcHwAAAIY"]
[Sat May 16 06:12:01.222117 2026] [:error] [pid 24867:tid 24895] [client 20.195.182.164:8103] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "ageaMSDgFLCgyKq-zmbs4AAAAA4"]
[Sat May 16 06:12:02.652741 2026] [:error] [pid 24979:tid 24996] [client 20.195.182.164:3013] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ageaMrvSFUQiwLaOL2orQAAAAM8"]
[Sat May 16 06:12:03.837677 2026] [:error] [pid 24874:tid 24957] [client 20.195.182.164:18912] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ageaM8iii6x3XidYGHGcIQAAAJY"]
[Sat May 16 06:12:04.925863 2026] [:error] [pid 24874:tid 24945] [client 20.195.182.164:13738] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ageaNMiii6x3XidYGHGcIgAAAIo"]
[Sat May 16 06:12:06.309760 2026] [:error] [pid 24874:tid 24954] [client 20.195.182.164:18942] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "ageaNsiii6x3XidYGHGcIwAAAJM"]
[Sat May 16 06:12:07.710150 2026] [:error] [pid 24869:tid 24917] [client 20.195.182.164:7304] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "ageaN-xo3FMprMltYl4AIAAAAEk"]
[Sat May 16 06:12:10.095920 2026] [:error] [pid 24979:tid 24989] [client 20.195.182.164:14530] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "ageaOrvSFUQiwLaOL2orRQAAAMg"]
[Sat May 16 06:12:11.774936 2026] [:error] [pid 24874:tid 24944] [client 20.195.182.164:8122] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "ageaO8iii6x3XidYGHGcJwAAAIk"]
[Sat May 16 06:12:15.512438 2026] [:error] [pid 24874:tid 24940] [client 20.195.182.164:8591] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "ageaP8iii6x3XidYGHGcKgAAAIU"]
[Sat May 16 06:12:17.812719 2026] [:error] [pid 24874:tid 24938] [client 20.195.182.164:27620] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3369.php"] [unique_id "ageaQciii6x3XidYGHGcLQAAAIM"]
[Sat May 16 06:12:21.740074 2026] [proxy_fcgi:error] [pid 24869:tid 24910] [client 20.195.182.164:8210] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:56.519163 2026] [proxy_fcgi:error] [pid 5602:tid 5616] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:56.766653 2026] [proxy_fcgi:error] [pid 5602:tid 5617] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:56.890435 2026] [proxy_fcgi:error] [pid 5602:tid 5604] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:57.013985 2026] [proxy_fcgi:error] [pid 5602:tid 5626] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:57.284190 2026] [proxy_fcgi:error] [pid 5602:tid 5605] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:57.552049 2026] [proxy_fcgi:error] [pid 5602:tid 5613] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:57.707791 2026] [proxy_fcgi:error] [pid 5602:tid 5627] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:57.830465 2026] [proxy_fcgi:error] [pid 5602:tid 5622] [client 13.75.76.66:1781] AH01071: Got error 'Primary script unknown'
[Sat May 16 08:32:57.949275 2026] [:error] [pid 5602:tid 5620] [client 13.75.76.66:1781] [client 13.75.76.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "age7OdzTTsu77r3UIsnqqAAAARA"]
[Sat May 16 08:32:58.488750 2026] [:error] [pid 24979:tid 24987] [client 13.75.76.66:1280] [client 13.75.76.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "age7OrvSFUQiwLaOL2pIwgAAAMY"]
[Sat May 16 08:32:59.041611 2026] [:error] [pid 5602:tid 5623] [client 13.75.76.66:4384] [client 13.75.76.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "age7O9zTTsu77r3UIsnqqgAAARM"]
[Sat May 16 08:32:59.561907 2026] [:error] [pid 5602:tid 5621] [client 13.75.76.66:1633] [client 13.75.76.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "age7O9zTTsu77r3UIsnqrAAAARE"]
[Sat May 16 20:10:58.022604 2026] [:error] [pid 61463:tid 61473] [client 37.139.53.198:42659] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stratapluswa.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stratapluswa.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aghe0jXdL1WU7nYXPmT3ZQAAAcg"]
[Sat May 16 20:10:59.220590 2026] [:error] [pid 61361:tid 61382] [client 95.181.172.234:55923] [client 95.181.172.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stratapluswa.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stratapluswa.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aghe05Zojzbt3jGziNl5twAAAVM"]
[Sat May 16 22:07:54.326780 2026] [:error] [pid 24979:tid 24990] [client 34.16.148.155:51008] [client 34.16.148.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agh6OrvSFUQiwLaOL2qv-QAAAMk"]
[Sat May 16 23:19:05.441376 2026] [proxy_fcgi:error] [pid 5602:tid 5628] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:05.709088 2026] [proxy_fcgi:error] [pid 5602:tid 5608] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:05.859351 2026] [proxy_fcgi:error] [pid 5602:tid 5622] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:05.995341 2026] [proxy_fcgi:error] [pid 5602:tid 5609] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:06.262406 2026] [proxy_fcgi:error] [pid 5602:tid 5611] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:06.536206 2026] [proxy_fcgi:error] [pid 5602:tid 5621] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:06.670509 2026] [proxy_fcgi:error] [pid 5602:tid 5610] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:06.841466 2026] [proxy_fcgi:error] [pid 5602:tid 5614] [client 20.2.169.118:7519] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:19:06.971663 2026] [:error] [pid 5602:tid 5624] [client 20.2.169.118:7519] [client 20.2.169.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiK6tzTTsu77r3UIslAeQAAARQ"]
[Sat May 16 23:19:07.484815 2026] [:error] [pid 61411:tid 61420] [client 20.2.169.118:7532] [client 20.2.169.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiK62VkiEwGnPL_dvEq1AAAAYc"]
[Sat May 16 23:19:08.046486 2026] [:error] [pid 61361:tid 61371] [client 20.2.169.118:6502] [client 20.2.169.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiK7JZojzbt3jGziNmVdAAAAUg"]
[Sat May 16 23:19:08.597910 2026] [:error] [pid 61361:tid 61376] [client 20.2.169.118:7505] [client 20.2.169.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiK7JZojzbt3jGziNmVdQAAAU0"]
[Sat May 16 23:53:44.729142 2026] [proxy_fcgi:error] [pid 5602:tid 5607] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:44.825229 2026] [proxy_fcgi:error] [pid 5602:tid 5623] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:45.035924 2026] [proxy_fcgi:error] [pid 5602:tid 5625] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:45.129055 2026] [proxy_fcgi:error] [pid 5602:tid 5624] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:45.268321 2026] [proxy_fcgi:error] [pid 5602:tid 5627] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:45.492450 2026] [proxy_fcgi:error] [pid 5602:tid 5626] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:45.747190 2026] [proxy_fcgi:error] [pid 5602:tid 5620] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:45.840135 2026] [proxy_fcgi:error] [pid 5602:tid 5610] [client 4.194.15.39:10904] AH01071: Got error 'Primary script unknown'
[Sat May 16 23:53:45.929232 2026] [:error] [pid 5602:tid 5615] [client 4.194.15.39:10904] [client 4.194.15.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/control.php"] [unique_id "agiTCdzTTsu77r3UIslCvQAAAQs"]
[Sat May 16 23:53:46.554754 2026] [:error] [pid 61361:tid 61375] [client 4.194.15.39:10907] [client 4.194.15.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/control.php"] [unique_id "agiTCpZojzbt3jGziNmarAAAAUw"]
[Sat May 16 23:53:47.124119 2026] [:error] [pid 61361:tid 61374] [client 4.194.15.39:10908] [client 4.194.15.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/control.php"] [unique_id "agiTC5Zojzbt3jGziNmarQAAAUs"]
[Sat May 16 23:53:47.615529 2026] [:error] [pid 61361:tid 61377] [client 4.194.15.39:10880] [client 4.194.15.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/control.php"] [unique_id "agiTC5Zojzbt3jGziNmargAAAU4"]
[Sun May 17 01:59:14.389719 2026] [proxy_fcgi:error] [pid 24979:tid 24994] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:14.634635 2026] [proxy_fcgi:error] [pid 24979:tid 24998] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:14.757135 2026] [proxy_fcgi:error] [pid 24979:tid 24981] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:14.879827 2026] [proxy_fcgi:error] [pid 24979:tid 24997] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:15.145394 2026] [proxy_fcgi:error] [pid 24979:tid 24996] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:15.406684 2026] [proxy_fcgi:error] [pid 24979:tid 24990] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:15.530646 2026] [proxy_fcgi:error] [pid 24979:tid 24985] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:15.653459 2026] [proxy_fcgi:error] [pid 24979:tid 25002] [client 20.24.216.253:1160] AH01071: Got error 'Primary script unknown'
[Sun May 17 01:59:15.773404 2026] [:error] [pid 24979:tid 24995] [client 20.24.216.253:1160] [client 20.24.216.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiwc7vSFUQiwLaOL2rFuwAAAM4"]
[Sun May 17 01:59:16.298780 2026] [:error] [pid 61411:tid 61418] [client 20.24.216.253:1165] [client 20.24.216.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiwdGVkiEwGnPL_dvFCFQAAAYU"]
[Sun May 17 01:59:16.808695 2026] [:error] [pid 24979:tid 25005] [client 20.24.216.253:1927] [client 20.24.216.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiwdLvSFUQiwLaOL2rFvAAAANg"]
[Sun May 17 01:59:17.291818 2026] [:error] [pid 61411:tid 61430] [client 20.24.216.253:4252] [client 20.24.216.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agiwdWVkiEwGnPL_dvFCFwAAAZE"]
[Sun May 17 04:59:14.772878 2026] [proxy_fcgi:error] [pid 36652:tid 36665] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:15.087149 2026] [proxy_fcgi:error] [pid 36652:tid 36675] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:15.438470 2026] [proxy_fcgi:error] [pid 36652:tid 36664] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:15.752847 2026] [proxy_fcgi:error] [pid 36652:tid 36677] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:16.087032 2026] [proxy_fcgi:error] [pid 36652:tid 36661] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:16.572710 2026] [proxy_fcgi:error] [pid 36652:tid 36656] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:16.935401 2026] [proxy_fcgi:error] [pid 36652:tid 36666] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:17.265204 2026] [proxy_fcgi:error] [pid 36652:tid 36657] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:17.631694 2026] [proxy_fcgi:error] [pid 36652:tid 36655] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:17.946391 2026] [proxy_fcgi:error] [pid 36652:tid 36674] [client 4.228.204.236:29621] AH01071: Got error 'Primary script unknown'
[Sun May 17 04:59:18.259359 2026] [:error] [pid 36652:tid 36668] [client 4.228.204.236:29621] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-spm.php"] [unique_id "agjapjZrzQadnZADvj__pQAAAQ4"]
[Sun May 17 04:59:19.354540 2026] [:error] [pid 59062:tid 59141] [client 4.228.204.236:13117] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-spm.php"] [unique_id "agjapz4V9GkVWmCFmGaxhAAAAJI"]
[Sun May 17 04:59:20.734681 2026] [:error] [pid 59062:tid 59128] [client 4.228.204.236:6660] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-spm.php"] [unique_id "agjaqD4V9GkVWmCFmGaxiAAAAIU"]
[Sun May 17 04:59:21.546776 2026] [:error] [pid 59166:tid 59189] [client 4.228.204.236:29568] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-spm.php"] [unique_id "agjaqU_puQ1I47_0UrilBwAAANU"]
[Sun May 17 04:59:22.407108 2026] [:error] [pid 59062:tid 59132] [client 4.228.204.236:6693] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjaqj4V9GkVWmCFmGaxiwAAAIk"]
[Sun May 17 04:59:23.733819 2026] [:error] [pid 59166:tid 59188] [client 4.228.204.236:24195] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjaq0_puQ1I47_0UrilCAAAANQ"]
[Sun May 17 04:59:24.546635 2026] [:error] [pid 59062:tid 59123] [client 4.228.204.236:21576] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjarD4V9GkVWmCFmGaxjQAAAIA"]
[Sun May 17 04:59:25.434695 2026] [:error] [pid 59062:tid 59146] [client 4.228.204.236:10667] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjarT4V9GkVWmCFmGaxjgAAAJc"]
[Sun May 17 04:59:26.484809 2026] [:error] [pid 59062:tid 59134] [client 4.228.204.236:23222] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "agjarj4V9GkVWmCFmGaxkQAAAIs"]
[Sun May 17 04:59:27.420011 2026] [:error] [pid 59062:tid 59124] [client 4.228.204.236:10682] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "agjarz4V9GkVWmCFmGaxkgAAAIE"]
[Sun May 17 04:59:28.104460 2026] [:error] [pid 59062:tid 59128] [client 4.228.204.236:23228] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "agjasD4V9GkVWmCFmGaxkwAAAIU"]
[Sun May 17 04:59:29.047763 2026] [:error] [pid 59062:tid 59126] [client 4.228.204.236:30139] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xminie.php"] [unique_id "agjasT4V9GkVWmCFmGaxlQAAAIM"]
[Sun May 17 04:59:30.112699 2026] [:error] [pid 59061:tid 59111] [client 4.228.204.236:23199] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "agjasoYS410zAmsYkoLuSQAAAE8"]
[Sun May 17 04:59:30.969552 2026] [:error] [pid 59061:tid 59098] [client 4.228.204.236:23204] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "agjasoYS410zAmsYkoLuSgAAAEI"]
[Sun May 17 04:59:31.709165 2026] [:error] [pid 59062:tid 59135] [client 4.228.204.236:13080] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "agjasz4V9GkVWmCFmGaxnAAAAIw"]
[Sun May 17 04:59:32.710592 2026] [:error] [pid 59062:tid 59146] [client 4.228.204.236:24231] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aaa.php"] [unique_id "agjatD4V9GkVWmCFmGaxnQAAAJc"]
[Sun May 17 04:59:33.585908 2026] [:error] [pid 59166:tid 59175] [client 4.228.204.236:6408] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agjatU_puQ1I47_0UrilCgAAAMc"]
[Sun May 17 04:59:34.474073 2026] [:error] [pid 59061:tid 59102] [client 4.228.204.236:30465] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agjatoYS410zAmsYkoLuTAAAAEY"]
[Sun May 17 04:59:35.393992 2026] [:error] [pid 59062:tid 59131] [client 4.228.204.236:6692] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agjatz4V9GkVWmCFmGaxnwAAAIg"]
[Sun May 17 04:59:36.191042 2026] [:error] [pid 59062:tid 59138] [client 4.228.204.236:23173] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agjauD4V9GkVWmCFmGaxowAAAI8"]
[Sun May 17 04:59:37.079575 2026] [:error] [pid 59166:tid 59191] [client 4.228.204.236:29622] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "agjauU_puQ1I47_0UrilCwAAANc"]
[Sun May 17 04:59:38.200528 2026] [:error] [pid 59062:tid 59132] [client 4.228.204.236:24245] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "agjauj4V9GkVWmCFmGaxpgAAAIk"]
[Sun May 17 04:59:38.993906 2026] [:error] [pid 59061:tid 59108] [client 4.228.204.236:30490] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "agjauoYS410zAmsYkoLuTQAAAEw"]
[Sun May 17 04:59:40.046871 2026] [:error] [pid 59062:tid 59137] [client 4.228.204.236:13072] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws81.php"] [unique_id "agjavD4V9GkVWmCFmGaxpwAAAI4"]
[Sun May 17 04:59:41.096916 2026] [:error] [pid 59060:tid 59074] [client 4.228.204.236:31252] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "agjavfvwvq3bndkPE4m_GQAAAAU"]
[Sun May 17 04:59:42.132690 2026] [:error] [pid 59061:tid 59109] [client 4.228.204.236:25075] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "agjavoYS410zAmsYkoLuTgAAAE0"]
[Sun May 17 04:59:43.249162 2026] [:error] [pid 59060:tid 59083] [client 4.228.204.236:6686] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "agjav_vwvq3bndkPE4m_GwAAAA4"]
[Sun May 17 04:59:44.180692 2026] [:error] [pid 59060:tid 59077] [client 4.228.204.236:10675] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "agjawPvwvq3bndkPE4m_HAAAAAg"]
[Sun May 17 04:59:45.219912 2026] [:error] [pid 59166:tid 59176] [client 4.228.204.236:13099] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "agjawU_puQ1I47_0UrilDQAAAMg"]
[Sun May 17 04:59:46.909812 2026] [:error] [pid 59062:tid 59130] [client 4.228.204.236:23178] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "agjawj4V9GkVWmCFmGaxqwAAAIc"]
[Sun May 17 04:59:47.698710 2026] [:error] [pid 59060:tid 59076] [client 4.228.204.236:6663] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "agjaw_vwvq3bndkPE4m_HQAAAAc"]
[Sun May 17 04:59:48.797177 2026] [:error] [pid 59166:tid 59183] [client 4.228.204.236:5451] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/av.php"] [unique_id "agjaxE_puQ1I47_0UrilEQAAAM8"]
[Sun May 17 04:59:49.780081 2026] [:error] [pid 59166:tid 59189] [client 4.228.204.236:23181] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agjaxU_puQ1I47_0UrilFQAAANU"]
[Sun May 17 04:59:50.610840 2026] [:error] [pid 59062:tid 59139] [client 4.228.204.236:31248] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agjaxj4V9GkVWmCFmGaxsgAAAJA"]
[Sun May 17 04:59:52.375317 2026] [:error] [pid 59060:tid 59073] [client 4.228.204.236:10634] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agjayPvwvq3bndkPE4m_HwAAAAQ"]
[Sun May 17 04:59:53.263597 2026] [:error] [pid 59166:tid 59181] [client 4.228.204.236:30485] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agjayU_puQ1I47_0UrilJQAAAM0"]
[Sun May 17 04:59:54.039421 2026] [:error] [pid 59166:tid 59168] [client 4.228.204.236:23189] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/77.php"] [unique_id "agjayk_puQ1I47_0UrilKAAAAMA"]
[Sun May 17 04:59:55.034467 2026] [:error] [pid 59062:tid 59125] [client 4.228.204.236:13085] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/77.php"] [unique_id "agjayz4V9GkVWmCFmGaxuAAAAII"]
[Sun May 17 04:59:55.961778 2026] [:error] [pid 59062:tid 59136] [client 4.228.204.236:25374] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/77.php"] [unique_id "agjayz4V9GkVWmCFmGaxuQAAAI0"]
[Sun May 17 04:59:56.829068 2026] [:error] [pid 59060:tid 59084] [client 4.228.204.236:5456] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/77.php"] [unique_id "agjazPvwvq3bndkPE4m_IQAAAA8"]
[Sun May 17 04:59:57.673974 2026] [:error] [pid 59060:tid 59080] [client 4.228.204.236:31241] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x402.php"] [unique_id "agjazfvwvq3bndkPE4m_IgAAAAs"]
[Sun May 17 04:59:58.576139 2026] [:error] [pid 59166:tid 59174] [client 4.228.204.236:25034] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x402.php"] [unique_id "agjazk_puQ1I47_0UrilNwAAAMY"]
[Sun May 17 04:59:59.561974 2026] [:error] [pid 59062:tid 59147] [client 4.228.204.236:6717] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x402.php"] [unique_id "agjazz4V9GkVWmCFmGaxvQAAAJg"]
[Sun May 17 05:00:00.440193 2026] [:error] [pid 59060:tid 59078] [client 4.228.204.236:10659] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/x402.php"] [unique_id "agja0Pvwvq3bndkPE4m_JgAAAAk"]
[Sun May 17 05:00:01.699485 2026] [:error] [pid 59060:tid 59085] [client 4.228.204.236:30518] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agja0fvwvq3bndkPE4m_KAAAABA"]
[Sun May 17 05:00:02.664908 2026] [:error] [pid 59166:tid 59182] [client 4.228.204.236:25054] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agja0k_puQ1I47_0UrilOAAAAM4"]
[Sun May 17 05:00:03.624122 2026] [:error] [pid 59062:tid 59145] [client 4.228.204.236:30092] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agja0z4V9GkVWmCFmGaxvwAAAJY"]
[Sun May 17 05:00:04.442661 2026] [:error] [pid 59062:tid 59144] [client 4.228.204.236:25076] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agja1D4V9GkVWmCFmGaxwQAAAJU"]
[Sun May 17 05:00:05.415765 2026] [:error] [pid 59166:tid 59181] [client 4.228.204.236:25372] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "agja1U_puQ1I47_0UrilOQAAAM0"]
[Sun May 17 05:00:06.514506 2026] [:error] [pid 59061:tid 59118] [client 4.228.204.236:5474] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "agja1oYS410zAmsYkoLuVgAAAFY"]
[Sun May 17 05:00:07.424385 2026] [:error] [pid 59166:tid 59185] [client 4.228.204.236:31233] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "agja10_puQ1I47_0UrilPAAAANE"]
[Sun May 17 05:00:08.206118 2026] [:error] [pid 36652:tid 36670] [client 4.228.204.236:13086] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/1.php"] [unique_id "agja2DZrzQadnZADvj__sQAAARA"]
[Sun May 17 05:00:09.094455 2026] [:error] [pid 36652:tid 36662] [client 4.228.204.236:13116] [client 4.228.204.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "agja2TZrzQadnZADvj__sgAAAQg"]
[Sun May 17 05:00:09.843412 2026] [:error] [pid 36652:tid 36674] [client 4.228.204.236:30123] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agja2TZrzQadnZADvj__tAAAARQ"]
[Sun May 17 05:00:10.805623 2026] [:error] [pid 36652:tid 36668] [client 4.228.204.236:30505] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agja2jZrzQadnZADvj__tQAAAQ4"]
[Sun May 17 05:00:11.664222 2026] [:error] [pid 59166:tid 59188] [client 4.228.204.236:29628] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agja20_puQ1I47_0UrilPgAAANQ"]
[Sun May 17 05:00:12.609154 2026] [:error] [pid 59166:tid 59179] [client 4.228.204.236:5490] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agja3E_puQ1I47_0UrilQAAAAMs"]
[Sun May 17 05:00:13.615713 2026] [:error] [pid 59166:tid 59178] [client 4.228.204.236:30098] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agja3U_puQ1I47_0UrilQQAAAMo"]
[Sun May 17 05:00:15.070512 2026] [:error] [pid 59061:tid 59106] [client 4.228.204.236:31255] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agja34YS410zAmsYkoLuVwAAAEo"]
[Sun May 17 05:00:15.766870 2026] [:error] [pid 36652:tid 36676] [client 4.228.204.236:5448] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agja3zZrzQadnZADvj__uQAAARY"]
[Sun May 17 05:00:16.709966 2026] [:error] [pid 36652:tid 36661] [client 4.228.204.236:23211] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agja4DZrzQadnZADvj__uwAAAQc"]
[Sun May 17 05:00:17.468169 2026] [proxy_fcgi:error] [pid 36652:tid 36656] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:17.803583 2026] [proxy_fcgi:error] [pid 36652:tid 36666] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:18.116336 2026] [proxy_fcgi:error] [pid 36652:tid 36678] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:18.430049 2026] [proxy_fcgi:error] [pid 36652:tid 36659] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:18.820865 2026] [proxy_fcgi:error] [pid 36652:tid 36657] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:19.134801 2026] [proxy_fcgi:error] [pid 36652:tid 36660] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:19.450770 2026] [proxy_fcgi:error] [pid 36652:tid 36670] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:19.767083 2026] [proxy_fcgi:error] [pid 36652:tid 36655] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:20.110466 2026] [proxy_fcgi:error] [pid 36652:tid 36674] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:20.423156 2026] [proxy_fcgi:error] [pid 36652:tid 36671] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:20.736171 2026] [proxy_fcgi:error] [pid 36652:tid 36668] [client 4.228.204.236:13073] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:00:22.110395 2026] [:error] [pid 36652:tid 36673] [client 4.228.204.236:13073] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "agja5jZrzQadnZADvj__yQAAARM"]
[Sun May 17 05:00:23.069044 2026] [:error] [pid 59062:tid 59141] [client 4.228.204.236:6418] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "agja5z4V9GkVWmCFmGaxxgAAAJI"]
[Sun May 17 05:00:23.993665 2026] [:error] [pid 59060:tid 59073] [client 4.228.204.236:30120] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "agja5_vwvq3bndkPE4m_LgAAAAQ"]
[Sun May 17 05:00:24.754500 2026] [:error] [pid 59166:tid 59174] [client 4.228.204.236:23191] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pp.php"] [unique_id "agja6E_puQ1I47_0UrilRgAAAMY"]
[Sun May 17 05:00:25.678509 2026] [:error] [pid 59062:tid 59136] [client 4.228.204.236:23186] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agja6T4V9GkVWmCFmGaxyAAAAI0"]
[Sun May 17 05:00:26.543731 2026] [:error] [pid 59062:tid 59124] [client 4.228.204.236:30110] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agja6j4V9GkVWmCFmGaxygAAAIE"]
[Sun May 17 05:00:27.514872 2026] [:error] [pid 59060:tid 59087] [client 4.228.204.236:30104] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agja6_vwvq3bndkPE4m_MAAAABI"]
[Sun May 17 05:00:28.367413 2026] [:error] [pid 59060:tid 59084] [client 4.228.204.236:24235] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agja7Pvwvq3bndkPE4m_MQAAAA8"]
[Sun May 17 05:00:29.341647 2026] [:error] [pid 59062:tid 59143] [client 4.228.204.236:31264] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "agja7T4V9GkVWmCFmGaxzAAAAJQ"]
[Sun May 17 05:00:30.094993 2026] [:error] [pid 59062:tid 59144] [client 4.228.204.236:6659] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "agja7j4V9GkVWmCFmGaxzgAAAJU"]
[Sun May 17 05:00:31.159606 2026] [:error] [pid 59060:tid 59092] [client 4.228.204.236:30506] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "agja7_vwvq3bndkPE4m_MgAAABc"]
[Sun May 17 05:00:31.942151 2026] [:error] [pid 59061:tid 59098] [client 4.228.204.236:24207] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/error_log.php"] [unique_id "agja74YS410zAmsYkoLuWAAAAEI"]
[Sun May 17 05:00:32.671046 2026] [:error] [pid 59060:tid 59086] [client 4.228.204.236:29578] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agja8Pvwvq3bndkPE4m_MwAAABE"]
[Sun May 17 05:00:33.834342 2026] [:error] [pid 59062:tid 59135] [client 4.228.204.236:13079] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agja8T4V9GkVWmCFmGax0gAAAIw"]
[Sun May 17 05:00:34.620167 2026] [:error] [pid 59060:tid 59070] [client 4.228.204.236:13112] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agja8vvwvq3bndkPE4m_NgAAAAE"]
[Sun May 17 05:00:35.700501 2026] [:error] [pid 59060:tid 59069] [client 4.228.204.236:23169] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agja8_vwvq3bndkPE4m_NwAAAAA"]
[Sun May 17 05:00:36.552156 2026] [:error] [pid 59062:tid 59128] [client 4.228.204.236:30140] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "agja9D4V9GkVWmCFmGax1gAAAIU"]
[Sun May 17 05:00:37.419454 2026] [:error] [pid 59062:tid 59141] [client 4.228.204.236:30507] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "agja9T4V9GkVWmCFmGax2AAAAJI"]
[Sun May 17 05:00:38.579312 2026] [:error] [pid 59062:tid 59125] [client 4.228.204.236:30467] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "agja9j4V9GkVWmCFmGax2gAAAII"]
[Sun May 17 05:00:39.505963 2026] [:error] [pid 36652:tid 36669] [client 4.228.204.236:13078] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/roksad1.php"] [unique_id "agja9zZrzQadnZADvj__zQAAAQ8"]
[Sun May 17 05:00:40.561864 2026] [:error] [pid 36652:tid 36661] [client 4.228.204.236:30522] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axe.php"] [unique_id "agja-DZrzQadnZADvj__zgAAAQc"]
[Sun May 17 05:00:41.399489 2026] [:error] [pid 59060:tid 59085] [client 4.228.204.236:5500] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axe.php"] [unique_id "agja-fvwvq3bndkPE4m_OAAAABA"]
[Sun May 17 05:00:42.549440 2026] [:error] [pid 59060:tid 59083] [client 4.228.204.236:30469] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axe.php"] [unique_id "agja-vvwvq3bndkPE4m_OgAAAA4"]
[Sun May 17 05:00:43.386060 2026] [:error] [pid 59060:tid 59077] [client 4.228.204.236:13075] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/axe.php"] [unique_id "agja-_vwvq3bndkPE4m_PQAAAAg"]
[Sun May 17 05:00:44.291828 2026] [:error] [pid 59062:tid 59135] [client 4.228.204.236:30106] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/de.php"] [unique_id "agja_D4V9GkVWmCFmGax3wAAAIw"]
[Sun May 17 05:00:45.693278 2026] [:error] [pid 59061:tid 59113] [client 4.228.204.236:10655] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/de.php"] [unique_id "agja_YYS410zAmsYkoLuYAAAAFE"]
[Sun May 17 05:00:46.594277 2026] [:error] [pid 59061:tid 59112] [client 4.228.204.236:6667] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/de.php"] [unique_id "agja_oYS410zAmsYkoLuYQAAAFA"]
[Sun May 17 05:00:47.464190 2026] [:error] [pid 59061:tid 59120] [client 4.228.204.236:13063] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/de.php"] [unique_id "agja_4YS410zAmsYkoLuYgAAAFg"]
[Sun May 17 05:00:48.119762 2026] [:error] [pid 59062:tid 59141] [client 4.228.204.236:23203] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "agjbAD4V9GkVWmCFmGax4gAAAJI"]
[Sun May 17 05:00:48.983789 2026] [:error] [pid 59061:tid 59106] [client 4.228.204.236:6669] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "agjbAIYS410zAmsYkoLuZAAAAEo"]
[Sun May 17 05:00:50.187018 2026] [:error] [pid 59062:tid 59140] [client 4.228.204.236:6706] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "agjbAj4V9GkVWmCFmGax7AAAAJE"]
[Sun May 17 05:00:51.015830 2026] [:error] [pid 59061:tid 59111] [client 4.228.204.236:31257] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aa.php"] [unique_id "agjbA4YS410zAmsYkoLuZQAAAE8"]
[Sun May 17 05:00:51.989413 2026] [:error] [pid 59061:tid 59104] [client 4.228.204.236:30105] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "agjbA4YS410zAmsYkoLuZwAAAEg"]
[Sun May 17 05:00:52.744486 2026] [:error] [pid 59062:tid 59139] [client 4.228.204.236:30141] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "agjbBD4V9GkVWmCFmGax-AAAAJA"]
[Sun May 17 05:00:53.606076 2026] [:error] [pid 59062:tid 59142] [client 4.228.204.236:23756] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "agjbBT4V9GkVWmCFmGax_QAAAJM"]
[Sun May 17 05:00:56.030752 2026] [:error] [pid 59062:tid 59124] [client 4.228.204.236:25407] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/100.php"] [unique_id "agjbCD4V9GkVWmCFmGax_wAAAIE"]
[Sun May 17 05:00:56.818533 2026] [:error] [pid 59061:tid 59119] [client 4.228.204.236:25387] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agjbCIYS410zAmsYkoLuawAAAFc"]
[Sun May 17 05:00:57.815345 2026] [:error] [pid 59166:tid 59188] [client 4.228.204.236:25352] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agjbCU_puQ1I47_0UrilTAAAANQ"]
[Sun May 17 05:00:58.608447 2026] [:error] [pid 36652:tid 36655] [client 4.228.204.236:25395] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agjbCjZrzQadnZADvj__1QAAAQE"]
[Sun May 17 05:00:59.305885 2026] [:error] [pid 59166:tid 59180] [client 4.228.204.236:6715] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agjbC0_puQ1I47_0UrilUAAAAMw"]
[Sun May 17 05:01:00.288095 2026] [:error] [pid 59166:tid 59176] [client 4.228.204.236:5471] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "agjbDE_puQ1I47_0UrilVAAAAMg"]
[Sun May 17 05:01:01.094136 2026] [:error] [pid 59166:tid 59170] [client 4.228.204.236:13094] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "agjbDU_puQ1I47_0UrilVQAAAMI"]
[Sun May 17 05:01:01.828774 2026] [:error] [pid 36652:tid 36671] [client 4.228.204.236:10627] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "agjbDTZrzQadnZADvj__1wAAARE"]
[Sun May 17 05:01:02.836712 2026] [:error] [pid 36652:tid 36667] [client 4.228.204.236:23213] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/view.php"] [unique_id "agjbDjZrzQadnZADvj__2QAAAQ0"]
[Sun May 17 05:01:03.747706 2026] [:error] [pid 36652:tid 36673] [client 4.228.204.236:5488] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bc.php"] [unique_id "agjbDzZrzQadnZADvj__2gAAARM"]
[Sun May 17 05:01:04.497279 2026] [:error] [pid 36652:tid 36665] [client 4.228.204.236:30113] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bc.php"] [unique_id "agjbEDZrzQadnZADvj__3AAAAQs"]
[Sun May 17 05:01:05.251546 2026] [:error] [pid 36652:tid 36677] [client 4.228.204.236:25048] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bc.php"] [unique_id "agjbETZrzQadnZADvj__3gAAARc"]
[Sun May 17 05:01:06.017728 2026] [:error] [pid 36652:tid 36658] [client 4.228.204.236:6701] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bc.php"] [unique_id "agjbEjZrzQadnZADvj__3wAAAQQ"]
[Sun May 17 05:01:06.960483 2026] [:error] [pid 36652:tid 36661] [client 4.228.204.236:25385] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agjbEjZrzQadnZADvj__4QAAAQc"]
[Sun May 17 05:01:07.724308 2026] [:error] [pid 36652:tid 36656] [client 4.228.204.236:25351] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agjbEzZrzQadnZADvj__4gAAAQI"]
[Sun May 17 05:01:08.433848 2026] [:error] [pid 59166:tid 59169] [client 4.228.204.236:30516] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agjbFE_puQ1I47_0UrilVgAAAME"]
[Sun May 17 05:01:09.379548 2026] [:error] [pid 36652:tid 36678] [client 4.228.204.236:31283] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agjbFTZrzQadnZADvj__4wAAARg"]
[Sun May 17 05:01:10.721869 2026] [:error] [pid 36652:tid 36660] [client 4.228.204.236:23202] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moshou.php"] [unique_id "agjbFjZrzQadnZADvj__5AAAAQY"]
[Sun May 17 05:01:12.326073 2026] [:error] [pid 59061:tid 59101] [client 4.228.204.236:25085] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moshou.php"] [unique_id "agjbGIYS410zAmsYkoLubgAAAEU"]
[Sun May 17 05:01:13.403822 2026] [:error] [pid 36652:tid 36663] [client 4.228.204.236:30523] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moshou.php"] [unique_id "agjbGTZrzQadnZADvj__5QAAAQk"]
[Sun May 17 05:01:14.355302 2026] [:error] [pid 59061:tid 59117] [client 4.228.204.236:31262] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/moshou.php"] [unique_id "agjbGoYS410zAmsYkoLucAAAAFU"]
[Sun May 17 05:01:15.270483 2026] [:error] [pid 59060:tid 59092] [client 4.228.204.236:30496] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "agjbG_vwvq3bndkPE4m_QAAAABc"]
[Sun May 17 05:01:16.260637 2026] [:error] [pid 59061:tid 59097] [client 4.228.204.236:30493] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "agjbHIYS410zAmsYkoLucQAAAEE"]
[Sun May 17 05:01:17.063500 2026] [:error] [pid 59061:tid 59098] [client 4.228.204.236:25347] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "agjbHYYS410zAmsYkoLucgAAAEI"]
[Sun May 17 05:01:18.034565 2026] [:error] [pid 59061:tid 59099] [client 4.228.204.236:23206] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "agjbHoYS410zAmsYkoLudQAAAEM"]
[Sun May 17 05:01:18.739225 2026] [:error] [pid 59061:tid 59114] [client 4.228.204.236:31294] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "agjbHoYS410zAmsYkoLudgAAAFI"]
[Sun May 17 05:01:19.549686 2026] [:error] [pid 36652:tid 36674] [client 4.228.204.236:31295] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zoper1.php"] [unique_id "agjbHzZrzQadnZADvj__6AAAARQ"]
[Sun May 17 05:01:20.468352 2026] [proxy_fcgi:error] [pid 36652:tid 36671] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:20.859310 2026] [proxy_fcgi:error] [pid 36652:tid 36667] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:21.305968 2026] [proxy_fcgi:error] [pid 36652:tid 36677] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:22.724217 2026] [proxy_fcgi:error] [pid 36652:tid 36664] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:23.037141 2026] [proxy_fcgi:error] [pid 36652:tid 36672] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:23.365115 2026] [proxy_fcgi:error] [pid 36652:tid 36661] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:23.681328 2026] [proxy_fcgi:error] [pid 36652:tid 36656] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:24.079071 2026] [proxy_fcgi:error] [pid 36652:tid 36666] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:24.391322 2026] [proxy_fcgi:error] [pid 36652:tid 36663] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:24.703485 2026] [proxy_fcgi:error] [pid 36652:tid 36670] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:25.025743 2026] [proxy_fcgi:error] [pid 36652:tid 36662] [client 4.228.204.236:13074] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:01:25.335689 2026] [:error] [pid 36652:tid 36674] [client 4.228.204.236:13074] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "agjbJTZrzQadnZADvj__-gAAARQ"]
[Sun May 17 05:01:26.022517 2026] [:error] [pid 36652:tid 36667] [client 4.228.204.236:25350] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "agjbJjZrzQadnZADvj__-wAAAQ0"]
[Sun May 17 05:01:27.044879 2026] [:error] [pid 59166:tid 59192] [client 4.228.204.236:25070] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "agjbJ0_puQ1I47_0UrilWwAAANg"]
[Sun May 17 05:01:28.054829 2026] [:error] [pid 59061:tid 59105] [client 4.228.204.236:30114] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "agjbKIYS410zAmsYkoLuegAAAEk"]
[Sun May 17 05:01:28.902657 2026] [:error] [pid 59061:tid 59119] [client 4.228.204.236:29614] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "agjbKIYS410zAmsYkoLuewAAAFc"]
[Sun May 17 05:01:29.767370 2026] [:error] [pid 59062:tid 59135] [client 4.228.204.236:13108] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "agjbKT4V9GkVWmCFmGayAwAAAIw"]
[Sun May 17 05:01:30.587183 2026] [:error] [pid 36652:tid 36669] [client 4.228.204.236:31237] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "agjbKjZrzQadnZADvj___gAAAQ8"]
[Sun May 17 05:01:31.504771 2026] [:error] [pid 59166:tid 59176] [client 4.228.204.236:25371] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/press.php"] [unique_id "agjbK0_puQ1I47_0UrilXwAAAMg"]
[Sun May 17 05:01:32.216539 2026] [:error] [pid 59166:tid 59174] [client 4.228.204.236:29593] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agjbLE_puQ1I47_0UrilYAAAAMY"]
[Sun May 17 05:01:33.156267 2026] [:error] [pid 59166:tid 59172] [client 4.228.204.236:23225] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agjbLU_puQ1I47_0UrilYQAAAMQ"]
[Sun May 17 05:01:34.001577 2026] [:error] [pid 36652:tid 36675] [client 4.228.204.236:25033] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agjbLjZrzQadnZADvj8AAgAAARU"]
[Sun May 17 05:01:34.804378 2026] [:error] [pid 59061:tid 59097] [client 4.228.204.236:25045] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agjbLoYS410zAmsYkoLufgAAAEE"]
[Sun May 17 05:01:35.635454 2026] [:error] [pid 59062:tid 59129] [client 4.228.204.236:25357] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agjbLz4V9GkVWmCFmGayBAAAAIY"]
[Sun May 17 05:01:36.617990 2026] [:error] [pid 36652:tid 36663] [client 4.228.204.236:30476] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agjbMDZrzQadnZADvj8ABgAAAQk"]
[Sun May 17 05:01:37.388363 2026] [:error] [pid 36652:tid 36655] [client 4.228.204.236:31271] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agjbMTZrzQadnZADvj8ACQAAAQE"]
[Sun May 17 05:01:38.149987 2026] [:error] [pid 59166:tid 59185] [client 4.228.204.236:25349] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agjbMk_puQ1I47_0UrilZQAAANE"]
[Sun May 17 05:01:38.951573 2026] [:error] [pid 59061:tid 59098] [client 4.228.204.236:6656] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agjbMoYS410zAmsYkoLufwAAAEI"]
[Sun May 17 05:01:39.678812 2026] [:error] [pid 59062:tid 59130] [client 4.228.204.236:6657] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agjbMz4V9GkVWmCFmGayBQAAAIc"]
[Sun May 17 05:01:40.559120 2026] [:error] [pid 59062:tid 59128] [client 4.228.204.236:25358] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agjbND4V9GkVWmCFmGayBgAAAIU"]
[Sun May 17 05:01:41.350814 2026] [:error] [pid 59166:tid 59186] [client 4.228.204.236:13069] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agjbNU_puQ1I47_0UrilZwAAANI"]
[Sun May 17 05:01:42.298802 2026] [:error] [pid 36652:tid 36672] [client 4.228.204.236:31266] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agjbNjZrzQadnZADvj8ACgAAARI"]
[Sun May 17 05:01:43.222596 2026] [:error] [pid 36652:tid 36669] [client 4.228.204.236:25026] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agjbNzZrzQadnZADvj8ACwAAAQ8"]
[Sun May 17 05:01:44.112461 2026] [:error] [pid 59166:tid 59180] [client 4.228.204.236:25040] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agjbOE_puQ1I47_0UrilaQAAAMw"]
[Sun May 17 05:01:45.329381 2026] [:error] [pid 59062:tid 59138] [client 4.228.204.236:25024] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agjbOT4V9GkVWmCFmGayCwAAAI8"]
[Sun May 17 05:01:46.078013 2026] [:error] [pid 36652:tid 36658] [client 4.228.204.236:30501] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/min.php"] [unique_id "agjbOjZrzQadnZADvj8ADQAAAQQ"]
[Sun May 17 05:01:47.205946 2026] [:error] [pid 36652:tid 36656] [client 4.228.204.236:23190] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/min.php"] [unique_id "agjbOzZrzQadnZADvj8ADwAAAQI"]
[Sun May 17 05:01:48.236025 2026] [:error] [pid 36652:tid 36676] [client 4.228.204.236:13090] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/min.php"] [unique_id "agjbPDZrzQadnZADvj8AEAAAARY"]
[Sun May 17 05:01:48.984675 2026] [:error] [pid 36652:tid 36660] [client 4.228.204.236:25059] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/min.php"] [unique_id "agjbPDZrzQadnZADvj8AEgAAAQY"]
[Sun May 17 05:01:49.870395 2026] [:error] [pid 59062:tid 59132] [client 4.228.204.236:23187] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "agjbPT4V9GkVWmCFmGayDAAAAIk"]
[Sun May 17 05:01:50.941049 2026] [:error] [pid 59062:tid 59146] [client 4.228.204.236:10637] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "agjbPj4V9GkVWmCFmGayDQAAAJc"]
[Sun May 17 05:01:51.934188 2026] [:error] [pid 36652:tid 36655] [client 4.228.204.236:31261] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "agjbPzZrzQadnZADvj8AFQAAAQE"]
[Sun May 17 05:01:52.805715 2026] [:error] [pid 36652:tid 36654] [client 4.228.204.236:30119] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/img.php"] [unique_id "agjbQDZrzQadnZADvj8AFgAAAQA"]
[Sun May 17 05:01:53.643602 2026] [:error] [pid 36652:tid 36659] [client 4.228.204.236:25382] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "agjbQTZrzQadnZADvj8AFwAAAQU"]
[Sun May 17 05:01:54.426820 2026] [:error] [pid 59166:tid 59172] [client 4.228.204.236:30118] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "agjbQk_puQ1I47_0UrilbQAAAMQ"]
[Sun May 17 05:01:55.266553 2026] [:error] [pid 59166:tid 59184] [client 4.228.204.236:30082] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "agjbQ0_puQ1I47_0UrilbgAAANA"]
[Sun May 17 05:01:56.123809 2026] [:error] [pid 59060:tid 59091] [client 4.228.204.236:31258] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/7.php"] [unique_id "agjbRPvwvq3bndkPE4m_RgAAABY"]
[Sun May 17 05:01:56.816491 2026] [:error] [pid 59166:tid 59177] [client 4.228.204.236:13101] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agjbRE_puQ1I47_0UrilbwAAAMk"]
[Sun May 17 05:01:57.748218 2026] [:error] [pid 59060:tid 59079] [client 4.228.204.236:5502] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agjbRfvwvq3bndkPE4m_RwAAAAo"]
[Sun May 17 05:01:58.542995 2026] [:error] [pid 36652:tid 36677] [client 4.228.204.236:23226] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agjbRjZrzQadnZADvj8AGgAAARc"]
[Sun May 17 05:01:59.326389 2026] [:error] [pid 36652:tid 36672] [client 4.228.204.236:13103] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agjbRzZrzQadnZADvj8AHAAAARI"]
[Sun May 17 05:02:00.105900 2026] [:error] [pid 59060:tid 59076] [client 4.228.204.236:25406] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agjbSPvwvq3bndkPE4m_SAAAAAc"]
[Sun May 17 05:02:00.861835 2026] [:error] [pid 59061:tid 59104] [client 4.228.204.236:25068] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agjbSIYS410zAmsYkoLuggAAAEg"]
[Sun May 17 05:02:01.900273 2026] [:error] [pid 59062:tid 59137] [client 4.228.204.236:25399] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agjbST4V9GkVWmCFmGayDwAAAI4"]
[Sun May 17 05:02:03.145778 2026] [:error] [pid 59166:tid 59168] [client 4.228.204.236:13076] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agjbS0_puQ1I47_0UrilcwAAAMA"]
[Sun May 17 05:02:04.020690 2026] [:error] [pid 36652:tid 36676] [client 4.228.204.236:31260] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "agjbTDZrzQadnZADvj8AHwAAARY"]
[Sun May 17 05:02:04.971158 2026] [:error] [pid 59061:tid 59109] [client 4.228.204.236:30130] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "agjbTIYS410zAmsYkoLuhAAAAE0"]
[Sun May 17 05:02:05.882141 2026] [:error] [pid 59166:tid 59178] [client 4.228.204.236:5493] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "agjbTU_puQ1I47_0UrildwAAAMo"]
[Sun May 17 05:02:06.614063 2026] [:error] [pid 36652:tid 36667] [client 4.228.204.236:23176] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aj11.php"] [unique_id "agjbTjZrzQadnZADvj8AIgAAAQ0"]
[Sun May 17 05:02:07.382458 2026] [:error] [pid 36652:tid 36665] [client 4.228.204.236:30128] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "agjbTzZrzQadnZADvj8AJQAAAQs"]
[Sun May 17 05:02:08.386273 2026] [:error] [pid 59062:tid 59131] [client 4.228.204.236:23201] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "agjbUD4V9GkVWmCFmGayEAAAAIg"]
[Sun May 17 05:02:09.185110 2026] [:error] [pid 59062:tid 59124] [client 4.228.204.236:31278] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "agjbUT4V9GkVWmCFmGayEQAAAIE"]
[Sun May 17 05:02:09.969900 2026] [:error] [pid 59062:tid 59140] [client 4.228.204.236:30107] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fs.php"] [unique_id "agjbUT4V9GkVWmCFmGayEgAAAJE"]
[Sun May 17 05:02:10.677326 2026] [:error] [pid 59060:tid 59088] [client 4.228.204.236:25355] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "agjbUvvwvq3bndkPE4m_SQAAABM"]
[Sun May 17 05:02:11.613185 2026] [:error] [pid 59060:tid 59075] [client 4.228.204.236:6459] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "agjbU_vwvq3bndkPE4m_SgAAAAY"]
[Sun May 17 05:02:12.431876 2026] [:error] [pid 36652:tid 36674] [client 4.228.204.236:23172] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "agjbVDZrzQadnZADvj8AKAAAARQ"]
[Sun May 17 05:02:13.428808 2026] [:error] [pid 59060:tid 59087] [client 4.228.204.236:29586] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/2.php"] [unique_id "agjbVfvwvq3bndkPE4m_SwAAABI"]
[Sun May 17 05:02:14.681087 2026] [:error] [pid 59166:tid 59173] [client 4.228.204.236:25050] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "agjbVk_puQ1I47_0UrileAAAAMU"]
[Sun May 17 05:02:15.796737 2026] [:error] [pid 59061:tid 59100] [client 4.228.204.236:31269] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "agjbV4YS410zAmsYkoLuhgAAAEQ"]
[Sun May 17 05:02:16.611492 2026] [:error] [pid 59062:tid 59129] [client 4.228.204.236:23208] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "agjbWD4V9GkVWmCFmGayFAAAAIY"]
[Sun May 17 05:02:17.546877 2026] [:error] [pid 59060:tid 59092] [client 4.228.204.236:30081] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/man.php"] [unique_id "agjbWfvwvq3bndkPE4m_TQAAABc"]
[Sun May 17 05:02:18.558513 2026] [:error] [pid 36652:tid 36658] [client 4.228.204.236:10651] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "agjbWjZrzQadnZADvj8AKwAAAQQ"]
[Sun May 17 05:02:19.444529 2026] [:error] [pid 59061:tid 59116] [client 4.228.204.236:30484] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "agjbW4YS410zAmsYkoLuiAAAAFQ"]
[Sun May 17 05:02:20.446713 2026] [:error] [pid 59061:tid 59112] [client 4.228.204.236:10684] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "agjbXIYS410zAmsYkoLuigAAAFA"]
[Sun May 17 05:02:21.235180 2026] [:error] [pid 59060:tid 59085] [client 4.228.204.236:23198] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/12.php"] [unique_id "agjbXfvwvq3bndkPE4m_UgAAABA"]
[Sun May 17 05:02:22.361063 2026] [:error] [pid 59061:tid 59115] [client 4.228.204.236:10630] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "agjbXoYS410zAmsYkoLukQAAAFM"]
[Sun May 17 05:02:23.471603 2026] [:error] [pid 59060:tid 59081] [client 4.228.204.236:23215] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "agjbX_vwvq3bndkPE4m_VQAAAAw"]
[Sun May 17 05:02:24.721837 2026] [:error] [pid 36652:tid 36666] [client 4.228.204.236:5468] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "agjbYDZrzQadnZADvj8ALAAAAQw"]
[Sun May 17 05:02:25.737055 2026] [proxy_fcgi:error] [pid 36652:tid 36672] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:26.092845 2026] [proxy_fcgi:error] [pid 36652:tid 36669] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:26.404861 2026] [proxy_fcgi:error] [pid 36652:tid 36668] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:26.717218 2026] [proxy_fcgi:error] [pid 36652:tid 36656] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:27.031013 2026] [proxy_fcgi:error] [pid 36652:tid 36675] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:27.345415 2026] [proxy_fcgi:error] [pid 36652:tid 36661] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:27.656444 2026] [proxy_fcgi:error] [pid 36652:tid 36671] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:27.968291 2026] [proxy_fcgi:error] [pid 36652:tid 36662] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:28.341284 2026] [proxy_fcgi:error] [pid 36652:tid 36660] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:28.653196 2026] [proxy_fcgi:error] [pid 36652:tid 36670] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:28.968408 2026] [proxy_fcgi:error] [pid 36652:tid 36657] [client 4.228.204.236:13091] AH01071: Got error 'Primary script unknown'
[Sun May 17 05:02:29.309081 2026] [:error] [pid 36652:tid 36674] [client 4.228.204.236:13091] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "agjbZTZrzQadnZADvj8APAAAARQ"]
[Sun May 17 05:02:30.286246 2026] [:error] [pid 36652:tid 36667] [client 4.228.204.236:30133] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "agjbZjZrzQadnZADvj8APQAAAQ0"]
[Sun May 17 05:02:31.122288 2026] [:error] [pid 59166:tid 59186] [client 4.228.204.236:5495] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "agjbZ0_puQ1I47_0UrilhQAAANI"]
[Sun May 17 05:02:32.135830 2026] [:error] [pid 36652:tid 36666] [client 4.228.204.236:5466] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xmu.php"] [unique_id "agjbaDZrzQadnZADvj8APgAAAQw"]
[Sun May 17 05:02:33.037895 2026] [:error] [pid 36652:tid 36664] [client 4.228.204.236:24215] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agjbaTZrzQadnZADvj8APwAAAQo"]
[Sun May 17 05:02:34.309995 2026] [:error] [pid 59166:tid 59190] [client 4.228.204.236:25360] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agjbak_puQ1I47_0UrilhwAAANY"]
[Sun May 17 05:02:35.449722 2026] [:error] [pid 59061:tid 59111] [client 4.228.204.236:31290] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agjba4YS410zAmsYkoLunQAAAE8"]
[Sun May 17 05:02:36.470928 2026] [:error] [pid 59166:tid 59180] [client 4.228.204.236:30504] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agjbbE_puQ1I47_0UriliAAAAMw"]
[Sun May 17 05:02:37.387910 2026] [:error] [pid 59061:tid 59098] [client 4.228.204.236:30084] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agjbbYYS410zAmsYkoLungAAAEI"]
[Sun May 17 05:02:38.344642 2026] [:error] [pid 59166:tid 59191] [client 4.228.204.236:30511] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agjbbk_puQ1I47_0UriligAAANc"]
[Sun May 17 05:02:39.740682 2026] [:error] [pid 36652:tid 36654] [client 4.228.204.236:24254] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agjbbzZrzQadnZADvj8ARAAAAQA"]
[Sun May 17 05:02:40.699006 2026] [:error] [pid 59062:tid 59139] [client 4.228.204.236:13082] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agjbcD4V9GkVWmCFmGayHgAAAJA"]
[Sun May 17 05:02:41.679920 2026] [:error] [pid 36652:tid 36662] [client 4.228.204.236:30506] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "agjbcTZrzQadnZADvj8ARwAAAQg"]
[Sun May 17 05:02:42.574510 2026] [:error] [pid 59061:tid 59103] [client 4.228.204.236:30478] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "agjbcoYS410zAmsYkoLuoAAAAEc"]
[Sun May 17 05:02:43.598513 2026] [:error] [pid 36652:tid 36670] [client 4.228.204.236:30095] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "agjbczZrzQadnZADvj8ASAAAARA"]
[Sun May 17 05:02:45.188117 2026] [:error] [pid 36652:tid 36667] [client 4.228.204.236:30516] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/gecko.php"] [unique_id "agjbdTZrzQadnZADvj8ASgAAAQ0"]
[Sun May 17 05:02:46.161898 2026] [:error] [pid 36652:tid 36655] [client 4.228.204.236:30492] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "agjbdjZrzQadnZADvj8ATgAAAQE"]
[Sun May 17 05:02:47.440159 2026] [:error] [pid 59062:tid 59142] [client 4.228.204.236:31259] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "agjbdz4V9GkVWmCFmGayIQAAAJM"]
[Sun May 17 05:02:48.701681 2026] [:error] [pid 59061:tid 59119] [client 4.228.204.236:30137] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "agjbeIYS410zAmsYkoLuoQAAAFc"]
[Sun May 17 05:02:49.419453 2026] [:error] [pid 59062:tid 59133] [client 4.228.204.236:5460] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wpxml.php"] [unique_id "agjbeT4V9GkVWmCFmGayIwAAAIo"]
[Sun May 17 05:02:50.470167 2026] [:error] [pid 36652:tid 36664] [client 4.228.204.236:23171] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agjbejZrzQadnZADvj8AUAAAAQo"]
[Sun May 17 05:02:51.680000 2026] [:error] [pid 36652:tid 36672] [client 4.228.204.236:5484] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agjbezZrzQadnZADvj8AUQAAARI"]
[Sun May 17 05:02:52.567440 2026] [:error] [pid 36652:tid 36668] [client 4.228.204.236:30480] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agjbfDZrzQadnZADvj8AUgAAAQ4"]
[Sun May 17 05:02:53.563380 2026] [:error] [pid 59062:tid 59143] [client 4.228.204.236:25390] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agjbfT4V9GkVWmCFmGayJgAAAJQ"]
[Sun May 17 05:02:54.667484 2026] [:error] [pid 36652:tid 36675] [client 4.228.204.236:23170] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "agjbfjZrzQadnZADvj8AVwAAARU"]
[Sun May 17 05:02:55.496673 2026] [:error] [pid 36652:tid 36659] [client 4.228.204.236:30475] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "agjbfzZrzQadnZADvj8AWwAAAQU"]
[Sun May 17 05:02:57.179707 2026] [:error] [pid 59062:tid 59131] [client 4.228.204.236:30102] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "agjbgT4V9GkVWmCFmGayKwAAAIg"]
[Sun May 17 05:02:58.019112 2026] [:error] [pid 59062:tid 59142] [client 4.228.204.236:13105] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sky.php"] [unique_id "agjbgj4V9GkVWmCFmGayLgAAAJM"]
[Sun May 17 05:02:59.499478 2026] [:error] [pid 59062:tid 59127] [client 4.228.204.236:29573] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "agjbgz4V9GkVWmCFmGayMgAAAIQ"]
[Sun May 17 05:03:00.565548 2026] [:error] [pid 59062:tid 59146] [client 4.228.204.236:13115] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "agjbhD4V9GkVWmCFmGayNQAAAJc"]
[Sun May 17 05:03:01.315112 2026] [:error] [pid 36652:tid 36664] [client 4.228.204.236:5480] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "agjbhTZrzQadnZADvj8AXwAAAQo"]
[Sun May 17 05:03:02.064686 2026] [:error] [pid 36652:tid 36656] [client 4.228.204.236:31270] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "agjbhjZrzQadnZADvj8AYAAAAQI"]
[Sun May 17 05:03:02.945622 2026] [:error] [pid 59062:tid 59123] [client 4.228.204.236:25031] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "agjbhj4V9GkVWmCFmGayNgAAAIA"]
[Sun May 17 05:03:03.721969 2026] [:error] [pid 59061:tid 59099] [client 4.228.204.236:31234] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "agjbh4YS410zAmsYkoLupwAAAEM"]
[Sun May 17 05:03:04.775714 2026] [:error] [pid 59061:tid 59115] [client 4.228.204.236:30481] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "agjbiIYS410zAmsYkoLuqAAAAFM"]
[Sun May 17 05:03:06.206899 2026] [:error] [pid 59062:tid 59124] [client 4.228.204.236:6695] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ortasekerli1.php"] [unique_id "agjbij4V9GkVWmCFmGayOQAAAIE"]
[Sun May 17 05:03:07.162341 2026] [:error] [pid 59166:tid 59169] [client 4.228.204.236:23766] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "agjbi0_puQ1I47_0UrilkQAAAME"]
[Sun May 17 05:03:08.112371 2026] [:error] [pid 59166:tid 59185] [client 4.228.204.236:30498] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "agjbjE_puQ1I47_0UrilkgAAANE"]
[Sun May 17 05:03:09.491833 2026] [:error] [pid 59166:tid 59189] [client 4.228.204.236:24199] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "agjbjU_puQ1I47_0UrilkwAAANU"]
[Sun May 17 05:03:10.497345 2026] [:error] [pid 59166:tid 59171] [client 4.228.204.236:30134] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xstelth.php"] [unique_id "agjbjk_puQ1I47_0UrillAAAAMM"]
[Sun May 17 05:03:11.501025 2026] [:error] [pid 36652:tid 36675] [client 4.228.204.236:6674] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3369.php"] [unique_id "agjbjzZrzQadnZADvj8AYQAAARU"]
[Sun May 17 05:03:12.228073 2026] [:error] [pid 59166:tid 59190] [client 4.228.204.236:6668] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3369.php"] [unique_id "agjbkE_puQ1I47_0UrillgAAANY"]
[Sun May 17 05:03:12.979361 2026] [:error] [pid 59166:tid 59178] [client 4.228.204.236:24225] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3369.php"] [unique_id "agjbkE_puQ1I47_0UrillwAAAMo"]
[Sun May 17 05:03:14.210299 2026] [:error] [pid 59060:tid 59089] [client 4.228.204.236:23805] [client 4.228.204.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/3369.php"] [unique_id "agjbkvvwvq3bndkPE4m_WgAAABQ"]
[Sun May 17 12:24:34.164807 2026] [proxy_fcgi:error] [pid 59060:tid 59075] [client 20.198.91.212:5006] AH01071: Got error 'Primary script unknown'
[Sun May 17 12:24:34.308612 2026] [proxy_fcgi:error] [pid 59060:tid 59085] [client 20.198.91.212:5006] AH01071: Got error 'Primary script unknown'
[Sun May 17 12:24:34.600321 2026] [proxy_fcgi:error] [pid 59060:tid 59091] [client 20.198.91.212:5006] AH01071: Got error 'Primary script unknown'
[Sun May 17 12:24:34.743328 2026] [proxy_fcgi:error] [pid 59060:tid 59087] [client 20.198.91.212:5006] AH01071: Got error 'Primary script unknown'
[Sun May 17 12:24:35.028212 2026] [proxy_fcgi:error] [pid 59060:tid 59093] [client 20.198.91.212:5006] AH01071: Got error 'Primary script unknown'
[Sun May 17 12:24:35.177433 2026] [proxy_fcgi:error] [pid 59060:tid 59072] [client 20.198.91.212:5006] AH01071: Got error 'Primary script unknown'
[Sun May 17 12:24:35.329788 2026] [proxy_fcgi:error] [pid 59060:tid 59079] [client 20.198.91.212:5006] AH01071: Got error 'Primary script unknown'
[Sun May 17 12:24:35.784517 2026] [:error] [pid 59060:tid 59090] [client 20.198.91.212:5006] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aglDA_vwvq3bndkPE4nZ7gAAABU"]
[Sun May 17 12:24:36.345758 2026] [:error] [pid 59060:tid 59069] [client 20.198.91.212:5393] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aglDBPvwvq3bndkPE4nZ8AAAAAA"]
[Sun May 17 12:24:36.908218 2026] [:error] [pid 36652:tid 36659] [client 20.198.91.212:5017] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aglDBDZrzQadnZADvj9EXQAAAQU"]
[Sun May 17 12:24:37.483572 2026] [:error] [pid 59062:tid 59147] [client 20.198.91.212:5582] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "aglDBT4V9GkVWmCFmGbcSwAAAJg"]
[Sun May 17 13:03:23.335704 2026] [:error] [pid 36652:tid 36666] [client 192.96.159.129:63834] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "aglMGzZrzQadnZADvj9JlwAAAQw"]
[Sun May 17 18:33:49.267330 2026] [proxy_fcgi:error] [pid 10835:tid 10895] [client 20.219.0.106:1281] AH01071: Got error 'Primary script unknown'
[Sun May 17 18:33:49.413162 2026] [proxy_fcgi:error] [pid 10835:tid 10894] [client 20.219.0.106:1281] AH01071: Got error 'Primary script unknown'
[Sun May 17 18:33:49.704069 2026] [proxy_fcgi:error] [pid 10835:tid 10876] [client 20.219.0.106:1281] AH01071: Got error 'Primary script unknown'
[Sun May 17 18:33:49.850904 2026] [proxy_fcgi:error] [pid 10835:tid 10880] [client 20.219.0.106:1281] AH01071: Got error 'Primary script unknown'
[Sun May 17 18:33:50.163691 2026] [proxy_fcgi:error] [pid 10835:tid 10873] [client 20.219.0.106:1281] AH01071: Got error 'Primary script unknown'
[Sun May 17 18:33:50.310482 2026] [proxy_fcgi:error] [pid 10835:tid 10890] [client 20.219.0.106:1281] AH01071: Got error 'Primary script unknown'
[Sun May 17 18:33:50.456879 2026] [proxy_fcgi:error] [pid 10835:tid 10882] [client 20.219.0.106:1281] AH01071: Got error 'Primary script unknown'
[Sun May 17 18:33:50.891175 2026] [:error] [pid 10835:tid 10881] [client 20.219.0.106:1281] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agmZjkk8lW0-dtknLl8WrQAAAgg"]
[Sun May 17 18:33:51.444905 2026] [:error] [pid 59062:tid 59147] [client 20.219.0.106:1346] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agmZjz4V9GkVWmCFmGYNkwAAAJg"]
[Sun May 17 18:33:52.037301 2026] [:error] [pid 59062:tid 59134] [client 20.219.0.106:1389] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agmZkD4V9GkVWmCFmGYNlAAAAIs"]
[Sun May 17 18:33:52.619842 2026] [:error] [pid 59062:tid 59135] [client 20.219.0.106:1373] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agmZkD4V9GkVWmCFmGYNlQAAAIw"]
[Sun May 17 20:48:35.962413 2026] [:error] [pid 10834:tid 10868] [client 172.71.148.133:13400] [client 172.71.148.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "agm5IxISNQ_Nf83-VpqvywAAAdY"]
[Mon May 18 01:38:03.609866 2026] [proxy_fcgi:error] [pid 11079:tid 11108] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:03.702081 2026] [proxy_fcgi:error] [pid 11079:tid 11114] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:03.795390 2026] [proxy_fcgi:error] [pid 11079:tid 11118] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:03.888484 2026] [proxy_fcgi:error] [pid 11079:tid 11128] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:03.980514 2026] [proxy_fcgi:error] [pid 11079:tid 11120] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:04.082030 2026] [proxy_fcgi:error] [pid 11079:tid 11105] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:04.174222 2026] [proxy_fcgi:error] [pid 11079:tid 11126] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:04.357543 2026] [proxy_fcgi:error] [pid 11079:tid 11116] [client 4.193.207.3:10456] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:38:04.567903 2026] [:error] [pid 11079:tid 11106] [client 4.193.207.3:10456] [client 4.193.207.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "agn8_GeR3-DrxhvUqxEgvAAAAkY"]
[Mon May 18 01:38:04.925228 2026] [:error] [pid 59061:tid 59103] [client 4.193.207.3:10451] [client 4.193.207.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "agn8_IYS410zAmsYkoI9DwAAAEc"]
[Mon May 18 01:38:05.326589 2026] [:error] [pid 10834:tid 10865] [client 4.193.207.3:10467] [client 4.193.207.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "agn8_RISNQ_Nf83-VprHxAAAAdM"]
[Mon May 18 01:38:05.717657 2026] [:error] [pid 11079:tid 11113] [client 4.193.207.3:10481] [client 4.193.207.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-blog.php"] [unique_id "agn8_WeR3-DrxhvUqxEgvQAAAkk"]
[Mon May 18 01:51:26.323481 2026] [proxy_fcgi:error] [pid 36652:tid 36660] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:26.568357 2026] [proxy_fcgi:error] [pid 36652:tid 36661] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:26.690635 2026] [proxy_fcgi:error] [pid 36652:tid 36670] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:26.814809 2026] [proxy_fcgi:error] [pid 36652:tid 36673] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:27.075437 2026] [proxy_fcgi:error] [pid 36652:tid 36671] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:27.323413 2026] [proxy_fcgi:error] [pid 36652:tid 36659] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:27.454951 2026] [proxy_fcgi:error] [pid 36652:tid 36677] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:27.603674 2026] [proxy_fcgi:error] [pid 36652:tid 36657] [client 20.24.219.111:1368] AH01071: Got error 'Primary script unknown'
[Mon May 18 01:51:27.722800 2026] [:error] [pid 36652:tid 36678] [client 20.24.219.111:1368] [client 20.24.219.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agoAHzZrzQadnZADvj9l4wAAARg"]
[Mon May 18 01:51:28.209675 2026] [:error] [pid 10784:tid 10812] [client 20.24.219.111:1354] [client 20.24.219.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agoAIGBWRlKsFkSZGxBfQgAAAY0"]
[Mon May 18 01:51:28.711869 2026] [:error] [pid 59061:tid 59101] [client 20.24.219.111:5861] [client 20.24.219.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agoAIIYS410zAmsYkoI9tgAAAEU"]
[Mon May 18 01:51:29.243357 2026] [:error] [pid 59060:tid 59075] [client 20.24.219.111:1788] [client 20.24.219.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agoAIfvwvq3bndkPE4kDqQAAAAY"]
[Mon May 18 05:18:38.937335 2026] [proxy_fcgi:error] [pid 20777:tid 20794] [client 20.197.60.184:2392] AH01071: Got error 'Primary script unknown'
[Mon May 18 05:18:39.082611 2026] [proxy_fcgi:error] [pid 20777:tid 20807] [client 20.197.60.184:2392] AH01071: Got error 'Primary script unknown'
[Mon May 18 05:18:39.372179 2026] [proxy_fcgi:error] [pid 20777:tid 20790] [client 20.197.60.184:2392] AH01071: Got error 'Primary script unknown'
[Mon May 18 05:18:39.517533 2026] [proxy_fcgi:error] [pid 20777:tid 20803] [client 20.197.60.184:2392] AH01071: Got error 'Primary script unknown'
[Mon May 18 05:18:39.813920 2026] [proxy_fcgi:error] [pid 20777:tid 20804] [client 20.197.60.184:2392] AH01071: Got error 'Primary script unknown'
[Mon May 18 05:18:39.986708 2026] [proxy_fcgi:error] [pid 20777:tid 20809] [client 20.197.60.184:2392] AH01071: Got error 'Primary script unknown'
[Mon May 18 05:18:40.131333 2026] [proxy_fcgi:error] [pid 20777:tid 20789] [client 20.197.60.184:2392] AH01071: Got error 'Primary script unknown'
[Mon May 18 05:18:40.580657 2026] [:error] [pid 20777:tid 20796] [client 20.197.60.184:2392] [client 20.197.60.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agowsIHClf0EYFQBeRFCiwAAAAo"]
[Mon May 18 05:18:41.168769 2026] [:error] [pid 20778:tid 20834] [client 20.197.60.184:6685] [client 20.197.60.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agowsWb9K2_TPGoCpArv0QAAAFA"]
[Mon May 18 05:18:41.753779 2026] [:error] [pid 20777:tid 20787] [client 20.197.60.184:2418] [client 20.197.60.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agowsYHClf0EYFQBeRFCjAAAAAE"]
[Mon May 18 05:18:42.330393 2026] [:error] [pid 63115:tid 63140] [client 20.197.60.184:2782] [client 20.197.60.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agowsuz_ApFcYdejvGfkVwAAARc"]
[Tue May 19 04:51:55.700099 2026] [:error] [pid 38705:tid 38777] [client 103.65.237.216:52185] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/sftp-config.json"] [unique_id "agt768g5dNOZ5umN9lsNqQAAAIg"]
[Tue May 19 05:01:59.935646 2026] [proxy_fcgi:error] [pid 38814:tid 38822] [client 20.219.58.128:1297] AH01071: Got error 'Primary script unknown'
[Tue May 19 05:02:00.110986 2026] [proxy_fcgi:error] [pid 38814:tid 38816] [client 20.219.58.128:1297] AH01071: Got error 'Primary script unknown'
[Tue May 19 05:02:00.402945 2026] [proxy_fcgi:error] [pid 38814:tid 38839] [client 20.219.58.128:1297] AH01071: Got error 'Primary script unknown'
[Tue May 19 05:02:00.564145 2026] [proxy_fcgi:error] [pid 38814:tid 38834] [client 20.219.58.128:1297] AH01071: Got error 'Primary script unknown'
[Tue May 19 05:02:00.856881 2026] [proxy_fcgi:error] [pid 38814:tid 38836] [client 20.219.58.128:1297] AH01071: Got error 'Primary script unknown'
[Tue May 19 05:02:01.002867 2026] [proxy_fcgi:error] [pid 38814:tid 38825] [client 20.219.58.128:1297] AH01071: Got error 'Primary script unknown'
[Tue May 19 05:02:01.149802 2026] [proxy_fcgi:error] [pid 38814:tid 38835] [client 20.219.58.128:1297] AH01071: Got error 'Primary script unknown'
[Tue May 19 05:02:01.604773 2026] [:error] [pid 38814:tid 38830] [client 20.219.58.128:1297] [client 20.219.58.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agt-SQvkKuBwP0epzWdH7wAAAM4"]
[Tue May 19 05:02:02.169328 2026] [:error] [pid 41573:tid 41587] [client 20.219.58.128:1542] [client 20.219.58.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agt-Si1A2bd6JDSW9RYf0QAAAQw"]
[Tue May 19 05:02:02.822563 2026] [:error] [pid 41573:tid 41599] [client 20.219.58.128:1536] [client 20.219.58.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agt-Si1A2bd6JDSW9RYf0gAAARg"]
[Tue May 19 05:02:03.376819 2026] [:error] [pid 38705:tid 38775] [client 20.219.58.128:7210] [client 20.219.58.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws.php"] [unique_id "agt-S8g5dNOZ5umN9lsPrQAAAIY"]
[Tue May 19 08:47:00.218043 2026] [proxy_fcgi:error] [pid 38814:tid 38837] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:00.493143 2026] [proxy_fcgi:error] [pid 38814:tid 38828] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:00.647190 2026] [proxy_fcgi:error] [pid 38814:tid 38818] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:00.817381 2026] [proxy_fcgi:error] [pid 38814:tid 38823] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:01.086183 2026] [proxy_fcgi:error] [pid 38814:tid 38840] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:01.358390 2026] [proxy_fcgi:error] [pid 38814:tid 38826] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:01.495958 2026] [proxy_fcgi:error] [pid 38814:tid 38827] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:01.690759 2026] [proxy_fcgi:error] [pid 38814:tid 38821] [client 104.208.114.140:1440] AH01071: Got error 'Primary script unknown'
[Tue May 19 08:47:01.832978 2026] [:error] [pid 38814:tid 38816] [client 104.208.114.140:1440] [client 104.208.114.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aguzBQvkKuBwP0epzWdkYAAAAMA"]
[Tue May 19 08:47:02.369149 2026] [:error] [pid 46896:tid 46918] [client 104.208.114.140:2331] [client 104.208.114.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aguzBqCHyzL3Ci9LGE33hAAAAZQ"]
[Tue May 19 08:47:02.906622 2026] [:error] [pid 46896:tid 46898] [client 104.208.114.140:2354] [client 104.208.114.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aguzBqCHyzL3Ci9LGE33hgAAAYA"]
[Tue May 19 08:47:03.509941 2026] [:error] [pid 38814:tid 38836] [client 104.208.114.140:2318] [client 104.208.114.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "aguzBwvkKuBwP0epzWdkYQAAANQ"]
[Tue May 19 11:04:37.976776 2026] [proxy_fcgi:error] [pid 38814:tid 38820] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:38.219443 2026] [proxy_fcgi:error] [pid 38814:tid 38821] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:38.341536 2026] [proxy_fcgi:error] [pid 38814:tid 38823] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:38.481781 2026] [proxy_fcgi:error] [pid 38814:tid 38835] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:38.727202 2026] [proxy_fcgi:error] [pid 38814:tid 38828] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:38.986054 2026] [proxy_fcgi:error] [pid 38814:tid 38816] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:39.139921 2026] [proxy_fcgi:error] [pid 38814:tid 38836] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:39.262429 2026] [proxy_fcgi:error] [pid 38814:tid 38822] [client 104.208.71.247:1160] AH01071: Got error 'Primary script unknown'
[Tue May 19 11:04:39.380592 2026] [:error] [pid 38814:tid 38831] [client 104.208.71.247:1160] [client 104.208.71.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agvTRwvkKuBwP0epzWdwewAAAM8"]
[Tue May 19 11:04:39.868145 2026] [:error] [pid 38697:tid 38724] [client 104.208.71.247:1888] [client 104.208.71.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agvTR6XP9pP6Kgt-msT4swAAAAk"]
[Tue May 19 11:04:40.407911 2026] [:error] [pid 46896:tid 46905] [client 104.208.71.247:1885] [client 104.208.71.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agvTSKCHyzL3Ci9LGE0eEgAAAYc"]
[Tue May 19 11:04:40.937217 2026] [:error] [pid 41573:tid 41591] [client 104.208.71.247:1174] [client 104.208.71.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agvTSC1A2bd6JDSW9RZTJwAAARA"]
[Tue May 19 15:20:43.819508 2026] [proxy_fcgi:error] [pid 46815:tid 46835] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:44.094988 2026] [proxy_fcgi:error] [pid 46815:tid 46821] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:44.244427 2026] [proxy_fcgi:error] [pid 46815:tid 46828] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:44.399104 2026] [proxy_fcgi:error] [pid 46815:tid 46819] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:44.669643 2026] [proxy_fcgi:error] [pid 46815:tid 46829] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:44.959519 2026] [proxy_fcgi:error] [pid 46815:tid 46822] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:45.109887 2026] [proxy_fcgi:error] [pid 46815:tid 46817] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:45.245850 2026] [proxy_fcgi:error] [pid 46815:tid 46827] [client 13.70.45.3:3861] AH01071: Got error 'Primary script unknown'
[Tue May 19 15:20:45.378039 2026] [:error] [pid 46815:tid 46836] [client 13.70.45.3:3861] [client 13.70.45.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agwPTSPnRhJOmA06LgpfcgAAAVM"]
[Tue May 19 15:20:45.888214 2026] [:error] [pid 29823:tid 29856] [client 13.70.45.3:4689] [client 13.70.45.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agwPTWO09C0nAz8vRk4o9gAAAdE"]
[Tue May 19 15:20:46.455224 2026] [:error] [pid 29823:tid 29842] [client 13.70.45.3:2551] [client 13.70.45.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agwPTmO09C0nAz8vRk4o-AAAAcc"]
[Tue May 19 15:20:46.987985 2026] [:error] [pid 38697:tid 38727] [client 13.70.45.3:1245] [client 13.70.45.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agwPTqXP9pP6Kgt-msQieQAAAAw"]
[Tue May 19 19:20:37.424188 2026] [proxy_fcgi:error] [pid 29823:tid 29847] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:37.683407 2026] [proxy_fcgi:error] [pid 29823:tid 29838] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:37.942289 2026] [proxy_fcgi:error] [pid 29823:tid 29836] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:38.286356 2026] [proxy_fcgi:error] [pid 29823:tid 29856] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:38.548740 2026] [proxy_fcgi:error] [pid 29823:tid 29857] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:39.078192 2026] [proxy_fcgi:error] [pid 29823:tid 29855] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:39.596845 2026] [proxy_fcgi:error] [pid 29823:tid 29861] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:39.870374 2026] [proxy_fcgi:error] [pid 29823:tid 29839] [client 20.104.21.214:62658] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:20:40.147220 2026] [:error] [pid 29823:tid 29852] [client 20.104.21.214:62658] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "agxHiGO09C0nAz8vRk44XgAAAc0"]
[Tue May 19 19:20:40.756554 2026] [:error] [pid 41573:tid 41575] [client 20.104.21.214:61537] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "agxHiC1A2bd6JDSW9RaFfwAAAQA"]
[Tue May 19 19:20:41.291271 2026] [:error] [pid 46896:tid 46918] [client 20.104.21.214:65434] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "agxHiaCHyzL3Ci9LGE1fvwAAAZQ"]
[Tue May 19 19:20:41.889947 2026] [:error] [pid 41573:tid 41585] [client 20.104.21.214:63177] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class.php"] [unique_id "agxHiS1A2bd6JDSW9RaFgQAAAQo"]
[Tue May 19 19:20:42.610679 2026] [:error] [pid 41573:tid 41580] [client 20.104.21.214:63194] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "agxHii1A2bd6JDSW9RaFggAAAQU"]
[Tue May 19 19:20:43.093587 2026] [:error] [pid 46815:tid 46837] [client 20.104.21.214:65454] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "agxHiyPnRhJOmA06LgpvVwAAAVQ"]
[Tue May 19 19:20:43.541006 2026] [:error] [pid 41573:tid 41581] [client 20.104.21.214:63187] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "agxHiy1A2bd6JDSW9RaFgwAAAQY"]
[Tue May 19 19:20:44.011691 2026] [:error] [pid 29622:tid 29633] [client 20.104.21.214:65421] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/goods.php"] [unique_id "agxHjDkOqPKWkPs_P15PeQAAAgk"]
[Tue May 19 19:20:44.500982 2026] [:error] [pid 38697:tid 38728] [client 20.104.21.214:63201] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "agxHjKXP9pP6Kgt-msRIjAAAAA0"]
[Tue May 19 19:20:44.998667 2026] [:error] [pid 38699:tid 38751] [client 20.104.21.214:51266] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "agxHjL--Adsw_P-dthabRAAAAEk"]
[Tue May 19 19:20:45.511088 2026] [:error] [pid 38699:tid 38750] [client 20.104.21.214:51274] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "agxHjb--Adsw_P-dthabRQAAAEg"]
[Tue May 19 19:20:46.074749 2026] [:error] [pid 38697:tid 38719] [client 20.104.21.214:51318] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/info.php"] [unique_id "agxHjqXP9pP6Kgt-msRIjQAAAAQ"]
[Tue May 19 19:20:46.705356 2026] [:error] [pid 46896:tid 46916] [client 20.104.21.214:61567] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "agxHjqCHyzL3Ci9LGE1fwAAAAZI"]
[Tue May 19 19:20:47.318961 2026] [:error] [pid 29622:tid 29643] [client 20.104.21.214:63204] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "agxHjzkOqPKWkPs_P15PegAAAhM"]
[Tue May 19 19:20:47.928964 2026] [:error] [pid 46815:tid 46818] [client 20.104.21.214:61546] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "agxHjyPnRhJOmA06LgpvWAAAAUE"]
[Tue May 19 19:20:48.658677 2026] [:error] [pid 29622:tid 29640] [client 20.104.21.214:59639] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "agxHkDkOqPKWkPs_P15PewAAAhA"]
[Tue May 19 19:20:49.209850 2026] [:error] [pid 38699:tid 38763] [client 20.104.21.214:58505] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "agxHkb--Adsw_P-dthabRwAAAFU"]
[Tue May 19 19:20:49.790713 2026] [:error] [pid 38699:tid 38742] [client 20.104.21.214:58538] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "agxHkb--Adsw_P-dthabSAAAAEA"]
[Tue May 19 19:20:50.365957 2026] [:error] [pid 29823:tid 29849] [client 20.104.21.214:65445] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "agxHkmO09C0nAz8vRk44YAAAAco"]
[Tue May 19 19:20:50.897540 2026] [:error] [pid 29823:tid 29835] [client 20.104.21.214:62656] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aw.php"] [unique_id "agxHkmO09C0nAz8vRk44YQAAAcA"]
[Tue May 19 19:20:51.510434 2026] [:error] [pid 38705:tid 38780] [client 20.104.21.214:51291] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "agxHk8g5dNOZ5umN9lteOAAAAIs"]
[Tue May 19 19:20:52.082326 2026] [:error] [pid 29823:tid 29847] [client 20.104.21.214:63185] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "agxHlGO09C0nAz8vRk44YgAAAcg"]
[Tue May 19 19:20:52.542060 2026] [:error] [pid 29823:tid 29836] [client 20.104.21.214:60371] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "agxHlGO09C0nAz8vRk44YwAAAcE"]
[Tue May 19 19:20:53.006488 2026] [:error] [pid 29823:tid 29841] [client 20.104.21.214:61800] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bb.php"] [unique_id "agxHlWO09C0nAz8vRk44ZQAAAcY"]
[Tue May 19 19:20:53.519794 2026] [:error] [pid 38814:tid 38825] [client 20.104.21.214:63199] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "agxHlQvkKuBwP0epzWebXAAAAMk"]
[Tue May 19 19:20:54.161575 2026] [:error] [pid 38814:tid 38832] [client 20.104.21.214:57711] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "agxHlgvkKuBwP0epzWebXQAAANA"]
[Tue May 19 19:20:54.838737 2026] [:error] [pid 38814:tid 38833] [client 20.104.21.214:61769] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "agxHlgvkKuBwP0epzWebXgAAANE"]
[Tue May 19 19:20:55.352977 2026] [:error] [pid 29823:tid 29863] [client 20.104.21.214:57681] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/about.php"] [unique_id "agxHl2O09C0nAz8vRk44aAAAAdg"]
[Tue May 19 19:20:55.909201 2026] [:error] [pid 38697:tid 38720] [client 20.104.21.214:63222] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "agxHl6XP9pP6Kgt-msRIkQAAAAU"]
[Tue May 19 19:20:56.612095 2026] [:error] [pid 38814:tid 38816] [client 20.104.21.214:63215] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "agxHmAvkKuBwP0epzWebXwAAAMA"]
[Tue May 19 19:20:57.167394 2026] [:error] [pid 29823:tid 29859] [client 20.104.21.214:63433] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "agxHmWO09C0nAz8vRk44awAAAdQ"]
[Tue May 19 19:20:57.700414 2026] [:error] [pid 29823:tid 29842] [client 20.104.21.214:51326] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/222.php"] [unique_id "agxHmWO09C0nAz8vRk44bAAAAcc"]
[Tue May 19 19:20:58.406856 2026] [:error] [pid 29622:tid 29645] [client 20.104.21.214:65441] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agxHmjkOqPKWkPs_P15PfgAAAhU"]
[Tue May 19 19:20:59.048033 2026] [:error] [pid 46896:tid 46917] [client 20.104.21.214:65408] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agxHm6CHyzL3Ci9LGE1fwQAAAZM"]
[Tue May 19 19:20:59.639795 2026] [:error] [pid 41573:tid 41592] [client 20.104.21.214:59618] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agxHmy1A2bd6JDSW9RaFhgAAARE"]
[Tue May 19 19:21:00.548847 2026] [:error] [pid 38699:tid 38765] [client 20.104.21.214:58527] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test1.php"] [unique_id "agxHnL--Adsw_P-dthabSQAAAFc"]
[Tue May 19 19:21:01.178931 2026] [:error] [pid 38699:tid 38764] [client 20.104.21.214:61515] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "agxHnb--Adsw_P-dthabSgAAAFY"]
[Tue May 19 19:21:02.097990 2026] [:error] [pid 29823:tid 29847] [client 20.104.21.214:58498] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "agxHnmO09C0nAz8vRk44bwAAAcg"]
[Tue May 19 19:21:02.700018 2026] [:error] [pid 46815:tid 46841] [client 20.104.21.214:63176] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "agxHniPnRhJOmA06LgpvWwAAAVg"]
[Tue May 19 19:21:03.342312 2026] [:error] [pid 38697:tid 38716] [client 20.104.21.214:59623] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-mail.php"] [unique_id "agxHn6XP9pP6Kgt-msRIkwAAAAE"]
[Tue May 19 19:21:04.818571 2026] [:error] [pid 38697:tid 38727] [client 20.104.21.214:63476] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "agxHoKXP9pP6Kgt-msRIlQAAAAw"]
[Tue May 19 19:21:06.816876 2026] [:error] [pid 41573:tid 41575] [client 20.104.21.214:65418] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "agxHoi1A2bd6JDSW9RaFpQAAAQA"]
[Tue May 19 19:21:07.852015 2026] [:error] [pid 38814:tid 38822] [client 20.104.21.214:61507] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "agxHowvkKuBwP0epzWebZAAAAMY"]
[Tue May 19 19:21:08.687362 2026] [:error] [pid 55881:tid 55887] [client 20.104.21.214:65443] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "agxHpO-UExma0LUC7WABIAAAAkQ"]
[Tue May 19 19:21:09.578294 2026] [:error] [pid 55881:tid 55898] [client 20.104.21.214:57725] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "agxHpe-UExma0LUC7WABIQAAAk8"]
[Tue May 19 19:21:10.896894 2026] [:error] [pid 46815:tid 46825] [client 20.104.21.214:58500] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "agxHpiPnRhJOmA06LgpvYQAAAUg"]
[Tue May 19 19:21:12.029612 2026] [:error] [pid 41573:tid 41595] [client 20.104.21.214:61503] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "agxHqC1A2bd6JDSW9RaFtQAAARQ"]
[Tue May 19 19:21:12.992953 2026] [:error] [pid 41573:tid 41585] [client 20.104.21.214:58510] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/adminfuns.php"] [unique_id "agxHqC1A2bd6JDSW9RaFugAAAQo"]
[Tue May 19 19:21:14.011325 2026] [:error] [pid 46815:tid 46822] [client 20.104.21.214:51265] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php8.php"] [unique_id "agxHqiPnRhJOmA06LgpvZQAAAUU"]
[Tue May 19 19:21:15.115334 2026] [:error] [pid 38697:tid 38735] [client 20.104.21.214:51279] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php8.php"] [unique_id "agxHq6XP9pP6Kgt-msRInwAAABQ"]
[Tue May 19 19:21:15.786141 2026] [:error] [pid 46815:tid 46823] [client 20.104.21.214:63458] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php8.php"] [unique_id "agxHqyPnRhJOmA06LgpvaAAAAUY"]
[Tue May 19 19:21:16.347457 2026] [:error] [pid 38697:tid 38732] [client 20.104.21.214:61764] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/php8.php"] [unique_id "agxHrKXP9pP6Kgt-msRIoAAAABE"]
[Tue May 19 19:21:16.918062 2026] [:error] [pid 38699:tid 38761] [client 20.104.21.214:57686] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "agxHrL--Adsw_P-dthabWQAAAFM"]
[Tue May 19 19:21:17.626641 2026] [:error] [pid 38705:tid 38784] [client 20.104.21.214:63443] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "agxHrcg5dNOZ5umN9ltePAAAAI8"]
[Tue May 19 19:21:18.412198 2026] [:error] [pid 38699:tid 38748] [client 20.104.21.214:65409] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "agxHrr--Adsw_P-dthabWwAAAEY"]
[Tue May 19 19:21:19.289480 2026] [:error] [pid 38699:tid 38751] [client 20.104.21.214:59613] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ioxi-o.php"] [unique_id "agxHr7--Adsw_P-dthabXwAAAEk"]
[Tue May 19 19:21:19.886455 2026] [:error] [pid 46815:tid 46841] [client 20.104.21.214:57665] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "agxHryPnRhJOmA06LgpvawAAAVg"]
[Tue May 19 19:21:20.507070 2026] [:error] [pid 38705:tid 38775] [client 20.104.21.214:51322] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "agxHsMg5dNOZ5umN9ltePQAAAIY"]
[Tue May 19 19:21:21.106778 2026] [:error] [pid 38699:tid 38749] [client 20.104.21.214:62668] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "agxHsb--Adsw_P-dthabYgAAAEc"]
[Tue May 19 19:21:21.929810 2026] [:error] [pid 46896:tid 46898] [client 20.104.21.214:57674] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "agxHsaCHyzL3Ci9LGE1fwgAAAYA"]
[Tue May 19 19:21:22.771633 2026] [:error] [pid 46896:tid 46904] [client 20.104.21.214:61806] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "agxHsqCHyzL3Ci9LGE1fwwAAAYY"]
[Tue May 19 19:21:23.249059 2026] [:error] [pid 38697:tid 38726] [client 20.104.21.214:62716] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "agxHs6XP9pP6Kgt-msRIogAAAAs"]
[Tue May 19 19:21:23.854346 2026] [:error] [pid 38697:tid 38716] [client 20.104.21.214:57714] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "agxHs6XP9pP6Kgt-msRIpAAAAAE"]
[Tue May 19 19:21:24.424685 2026] [:error] [pid 46815:tid 46830] [client 20.104.21.214:51282] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sid3.php"] [unique_id "agxHtCPnRhJOmA06LgpvcAAAAU0"]
[Tue May 19 19:21:24.938486 2026] [:error] [pid 38814:tid 38829] [client 20.104.21.214:61505] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/load.php"] [unique_id "agxHtAvkKuBwP0epzWebdAAAAM0"]
[Tue May 19 19:21:25.427720 2026] [:error] [pid 46815:tid 46838] [client 20.104.21.214:57322] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/load.php"] [unique_id "agxHtSPnRhJOmA06LgpvcwAAAVU"]
[Tue May 19 19:21:26.134958 2026] [:error] [pid 38697:tid 38715] [client 20.104.21.214:61292] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/load.php"] [unique_id "agxHtqXP9pP6Kgt-msRIpgAAAAA"]
[Tue May 19 19:21:26.710683 2026] [:error] [pid 38697:tid 38736] [client 20.104.21.214:57727] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/load.php"] [unique_id "agxHtqXP9pP6Kgt-msRIqAAAABU"]
[Tue May 19 19:21:27.288190 2026] [:error] [pid 46815:tid 46829] [client 20.104.21.214:60376] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "agxHtyPnRhJOmA06LgpveQAAAUw"]
[Tue May 19 19:21:27.954019 2026] [:error] [pid 55881:tid 55901] [client 20.104.21.214:62671] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "agxHt--UExma0LUC7WABJgAAAlI"]
[Tue May 19 19:21:28.784335 2026] [:error] [pid 46815:tid 46835] [client 20.104.21.214:58526] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "agxHuCPnRhJOmA06LgpvfAAAAVI"]
[Tue May 19 19:21:29.377480 2026] [:error] [pid 38814:tid 38830] [client 20.104.21.214:59955] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/166.php"] [unique_id "agxHuQvkKuBwP0epzWebdgAAAM4"]
[Tue May 19 19:21:29.875829 2026] [:error] [pid 38814:tid 38823] [client 20.104.21.214:65446] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test.php"] [unique_id "agxHuQvkKuBwP0epzWebdwAAAMc"]
[Tue May 19 19:21:30.597839 2026] [:error] [pid 38814:tid 38822] [client 20.104.21.214:61544] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test.php"] [unique_id "agxHugvkKuBwP0epzWebeAAAAMY"]
[Tue May 19 19:21:31.121922 2026] [:error] [pid 38699:tid 38765] [client 20.104.21.214:63181] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test.php"] [unique_id "agxHu7--Adsw_P-dthabZAAAAFc"]
[Tue May 19 19:21:31.558364 2026] [:error] [pid 46815:tid 46834] [client 20.104.21.214:65468] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test.php"] [unique_id "agxHuyPnRhJOmA06LgpvfwAAAVE"]
[Tue May 19 19:21:31.985588 2026] [:error] [pid 41573:tid 41582] [client 20.104.21.214:58530] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxHuy1A2bd6JDSW9RaFwwAAAQc"]
[Tue May 19 19:21:32.494151 2026] [:error] [pid 29823:tid 29842] [client 20.104.21.214:63168] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxHvGO09C0nAz8vRk44dgAAAcc"]
[Tue May 19 19:21:33.143518 2026] [:error] [pid 38697:tid 38737] [client 20.104.21.214:51281] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxHvaXP9pP6Kgt-msRIrQAAABY"]
[Tue May 19 19:21:34.194725 2026] [:error] [pid 46815:tid 46831] [client 20.104.21.214:61510] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxHviPnRhJOmA06LgpvhAAAAU4"]
[Tue May 19 19:21:34.882250 2026] [:error] [pid 38699:tid 38761] [client 20.104.21.214:61551] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "agxHvr--Adsw_P-dthabaQAAAFM"]
[Tue May 19 19:21:35.478429 2026] [:error] [pid 38705:tid 38769] [client 20.104.21.214:61535] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "agxHv8g5dNOZ5umN9lteQQAAAIA"]
[Tue May 19 19:21:36.715545 2026] [:error] [pid 38697:tid 38729] [client 20.104.21.214:61773] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "agxHwKXP9pP6Kgt-msRIrgAAAA4"]
[Tue May 19 19:21:37.266936 2026] [:error] [pid 38697:tid 38735] [client 20.104.21.214:51300] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "agxHwaXP9pP6Kgt-msRIrwAAABQ"]
[Tue May 19 19:21:38.511869 2026] [:error] [pid 46815:tid 46818] [client 20.104.21.214:51273] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/CDX2.php"] [unique_id "agxHwiPnRhJOmA06LgpviAAAAUE"]
[Tue May 19 19:21:39.385533 2026] [proxy_fcgi:error] [pid 38705:tid 38770] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:39.645382 2026] [proxy_fcgi:error] [pid 38705:tid 38793] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:40.823021 2026] [proxy_fcgi:error] [pid 38705:tid 38782] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:41.082552 2026] [proxy_fcgi:error] [pid 38705:tid 38780] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:41.347806 2026] [proxy_fcgi:error] [pid 38705:tid 38785] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:41.607697 2026] [proxy_fcgi:error] [pid 38705:tid 38779] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:41.898384 2026] [proxy_fcgi:error] [pid 38705:tid 38787] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:42.159278 2026] [proxy_fcgi:error] [pid 38705:tid 38791] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:42.438676 2026] [proxy_fcgi:error] [pid 38705:tid 38783] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:42.698930 2026] [proxy_fcgi:error] [pid 38705:tid 38784] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:42.958247 2026] [proxy_fcgi:error] [pid 38705:tid 38777] [client 20.104.21.214:65415] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:21:43.214903 2026] [:error] [pid 38705:tid 38771] [client 20.104.21.214:65415] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agxHx8g5dNOZ5umN9lteTwAAAII"]
[Tue May 19 19:21:43.850475 2026] [:error] [pid 29823:tid 29858] [client 20.104.21.214:59585] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agxHx2O09C0nAz8vRk44fQAAAdM"]
[Tue May 19 19:21:44.502511 2026] [:error] [pid 38814:tid 38818] [client 20.104.21.214:63437] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agxHyAvkKuBwP0epzWebgQAAAMI"]
[Tue May 19 19:21:45.104893 2026] [:error] [pid 38699:tid 38757] [client 20.104.21.214:57684] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file6.php"] [unique_id "agxHyb--Adsw_P-dthabawAAAE8"]
[Tue May 19 19:21:46.031691 2026] [:error] [pid 29823:tid 29837] [client 20.104.21.214:62673] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "agxHymO09C0nAz8vRk44gQAAAcI"]
[Tue May 19 19:21:46.948336 2026] [:error] [pid 38697:tid 38737] [client 20.104.21.214:59268] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "agxHyqXP9pP6Kgt-msRIwAAAABY"]
[Tue May 19 19:21:47.648059 2026] [:error] [pid 38697:tid 38724] [client 20.104.21.214:62704] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "agxHy6XP9pP6Kgt-msRIwQAAAAk"]
[Tue May 19 19:21:48.425484 2026] [:error] [pid 38697:tid 38735] [client 20.104.21.214:61797] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xs.php"] [unique_id "agxHzKXP9pP6Kgt-msRIwwAAABQ"]
[Tue May 19 19:21:49.133424 2026] [:error] [pid 38697:tid 38732] [client 20.104.21.214:62685] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agxHzaXP9pP6Kgt-msRIxAAAABE"]
[Tue May 19 19:21:49.649215 2026] [:error] [pid 38699:tid 38749] [client 20.104.21.214:61562] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agxHzb--Adsw_P-dthabcAAAAEc"]
[Tue May 19 19:21:50.402283 2026] [:error] [pid 38699:tid 38745] [client 20.104.21.214:65440] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agxHzr--Adsw_P-dthabcwAAAEM"]
[Tue May 19 19:21:51.116573 2026] [:error] [pid 38697:tid 38734] [client 20.104.21.214:51303] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxa.php"] [unique_id "agxHz6XP9pP6Kgt-msRIxgAAABM"]
[Tue May 19 19:21:51.670510 2026] [:error] [pid 29823:tid 29848] [client 20.104.21.214:63171] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index0.php"] [unique_id "agxHz2O09C0nAz8vRk44hwAAAck"]
[Tue May 19 19:21:52.181570 2026] [:error] [pid 38697:tid 38726] [client 20.104.21.214:65469] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index0.php"] [unique_id "agxH0KXP9pP6Kgt-msRIyAAAAAs"]
[Tue May 19 19:21:52.904773 2026] [:error] [pid 29823:tid 29854] [client 20.104.21.214:63432] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index0.php"] [unique_id "agxH0GO09C0nAz8vRk44iAAAAc8"]
[Tue May 19 19:21:54.023545 2026] [:error] [pid 29823:tid 29847] [client 20.104.21.214:63463] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index0.php"] [unique_id "agxH0mO09C0nAz8vRk44iQAAAcg"]
[Tue May 19 19:21:55.222889 2026] [:error] [pid 55881:tid 55895] [client 20.104.21.214:65457] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "agxH0--UExma0LUC7WABLQAAAkw"]
[Tue May 19 19:21:56.443323 2026] [:error] [pid 29622:tid 29646] [client 20.104.21.214:58517] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "agxH1DkOqPKWkPs_P15PgAAAAhY"]
[Tue May 19 19:21:57.370990 2026] [:error] [pid 41573:tid 41584] [client 20.104.21.214:61514] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "agxH1S1A2bd6JDSW9RaFzwAAAQk"]
[Tue May 19 19:21:58.041890 2026] [:error] [pid 38814:tid 38822] [client 20.104.21.214:58504] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kz.php"] [unique_id "agxH1gvkKuBwP0epzWebhAAAAMY"]
[Tue May 19 19:21:58.586662 2026] [:error] [pid 55881:tid 55900] [client 20.104.21.214:62687] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "agxH1u-UExma0LUC7WABMQAAAlE"]
[Tue May 19 19:21:59.158893 2026] [:error] [pid 38699:tid 38744] [client 20.104.21.214:57696] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "agxH17--Adsw_P-dthabdgAAAEI"]
[Tue May 19 19:22:00.279855 2026] [:error] [pid 38697:tid 38731] [client 20.104.21.214:60899] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "agxH2KXP9pP6Kgt-msRIzwAAABA"]
[Tue May 19 19:22:00.813760 2026] [:error] [pid 41573:tid 41599] [client 20.104.21.214:59596] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/19.php"] [unique_id "agxH2C1A2bd6JDSW9RaF0gAAARg"]
[Tue May 19 19:22:01.300549 2026] [:error] [pid 29823:tid 29838] [client 20.104.21.214:51270] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agxH2WO09C0nAz8vRk44jAAAAcM"]
[Tue May 19 19:22:01.849836 2026] [:error] [pid 29823:tid 29863] [client 20.104.21.214:65423] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agxH2WO09C0nAz8vRk44jwAAAdg"]
[Tue May 19 19:22:02.614831 2026] [:error] [pid 29823:tid 29862] [client 20.104.21.214:65452] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agxH2mO09C0nAz8vRk44kQAAAdc"]
[Tue May 19 19:22:03.199755 2026] [:error] [pid 38697:tid 38724] [client 20.104.21.214:58541] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/11.php"] [unique_id "agxH26XP9pP6Kgt-msRI0wAAAAk"]
[Tue May 19 19:22:03.826539 2026] [:error] [pid 38697:tid 38732] [client 20.104.21.214:58514] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agxH26XP9pP6Kgt-msRI1AAAABE"]
[Tue May 19 19:22:04.444695 2026] [:error] [pid 55881:tid 55907] [client 20.104.21.214:57708] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agxH3O-UExma0LUC7WABNwAAAlg"]
[Tue May 19 19:22:05.187522 2026] [:error] [pid 38697:tid 38726] [client 20.104.21.214:57693] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agxH3aXP9pP6Kgt-msRI1QAAAAs"]
[Tue May 19 19:22:06.004451 2026] [:error] [pid 29622:tid 29624] [client 20.104.21.214:63192] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/w.php"] [unique_id "agxH3jkOqPKWkPs_P15PhAAAAgA"]
[Tue May 19 19:22:06.619831 2026] [:error] [pid 38699:tid 38756] [client 20.104.21.214:59591] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agxH3r--Adsw_P-dthabeQAAAE4"]
[Tue May 19 19:22:07.278455 2026] [:error] [pid 38814:tid 38826] [client 20.104.21.214:63212] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agxH3wvkKuBwP0epzWebiAAAAMo"]
[Tue May 19 19:22:07.757650 2026] [:error] [pid 38699:tid 38766] [client 20.104.21.214:59622] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agxH37--Adsw_P-dthabfgAAAFg"]
[Tue May 19 19:22:08.221308 2026] [:error] [pid 38699:tid 38749] [client 20.104.21.214:59615] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ws78.php"] [unique_id "agxH4L--Adsw_P-dthabfwAAAEc"]
[Tue May 19 19:22:08.763300 2026] [:error] [pid 29823:tid 29859] [client 20.104.21.214:51293] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "agxH4GO09C0nAz8vRk44kwAAAdQ"]
[Tue May 19 19:22:09.390326 2026] [:error] [pid 55881:tid 55886] [client 20.104.21.214:63473] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "agxH4e-UExma0LUC7WABPgAAAkM"]
[Tue May 19 19:22:09.944133 2026] [:error] [pid 29622:tid 29629] [client 20.104.21.214:59299] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "agxH4TkOqPKWkPs_P15PhwAAAgU"]
[Tue May 19 19:22:10.438473 2026] [:error] [pid 46815:tid 46821] [client 20.104.21.214:62705] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xxx.php"] [unique_id "agxH4iPnRhJOmA06LgpvlQAAAUQ"]
[Tue May 19 19:22:10.987973 2026] [:error] [pid 29622:tid 29643] [client 20.104.21.214:57705] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agxH4jkOqPKWkPs_P15PigAAAhM"]
[Tue May 19 19:22:11.651791 2026] [:error] [pid 46815:tid 46819] [client 20.104.21.214:58535] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agxH4yPnRhJOmA06LgpvlwAAAUI"]
[Tue May 19 19:22:12.236658 2026] [:error] [pid 38699:tid 38752] [client 20.104.21.214:61558] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agxH5L--Adsw_P-dthabggAAAEo"]
[Tue May 19 19:22:12.770047 2026] [:error] [pid 29622:tid 29640] [client 20.104.21.214:65426] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a7.php"] [unique_id "agxH5DkOqPKWkPs_P15PiwAAAhA"]
[Tue May 19 19:22:13.248276 2026] [:error] [pid 29622:tid 29642] [client 20.104.21.214:61781] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxH5TkOqPKWkPs_P15PjAAAAhI"]
[Tue May 19 19:22:13.816917 2026] [:error] [pid 38697:tid 38717] [client 20.104.21.214:59633] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxH5aXP9pP6Kgt-msRI1gAAAAI"]
[Tue May 19 19:22:14.325989 2026] [:error] [pid 38705:tid 38790] [client 20.104.21.214:65247] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxH5sg5dNOZ5umN9lteUQAAAJU"]
[Tue May 19 19:22:14.772509 2026] [:error] [pid 55881:tid 55907] [client 20.104.21.214:57726] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxH5u-UExma0LUC7WABQQAAAlg"]
[Tue May 19 19:22:15.314720 2026] [:error] [pid 38814:tid 38833] [client 20.104.21.214:61497] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "agxH5wvkKuBwP0epzWebkwAAANE"]
[Tue May 19 19:22:15.837150 2026] [:error] [pid 38697:tid 38736] [client 20.104.21.214:58499] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "agxH56XP9pP6Kgt-msRI2AAAABU"]
[Tue May 19 19:22:16.368374 2026] [:error] [pid 38697:tid 38722] [client 20.104.21.214:65432] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "agxH6KXP9pP6Kgt-msRI2QAAAAc"]
[Tue May 19 19:22:17.049527 2026] [:error] [pid 29823:tid 29842] [client 20.104.21.214:61791] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a1.php"] [unique_id "agxH6WO09C0nAz8vRk44lAAAAcc"]
[Tue May 19 19:22:17.859582 2026] [:error] [pid 41573:tid 41586] [client 20.104.21.214:59626] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "agxH6S1A2bd6JDSW9RaF1wAAAQs"]
[Tue May 19 19:22:18.520700 2026] [:error] [pid 29823:tid 29855] [client 20.104.21.214:57721] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "agxH6mO09C0nAz8vRk44lQAAAdA"]
[Tue May 19 19:22:19.330387 2026] [:error] [pid 55881:tid 55899] [client 20.104.21.214:65444] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "agxH6--UExma0LUC7WABQgAAAlA"]
[Tue May 19 19:22:19.877926 2026] [:error] [pid 41573:tid 41589] [client 20.104.21.214:58520] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/d.php"] [unique_id "agxH6y1A2bd6JDSW9RaF2QAAAQ4"]
[Tue May 19 19:22:20.386787 2026] [:error] [pid 29823:tid 29851] [client 20.104.21.214:51285] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "agxH7GO09C0nAz8vRk44lgAAAcw"]
[Tue May 19 19:22:20.849062 2026] [:error] [pid 29823:tid 29861] [client 20.104.21.214:57678] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "agxH7GO09C0nAz8vRk44lwAAAdY"]
[Tue May 19 19:22:21.434641 2026] [:error] [pid 29823:tid 29852] [client 20.104.21.214:61518] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "agxH7WO09C0nAz8vRk44mAAAAc0"]
[Tue May 19 19:22:22.255159 2026] [:error] [pid 29823:tid 29847] [client 20.104.21.214:59319] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xff.php"] [unique_id "agxH7mO09C0nAz8vRk44mwAAAcg"]
[Tue May 19 19:22:23.054573 2026] [:error] [pid 46896:tid 46919] [client 20.104.21.214:63462] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agxH76CHyzL3Ci9LGE1fzwAAAZU"]
[Tue May 19 19:22:23.932289 2026] [:error] [pid 55881:tid 55895] [client 20.104.21.214:65431] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agxH7--UExma0LUC7WABRQAAAkw"]
[Tue May 19 19:22:24.656431 2026] [:error] [pid 46896:tid 46905] [client 20.104.21.214:59320] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agxH8KCHyzL3Ci9LGE1f0AAAAYc"]
[Tue May 19 19:22:25.722151 2026] [:error] [pid 38697:tid 38720] [client 20.104.21.214:58496] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bal.php"] [unique_id "agxH8aXP9pP6Kgt-msRI4AAAAAU"]
[Tue May 19 19:22:26.661897 2026] [:error] [pid 38697:tid 38715] [client 20.104.21.214:61788] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "agxH8qXP9pP6Kgt-msRI5gAAAAA"]
[Tue May 19 19:22:27.226397 2026] [:error] [pid 38697:tid 38727] [client 20.104.21.214:61462] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "agxH86XP9pP6Kgt-msRI6AAAAAw"]
[Tue May 19 19:22:27.992335 2026] [:error] [pid 29823:tid 29863] [client 20.104.21.214:58536] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "agxH82O09C0nAz8vRk44oAAAAdg"]
[Tue May 19 19:22:28.640128 2026] [:error] [pid 38699:tid 38756] [client 20.104.21.214:61547] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xltt.php"] [unique_id "agxH9L--Adsw_P-dthabhgAAAE4"]
[Tue May 19 19:22:29.311892 2026] [:error] [pid 46896:tid 46911] [client 20.104.21.214:63442] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son.php"] [unique_id "agxH9aCHyzL3Ci9LGE1f0wAAAY0"]
[Tue May 19 19:22:30.115031 2026] [:error] [pid 29823:tid 29862] [client 20.104.21.214:58540] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son.php"] [unique_id "agxH9mO09C0nAz8vRk44ogAAAdc"]
[Tue May 19 19:22:31.626103 2026] [:error] [pid 55881:tid 55891] [client 20.104.21.214:61295] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son.php"] [unique_id "agxH9--UExma0LUC7WABSAAAAkg"]
[Tue May 19 19:22:32.769222 2026] [:error] [pid 38699:tid 38759] [client 20.104.21.214:63434] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son.php"] [unique_id "agxH-L--Adsw_P-dthabiAAAAFE"]
[Tue May 19 19:22:33.959658 2026] [:error] [pid 41573:tid 41595] [client 20.104.21.214:59624] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "agxH-S1A2bd6JDSW9RaF5AAAARQ"]
[Tue May 19 19:22:34.709776 2026] [:error] [pid 41573:tid 41588] [client 20.104.21.214:58544] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "agxH-i1A2bd6JDSW9RaF5gAAAQ0"]
[Tue May 19 19:22:35.404692 2026] [:error] [pid 38705:tid 38789] [client 20.104.21.214:61539] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "agxH-8g5dNOZ5umN9lteVAAAAJQ"]
[Tue May 19 19:22:36.344626 2026] [:error] [pid 29823:tid 29848] [client 20.104.21.214:58549] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/doc.php"] [unique_id "agxH_GO09C0nAz8vRk44pwAAAck"]
[Tue May 19 19:22:36.935041 2026] [:error] [pid 55881:tid 55900] [client 20.104.21.214:51275] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agxH_O-UExma0LUC7WABSwAAAlE"]
[Tue May 19 19:22:37.701823 2026] [:error] [pid 41573:tid 41596] [client 20.104.21.214:59603] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agxH_S1A2bd6JDSW9RaF6AAAARU"]
[Tue May 19 19:22:38.343183 2026] [:error] [pid 38705:tid 38793] [client 20.104.21.214:57692] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agxH_sg5dNOZ5umN9lteVwAAAJg"]
[Tue May 19 19:22:39.072287 2026] [:error] [pid 46896:tid 46915] [client 20.104.21.214:61801] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zo.php"] [unique_id "agxH_6CHyzL3Ci9LGE1f1AAAAZE"]
[Tue May 19 19:22:39.979830 2026] [:error] [pid 55881:tid 55901] [client 20.104.21.214:58528] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "agxH_--UExma0LUC7WABTwAAAlI"]
[Tue May 19 19:22:40.696604 2026] [:error] [pid 55881:tid 55897] [client 20.104.21.214:63218] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "agxIAO-UExma0LUC7WABUAAAAk4"]
[Tue May 19 19:22:41.195286 2026] [:error] [pid 38705:tid 38780] [client 20.104.21.214:61531] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "agxIAcg5dNOZ5umN9lteWgAAAIs"]
[Tue May 19 19:22:41.683493 2026] [:error] [pid 38814:tid 38819] [client 20.104.21.214:58553] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xper1.php"] [unique_id "agxIAQvkKuBwP0epzWebmQAAAMM"]
[Tue May 19 19:22:42.368810 2026] [:error] [pid 55881:tid 55899] [client 20.104.21.214:61557] [client 20.104.21.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/tiny.php"] [unique_id "agxIAu-UExma0LUC7WABUwAAAlA"]
[Tue May 19 19:22:43.038587 2026] [proxy_fcgi:error] [pid 38697:tid 38718] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:43.266098 2026] [proxy_fcgi:error] [pid 38697:tid 38738] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:43.477377 2026] [proxy_fcgi:error] [pid 38697:tid 38730] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:45.008182 2026] [proxy_fcgi:error] [pid 38697:tid 38729] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:45.220311 2026] [proxy_fcgi:error] [pid 38697:tid 38732] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:45.451220 2026] [proxy_fcgi:error] [pid 38697:tid 38720] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:45.674524 2026] [proxy_fcgi:error] [pid 38697:tid 38719] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:45.885765 2026] [proxy_fcgi:error] [pid 38697:tid 38721] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:46.097601 2026] [proxy_fcgi:error] [pid 38697:tid 38735] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:46.322944 2026] [proxy_fcgi:error] [pid 38697:tid 38726] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:46.534384 2026] [proxy_fcgi:error] [pid 38697:tid 38733] [client 20.104.21.214:57287] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:22:46.769081 2026] [:error] [pid 38697:tid 38716] [client 20.104.21.214:57287] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agxIBqXP9pP6Kgt-msRI-wAAAAE"]
[Tue May 19 19:22:47.305296 2026] [:error] [pid 55881:tid 55897] [client 20.104.21.214:61776] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agxIB--UExma0LUC7WABXgAAAk4"]
[Tue May 19 19:22:47.794210 2026] [:error] [pid 38697:tid 38722] [client 20.104.21.214:59606] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agxIB6XP9pP6Kgt-msRI_QAAAAc"]
[Tue May 19 19:22:48.343597 2026] [:error] [pid 41573:tid 41595] [client 20.104.21.214:65425] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/themes.php"] [unique_id "agxICC1A2bd6JDSW9RaF9QAAARQ"]
[Tue May 19 19:22:48.865508 2026] [:error] [pid 41573:tid 41592] [client 20.104.21.214:59612] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "agxICC1A2bd6JDSW9RaF9wAAARE"]
[Tue May 19 19:22:49.491452 2026] [:error] [pid 38705:tid 38784] [client 20.104.21.214:59289] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "agxICcg5dNOZ5umN9lteXQAAAI8"]
[Tue May 19 19:22:49.978023 2026] [:error] [pid 29823:tid 29841] [client 20.104.21.214:58531] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "agxICWO09C0nAz8vRk44vwAAAcY"]
[Tue May 19 19:22:50.536814 2026] [:error] [pid 38697:tid 38739] [client 20.104.21.214:58542] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/acp.php"] [unique_id "agxICqXP9pP6Kgt-msRJAAAAABg"]
[Tue May 19 19:22:51.052962 2026] [:error] [pid 55881:tid 55902] [client 20.104.21.214:63208] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zdd.php"] [unique_id "agxIC--UExma0LUC7WABYQAAAlM"]
[Tue May 19 19:22:51.571284 2026] [:error] [pid 38705:tid 38771] [client 20.104.21.214:51276] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zdd.php"] [unique_id "agxIC8g5dNOZ5umN9lteXgAAAII"]
[Tue May 19 19:22:52.070452 2026] [:error] [pid 29823:tid 29849] [client 20.104.21.214:63468] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zdd.php"] [unique_id "agxIDGO09C0nAz8vRk44wQAAAco"]
[Tue May 19 19:22:52.562385 2026] [:error] [pid 41573:tid 41597] [client 20.104.21.214:57677] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/zdd.php"] [unique_id "agxIDC1A2bd6JDSW9RaF-wAAARY"]
[Tue May 19 19:22:53.039683 2026] [:error] [pid 46815:tid 46820] [client 20.104.21.214:58508] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "agxIDSPnRhJOmA06LgpvmgAAAUM"]
[Tue May 19 19:22:53.541034 2026] [:error] [pid 38697:tid 38723] [client 20.104.21.214:63182] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "agxIDaXP9pP6Kgt-msRJAgAAAAg"]
[Tue May 19 19:22:54.013640 2026] [:error] [pid 38814:tid 38827] [client 20.104.21.214:61760] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "agxIDgvkKuBwP0epzWeboQAAAMs"]
[Tue May 19 19:22:54.582754 2026] [:error] [pid 38697:tid 38729] [client 20.104.21.214:61807] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/link.php"] [unique_id "agxIDqXP9pP6Kgt-msRJBAAAAA4"]
[Tue May 19 19:22:55.067445 2026] [:error] [pid 38697:tid 38720] [client 20.104.21.214:51315] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "agxID6XP9pP6Kgt-msRJBgAAAAU"]
[Tue May 19 19:22:55.565336 2026] [:error] [pid 46815:tid 46841] [client 20.104.21.214:65447] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "agxIDyPnRhJOmA06LgpvnAAAAVg"]
[Tue May 19 19:22:56.111527 2026] [:error] [pid 38705:tid 38790] [client 20.104.21.214:59625] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "agxIEMg5dNOZ5umN9lteYAAAAJU"]
[Tue May 19 19:22:56.638707 2026] [:error] [pid 38699:tid 38750] [client 20.104.21.214:51295] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sallu.php"] [unique_id "agxIEL--Adsw_P-dthabjwAAAEg"]
[Tue May 19 19:22:57.190018 2026] [:error] [pid 38699:tid 38753] [client 20.104.21.214:65424] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "agxIEb--Adsw_P-dthabkAAAAEs"]
[Tue May 19 19:22:57.717131 2026] [:error] [pid 29823:tid 29850] [client 20.104.21.214:63470] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "agxIEWO09C0nAz8vRk44wwAAAcs"]
[Tue May 19 19:22:58.239967 2026] [:error] [pid 29823:tid 29860] [client 20.104.21.214:63453] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "agxIEmO09C0nAz8vRk44xQAAAdU"]
[Tue May 19 19:22:58.798144 2026] [:error] [pid 38697:tid 38733] [client 20.104.21.214:65465] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aboute.php"] [unique_id "agxIEqXP9pP6Kgt-msRJCgAAABI"]
[Tue May 19 19:22:59.513441 2026] [:error] [pid 38697:tid 38725] [client 20.104.21.214:51301] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agxIE6XP9pP6Kgt-msRJDAAAAAo"]
[Tue May 19 19:23:00.206571 2026] [:error] [pid 41573:tid 41580] [client 20.104.21.214:61445] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agxIFC1A2bd6JDSW9RaGAQAAAQU"]
[Tue May 19 19:23:00.919758 2026] [:error] [pid 41573:tid 41586] [client 20.104.21.214:57689] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agxIFC1A2bd6JDSW9RaGAwAAAQs"]
[Tue May 19 19:23:01.489663 2026] [:error] [pid 46896:tid 46921] [client 20.104.21.214:59609] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ayk.php"] [unique_id "agxIFaCHyzL3Ci9LGE1f1wAAAZc"]
[Tue May 19 19:23:01.993083 2026] [:error] [pid 38697:tid 38722] [client 20.104.21.214:57710] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agxIFaXP9pP6Kgt-msRJDgAAAAc"]
[Tue May 19 19:23:02.497047 2026] [:error] [pid 38814:tid 38819] [client 20.104.21.214:63454] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agxIFgvkKuBwP0epzWebpgAAAMM"]
[Tue May 19 19:23:03.063740 2026] [:error] [pid 41573:tid 41584] [client 20.104.21.214:51298] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agxIFy1A2bd6JDSW9RaGCAAAAQk"]
[Tue May 19 19:23:03.989917 2026] [:error] [pid 38697:tid 38738] [client 20.104.21.214:59911] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/one.php"] [unique_id "agxIF6XP9pP6Kgt-msRJEQAAABc"]
[Tue May 19 19:23:04.957964 2026] [:error] [pid 38699:tid 38761] [client 20.104.21.214:58555] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agxIGL--Adsw_P-dthabkgAAAFM"]
[Tue May 19 19:23:05.996982 2026] [:error] [pid 29823:tid 29835] [client 20.104.21.214:61548] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agxIGWO09C0nAz8vRk44xwAAAcA"]
[Tue May 19 19:23:06.573471 2026] [:error] [pid 29823:tid 29854] [client 20.104.21.214:61524] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agxIGmO09C0nAz8vRk44ywAAAc8"]
[Tue May 19 19:23:07.646979 2026] [:error] [pid 55881:tid 55897] [client 20.104.21.214:58554] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tx79.php"] [unique_id "agxIG--UExma0LUC7WABaAAAAk4"]
[Tue May 19 19:23:08.485205 2026] [:error] [pid 38697:tid 38723] [client 20.104.21.214:59390] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "agxIHKXP9pP6Kgt-msRJEwAAAAg"]
[Tue May 19 19:23:08.994082 2026] [:error] [pid 38697:tid 38724] [client 20.104.21.214:57676] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "agxIHKXP9pP6Kgt-msRJFAAAAAk"]
[Tue May 19 19:23:09.483891 2026] [:error] [pid 38697:tid 38730] [client 20.104.21.214:63425] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "agxIHaXP9pP6Kgt-msRJFQAAAA8"]
[Tue May 19 19:23:10.080611 2026] [:error] [pid 46815:tid 46828] [client 20.104.21.214:57703] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-class.php"] [unique_id "agxIHiPnRhJOmA06LgpvogAAAUs"]
[Tue May 19 19:23:10.556144 2026] [:error] [pid 46815:tid 46822] [client 20.104.21.214:65464] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "agxIHiPnRhJOmA06LgpvowAAAUU"]
[Tue May 19 19:23:11.048113 2026] [:error] [pid 38699:tid 38756] [client 20.104.21.214:61565] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "agxIH7--Adsw_P-dthablQAAAE4"]
[Tue May 19 19:23:11.710063 2026] [:error] [pid 29823:tid 29861] [client 20.104.21.214:62713] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "agxIH2O09C0nAz8vRk441AAAAdY"]
[Tue May 19 19:23:12.124981 2026] [:error] [pid 46815:tid 46825] [client 20.104.21.214:61795] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/8.php"] [unique_id "agxIICPnRhJOmA06LgpvpQAAAUg"]
[Tue May 19 19:23:12.602331 2026] [:error] [pid 29823:tid 29851] [client 20.104.21.214:63480] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agxIIGO09C0nAz8vRk441gAAAcw"]
[Tue May 19 19:23:13.112138 2026] [:error] [pid 29823:tid 29841] [client 20.104.21.214:59322] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agxIIWO09C0nAz8vRk441wAAAcY"]
[Tue May 19 19:23:13.626229 2026] [:error] [pid 29823:tid 29848] [client 20.104.21.214:61805] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agxIIWO09C0nAz8vRk442gAAAck"]
[Tue May 19 19:23:14.112739 2026] [:error] [pid 29823:tid 29839] [client 20.104.21.214:63450] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/options.php"] [unique_id "agxIImO09C0nAz8vRk443QAAAcQ"]
[Tue May 19 19:23:14.584672 2026] [:error] [pid 55881:tid 55898] [client 20.104.21.214:62696] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agxIIu-UExma0LUC7WABagAAAk8"]
[Tue May 19 19:23:15.163669 2026] [:error] [pid 46815:tid 46818] [client 20.104.21.214:61542] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agxIIyPnRhJOmA06LgpvpgAAAUE"]
[Tue May 19 19:23:15.645319 2026] [:error] [pid 38697:tid 38729] [client 20.104.21.214:58512] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agxII6XP9pP6Kgt-msRJFgAAAA4"]
[Tue May 19 19:23:16.171781 2026] [:error] [pid 29823:tid 29837] [client 20.104.21.214:59952] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/f5.php"] [unique_id "agxIJGO09C0nAz8vRk443wAAAcI"]
[Tue May 19 19:23:16.687563 2026] [:error] [pid 29823:tid 29858] [client 20.104.21.214:62694] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "agxIJGO09C0nAz8vRk444AAAAdM"]
[Tue May 19 19:23:17.257517 2026] [:error] [pid 46815:tid 46837] [client 20.104.21.214:61447] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "agxIJSPnRhJOmA06LgpvpwAAAVQ"]
[Tue May 19 19:23:17.955193 2026] [:error] [pid 29823:tid 29859] [client 20.104.21.214:61811] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "agxIJWO09C0nAz8vRk444gAAAdQ"]
[Tue May 19 19:23:18.705939 2026] [:error] [pid 38697:tid 38720] [client 20.104.21.214:59313] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alpha.php"] [unique_id "agxIJqXP9pP6Kgt-msRJFwAAAAU"]
[Tue May 19 19:23:19.715303 2026] [:error] [pid 29823:tid 29838] [client 20.104.21.214:59608] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "agxIJ2O09C0nAz8vRk445gAAAcM"]
[Tue May 19 19:23:20.474869 2026] [:error] [pid 29823:tid 29836] [client 20.104.21.214:61479] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "agxIKGO09C0nAz8vRk446AAAAcE"]
[Tue May 19 19:23:21.400827 2026] [:error] [pid 38705:tid 38769] [client 20.104.21.214:61504] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "agxIKcg5dNOZ5umN9lteYwAAAIA"]
[Tue May 19 19:23:22.493214 2026] [:error] [pid 38705:tid 38786] [client 20.104.21.214:51267] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/son1.php"] [unique_id "agxIKsg5dNOZ5umN9lteZwAAAJE"]
[Tue May 19 19:23:24.828374 2026] [:error] [pid 46815:tid 46833] [client 20.104.21.214:57666] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agxILCPnRhJOmA06LgpvsAAAAVA"]
[Tue May 19 19:23:25.873278 2026] [:error] [pid 46896:tid 46917] [client 20.104.21.214:62681] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agxILaCHyzL3Ci9LGE1f3AAAAZM"]
[Tue May 19 19:23:26.741988 2026] [:error] [pid 29823:tid 29851] [client 20.104.21.214:61486] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agxILmO09C0nAz8vRk449AAAAcw"]
[Tue May 19 19:23:27.800802 2026] [:error] [pid 38705:tid 38787] [client 20.104.21.214:62695] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ggb.php"] [unique_id "agxIL8g5dNOZ5umN9lteawAAAJI"]
[Tue May 19 19:23:28.429891 2026] [:error] [pid 29622:tid 29642] [client 20.104.21.214:57301] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amxloxxr.php"] [unique_id "agxIMDkOqPKWkPs_P15PlgAAAhI"]
[Tue May 19 19:23:28.929245 2026] [:error] [pid 55881:tid 55902] [client 20.104.21.214:65430] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amxloxxr.php"] [unique_id "agxIMO-UExma0LUC7WABbQAAAlM"]
[Tue May 19 19:23:29.960932 2026] [:error] [pid 46896:tid 46919] [client 20.104.21.214:62685] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amxloxxr.php"] [unique_id "agxIMaCHyzL3Ci9LGE1f3gAAAZU"]
[Tue May 19 19:23:30.757589 2026] [:error] [pid 46815:tid 46836] [client 20.104.21.214:62718] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/amxloxxr.php"] [unique_id "agxIMiPnRhJOmA06LgpvsgAAAVM"]
[Tue May 19 19:23:31.458516 2026] [:error] [pid 46815:tid 46831] [client 20.104.21.214:61275] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agxIMyPnRhJOmA06LgpvswAAAU4"]
[Tue May 19 19:23:32.684676 2026] [:error] [pid 38699:tid 38758] [client 20.104.21.214:59616] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agxINL--Adsw_P-dthaboQAAAFA"]
[Tue May 19 19:23:33.506381 2026] [:error] [pid 38699:tid 38755] [client 20.104.21.214:61792] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agxINb--Adsw_P-dthabpAAAAE0"]
[Tue May 19 19:23:34.604852 2026] [:error] [pid 29823:tid 29857] [client 20.104.21.214:58552] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ss.php"] [unique_id "agxINmO09C0nAz8vRk44_gAAAdI"]
[Tue May 19 19:23:35.191161 2026] [:error] [pid 41573:tid 41590] [client 20.104.21.214:60377] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "agxINy1A2bd6JDSW9RaGCQAAAQ8"]
[Tue May 19 19:23:35.951074 2026] [:error] [pid 38699:tid 38751] [client 20.104.21.214:61520] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "agxIN7--Adsw_P-dthabpgAAAEk"]
[Tue May 19 19:23:38.713221 2026] [:error] [pid 38699:tid 38745] [client 20.104.21.214:59284] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "agxIOr--Adsw_P-dthabqAAAAEM"]
[Tue May 19 19:23:39.283060 2026] [:error] [pid 38699:tid 38762] [client 20.104.21.214:65453] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sadcut1.php"] [unique_id "agxIO7--Adsw_P-dthabqQAAAFQ"]
[Tue May 19 19:23:40.823791 2026] [:error] [pid 38697:tid 38727] [client 20.104.21.214:63227] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "agxIPKXP9pP6Kgt-msRJHwAAAAw"]
[Tue May 19 19:23:42.982437 2026] [:error] [pid 29823:tid 29857] [client 20.104.21.214:63220] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/rh.php"] [unique_id "agxIPmO09C0nAz8vRk45CAAAAdI"]
[Tue May 19 19:23:49.214389 2026] [proxy_fcgi:error] [pid 29823:tid 29850] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:49.437632 2026] [proxy_fcgi:error] [pid 29823:tid 29861] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:49.651295 2026] [proxy_fcgi:error] [pid 29823:tid 29851] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:49.864898 2026] [proxy_fcgi:error] [pid 29823:tid 29853] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:50.092576 2026] [proxy_fcgi:error] [pid 29823:tid 29841] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:50.326301 2026] [proxy_fcgi:error] [pid 29823:tid 29847] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:50.585759 2026] [proxy_fcgi:error] [pid 29823:tid 29836] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:50.803999 2026] [proxy_fcgi:error] [pid 29823:tid 29839] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:51.018615 2026] [proxy_fcgi:error] [pid 29823:tid 29835] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:51.240698 2026] [proxy_fcgi:error] [pid 29823:tid 29854] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:51.455855 2026] [proxy_fcgi:error] [pid 29823:tid 29842] [client 20.104.21.214:57675] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:23:51.665559 2026] [:error] [pid 29823:tid 29863] [client 20.104.21.214:57675] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "agxIR2O09C0nAz8vRk45GAAAAdg"]
[Tue May 19 19:23:53.119615 2026] [:error] [pid 29823:tid 29837] [client 20.104.21.214:63225] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "agxISWO09C0nAz8vRk45GwAAAcI"]
[Tue May 19 19:23:55.016135 2026] [:error] [pid 41573:tid 41586] [client 20.104.21.214:61556] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "agxISy1A2bd6JDSW9RaGEQAAAQs"]
[Tue May 19 19:23:59.813159 2026] [:error] [pid 29823:tid 29861] [client 20.104.21.214:63170] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file2.php"] [unique_id "agxIT2O09C0nAz8vRk45HwAAAdY"]
[Tue May 19 19:24:00.904828 2026] [:error] [pid 38814:tid 38836] [client 20.104.21.214:63203] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "agxIUAvkKuBwP0epzWebqwAAANQ"]
[Tue May 19 19:24:01.707223 2026] [:error] [pid 29823:tid 29847] [client 20.104.21.214:58533] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "agxIUWO09C0nAz8vRk45IwAAAcg"]
[Tue May 19 19:24:02.200706 2026] [:error] [pid 29823:tid 29854] [client 20.104.21.214:61534] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "agxIUmO09C0nAz8vRk45JQAAAc8"]
[Tue May 19 19:24:03.150339 2026] [:error] [pid 29823:tid 29842] [client 20.104.21.214:57664] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/index/function.php"] [unique_id "agxIU2O09C0nAz8vRk45JgAAAcc"]
[Tue May 19 19:24:03.801722 2026] [:error] [pid 38814:tid 38825] [client 20.104.21.214:62691] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "agxIUwvkKuBwP0epzWebrAAAAMk"]
[Tue May 19 19:24:04.606487 2026] [:error] [pid 29622:tid 29634] [client 20.104.21.214:60411] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "agxIVDkOqPKWkPs_P15PmgAAAgo"]
[Tue May 19 19:24:05.843433 2026] [:error] [pid 55881:tid 55900] [client 20.104.21.214:63197] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "agxIVe-UExma0LUC7WABcwAAAlE"]
[Tue May 19 19:24:06.739232 2026] [:error] [pid 55881:tid 55906] [client 20.104.21.214:59919] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wk/index.php"] [unique_id "agxIVu-UExma0LUC7WABdQAAAlc"]
[Tue May 19 19:24:07.668058 2026] [:error] [pid 29622:tid 29641] [client 20.104.21.214:61481] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agxIVzkOqPKWkPs_P15PnAAAAhE"]
[Tue May 19 19:24:08.513014 2026] [:error] [pid 46815:tid 46818] [client 20.104.21.214:60394] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agxIWCPnRhJOmA06LgpvuQAAAUE"]
[Tue May 19 19:24:09.002516 2026] [:error] [pid 46815:tid 46837] [client 20.104.21.214:63226] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agxIWSPnRhJOmA06LgpvugAAAVQ"]
[Tue May 19 19:24:09.999189 2026] [:error] [pid 38814:tid 38832] [client 20.104.21.214:61814] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "agxIWQvkKuBwP0epzWebrQAAANA"]
[Tue May 19 19:24:10.906150 2026] [:error] [pid 38705:tid 38776] [client 20.104.21.214:65437] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-theme.php"] [unique_id "agxIWsg5dNOZ5umN9ltebwAAAIc"]
[Tue May 19 19:24:12.561386 2026] [:error] [pid 29823:tid 29840] [client 20.104.21.214:61550] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-theme.php"] [unique_id "agxIXGO09C0nAz8vRk45KQAAAcU"]
[Tue May 19 19:24:13.664521 2026] [:error] [pid 41573:tid 41587] [client 20.104.21.214:57712] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-theme.php"] [unique_id "agxIXS1A2bd6JDSW9RaGHAAAAQw"]
[Tue May 19 19:24:14.433789 2026] [:error] [pid 29823:tid 29859] [client 20.104.21.214:65429] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-theme.php"] [unique_id "agxIXmO09C0nAz8vRk45KgAAAdQ"]
[Tue May 19 19:24:15.134129 2026] [:error] [pid 38699:tid 38757] [client 20.104.21.214:57687] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-file.php"] [unique_id "agxIX7--Adsw_P-dthabrwAAAE8"]
[Tue May 19 19:24:15.800699 2026] [:error] [pid 38699:tid 38743] [client 20.104.21.214:61762] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-file.php"] [unique_id "agxIX7--Adsw_P-dthabsAAAAEE"]
[Tue May 19 19:24:16.586316 2026] [:error] [pid 38697:tid 38733] [client 20.104.21.214:51307] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-file.php"] [unique_id "agxIYKXP9pP6Kgt-msRJOQAAABI"]
[Tue May 19 19:24:17.419712 2026] [:error] [pid 38697:tid 38734] [client 20.104.21.214:62710] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-file.php"] [unique_id "agxIYaXP9pP6Kgt-msRJOgAAABM"]
[Tue May 19 19:24:17.971942 2026] [:error] [pid 29823:tid 29838] [client 20.104.21.214:59346] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "agxIYWO09C0nAz8vRk45LQAAAcM"]
[Tue May 19 19:24:19.140494 2026] [:error] [pid 46896:tid 46915] [client 20.104.21.214:65433] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "agxIY6CHyzL3Ci9LGE1f4wAAAZE"]
[Tue May 19 19:24:21.459179 2026] [:error] [pid 38699:tid 38747] [client 20.104.21.214:57303] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "agxIZb--Adsw_P-dthabsQAAAEU"]
[Tue May 19 19:24:23.009452 2026] [:error] [pid 29823:tid 29849] [client 20.104.21.214:61561] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/default.php"] [unique_id "agxIZ2O09C0nAz8vRk45NgAAAco"]
[Tue May 19 19:24:23.984957 2026] [:error] [pid 55881:tid 55904] [client 20.104.21.214:57704] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "agxIZ--UExma0LUC7WABfAAAAlU"]
[Tue May 19 19:24:24.771075 2026] [:error] [pid 29823:tid 29852] [client 20.104.21.214:65461] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "agxIaGO09C0nAz8vRk45OgAAAc0"]
[Tue May 19 19:24:25.305525 2026] [:error] [pid 29823:tid 29848] [client 20.104.21.214:62690] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "agxIaWO09C0nAz8vRk45PQAAAck"]
[Tue May 19 19:24:26.092352 2026] [:error] [pid 38814:tid 38829] [client 20.104.21.214:64546] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mah.php"] [unique_id "agxIagvkKuBwP0epzWebrwAAAM0"]
[Tue May 19 19:24:26.778860 2026] [:error] [pid 55881:tid 55887] [client 20.104.21.214:57724] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "agxIau-UExma0LUC7WABfQAAAkQ"]
[Tue May 19 19:24:28.295834 2026] [:error] [pid 38705:tid 38772] [client 20.104.21.214:63179] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "agxIbMg5dNOZ5umN9ltemwAAAIM"]
[Tue May 19 19:24:29.740783 2026] [:error] [pid 38699:tid 38751] [client 20.104.21.214:59278] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "agxIbb--Adsw_P-dthabtAAAAEk"]
[Tue May 19 19:24:30.539783 2026] [:error] [pid 46815:tid 46833] [client 20.104.21.214:58545] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins.php"] [unique_id "agxIbiPnRhJOmA06LgpvwAAAAVA"]
[Tue May 19 19:24:31.421351 2026] [:error] [pid 41573:tid 41590] [client 20.104.21.214:60414] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "agxIby1A2bd6JDSW9RaGIgAAAQ8"]
[Tue May 19 19:24:32.651080 2026] [:error] [pid 55881:tid 55885] [client 20.104.21.214:59933] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "agxIcO-UExma0LUC7WABfwAAAkI"]
[Tue May 19 19:24:33.302549 2026] [:error] [pid 55881:tid 55896] [client 20.104.21.214:59343] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "agxIce-UExma0LUC7WABgQAAAk0"]
[Tue May 19 19:24:33.902764 2026] [:error] [pid 29823:tid 29854] [client 20.104.21.214:65225] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sf.php"] [unique_id "agxIcWO09C0nAz8vRk45QAAAAc8"]
[Tue May 19 19:24:34.455512 2026] [:error] [pid 38699:tid 38745] [client 20.104.21.214:62682] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "agxIcr--Adsw_P-dthabtgAAAEM"]
[Tue May 19 19:24:35.738173 2026] [:error] [pid 55881:tid 55906] [client 20.104.21.214:62131] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "agxIc--UExma0LUC7WABhQAAAlc"]
[Tue May 19 19:24:36.698508 2026] [:error] [pid 38699:tid 38761] [client 20.104.21.214:62094] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "agxIdL--Adsw_P-dthabugAAAFM"]
[Tue May 19 19:24:37.308064 2026] [:error] [pid 38705:tid 38789] [client 20.104.21.214:63426] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/a.php"] [unique_id "agxIdcg5dNOZ5umN9ltenQAAAJQ"]
[Tue May 19 19:24:37.872128 2026] [:error] [pid 46815:tid 46825] [client 20.104.21.214:51312] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "agxIdSPnRhJOmA06LgpvxwAAAUg"]
[Tue May 19 19:24:38.612395 2026] [:error] [pid 38705:tid 38786] [client 20.104.21.214:59646] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "agxIdsg5dNOZ5umN9ltenwAAAJE"]
[Tue May 19 19:24:39.653413 2026] [:error] [pid 38814:tid 38822] [client 20.104.21.214:62085] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "agxIdwvkKuBwP0epzWebsQAAAMY"]
[Tue May 19 19:24:40.341588 2026] [:error] [pid 55881:tid 55898] [client 20.104.21.214:60815] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/k.php"] [unique_id "agxIeO-UExma0LUC7WABiAAAAk8"]
[Tue May 19 19:24:41.061339 2026] [:error] [pid 38814:tid 38819] [client 20.104.21.214:62120] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ini.php"] [unique_id "agxIeQvkKuBwP0epzWebsgAAAMM"]
[Tue May 19 19:24:41.688431 2026] [:error] [pid 55881:tid 55899] [client 20.104.21.214:62140] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ini.php"] [unique_id "agxIee-UExma0LUC7WABigAAAlA"]
[Tue May 19 19:24:42.571534 2026] [:error] [pid 46896:tid 46921] [client 20.104.21.214:57324] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ini.php"] [unique_id "agxIeqCHyzL3Ci9LGE1f5gAAAZc"]
[Tue May 19 19:24:43.335838 2026] [:error] [pid 46815:tid 46833] [client 20.104.21.214:60612] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ini.php"] [unique_id "agxIeyPnRhJOmA06LgpvzAAAAVA"]
[Tue May 19 19:24:44.071341 2026] [:error] [pid 38699:tid 38747] [client 20.104.21.214:51311] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca4.php"] [unique_id "agxIfL--Adsw_P-dthabvwAAAEU"]
[Tue May 19 19:24:45.037835 2026] [:error] [pid 38697:tid 38730] [client 20.104.21.214:60165] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca4.php"] [unique_id "agxIfaXP9pP6Kgt-msRJQAAAAA8"]
[Tue May 19 19:24:45.610073 2026] [:error] [pid 29622:tid 29647] [client 20.104.21.214:60203] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca4.php"] [unique_id "agxIfTkOqPKWkPs_P15PsgAAAhc"]
[Tue May 19 19:24:47.732266 2026] [:error] [pid 46815:tid 46831] [client 20.104.21.214:57334] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ca4.php"] [unique_id "agxIfyPnRhJOmA06Lgpv0AAAAU4"]
[Tue May 19 19:24:48.834202 2026] [:error] [pid 55881:tid 55904] [client 20.104.21.214:59429] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agxIgO-UExma0LUC7WABjAAAAlU"]
[Tue May 19 19:24:49.761714 2026] [:error] [pid 55881:tid 55907] [client 20.104.21.214:62110] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agxIge-UExma0LUC7WABjwAAAlg"]
[Tue May 19 19:24:50.609148 2026] [:error] [pid 29622:tid 29627] [client 20.104.21.214:62124] [client 20.104.21.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agxIgjkOqPKWkPs_P15PtAAAAgM"]
[Tue May 19 19:24:51.839812 2026] [proxy_fcgi:error] [pid 38699:tid 38745] [client 20.104.21.214:55131] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:24:52.137348 2026] [proxy_fcgi:error] [pid 38699:tid 38752] [client 20.104.21.214:55131] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:24:52.372423 2026] [proxy_fcgi:error] [pid 38699:tid 38746] [client 20.104.21.214:55131] AH01071: Got error 'Primary script unknown'
[Tue May 19 19:24:52.607257 2026] [:error] [pid 38699:tid 38764] [client 20.104.21.214:55131] [client 20.104.21.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "stratapluswa.com.au"] [uri "/fm.php"] [unique_id "agxIhL--Adsw_P-dthabyQAAAFY"]
[Wed May 20 03:29:23.660395 2026] [proxy_fcgi:error] [pid 54738:tid 54756] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:23.935479 2026] [proxy_fcgi:error] [pid 54738:tid 54760] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:24.065678 2026] [proxy_fcgi:error] [pid 54738:tid 54761] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:24.189946 2026] [proxy_fcgi:error] [pid 54738:tid 54762] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:24.439004 2026] [proxy_fcgi:error] [pid 54738:tid 54764] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:24.704750 2026] [proxy_fcgi:error] [pid 54738:tid 54766] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:24.829069 2026] [proxy_fcgi:error] [pid 54738:tid 54768] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:24.981598 2026] [proxy_fcgi:error] [pid 54738:tid 54771] [client 52.175.53.236:14034] AH01071: Got error 'Primary script unknown'
[Wed May 20 03:29:25.101698 2026] [:error] [pid 54738:tid 54773] [client 52.175.53.236:14034] [client 52.175.53.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agy6FTzLRbDQeOgTUkbJKAAAAFA"]
[Wed May 20 03:29:25.612217 2026] [:error] [pid 54739:tid 54790] [client 52.175.53.236:14027] [client 52.175.53.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agy6FeVfx5lG8cTNmF0EOwAAAIA"]
[Wed May 20 03:29:26.116939 2026] [:error] [pid 54739:tid 54792] [client 52.175.53.236:1416] [client 52.175.53.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agy6FuVfx5lG8cTNmF0EPAAAAII"]
[Wed May 20 03:29:26.636338 2026] [:error] [pid 54739:tid 54791] [client 52.175.53.236:1709] [client 52.175.53.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "agy6FuVfx5lG8cTNmF0EPQAAAIE"]
[Wed May 20 04:49:42.857362 2026] [:error] [pid 59245:tid 59285] [client 194.62.107.222:34337] [client 194.62.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "agzM5qOutR70QIZRVkTO9AAAAEU"]
[Wed May 20 10:36:42.758423 2026] [:error] [pid 44059:tid 44074] [client 96.62.228.113:36996] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/public/.env"] [unique_id "ag0eOhfFs-oSOOcyjyyAsAAAAQ0"]
[Wed May 20 10:36:42.759264 2026] [:error] [pid 44059:tid 44074] [client 96.62.228.113:36956] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "ag0eOhfFs-oSOOcyjyyAsQAAAQ0"]
[Wed May 20 10:36:42.759971 2026] [:error] [pid 44059:tid 44078] [client 96.62.228.113:36914] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.bak"] [unique_id "ag0eOhfFs-oSOOcyjyyAsgAAARE"]
[Wed May 20 10:36:42.760076 2026] [:error] [pid 41279:tid 41345] [client 96.62.228.113:36926] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.old"] [unique_id "ag0eOrEFyfaehGZbt4xRqAAAAMk"]
[Wed May 20 10:36:42.760562 2026] [:error] [pid 41364:tid 41377] [client 96.62.228.113:36992] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "ag0eOhKTmyvxtNXrN-hejQAAAIs"]
[Wed May 20 10:36:42.760704 2026] [:error] [pid 44059:tid 44071] [client 96.62.228.113:36894] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "ag0eOhfFs-oSOOcyjyyAswAAAQo"]
[Wed May 20 10:36:42.761264 2026] [:error] [pid 41364:tid 41384] [client 96.62.228.113:36884] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.example"] [unique_id "ag0eOhKTmyvxtNXrN-hejwAAAJI"]
[Wed May 20 10:36:42.765604 2026] [:error] [pid 41277:tid 41305] [client 96.62.228.113:36970] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/admin/.env"] [unique_id "ag0eOrTTCltJmboB5ufQJgAAABc"]
[Wed May 20 10:36:42.765945 2026] [:error] [pid 41279:tid 41343] [client 96.62.228.113:36908] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "ag0eOrEFyfaehGZbt4xRrQAAAMc"]
[Wed May 20 10:36:42.765954 2026] [:error] [pid 41364:tid 41388] [client 96.62.228.113:36932] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.staging"] [unique_id "ag0eOhKTmyvxtNXrN-hekgAAAJY"]
[Wed May 20 10:36:42.766259 2026] [:error] [pid 41364:tid 41386] [client 96.62.228.113:36898] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.development"] [unique_id "ag0eOhKTmyvxtNXrN-hekwAAAJQ"]
[Wed May 20 10:36:42.767637 2026] [:error] [pid 41277:tid 41300] [client 96.62.228.113:36840] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stratapluswa.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "ag0eOrTTCltJmboB5ufQJwAAABI"]
[Wed May 20 10:36:42.767760 2026] [:error] [pid 41279:tid 41337] [client 96.62.228.113:36872] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "ag0eOrEFyfaehGZbt4xRrwAAAME"]
[Wed May 20 10:36:42.768438 2026] [:error] [pid 41364:tid 41381] [client 96.62.228.113:36800] [client 96.62.228.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ag0eOhKTmyvxtNXrN-helQAAAI8"]
[Wed May 20 11:13:04.944310 2026] [proxy_fcgi:error] [pid 44059:tid 44082] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:05.212506 2026] [proxy_fcgi:error] [pid 44059:tid 44061] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:05.375763 2026] [proxy_fcgi:error] [pid 44059:tid 44063] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:05.510798 2026] [proxy_fcgi:error] [pid 44059:tid 44083] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:05.812014 2026] [proxy_fcgi:error] [pid 44059:tid 44081] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:06.081134 2026] [proxy_fcgi:error] [pid 44059:tid 44078] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:06.238467 2026] [proxy_fcgi:error] [pid 44059:tid 44080] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:06.372819 2026] [proxy_fcgi:error] [pid 44059:tid 44062] [client 20.189.91.2:1260] AH01071: Got error 'Primary script unknown'
[Wed May 20 11:13:06.503669 2026] [:error] [pid 44059:tid 44066] [client 20.189.91.2:1260] [client 20.189.91.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag0mwhfFs-oSOOcyjyyOMwAAAQU"]
[Wed May 20 11:13:07.090961 2026] [:error] [pid 41277:tid 41306] [client 20.189.91.2:2391] [client 20.189.91.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag0mw7TTCltJmboB5ufUQQAAABg"]
[Wed May 20 11:13:07.678807 2026] [:error] [pid 41278:tid 41309] [client 20.189.91.2:3368] [client 20.189.91.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag0mw_WiNKASEfiGdwaBFQAAAEA"]
[Wed May 20 11:13:08.250413 2026] [:error] [pid 41364:tid 41388] [client 20.189.91.2:3387] [client 20.189.91.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag0mxBKTmyvxtNXrN-hnnAAAAJY"]
[Wed May 20 12:23:43.389834 2026] [proxy_fcgi:error] [pid 41279:tid 41349] [client 212.30.36.108:25789] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:44.425326 2026] [proxy_fcgi:error] [pid 41364:tid 41388] [client 212.30.36.107:33863] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:45.942311 2026] [proxy_fcgi:error] [pid 41279:tid 41348] [client 212.30.36.116:43453] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:46.440674 2026] [proxy_fcgi:error] [pid 41279:tid 41339] [client 212.30.36.134:58913] AH01071: Got error 'Primary script unknown'
[Wed May 20 14:33:59.555586 2026] [:error] [pid 44059:tid 44077] [client 34.46.57.55:64241] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ag1V1xfFs-oSOOcyjyzQMgAAARA"]
[Wed May 20 14:33:59.937636 2026] [:error] [pid 44059:tid 44071] [client 34.46.57.55:50846] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ag1V1xfFs-oSOOcyjyzQRAAAAQo"]
[Wed May 20 14:34:00.324613 2026] [:error] [pid 44059:tid 44083] [client 34.46.57.55:58107] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2BfFs-oSOOcyjyzQXgAAARY"]
[Wed May 20 16:20:52.070912 2026] [proxy_fcgi:error] [pid 41279:tid 41341] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:52.342696 2026] [proxy_fcgi:error] [pid 41279:tid 41357] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:52.464436 2026] [proxy_fcgi:error] [pid 41279:tid 41340] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:52.585304 2026] [proxy_fcgi:error] [pid 41279:tid 41345] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:52.830879 2026] [proxy_fcgi:error] [pid 41279:tid 41338] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:53.074452 2026] [proxy_fcgi:error] [pid 41279:tid 41350] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:53.213096 2026] [proxy_fcgi:error] [pid 41279:tid 41343] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:53.335111 2026] [proxy_fcgi:error] [pid 41279:tid 41360] [client 104.208.99.26:1305] AH01071: Got error 'Primary script unknown'
[Wed May 20 16:20:53.453565 2026] [:error] [pid 41279:tid 41352] [client 104.208.99.26:1305] [client 104.208.99.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag1u5bEFyfaehGZbt4x8ugAAANA"]
[Wed May 20 16:20:53.993164 2026] [:error] [pid 7731:tid 7736] [client 104.208.99.26:1641] [client 104.208.99.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag1u5X9qQlHXbkl2nEu5pQAAAYM"]
[Wed May 20 16:20:54.483836 2026] [:error] [pid 41277:tid 41304] [client 104.208.99.26:4204] [client 104.208.99.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag1u5rTTCltJmboB5uftiAAAABY"]
[Wed May 20 16:20:55.077541 2026] [:error] [pid 7664:tid 7683] [client 104.208.99.26:4443] [client 104.208.99.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag1u53Z8s7o3eiqT2kvcrAAAAVA"]
[Wed May 20 23:03:48.849140 2026] [proxy_fcgi:error] [pid 41364:tid 41377] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:49.135381 2026] [proxy_fcgi:error] [pid 41364:tid 41378] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:49.300418 2026] [proxy_fcgi:error] [pid 41364:tid 41366] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:49.469358 2026] [proxy_fcgi:error] [pid 41364:tid 41368] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:49.761727 2026] [proxy_fcgi:error] [pid 41364:tid 41389] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:50.049694 2026] [proxy_fcgi:error] [pid 41364:tid 41384] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:50.211904 2026] [proxy_fcgi:error] [pid 41364:tid 41387] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:50.379946 2026] [proxy_fcgi:error] [pid 41364:tid 41385] [client 20.24.211.211:13879] AH01071: Got error 'Primary script unknown'
[Wed May 20 23:03:50.517866 2026] [:error] [pid 41364:tid 41381] [client 20.24.211.211:13879] [client 20.24.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag3NVhKTmyvxtNXrN-j7tAAAAI8"]
[Wed May 20 23:03:51.050532 2026] [:error] [pid 44059:tid 44072] [client 20.24.211.211:16104] [client 20.24.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag3NVxfFs-oSOOcyjyxCCAAAAQs"]
[Wed May 20 23:03:51.565528 2026] [:error] [pid 7731:tid 7746] [client 20.24.211.211:16099] [client 20.24.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag3NV39qQlHXbkl2nEs_GAAAAY0"]
[Wed May 20 23:03:52.229940 2026] [:error] [pid 7731:tid 7757] [client 20.24.211.211:15171] [client 20.24.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag3NWH9qQlHXbkl2nEs_GgAAAZg"]
[Thu May 21 00:21:46.697997 2026] [:error] [pid 41278:tid 41321] [client 208.84.100.123:64554] [client 208.84.100.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/backend/.env"] [unique_id "ag3fmvWiNKASEfiGdwbQ6QAAAEw"]
[Thu May 21 00:21:46.698844 2026] [:error] [pid 7664:tid 7678] [client 208.84.100.123:64552] [client 208.84.100.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/api/.env"] [unique_id "ag3fmnZ8s7o3eiqT2ksmMQAAAUs"]
[Thu May 21 00:21:46.699521 2026] [:error] [pid 7664:tid 7669] [client 208.84.100.123:64536] [client 208.84.100.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/app/.env"] [unique_id "ag3fmnZ8s7o3eiqT2ksmMgAAAUI"]
[Thu May 21 00:21:46.699543 2026] [:error] [pid 7664:tid 7686] [client 208.84.100.123:64512] [client 208.84.100.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "ag3fmnZ8s7o3eiqT2ksmMwAAAVM"]
[Thu May 21 00:21:46.700169 2026] [:error] [pid 44059:tid 44084] [client 208.84.100.123:64500] [client 208.84.100.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "ag3fmhfFs-oSOOcyjyxPCgAAARc"]
[Thu May 21 00:21:46.700169 2026] [:error] [pid 44059:tid 44068] [client 208.84.100.123:64526] [client 208.84.100.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.production"] [unique_id "ag3fmhfFs-oSOOcyjyxPCQAAAQc"]
[Thu May 21 02:38:05.564697 2026] [:error] [pid 41278:tid 41317] [client 64.236.133.195:51728] [client 64.236.133.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.236.133.195, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "ag3_jfWiNKASEfiGdwbfAAAAAEg"]
[Thu May 21 10:07:36.007654 2026] [:error] [pid 9188:tid 9192] [client 3.235.91.146:46998] [client 3.235.91.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/HEAD"] [unique_id "ag5o6LGYm6q5dNSUvA-AkAAAAcA"]
[Thu May 21 14:15:48.831581 2026] [proxy_fcgi:error] [pid 49884:tid 49956] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:49.087702 2026] [proxy_fcgi:error] [pid 49884:tid 49965] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:49.217736 2026] [proxy_fcgi:error] [pid 49884:tid 49969] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:49.376366 2026] [proxy_fcgi:error] [pid 49884:tid 49966] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:49.634277 2026] [proxy_fcgi:error] [pid 49884:tid 49955] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:49.899600 2026] [proxy_fcgi:error] [pid 49884:tid 49951] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:50.028938 2026] [proxy_fcgi:error] [pid 49884:tid 49950] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:50.157521 2026] [proxy_fcgi:error] [pid 49884:tid 49971] [client 104.208.117.166:1420] AH01071: Got error 'Primary script unknown'
[Thu May 21 14:15:50.282083 2026] [:error] [pid 49884:tid 49970] [client 104.208.117.166:1420] [client 104.208.117.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag6jFq5MPpsTNNHWS6hj6QAAAJc"]
[Thu May 21 14:15:50.832753 2026] [:error] [pid 9157:tid 9169] [client 104.208.117.166:1419] [client 104.208.117.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag6jFsGfHcLNqE8m88Jl7wAAAYo"]
[Thu May 21 14:15:51.378791 2026] [:error] [pid 49877:tid 49897] [client 104.208.117.166:1418] [client 104.208.117.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag6jFxgN4MeSe4kIL9AgoQAAAAk"]
[Thu May 21 14:15:51.884354 2026] [:error] [pid 49884:tid 49960] [client 104.208.117.166:1471] [client 104.208.117.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/simple.php"] [unique_id "ag6jF65MPpsTNNHWS6hj7AAAAI0"]
[Thu May 21 18:41:56.349914 2026] [:error] [pid 9189:tid 9235] [client 185.94.192.68:41422] [client 185.94.192.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.94.192.68, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ag7hdJvTDh1NbYizKVykZAAAAhA"]
[Thu May 21 18:41:56.362464 2026] [proxy_fcgi:error] [pid 9189:tid 9235] [client 185.94.192.68:41422] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:38.205859 2026] [autoindex:error] [pid 9157:tid 9162] [client 20.222.17.182:9463] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 21 23:06:38.328819 2026] [proxy_fcgi:error] [pid 9157:tid 9180] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:38.446627 2026] [proxy_fcgi:error] [pid 9157:tid 9183] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:38.564461 2026] [proxy_fcgi:error] [pid 9157:tid 9166] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:38.709806 2026] [proxy_fcgi:error] [pid 9157:tid 9161] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:38.827447 2026] [proxy_fcgi:error] [pid 9157:tid 9159] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:38.945370 2026] [proxy_fcgi:error] [pid 9157:tid 9168] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:39.062828 2026] [proxy_fcgi:error] [pid 9157:tid 9169] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:39.179757 2026] [proxy_fcgi:error] [pid 9157:tid 9182] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:39.322134 2026] [proxy_fcgi:error] [pid 9157:tid 9178] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:39.560055 2026] [proxy_fcgi:error] [pid 9157:tid 9163] [client 20.222.17.182:9463] AH01071: Got error 'Primary script unknown'
[Thu May 21 23:06:39.674193 2026] [:error] [pid 9157:tid 9177] [client 20.222.17.182:9463] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ag8ff8GfHcLNqE8m88KiJQAAAZI"]
[Thu May 21 23:06:40.163829 2026] [:error] [pid 49884:tid 49967] [client 20.222.17.182:11448] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ag8fgK5MPpsTNNHWS6gTTQAAAJQ"]
[Thu May 21 23:06:40.621722 2026] [:error] [pid 49982:tid 50002] [client 20.222.17.182:7378] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ag8fgGFwIDa5Tf8O4bYeSAAAANI"]
[Thu May 21 23:06:41.076671 2026] [:error] [pid 9188:tid 9205] [client 20.222.17.182:11403] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ag8fgbGYm6q5dNSUvA_86gAAAc0"]
[Thu May 21 23:24:10.024130 2026] [:error] [pid 49884:tid 49950] [client 34.150.255.112:50499] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXWQAAAIM"]
[Thu May 21 23:24:10.454546 2026] [:error] [pid 49884:tid 49966] [client 34.150.255.112:65360] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXwwAAAJM"]
[Thu May 21 23:24:10.881915 2026] [:error] [pid 9188:tid 9195] [client 34.150.255.112:60912] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmrGYm6q5dNSUvA__DQAAAcM"]
[Fri May 22 05:56:35.381379 2026] [autoindex:error] [pid 15583:tid 15590] [client 62.84.183.159:52788] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 22 09:08:05.992864 2026] [:error] [pid 15585:tid 15667] [client 24.144.83.71:59621] [client 24.144.83.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.144.83.71, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "ag-sdSKb-vB41AF-LC2UUwAAAJQ"]
[Fri May 22 09:08:06.002783 2026] [proxy_fcgi:error] [pid 15585:tid 15667] [client 24.144.83.71:59621] AH01071: Got error 'Primary script unknown'
[Fri May 22 10:30:19.942861 2026] [:error] [pid 15584:tid 15622] [client 159.89.118.231:59747] [client 159.89.118.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.118.231, incrementing brute counter"] [hostname "stratapluswa.com.au"] [uri "/wp-login.php"] [unique_id "ag-_u99Z_TVLbNEx52i2rQAAAEI"]
[Fri May 22 10:30:19.953100 2026] [proxy_fcgi:error] [pid 15584:tid 15622] [client 159.89.118.231:59747] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:27.421677 2026] [proxy_fcgi:error] [pid 15679:tid 15699] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:27.777059 2026] [proxy_fcgi:error] [pid 15679:tid 15695] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:27.894885 2026] [proxy_fcgi:error] [pid 15679:tid 15694] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:28.012653 2026] [proxy_fcgi:error] [pid 15679:tid 15688] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:28.130887 2026] [proxy_fcgi:error] [pid 15679:tid 15693] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:28.259914 2026] [proxy_fcgi:error] [pid 15679:tid 15691] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:28.377554 2026] [proxy_fcgi:error] [pid 15679:tid 15687] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:28.495951 2026] [proxy_fcgi:error] [pid 15679:tid 15683] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:28.632827 2026] [proxy_fcgi:error] [pid 15679:tid 15685] [client 20.222.17.182:17646] AH01071: Got error 'Primary script unknown'
[Fri May 22 13:49:28.748375 2026] [:error] [pid 15679:tid 15698] [client 20.222.17.182:17646] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ag_uaCh8tgGc38WJ-Gz3XQAAANE"]
[Fri May 22 13:49:29.229245 2026] [:error] [pid 15584:tid 15620] [client 20.222.17.182:18153] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ag_uad9Z_TVLbNEx52jhxwAAAEA"]
[Fri May 22 13:49:29.686294 2026] [:error] [pid 15583:tid 15596] [client 20.222.17.182:18158] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ag_uaXnaOncRcIm17YXRvAAAAAg"]
[Fri May 22 13:49:30.170527 2026] [:error] [pid 58782:tid 58785] [client 20.222.17.182:18112] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/config.php"] [unique_id "ag_uaoxsdTFafgO8vhTxdgAAAQE"]
[Fri May 22 14:41:58.324180 2026] [:error] [pid 15585:tid 15657] [client 45.131.195.102:44807] [client 45.131.195.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag_6tiKb-vB41AF-LC0TMgAAAIo"]
[Fri May 22 16:56:01.110855 2026] [:error] [pid 15679:tid 15699] [client 35.220.130.67:58658] [client 35.220.130.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ahAaISh8tgGc38WJ-GwsygAAANI"]
[Fri May 22 17:08:15.401457 2026] [:error] [pid 15585:tid 15660] [client 161.118.202.128:53958] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc_yKb-vB41AF-LC1H7gAAAI0"]
[Fri May 22 17:08:15.577068 2026] [:error] [pid 15585:tid 15664] [client 161.118.202.128:54217] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc_yKb-vB41AF-LC1H8QAAAJE"]
[Fri May 22 17:11:07.894118 2026] [:error] [pid 15679:tid 15699] [client 34.93.63.75:59605] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ahAdqyh8tgGc38WJ-GwwdQAAANI"]
[Fri May 22 17:11:08.184871 2026] [:error] [pid 15584:tid 15626] [client 34.93.63.75:61096] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrN9Z_TVLbNEx52gL5AAAAEY"]
[Fri May 22 17:11:08.477094 2026] [:error] [pid 58782:tid 58799] [client 34.93.63.75:62670] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/feed/"] [unique_id "ahAdrIxsdTFafgO8vhQNwwAAAQ8"]
[Sat May 23 02:24:25.738127 2026] [proxy_fcgi:error] [pid 15584:tid 15628] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:25.855362 2026] [proxy_fcgi:error] [pid 15584:tid 15637] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:25.972395 2026] [proxy_fcgi:error] [pid 15584:tid 15627] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:26.089975 2026] [proxy_fcgi:error] [pid 15584:tid 15620] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:26.233813 2026] [proxy_fcgi:error] [pid 15584:tid 15633] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:26.379098 2026] [proxy_fcgi:error] [pid 15584:tid 15629] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:26.619626 2026] [proxy_fcgi:error] [pid 15584:tid 15636] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:26.737097 2026] [proxy_fcgi:error] [pid 15584:tid 15644] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:26.862574 2026] [proxy_fcgi:error] [pid 15584:tid 15634] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:26.991403 2026] [proxy_fcgi:error] [pid 15584:tid 15625] [client 20.89.45.113:3466] AH01071: Got error 'Primary script unknown'
[Sat May 23 02:24:27.145618 2026] [:error] [pid 15584:tid 15632] [client 20.89.45.113:3466] [client 20.89.45.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahCfW99Z_TVLbNEx52hvTwAAAEw"]
[Sat May 23 02:24:27.735812 2026] [:error] [pid 15585:tid 15665] [client 20.89.45.113:3206] [client 20.89.45.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahCfWyKb-vB41AF-LC3VtAAAAJI"]
[Sat May 23 02:24:28.233289 2026] [:error] [pid 15679:tid 15691] [client 20.89.45.113:6738] [client 20.89.45.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahCfXCh8tgGc38WJ-Gy8cQAAAMo"]
[Sat May 23 02:24:28.749867 2026] [:error] [pid 15585:tid 15670] [client 20.89.45.113:6746] [client 20.89.45.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahCfXCKb-vB41AF-LC3VtQAAAJc"]
[Sat May 23 07:45:06.876984 2026] [:error] [pid 30940:tid 30970] [client 45.154.98.214:50655] [client 45.154.98.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.154.98.214, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ahDqgpqUP2XZmzp7RDqJbAAAABU"]
[Sat May 23 07:45:06.888878 2026] [proxy_fcgi:error] [pid 30940:tid 30970] [client 45.154.98.214:50655] AH01071: Got error 'Primary script unknown'
[Sat May 23 07:45:09.696110 2026] [:error] [pid 30940:tid 30951] [client 45.154.98.214:50655] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahDqhZqUP2XZmzp7RDqJeQAAAAI"]
[Sat May 23 07:45:10.202283 2026] [:error] [pid 25876:tid 25890] [client 45.154.98.214:61076] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahDqhgSpWUCKPezIBJCcEAAAAQw"]
[Sat May 23 07:45:10.705427 2026] [:error] [pid 31039:tid 31043] [client 45.154.98.214:62328] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ahDqhqIYDYo8WvA5zLJ6CgAAAMI"]
[Sat May 23 07:45:11.210997 2026] [:error] [pid 31039:tid 31054] [client 45.154.98.214:64059] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ahDqh6IYDYo8WvA5zLJ6CwAAAM0"]
[Sat May 23 07:45:11.714783 2026] [:error] [pid 31039:tid 31053] [client 45.154.98.214:65496] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahDqh6IYDYo8WvA5zLJ6EgAAAMw"]
[Sat May 23 07:45:12.217691 2026] [:error] [pid 31039:tid 31058] [client 45.154.98.214:50698] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahDqiKIYDYo8WvA5zLJ6FAAAANE"]
[Sat May 23 07:45:12.747211 2026] [:error] [pid 31039:tid 31045] [client 45.154.98.214:52327] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ahDqiKIYDYo8WvA5zLJ6GAAAAMQ"]
[Sat May 23 14:44:02.961219 2026] [proxy_fcgi:error] [pid 31039:tid 31046] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:03.081248 2026] [proxy_fcgi:error] [pid 31039:tid 31061] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:03.201021 2026] [proxy_fcgi:error] [pid 31039:tid 31044] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:03.318224 2026] [proxy_fcgi:error] [pid 31039:tid 31057] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:03.435881 2026] [proxy_fcgi:error] [pid 31039:tid 31052] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:03.553343 2026] [proxy_fcgi:error] [pid 31039:tid 31050] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:03.800967 2026] [proxy_fcgi:error] [pid 31039:tid 31062] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:03.918849 2026] [proxy_fcgi:error] [pid 31039:tid 31063] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:04.051425 2026] [proxy_fcgi:error] [pid 31039:tid 31049] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:04.169970 2026] [proxy_fcgi:error] [pid 31039:tid 31064] [client 20.89.146.66:10122] AH01071: Got error 'Primary script unknown'
[Sat May 23 14:44:04.283960 2026] [:error] [pid 31039:tid 31054] [client 20.89.146.66:10122] [client 20.89.146.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahFMtKIYDYo8WvA5zLL4DAAAAM0"]
[Sat May 23 14:44:04.748928 2026] [:error] [pid 31039:tid 31060] [client 20.89.146.66:6476] [client 20.89.146.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahFMtKIYDYo8WvA5zLL4DQAAANM"]
[Sat May 23 14:44:05.268569 2026] [:error] [pid 25876:tid 25881] [client 20.89.146.66:5135] [client 20.89.146.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahFMtQSpWUCKPezIBJBJewAAAQM"]
[Sat May 23 14:44:05.726355 2026] [:error] [pid 25876:tid 25896] [client 20.89.146.66:5171] [client 20.89.146.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahFMtQSpWUCKPezIBJBJfQAAARI"]
[Sat May 23 18:31:07.837205 2026] [:error] [pid 30941:tid 30998] [client 174.200.18.123:2832] [client 174.200.18.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.200.18.123, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ahGB63TIgjSDhiZmvlXGUQAAAFY"]
[Sat May 23 18:31:07.847468 2026] [proxy_fcgi:error] [pid 30941:tid 30998] [client 174.200.18.123:2832] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:16.276310 2026] [proxy_fcgi:error] [pid 25876:tid 25888] [client 192.109.200.215:51138] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:16.574867 2026] [proxy_fcgi:error] [pid 25876:tid 25887] [client 192.109.200.215:51138] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:16.858128 2026] [proxy_fcgi:error] [pid 25876:tid 25885] [client 192.109.200.215:51138] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:17.155136 2026] [proxy_fcgi:error] [pid 25876:tid 25897] [client 192.109.200.215:51138] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:17.423860 2026] [proxy_fcgi:error] [pid 25876:tid 25884] [client 192.109.200.215:51138] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:19.652901 2026] [proxy_fcgi:error] [pid 25876:tid 25891] [client 192.109.200.215:51138] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:19.919049 2026] [proxy_fcgi:error] [pid 25876:tid 25898] [client 192.109.200.215:51138] AH01071: Got error 'Primary script unknown'
[Sat May 23 22:46:20.546913 2026] [:error] [pid 25876:tid 25882] [client 192.109.200.215:51138] [client 192.109.200.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env"] [unique_id "ahG9vASpWUCKPezIBJDBFwAAAQQ"]
[Sat May 23 22:46:33.282932 2026] [:error] [pid 44325:tid 44331] [client 192.109.200.215:62787] [client 192.109.200.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.local"] [unique_id "ahG9yVgUQb4puB_2yV8_nQAAAYM"]
[Sat May 23 22:46:33.557319 2026] [:error] [pid 44325:tid 44340] [client 192.109.200.215:62742] [client 192.109.200.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.env.backup"] [unique_id "ahG9yVgUQb4puB_2yV8_ngAAAYw"]
[Sun May 24 00:51:41.263934 2026] [proxy_fcgi:error] [pid 30941:tid 30984] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:41.406015 2026] [proxy_fcgi:error] [pid 30941:tid 30999] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:41.548881 2026] [proxy_fcgi:error] [pid 30941:tid 30983] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:41.690667 2026] [proxy_fcgi:error] [pid 30941:tid 30981] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:41.832549 2026] [proxy_fcgi:error] [pid 30941:tid 30989] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:41.974883 2026] [proxy_fcgi:error] [pid 30941:tid 30996] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:42.278169 2026] [proxy_fcgi:error] [pid 30941:tid 30985] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:42.420081 2026] [proxy_fcgi:error] [pid 30941:tid 30991] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:42.577321 2026] [proxy_fcgi:error] [pid 30941:tid 30984] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:42.721323 2026] [proxy_fcgi:error] [pid 30941:tid 30999] [client 20.196.97.33:4655] AH01071: Got error 'Primary script unknown'
[Sun May 24 00:51:42.860650 2026] [:error] [pid 30941:tid 30987] [client 20.196.97.33:4655] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahHbHnTIgjSDhiZmvlVJ3QAAAEs"]
[Sun May 24 00:51:43.402641 2026] [:error] [pid 44296:tid 44321] [client 20.196.97.33:9443] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahHbH5drUdFI6ijvMkm7wwAAAVc"]
[Sun May 24 00:51:43.967098 2026] [:error] [pid 44325:tid 44348] [client 20.196.97.33:9331] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahHbH1gUQb4puB_2yV9c0QAAAZQ"]
[Sun May 24 00:51:44.538979 2026] [:error] [pid 44325:tid 44339] [client 20.196.97.33:4632] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/alfa.php"] [unique_id "ahHbIFgUQb4puB_2yV9c0wAAAYs"]
[Sun May 24 02:47:44.018197 2026] [autoindex:error] [pid 30940:tid 30950] [client 20.196.97.33:6295] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 24 02:47:44.160595 2026] [proxy_fcgi:error] [pid 30940:tid 30962] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:44.299536 2026] [proxy_fcgi:error] [pid 30940:tid 30960] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:44.435885 2026] [proxy_fcgi:error] [pid 30940:tid 30967] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:44.572810 2026] [proxy_fcgi:error] [pid 30940:tid 30955] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:44.710205 2026] [proxy_fcgi:error] [pid 30940:tid 30968] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:44.846856 2026] [proxy_fcgi:error] [pid 30940:tid 30964] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:44.982979 2026] [proxy_fcgi:error] [pid 30940:tid 30969] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:46.377341 2026] [proxy_fcgi:error] [pid 30940:tid 30953] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:46.514135 2026] [proxy_fcgi:error] [pid 30940:tid 30971] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:46.796222 2026] [proxy_fcgi:error] [pid 30940:tid 30972] [client 20.196.97.33:6295] AH01071: Got error 'Primary script unknown'
[Sun May 24 02:47:46.929017 2026] [:error] [pid 30940:tid 30973] [client 20.196.97.33:6295] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahH2UpqUP2XZmzp7RDo1_gAAABg"]
[Sun May 24 02:47:47.469638 2026] [:error] [pid 30940:tid 30970] [client 20.196.97.33:6288] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahH2U5qUP2XZmzp7RDo2AAAAABU"]
[Sun May 24 02:47:48.006553 2026] [:error] [pid 30942:tid 31003] [client 20.196.97.33:3755] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahH2VNUosz64YFiBlG2iqAAAAIA"]
[Sun May 24 02:47:48.585143 2026] [:error] [pid 30940:tid 30958] [client 20.196.97.33:6321] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahH2VJqUP2XZmzp7RDo2AgAAAAk"]
[Sun May 24 10:46:02.924038 2026] [proxy_fcgi:error] [pid 49744:tid 49760] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:03.143826 2026] [proxy_fcgi:error] [pid 49744:tid 49756] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:03.361911 2026] [proxy_fcgi:error] [pid 49744:tid 49764] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:03.599439 2026] [proxy_fcgi:error] [pid 49744:tid 49759] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:03.831514 2026] [proxy_fcgi:error] [pid 49744:tid 49770] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:04.049982 2026] [proxy_fcgi:error] [pid 49744:tid 49762] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:04.267919 2026] [proxy_fcgi:error] [pid 49744:tid 49761] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:04.486014 2026] [proxy_fcgi:error] [pid 49744:tid 49753] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:04.708372 2026] [proxy_fcgi:error] [pid 49744:tid 49755] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:04.932354 2026] [proxy_fcgi:error] [pid 49744:tid 49750] [client 20.63.100.211:65125] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:46:05.148229 2026] [:error] [pid 49744:tid 49746] [client 20.63.100.211:65125] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ahJmbTsE5kPdFpUbbHF5lAAAAMA"]
[Sun May 24 10:46:05.667679 2026] [:error] [pid 49688:tid 49692] [client 20.63.100.211:11403] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ahJmbWYoQ9V6a_4pBshuQAAAAEE"]
[Sun May 24 10:46:06.097358 2026] [:error] [pid 49689:tid 49733] [client 20.63.100.211:64519] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ahJmbgaxiY3NxLUD97Up1gAAAI8"]
[Sun May 24 10:46:06.524496 2026] [:error] [pid 2639:tid 2642] [client 20.63.100.211:11404] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/edit.php"] [unique_id "ahJmbkzQncQTd0Z0Oe_ugAAAAQE"]
[Sun May 24 10:46:06.981326 2026] [:error] [pid 2639:tid 2645] [client 20.63.100.211:65174] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ahJmbkzQncQTd0Z0Oe_uhAAAAQQ"]
[Sun May 24 10:46:07.427911 2026] [:error] [pid 49775:tid 49777] [client 20.63.100.211:65159] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ahJmb4vZb8G6T8WpI1g1fgAAAAA"]
[Sun May 24 10:46:07.883280 2026] [:error] [pid 49689:tid 49740] [client 20.63.100.211:65165] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ahJmbwaxiY3NxLUD97Up1wAAAJY"]
[Sun May 24 10:46:08.327794 2026] [:error] [pid 49775:tid 49784] [client 20.63.100.211:65156] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-load.php"] [unique_id "ahJmcIvZb8G6T8WpI1g1gwAAAAc"]
[Sun May 24 10:46:08.813211 2026] [:error] [pid 49744:tid 49762] [client 20.63.100.211:65134] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ahJmcDsE5kPdFpUbbHF5lwAAANA"]
[Sun May 24 10:46:09.240176 2026] [:error] [pid 49744:tid 49752] [client 20.63.100.211:65111] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ahJmcTsE5kPdFpUbbHF5mAAAAMY"]
[Sun May 24 10:46:09.709810 2026] [:error] [pid 49689:tid 49718] [client 20.63.100.211:11398] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ahJmcQaxiY3NxLUD97Up2wAAAIA"]
[Sun May 24 10:46:10.178187 2026] [:error] [pid 49689:tid 49741] [client 20.63.100.211:11471] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atomlib.php"] [unique_id "ahJmcgaxiY3NxLUD97Up3AAAAJc"]
[Sun May 24 10:46:10.607603 2026] [:error] [pid 49688:tid 49707] [client 20.63.100.211:65140] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-der.php"] [unique_id "ahJmcmYoQ9V6a_4pBshuRwAAAFA"]
[Sun May 24 10:46:11.036214 2026] [:error] [pid 49689:tid 49721] [client 20.63.100.211:11440] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-der.php"] [unique_id "ahJmcwaxiY3NxLUD97Up4AAAAIM"]
[Sun May 24 10:46:11.512551 2026] [:error] [pid 49689:tid 49732] [client 20.63.100.211:64529] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-der.php"] [unique_id "ahJmcwaxiY3NxLUD97Up4QAAAI4"]
[Sun May 24 10:46:12.031383 2026] [:error] [pid 49744:tid 49766] [client 20.63.100.211:11424] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-der.php"] [unique_id "ahJmdDsE5kPdFpUbbHF5ogAAANQ"]
[Sun May 24 10:46:12.460353 2026] [:error] [pid 49775:tid 49780] [client 20.63.100.211:65105] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ftde.php"] [unique_id "ahJmdIvZb8G6T8WpI1g1kAAAAAM"]
[Sun May 24 10:46:12.881582 2026] [:error] [pid 49775:tid 49778] [client 20.63.100.211:11480] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ftde.php"] [unique_id "ahJmdIvZb8G6T8WpI1g1kgAAAAE"]
[Sun May 24 10:46:13.320307 2026] [:error] [pid 49688:tid 49704] [client 20.63.100.211:11445] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ftde.php"] [unique_id "ahJmdWYoQ9V6a_4pBshuTAAAAE0"]
[Sun May 24 10:46:13.746698 2026] [:error] [pid 49689:tid 49729] [client 20.63.100.211:64524] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ftde.php"] [unique_id "ahJmdQaxiY3NxLUD97Up7QAAAIs"]
[Sun May 24 10:46:14.173714 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:11505] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "ahJmdjsE5kPdFpUbbHF5qQAAAMU"]
[Sun May 24 10:46:14.604212 2026] [:error] [pid 2639:tid 2647] [client 20.63.100.211:65132] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "ahJmdkzQncQTd0Z0Oe_uiQAAAQY"]
[Sun May 24 10:46:15.041084 2026] [:error] [pid 2639:tid 2641] [client 20.63.100.211:65184] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "ahJmd0zQncQTd0Z0Oe_ujAAAAQA"]
[Sun May 24 10:46:15.473922 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:64516] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asasx.php"] [unique_id "ahJmd0zQncQTd0Z0Oe_ujwAAAQI"]
[Sun May 24 10:46:15.907527 2026] [:error] [pid 2639:tid 2649] [client 20.63.100.211:64514] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ahJmd0zQncQTd0Z0Oe_ulAAAAQg"]
[Sun May 24 10:46:16.374665 2026] [:error] [pid 49689:tid 49719] [client 20.63.100.211:11436] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ahJmeAaxiY3NxLUD97Up8gAAAIE"]
[Sun May 24 10:46:16.808067 2026] [:error] [pid 49688:tid 49691] [client 20.63.100.211:65096] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ahJmeGYoQ9V6a_4pBshuUAAAAEA"]
[Sun May 24 10:46:17.289361 2026] [:error] [pid 49688:tid 49698] [client 20.63.100.211:11504] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-good.php"] [unique_id "ahJmeWYoQ9V6a_4pBshuVgAAAEc"]
[Sun May 24 10:46:17.724341 2026] [:error] [pid 2639:tid 2642] [client 20.63.100.211:11455] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "ahJmeUzQncQTd0Z0Oe_unwAAAQE"]
[Sun May 24 10:46:18.154309 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:65181] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "ahJmekzQncQTd0Z0Oe_uoAAAAQI"]
[Sun May 24 10:46:18.615695 2026] [:error] [pid 49775:tid 49778] [client 20.63.100.211:11468] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "ahJmeovZb8G6T8WpI1g1mQAAAAE"]
[Sun May 24 10:46:19.051413 2026] [:error] [pid 49775:tid 49786] [client 20.63.100.211:65114] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app.php"] [unique_id "ahJme4vZb8G6T8WpI1g1ngAAAAk"]
[Sun May 24 10:46:19.581317 2026] [:error] [pid 49689:tid 49723] [client 20.63.100.211:11484] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJmewaxiY3NxLUD97UqEgAAAIU"]
[Sun May 24 10:46:20.032817 2026] [:error] [pid 49688:tid 49699] [client 20.63.100.211:11462] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJmfGYoQ9V6a_4pBshuaAAAAEg"]
[Sun May 24 10:46:20.527697 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:65107] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJmfDsE5kPdFpUbbHF5tAAAAMU"]
[Sun May 24 10:46:20.970143 2026] [:error] [pid 49744:tid 49757] [client 20.63.100.211:65183] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJmfDsE5kPdFpUbbHF5tgAAAMs"]
[Sun May 24 10:46:21.448327 2026] [:error] [pid 49775:tid 49791] [client 20.63.100.211:64510] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wuasr.php"] [unique_id "ahJmfYvZb8G6T8WpI1g1owAAAA4"]
[Sun May 24 10:46:21.911004 2026] [:error] [pid 49744:tid 49748] [client 20.63.100.211:65196] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wuasr.php"] [unique_id "ahJmfTsE5kPdFpUbbHF5ugAAAMI"]
[Sun May 24 10:46:22.406378 2026] [:error] [pid 49775:tid 49782] [client 20.63.100.211:65169] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wuasr.php"] [unique_id "ahJmfovZb8G6T8WpI1g1pQAAAAU"]
[Sun May 24 10:46:22.853713 2026] [:error] [pid 49775:tid 49788] [client 20.63.100.211:65204] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wuasr.php"] [unique_id "ahJmfovZb8G6T8WpI1g1pgAAAAs"]
[Sun May 24 10:46:23.290383 2026] [:error] [pid 49775:tid 49799] [client 20.63.100.211:64512] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ahJmf4vZb8G6T8WpI1g1qAAAABY"]
[Sun May 24 10:46:23.796168 2026] [:error] [pid 49775:tid 49790] [client 20.63.100.211:11446] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ahJmf4vZb8G6T8WpI1g1rQAAAA0"]
[Sun May 24 10:46:24.225847 2026] [:error] [pid 49775:tid 49789] [client 20.63.100.211:11447] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ahJmgIvZb8G6T8WpI1g1sQAAAAw"]
[Sun May 24 10:46:24.729830 2026] [:error] [pid 49744:tid 49758] [client 20.63.100.211:65135] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/bthil.php"] [unique_id "ahJmgDsE5kPdFpUbbHF5xQAAAMw"]
[Sun May 24 10:46:25.168995 2026] [:error] [pid 49689:tid 49730] [client 20.63.100.211:65193] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ahJmgQaxiY3NxLUD97UqGQAAAIw"]
[Sun May 24 10:46:25.601041 2026] [:error] [pid 49775:tid 49780] [client 20.63.100.211:65190] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ahJmgYvZb8G6T8WpI1g1tAAAAAM"]
[Sun May 24 10:46:26.068389 2026] [:error] [pid 49775:tid 49785] [client 20.63.100.211:11488] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ahJmgovZb8G6T8WpI1g1twAAAAg"]
[Sun May 24 10:46:26.499611 2026] [:error] [pid 2639:tid 2644] [client 20.63.100.211:11437] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/albin.php"] [unique_id "ahJmgkzQncQTd0Z0Oe_urgAAAQM"]
[Sun May 24 10:46:26.959966 2026] [:error] [pid 49744:tid 49755] [client 20.63.100.211:11502] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wefile.php"] [unique_id "ahJmgjsE5kPdFpUbbHF5yAAAAMk"]
[Sun May 24 10:46:27.393678 2026] [:error] [pid 49744:tid 49759] [client 20.63.100.211:65178] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wefile.php"] [unique_id "ahJmgzsE5kPdFpUbbHF5yQAAAM0"]
[Sun May 24 10:46:27.838186 2026] [:error] [pid 49744:tid 49760] [client 20.63.100.211:64526] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wefile.php"] [unique_id "ahJmgzsE5kPdFpUbbHF5zAAAAM4"]
[Sun May 24 10:46:28.295918 2026] [:error] [pid 2639:tid 2660] [client 20.63.100.211:11515] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wefile.php"] [unique_id "ahJmhEzQncQTd0Z0Oe_uswAAARM"]
[Sun May 24 10:46:28.759308 2026] [:error] [pid 49775:tid 49779] [client 20.63.100.211:11511] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "ahJmhIvZb8G6T8WpI1g1uwAAAAI"]
[Sun May 24 10:46:29.202313 2026] [:error] [pid 49775:tid 49783] [client 20.63.100.211:11414] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "ahJmhYvZb8G6T8WpI1g1vQAAAAY"]
[Sun May 24 10:46:29.640108 2026] [:error] [pid 49775:tid 49800] [client 20.63.100.211:11452] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "ahJmhYvZb8G6T8WpI1g1wgAAABc"]
[Sun May 24 10:46:30.073656 2026] [:error] [pid 49689:tid 49718] [client 20.63.100.211:64522] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file30.php"] [unique_id "ahJmhgaxiY3NxLUD97UqIQAAAIA"]
[Sun May 24 10:46:30.509740 2026] [:error] [pid 49688:tid 49708] [client 20.63.100.211:64572] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "ahJmhmYoQ9V6a_4pBshucwAAAFE"]
[Sun May 24 10:46:30.973068 2026] [:error] [pid 49775:tid 49798] [client 20.63.100.211:65161] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "ahJmhovZb8G6T8WpI1g1xAAAABU"]
[Sun May 24 10:46:31.404041 2026] [:error] [pid 2639:tid 2644] [client 20.63.100.211:65214] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "ahJmh0zQncQTd0Z0Oe_uvQAAAQM"]
[Sun May 24 10:46:31.838497 2026] [:error] [pid 2639:tid 2647] [client 20.63.100.211:63834] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/file4.php"] [unique_id "ahJmh0zQncQTd0Z0Oe_uwAAAAQY"]
[Sun May 24 10:46:32.372104 2026] [:error] [pid 49775:tid 49797] [client 20.63.100.211:65182] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dropdown.php"] [unique_id "ahJmiIvZb8G6T8WpI1g1yQAAABQ"]
[Sun May 24 10:46:32.833548 2026] [:error] [pid 49688:tid 49700] [client 20.63.100.211:65105] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dropdown.php"] [unique_id "ahJmiGYoQ9V6a_4pBshudwAAAEk"]
[Sun May 24 10:46:33.333572 2026] [:error] [pid 49688:tid 49698] [client 20.63.100.211:65093] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dropdown.php"] [unique_id "ahJmiWYoQ9V6a_4pBshueAAAAEc"]
[Sun May 24 10:46:33.776221 2026] [:error] [pid 49688:tid 49697] [client 20.63.100.211:11506] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/dropdown.php"] [unique_id "ahJmiWYoQ9V6a_4pBshuegAAAEY"]
[Sun May 24 10:46:34.220523 2026] [:error] [pid 49688:tid 49691] [client 20.63.100.211:11509] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "ahJmimYoQ9V6a_4pBshufwAAAEA"]
[Sun May 24 10:46:34.655937 2026] [:error] [pid 2639:tid 2649] [client 20.63.100.211:64483] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "ahJmikzQncQTd0Z0Oe_uxQAAAQg"]
[Sun May 24 10:46:35.076836 2026] [:error] [pid 49688:tid 49707] [client 20.63.100.211:63875] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "ahJmi2YoQ9V6a_4pBshuhAAAAFA"]
[Sun May 24 10:46:35.533103 2026] [:error] [pid 49775:tid 49790] [client 20.63.100.211:11498] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/txets.php"] [unique_id "ahJmi4vZb8G6T8WpI1g1zgAAAA0"]
[Sun May 24 10:46:35.988400 2026] [:error] [pid 49688:tid 49695] [client 20.63.100.211:65188] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "ahJmi2YoQ9V6a_4pBshuhwAAAEQ"]
[Sun May 24 10:46:36.432480 2026] [:error] [pid 49689:tid 49741] [client 20.63.100.211:11405] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "ahJmjAaxiY3NxLUD97UqKwAAAJc"]
[Sun May 24 10:46:36.867311 2026] [:error] [pid 49689:tid 49729] [client 20.63.100.211:64510] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "ahJmjAaxiY3NxLUD97UqLgAAAIs"]
[Sun May 24 10:46:37.298855 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:65154] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-access.php"] [unique_id "ahJmjTsE5kPdFpUbbHF50QAAAMU"]
[Sun May 24 10:46:37.723884 2026] [:error] [pid 2639:tid 2658] [client 20.63.100.211:65137] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "ahJmjUzQncQTd0Z0Oe_uywAAARE"]
[Sun May 24 10:46:38.159231 2026] [:error] [pid 49744:tid 49748] [client 20.63.100.211:11503] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "ahJmjjsE5kPdFpUbbHF50wAAAMI"]
[Sun May 24 10:46:38.624482 2026] [:error] [pid 49688:tid 49703] [client 20.63.100.211:64525] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "ahJmjmYoQ9V6a_4pBshujQAAAEw"]
[Sun May 24 10:46:39.058048 2026] [:error] [pid 49689:tid 49719] [client 20.63.100.211:65090] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/aevly.php"] [unique_id "ahJmjwaxiY3NxLUD97UqNAAAAIE"]
[Sun May 24 10:46:39.507657 2026] [:error] [pid 49744:tid 49750] [client 20.63.100.211:11508] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "ahJmjzsE5kPdFpUbbHF51wAAAMQ"]
[Sun May 24 10:46:39.973530 2026] [:error] [pid 49688:tid 49711] [client 20.63.100.211:65116] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "ahJmj2YoQ9V6a_4pBshukgAAAFQ"]
[Sun May 24 10:46:40.407714 2026] [:error] [pid 49744:tid 49768] [client 20.63.100.211:65138] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "ahJmkDsE5kPdFpUbbHF52gAAANY"]
[Sun May 24 10:46:40.964773 2026] [:error] [pid 2639:tid 2646] [client 20.63.100.211:65197] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/vx.php"] [unique_id "ahJmkEzQncQTd0Z0Oe_u0gAAAQU"]
[Sun May 24 10:46:41.402308 2026] [:error] [pid 2639:tid 2650] [client 20.63.100.211:65191] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-wz.php"] [unique_id "ahJmkUzQncQTd0Z0Oe_u0wAAAQk"]
[Sun May 24 10:46:41.866562 2026] [:error] [pid 2639:tid 2654] [client 20.63.100.211:65198] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-wz.php"] [unique_id "ahJmkUzQncQTd0Z0Oe_u1AAAAQ0"]
[Sun May 24 10:46:42.386636 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:65129] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-wz.php"] [unique_id "ahJmkjsE5kPdFpUbbHF54AAAAMU"]
[Sun May 24 10:46:42.831955 2026] [:error] [pid 2639:tid 2651] [client 20.63.100.211:65142] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-wz.php"] [unique_id "ahJmkkzQncQTd0Z0Oe_u3AAAAQo"]
[Sun May 24 10:46:43.272310 2026] [:error] [pid 2639:tid 2656] [client 20.63.100.211:65209] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/crgio.php"] [unique_id "ahJmk0zQncQTd0Z0Oe_u3gAAAQ8"]
[Sun May 24 10:46:43.714707 2026] [:error] [pid 49744:tid 49763] [client 20.63.100.211:11473] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/crgio.php"] [unique_id "ahJmkzsE5kPdFpUbbHF54QAAANE"]
[Sun May 24 10:46:44.179746 2026] [:error] [pid 49775:tid 49788] [client 20.63.100.211:64513] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/crgio.php"] [unique_id "ahJmlIvZb8G6T8WpI1g12QAAAAs"]
[Sun May 24 10:46:44.645077 2026] [:error] [pid 2639:tid 2663] [client 20.63.100.211:11416] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/crgio.php"] [unique_id "ahJmlEzQncQTd0Z0Oe_u_gAAARY"]
[Sun May 24 10:46:45.081829 2026] [:error] [pid 2639:tid 2654] [client 20.63.100.211:63910] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ahJmlUzQncQTd0Z0Oe_vAwAAAQ0"]
[Sun May 24 10:46:45.547398 2026] [:error] [pid 2639:tid 2651] [client 20.63.100.211:63844] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ahJmlUzQncQTd0Z0Oe_vCAAAAQo"]
[Sun May 24 10:46:45.994105 2026] [:error] [pid 49689:tid 49739] [client 20.63.100.211:11412] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ahJmlQaxiY3NxLUD97UqOgAAAJU"]
[Sun May 24 10:46:46.558070 2026] [:error] [pid 49744:tid 49762] [client 20.63.100.211:64467] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/new.php"] [unique_id "ahJmljsE5kPdFpUbbHF58QAAANA"]
[Sun May 24 10:46:47.039063 2026] [:error] [pid 2639:tid 2656] [client 20.63.100.211:63879] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ahJml0zQncQTd0Z0Oe_vDAAAAQ8"]
[Sun May 24 10:46:47.565925 2026] [:error] [pid 2639:tid 2660] [client 20.63.100.211:65117] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ahJml0zQncQTd0Z0Oe_vDgAAARM"]
[Sun May 24 10:46:48.009939 2026] [:error] [pid 49744:tid 49763] [client 20.63.100.211:65099] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ahJmmDsE5kPdFpUbbHF58wAAANE"]
[Sun May 24 10:46:48.485017 2026] [:error] [pid 49689:tid 49722] [client 20.63.100.211:65201] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp.php"] [unique_id "ahJmmAaxiY3NxLUD97UqPwAAAIQ"]
[Sun May 24 10:46:48.927422 2026] [:error] [pid 2639:tid 2652] [client 20.63.100.211:65092] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "ahJmmEzQncQTd0Z0Oe_vFgAAAQs"]
[Sun May 24 10:46:49.413601 2026] [:error] [pid 2639:tid 2656] [client 20.63.100.211:11517] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "ahJmmUzQncQTd0Z0Oe_vFwAAAQ8"]
[Sun May 24 10:46:49.861695 2026] [:error] [pid 49744:tid 49770] [client 20.63.100.211:63860] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "ahJmmTsE5kPdFpUbbHF5-QAAANg"]
[Sun May 24 10:46:50.339896 2026] [:error] [pid 49744:tid 49766] [client 20.63.100.211:11429] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ccou.php"] [unique_id "ahJmmjsE5kPdFpUbbHF5_wAAANQ"]
[Sun May 24 10:46:50.793252 2026] [:error] [pid 49744:tid 49761] [client 20.63.100.211:65211] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "ahJmmjsE5kPdFpUbbHF6AgAAAM8"]
[Sun May 24 10:46:51.250344 2026] [:error] [pid 49744:tid 49748] [client 20.63.100.211:64506] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "ahJmmzsE5kPdFpUbbHF6BAAAAMI"]
[Sun May 24 10:46:51.686281 2026] [:error] [pid 49744:tid 49750] [client 20.63.100.211:65208] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "ahJmmzsE5kPdFpUbbHF6CQAAAMQ"]
[Sun May 24 10:46:52.106537 2026] [:error] [pid 49744:tid 49756] [client 20.63.100.211:65124] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/db.php"] [unique_id "ahJmnDsE5kPdFpUbbHF6DAAAAMo"]
[Sun May 24 10:46:52.553020 2026] [:error] [pid 49775:tid 49798] [client 20.63.100.211:64518] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ahJmnIvZb8G6T8WpI1g12wAAABU"]
[Sun May 24 10:46:53.027194 2026] [:error] [pid 49775:tid 49784] [client 20.63.100.211:11392] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ahJmnYvZb8G6T8WpI1g13QAAAAc"]
[Sun May 24 10:46:53.460783 2026] [:error] [pid 49744:tid 49752] [client 20.63.100.211:64452] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ahJmnTsE5kPdFpUbbHF6DgAAAMY"]
[Sun May 24 10:46:53.887743 2026] [:error] [pid 49744:tid 49754] [client 20.63.100.211:64534] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib.php"] [unique_id "ahJmnTsE5kPdFpUbbHF6EgAAAMg"]
[Sun May 24 10:46:54.374324 2026] [:error] [pid 49744:tid 49747] [client 20.63.100.211:63877] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "ahJmnjsE5kPdFpUbbHF6FAAAAME"]
[Sun May 24 10:46:54.815901 2026] [:error] [pid 49689:tid 49724] [client 20.63.100.211:11397] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "ahJmngaxiY3NxLUD97UqTQAAAIY"]
[Sun May 24 10:46:55.300878 2026] [:error] [pid 2639:tid 2651] [client 20.63.100.211:11400] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "ahJmn0zQncQTd0Z0Oe_vHAAAAQo"]
[Sun May 24 10:46:55.769111 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:65113] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yellow.php"] [unique_id "ahJmn0zQncQTd0Z0Oe_vHQAAAQI"]
[Sun May 24 10:46:56.440932 2026] [:error] [pid 2639:tid 2652] [client 20.63.100.211:64517] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mifta.php"] [unique_id "ahJmoEzQncQTd0Z0Oe_vIgAAAQs"]
[Sun May 24 10:46:56.900896 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:65094] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mifta.php"] [unique_id "ahJmoDsE5kPdFpUbbHF6GQAAAMU"]
[Sun May 24 10:46:57.465728 2026] [:error] [pid 49775:tid 49796] [client 20.63.100.211:64470] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mifta.php"] [unique_id "ahJmoYvZb8G6T8WpI1g13wAAABM"]
[Sun May 24 10:46:57.998032 2026] [:error] [pid 2639:tid 2664] [client 20.63.100.211:65203] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mifta.php"] [unique_id "ahJmoUzQncQTd0Z0Oe_vJQAAARc"]
[Sun May 24 10:46:58.625843 2026] [:error] [pid 2639:tid 2663] [client 20.63.100.211:64560] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJmokzQncQTd0Z0Oe_vKQAAARY"]
[Sun May 24 10:46:59.084032 2026] [:error] [pid 49688:tid 49714] [client 20.63.100.211:63897] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJmo2YoQ9V6a_4pBshunAAAAFc"]
[Sun May 24 10:46:59.689446 2026] [:error] [pid 49689:tid 49725] [client 20.63.100.211:11407] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJmowaxiY3NxLUD97UqVgAAAIc"]
[Sun May 24 10:47:00.186267 2026] [:error] [pid 49689:tid 49723] [client 20.63.100.211:65136] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJmpAaxiY3NxLUD97UqVwAAAIU"]
[Sun May 24 10:47:00.688521 2026] [:error] [pid 49689:tid 49738] [client 20.63.100.211:65176] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fun.php"] [unique_id "ahJmpAaxiY3NxLUD97UqWAAAAJQ"]
[Sun May 24 10:47:01.152106 2026] [:error] [pid 2639:tid 2661] [client 20.63.100.211:65115] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fun.php"] [unique_id "ahJmpUzQncQTd0Z0Oe_vLQAAARQ"]
[Sun May 24 10:47:01.661162 2026] [:error] [pid 49775:tid 49788] [client 20.63.100.211:65212] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fun.php"] [unique_id "ahJmpYvZb8G6T8WpI1g15wAAAAs"]
[Sun May 24 10:47:02.101825 2026] [:error] [pid 2639:tid 2649] [client 20.63.100.211:64570] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fun.php"] [unique_id "ahJmpkzQncQTd0Z0Oe_vLwAAAQg"]
[Sun May 24 10:47:02.725579 2026] [:error] [pid 49689:tid 49722] [client 20.63.100.211:64538] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ahJmpgaxiY3NxLUD97UqWQAAAIQ"]
[Sun May 24 10:47:03.225930 2026] [:error] [pid 2639:tid 2665] [client 20.63.100.211:11448] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ahJmp0zQncQTd0Z0Oe_vNQAAARg"]
[Sun May 24 10:47:03.740940 2026] [:error] [pid 49688:tid 49697] [client 20.63.100.211:65110] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/drykl.php"] [unique_id "ahJmp2YoQ9V6a_4pBshupwAAAEY"]
[Sun May 24 10:47:04.438822 2026] [proxy_fcgi:error] [pid 49689:tid 49736] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:04.666223 2026] [proxy_fcgi:error] [pid 49689:tid 49730] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:04.931665 2026] [proxy_fcgi:error] [pid 49689:tid 49740] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:05.151430 2026] [proxy_fcgi:error] [pid 49689:tid 49737] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:05.379129 2026] [proxy_fcgi:error] [pid 49689:tid 49721] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:05.605135 2026] [proxy_fcgi:error] [pid 49689:tid 49733] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:05.993399 2026] [proxy_fcgi:error] [pid 49689:tid 49735] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:06.211324 2026] [proxy_fcgi:error] [pid 49689:tid 49728] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:06.432249 2026] [proxy_fcgi:error] [pid 49689:tid 49720] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:06.650722 2026] [proxy_fcgi:error] [pid 49689:tid 49726] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:06.981291 2026] [proxy_fcgi:error] [pid 49689:tid 49727] [client 20.63.100.211:65088] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:47:07.261404 2026] [:error] [pid 49689:tid 49739] [client 20.63.100.211:65088] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atkno.php"] [unique_id "ahJmqwaxiY3NxLUD97UqZwAAAJU"]
[Sun May 24 10:47:08.117718 2026] [:error] [pid 49775:tid 49787] [client 20.63.100.211:64463] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atkno.php"] [unique_id "ahJmrIvZb8G6T8WpI1g1-wAAAAo"]
[Sun May 24 10:47:09.212905 2026] [:error] [pid 49775:tid 49777] [client 20.63.100.211:65167] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atkno.php"] [unique_id "ahJmrYvZb8G6T8WpI1g2BQAAAAA"]
[Sun May 24 10:47:10.268125 2026] [:error] [pid 49775:tid 49800] [client 20.63.100.211:64475] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/atkno.php"] [unique_id "ahJmrovZb8G6T8WpI1g2CgAAABc"]
[Sun May 24 10:47:10.798365 2026] [:error] [pid 2639:tid 2651] [client 20.63.100.211:65143] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff.php"] [unique_id "ahJmrkzQncQTd0Z0Oe_vPwAAAQo"]
[Sun May 24 10:47:11.754847 2026] [:error] [pid 49744:tid 49761] [client 20.63.100.211:63893] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff.php"] [unique_id "ahJmrzsE5kPdFpUbbHF6HgAAAM8"]
[Sun May 24 10:47:12.447270 2026] [:error] [pid 2639:tid 2650] [client 20.63.100.211:63934] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff.php"] [unique_id "ahJmsEzQncQTd0Z0Oe_vRAAAAQk"]
[Sun May 24 10:47:13.868653 2026] [:error] [pid 2639:tid 2662] [client 20.63.100.211:65130] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff.php"] [unique_id "ahJmsUzQncQTd0Z0Oe_vRwAAARU"]
[Sun May 24 10:47:14.519514 2026] [:error] [pid 2639:tid 2653] [client 20.63.100.211:65100] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "ahJmskzQncQTd0Z0Oe_vTQAAAQw"]
[Sun May 24 10:47:15.021810 2026] [:error] [pid 49688:tid 49713] [client 20.63.100.211:65152] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "ahJms2YoQ9V6a_4pBshuvQAAAFY"]
[Sun May 24 10:47:15.492759 2026] [:error] [pid 49688:tid 49695] [client 20.63.100.211:11456] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "ahJms2YoQ9V6a_4pBshuwAAAAEQ"]
[Sun May 24 10:47:16.489626 2026] [:error] [pid 49775:tid 49781] [client 20.63.100.211:63930] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/yas.php"] [unique_id "ahJmtIvZb8G6T8WpI1g2DwAAAAQ"]
[Sun May 24 10:47:17.034349 2026] [:error] [pid 49744:tid 49756] [client 20.63.100.211:64468] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/png.php"] [unique_id "ahJmtTsE5kPdFpUbbHF6JgAAAMo"]
[Sun May 24 10:47:17.533820 2026] [:error] [pid 49689:tid 49728] [client 20.63.100.211:65102] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/png.php"] [unique_id "ahJmtQaxiY3NxLUD97UqcwAAAIo"]
[Sun May 24 10:47:18.052566 2026] [:error] [pid 49744:tid 49750] [client 20.63.100.211:65098] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/png.php"] [unique_id "ahJmtjsE5kPdFpUbbHF6KQAAAMQ"]
[Sun May 24 10:47:18.632884 2026] [:error] [pid 49744:tid 49764] [client 20.63.100.211:63811] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/png.php"] [unique_id "ahJmtjsE5kPdFpUbbHF6MAAAANI"]
[Sun May 24 10:47:19.154899 2026] [:error] [pid 49744:tid 49768] [client 20.63.100.211:64569] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ahJmtzsE5kPdFpUbbHF6MgAAANY"]
[Sun May 24 10:47:19.632940 2026] [:error] [pid 49688:tid 49705] [client 20.63.100.211:63411] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ahJmt2YoQ9V6a_4pBshuxwAAAE4"]
[Sun May 24 10:47:20.311298 2026] [:error] [pid 49775:tid 49778] [client 20.63.100.211:65166] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ahJmuIvZb8G6T8WpI1g2FAAAAAE"]
[Sun May 24 10:47:21.034647 2026] [:error] [pid 2639:tid 2652] [client 20.63.100.211:64474] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wmore1.php"] [unique_id "ahJmuUzQncQTd0Z0Oe_vXAAAAQs"]
[Sun May 24 10:47:21.592757 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:65123] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "ahJmuTsE5kPdFpUbbHF6OQAAAMU"]
[Sun May 24 10:47:22.253148 2026] [:error] [pid 49688:tid 49705] [client 20.63.100.211:65133] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "ahJmumYoQ9V6a_4pBshuzwAAAE4"]
[Sun May 24 10:47:22.889530 2026] [:error] [pid 49744:tid 49762] [client 20.63.100.211:64557] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "ahJmujsE5kPdFpUbbHF6PwAAANA"]
[Sun May 24 10:47:23.354166 2026] [:error] [pid 49688:tid 49695] [client 20.63.100.211:65202] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ah25.php"] [unique_id "ahJmu2YoQ9V6a_4pBshu1AAAAEQ"]
[Sun May 24 10:47:23.980925 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:63843] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "ahJmu0zQncQTd0Z0Oe_vZgAAAQI"]
[Sun May 24 10:47:24.488331 2026] [:error] [pid 2639:tid 2659] [client 20.63.100.211:11501] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "ahJmvEzQncQTd0Z0Oe_vgwAAARI"]
[Sun May 24 10:47:25.003512 2026] [:error] [pid 2639:tid 2665] [client 20.63.100.211:11476] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "ahJmvUzQncQTd0Z0Oe_vpAAAARg"]
[Sun May 24 10:47:25.571890 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:63845] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/forbidals.php"] [unique_id "ahJmvUzQncQTd0Z0Oe_vxwAAAQI"]
[Sun May 24 10:47:26.032032 2026] [:error] [pid 49744:tid 49767] [client 20.63.100.211:63840] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ahJmvjsE5kPdFpUbbHF6SQAAANU"]
[Sun May 24 10:47:26.574203 2026] [:error] [pid 49775:tid 49778] [client 20.63.100.211:11421] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ahJmvovZb8G6T8WpI1g2IAAAAAE"]
[Sun May 24 10:47:27.017331 2026] [:error] [pid 49689:tid 49722] [client 20.63.100.211:65200] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ahJmvwaxiY3NxLUD97UqiQAAAIQ"]
[Sun May 24 10:47:27.483157 2026] [:error] [pid 49688:tid 49710] [client 20.63.100.211:11441] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lv.php"] [unique_id "ahJmv2YoQ9V6a_4pBshu2AAAAFM"]
[Sun May 24 10:47:28.010028 2026] [:error] [pid 49775:tid 49786] [client 20.63.100.211:63865] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJmwIvZb8G6T8WpI1g2QAAAAAk"]
[Sun May 24 10:47:28.484811 2026] [:error] [pid 49744:tid 49752] [client 20.63.100.211:64532] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJmwDsE5kPdFpUbbHF6SwAAAMY"]
[Sun May 24 10:47:29.110723 2026] [:error] [pid 49775:tid 49782] [client 20.63.100.211:63819] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJmwYvZb8G6T8WpI1g2SAAAAAU"]
[Sun May 24 10:47:29.584553 2026] [:error] [pid 49744:tid 49749] [client 20.63.100.211:65139] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJmwTsE5kPdFpUbbHF6TQAAAMM"]
[Sun May 24 10:47:30.101228 2026] [:error] [pid 49775:tid 49800] [client 20.63.100.211:63895] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ahJmwovZb8G6T8WpI1g2TAAAABc"]
[Sun May 24 10:47:30.568216 2026] [:error] [pid 49688:tid 49706] [client 20.63.100.211:65180] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ahJmwmYoQ9V6a_4pBshu2gAAAE8"]
[Sun May 24 10:47:31.053900 2026] [:error] [pid 2639:tid 2663] [client 20.63.100.211:11463] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ahJmw0zQncQTd0Z0Oe_v_gAAARY"]
[Sun May 24 10:47:31.686346 2026] [:error] [pid 49689:tid 49720] [client 20.63.100.211:11409] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/xda.php"] [unique_id "ahJmwwaxiY3NxLUD97UqjgAAAII"]
[Sun May 24 10:47:32.308515 2026] [:error] [pid 49688:tid 49693] [client 20.63.100.211:65199] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "ahJmxGYoQ9V6a_4pBshu3gAAAEI"]
[Sun May 24 10:47:32.832075 2026] [:error] [pid 49775:tid 49798] [client 20.63.100.211:64539] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "ahJmxIvZb8G6T8WpI1g2UwAAABU"]
[Sun May 24 10:47:33.454568 2026] [:error] [pid 49688:tid 49697] [client 20.63.100.211:65122] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "ahJmxWYoQ9V6a_4pBshu4QAAAEY"]
[Sun May 24 10:47:33.894122 2026] [:error] [pid 49744:tid 49754] [client 20.63.100.211:65158] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/samll.php"] [unique_id "ahJmxTsE5kPdFpUbbHF6XQAAAMg"]
[Sun May 24 10:47:34.489198 2026] [:error] [pid 49744:tid 49749] [client 20.63.100.211:11433] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "ahJmxjsE5kPdFpUbbHF6YAAAAMM"]
[Sun May 24 10:47:35.025028 2026] [:error] [pid 2639:tid 2660] [client 20.63.100.211:64509] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "ahJmx0zQncQTd0Z0Oe_wHgAAARM"]
[Sun May 24 10:47:35.804576 2026] [:error] [pid 2639:tid 2659] [client 20.63.100.211:11512] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "ahJmx0zQncQTd0Z0Oe_wIgAAARI"]
[Sun May 24 10:47:36.574916 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:65206] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-at.php"] [unique_id "ahJmyEzQncQTd0Z0Oe_wKwAAAQI"]
[Sun May 24 10:47:37.889158 2026] [:error] [pid 49775:tid 49780] [client 20.63.100.211:65097] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJmyYvZb8G6T8WpI1g2VwAAAAM"]
[Sun May 24 10:47:38.951796 2026] [:error] [pid 49744:tid 49765] [client 20.63.100.211:11483] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJmyjsE5kPdFpUbbHF6ZgAAANM"]
[Sun May 24 10:47:41.674418 2026] [:error] [pid 49775:tid 49800] [client 20.63.100.211:65207] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJmzYvZb8G6T8WpI1g2XwAAABc"]
[Sun May 24 10:47:43.120656 2026] [:error] [pid 49775:tid 49780] [client 20.63.100.211:64471] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJmz4vZb8G6T8WpI1g2aAAAAAM"]
[Sun May 24 10:47:44.207768 2026] [:error] [pid 49744:tid 49748] [client 20.63.100.211:64535] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ahJm0DsE5kPdFpUbbHF6eQAAAMI"]
[Sun May 24 10:47:45.149137 2026] [:error] [pid 49689:tid 49720] [client 20.63.100.211:65163] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ahJm0QaxiY3NxLUD97UqpQAAAII"]
[Sun May 24 10:47:45.972555 2026] [:error] [pid 49775:tid 49788] [client 20.63.100.211:65121] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ahJm0YvZb8G6T8WpI1g2cAAAAAs"]
[Sun May 24 10:47:46.828044 2026] [:error] [pid 49689:tid 49733] [client 20.63.100.211:64574] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-the.php"] [unique_id "ahJm0gaxiY3NxLUD97UqqgAAAI8"]
[Sun May 24 10:47:47.514442 2026] [:error] [pid 2639:tid 2644] [client 20.63.100.211:65210] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ahJm00zQncQTd0Z0Oe_wUgAAAQM"]
[Sun May 24 10:47:49.019586 2026] [:error] [pid 2639:tid 2654] [client 20.63.100.211:11496] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ahJm1UzQncQTd0Z0Oe_wXAAAAQ0"]
[Sun May 24 10:47:49.690535 2026] [:error] [pid 2639:tid 2656] [client 20.63.100.211:11415] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ahJm1UzQncQTd0Z0Oe_wXwAAAQ8"]
[Sun May 24 10:47:50.301308 2026] [:error] [pid 49775:tid 49800] [client 20.63.100.211:11519] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ff1.php"] [unique_id "ahJm1ovZb8G6T8WpI1g2dQAAABc"]
[Sun May 24 10:47:50.812849 2026] [:error] [pid 49775:tid 49793] [client 20.63.100.211:11514] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "ahJm1ovZb8G6T8WpI1g2dgAAABA"]
[Sun May 24 10:47:51.418930 2026] [:error] [pid 49744:tid 49767] [client 20.63.100.211:11475] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "ahJm1zsE5kPdFpUbbHF6hwAAANU"]
[Sun May 24 10:47:52.086466 2026] [:error] [pid 49689:tid 49734] [client 20.63.100.211:63378] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "ahJm2AaxiY3NxLUD97UqsQAAAJA"]
[Sun May 24 10:47:53.216900 2026] [:error] [pid 49688:tid 49715] [client 20.63.100.211:64453] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cilus.php"] [unique_id "ahJm2WYoQ9V6a_4pBshu8wAAAFg"]
[Sun May 24 10:47:53.716742 2026] [:error] [pid 49688:tid 49707] [client 20.63.100.211:65126] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ahJm2WYoQ9V6a_4pBshu9gAAAFA"]
[Sun May 24 10:47:54.437622 2026] [:error] [pid 2639:tid 2641] [client 20.63.100.211:65118] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ahJm2kzQncQTd0Z0Oe_wbQAAAQA"]
[Sun May 24 10:47:54.958647 2026] [:error] [pid 49688:tid 49712] [client 20.63.100.211:11439] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ahJm2mYoQ9V6a_4pBshu_AAAAFU"]
[Sun May 24 10:47:55.591858 2026] [:error] [pid 49689:tid 49739] [client 20.63.100.211:63929] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/Okxob.php"] [unique_id "ahJm2waxiY3NxLUD97UqtAAAAJU"]
[Sun May 24 10:47:56.233065 2026] [:error] [pid 49775:tid 49789] [client 20.63.100.211:65215] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "ahJm3IvZb8G6T8WpI1g2fgAAAAw"]
[Sun May 24 10:47:56.829713 2026] [:error] [pid 49688:tid 49704] [client 20.63.100.211:65173] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "ahJm3GYoQ9V6a_4pBshvAAAAAE0"]
[Sun May 24 10:47:57.428551 2026] [:error] [pid 2639:tid 2659] [client 20.63.100.211:64567] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "ahJm3UzQncQTd0Z0Oe_wcgAAARI"]
[Sun May 24 10:47:58.248109 2026] [:error] [pid 49775:tid 49785] [client 20.63.100.211:65164] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/pass4.php"] [unique_id "ahJm3ovZb8G6T8WpI1g2hwAAAAg"]
[Sun May 24 10:48:00.022879 2026] [:error] [pid 2639:tid 2655] [client 20.63.100.211:11482] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-su.php"] [unique_id "ahJm4EzQncQTd0Z0Oe_wfQAAAQ4"]
[Sun May 24 10:48:00.625180 2026] [:error] [pid 2639:tid 2659] [client 20.63.100.211:11417] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-su.php"] [unique_id "ahJm4EzQncQTd0Z0Oe_wfgAAARI"]
[Sun May 24 10:48:01.069469 2026] [:error] [pid 2639:tid 2664] [client 20.63.100.211:64477] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-su.php"] [unique_id "ahJm4UzQncQTd0Z0Oe_wggAAARc"]
[Sun May 24 10:48:01.613226 2026] [:error] [pid 49688:tid 49703] [client 20.63.100.211:63408] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-su.php"] [unique_id "ahJm4WYoQ9V6a_4pBshvBAAAAEw"]
[Sun May 24 10:48:02.276470 2026] [:error] [pid 49744:tid 49753] [client 20.63.100.211:11425] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/like.php"] [unique_id "ahJm4jsE5kPdFpUbbHF6pAAAAMc"]
[Sun May 24 10:48:02.858437 2026] [:error] [pid 49775:tid 49779] [client 20.63.100.211:63916] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/like.php"] [unique_id "ahJm4ovZb8G6T8WpI1g2lAAAAAI"]
[Sun May 24 10:48:03.429454 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:65194] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/like.php"] [unique_id "ahJm4zsE5kPdFpUbbHF6pwAAAMU"]
[Sun May 24 10:48:03.952341 2026] [:error] [pid 2639:tid 2645] [client 20.63.100.211:65213] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/like.php"] [unique_id "ahJm40zQncQTd0Z0Oe_wigAAAQQ"]
[Sun May 24 10:48:04.464932 2026] [:error] [pid 49688:tid 49704] [client 20.63.100.211:62739] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mass.php"] [unique_id "ahJm5GYoQ9V6a_4pBshvCAAAAE0"]
[Sun May 24 10:48:05.011538 2026] [:error] [pid 49744:tid 49763] [client 20.63.100.211:64541] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mass.php"] [unique_id "ahJm5TsE5kPdFpUbbHF6rQAAANE"]
[Sun May 24 10:48:05.526157 2026] [:error] [pid 49689:tid 49734] [client 20.63.100.211:63914] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mass.php"] [unique_id "ahJm5QaxiY3NxLUD97UqvQAAAJA"]
[Sun May 24 10:48:05.989181 2026] [:error] [pid 49688:tid 49699] [client 20.63.100.211:11393] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/mass.php"] [unique_id "ahJm5WYoQ9V6a_4pBshvCQAAAEg"]
[Sun May 24 10:48:06.442086 2026] [proxy_fcgi:error] [pid 49688:tid 49714] [client 20.63.100.211:11411] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:48:06.681974 2026] [proxy_fcgi:error] [pid 49688:tid 49715] [client 20.63.100.211:11411] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:48:06.898653 2026] [proxy_fcgi:error] [pid 49688:tid 49700] [client 20.63.100.211:11411] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:48:07.110727 2026] [proxy_fcgi:error] [pid 49688:tid 49692] [client 20.63.100.211:11411] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:48:07.327934 2026] [proxy_fcgi:error] [pid 49688:tid 49697] [client 20.63.100.211:11411] AH01071: Got error 'Primary script unknown'
[Sun May 24 10:48:07.541727 2026] [proxy_fcgi:error] [pid 49688:tid 49693] [client 20.63.100.211:11411] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:02.473975 2026] [proxy_fcgi:error] [pid 15835:tid 15851] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:02.642591 2026] [proxy_fcgi:error] [pid 15835:tid 15843] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:02.763446 2026] [proxy_fcgi:error] [pid 15835:tid 15842] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:02.889835 2026] [proxy_fcgi:error] [pid 15835:tid 15856] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.025130 2026] [proxy_fcgi:error] [pid 15835:tid 15837] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.146628 2026] [proxy_fcgi:error] [pid 15835:tid 15858] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.265473 2026] [proxy_fcgi:error] [pid 15835:tid 15845] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.424665 2026] [proxy_fcgi:error] [pid 15835:tid 15857] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.543663 2026] [proxy_fcgi:error] [pid 15835:tid 15860] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.663168 2026] [proxy_fcgi:error] [pid 15835:tid 15849] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.782577 2026] [proxy_fcgi:error] [pid 15835:tid 15859] [client 20.210.93.212:12941] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:06:03.899073 2026] [:error] [pid 15835:tid 15847] [client 20.210.93.212:12941] [client 20.210.93.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ahL3u2WbknYlUM9P0qPG_AAAAAo"]
[Sun May 24 21:06:04.463702 2026] [:error] [pid 15835:tid 15839] [client 20.210.93.212:5700] [client 20.210.93.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ahL3vGWbknYlUM9P0qPG_QAAAAI"]
[Sun May 24 21:06:05.047947 2026] [:error] [pid 11280:tid 11291] [client 20.210.93.212:4478] [client 20.210.93.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ahL3vYRn5s7laoSxy1QOWAAAAEY"]
[Sun May 24 21:06:05.652442 2026] [:error] [pid 11280:tid 11299] [client 20.210.93.212:4705] [client 20.210.93.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/as.php"] [unique_id "ahL3vYRn5s7laoSxy1QOWQAAAE4"]
[Sun May 24 22:35:05.999822 2026] [:error] [pid 11368:tid 11387] [client 34.181.252.225:55516] [client 34.181.252.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.181.252.225, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ahMMmYfq_sTmmtTKm1VBzgAAARE"]
[Sun May 24 22:35:06.009939 2026] [proxy_fcgi:error] [pid 11368:tid 11387] [client 34.181.252.225:55516] AH01071: Got error 'Primary script unknown'
[Sun May 24 22:35:09.522165 2026] [:error] [pid 11368:tid 11388] [client 34.181.252.225:55516] [client 34.181.252.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahMMnYfq_sTmmtTKm1VB4QAAARI"]
[Sun May 24 22:35:10.027139 2026] [:error] [pid 11282:tid 11350] [client 34.181.252.225:58059] [client 34.181.252.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahMMnu0bPyN3C7HZ1R-wzgAAAMo"]
[Sun May 24 22:35:10.550107 2026] [:error] [pid 11368:tid 11376] [client 34.181.252.225:51908] [client 34.181.252.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahMMnofq_sTmmtTKm1VB5AAAAQY"]
[Sun May 24 22:35:11.200832 2026] [:error] [pid 11282:tid 11342] [client 34.181.252.225:63394] [client 34.181.252.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahMMn-0bPyN3C7HZ1R-w0gAAAMI"]
[Sun May 24 22:56:17.931849 2026] [:error] [pid 11282:tid 11357] [client 41.95.138.1:15336] [client 41.95.138.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.95.138.1, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ahMRke0bPyN3C7HZ1R-2RAAAANE"]
[Sun May 24 22:56:17.942166 2026] [proxy_fcgi:error] [pid 11282:tid 11357] [client 41.95.138.1:15336] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:09:27.277950 2026] [:error] [pid 9304:tid 9378] [client 104.28.214.122:20200] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "stratapluswa.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFJ-VEV2qpMC_1UzSWNQAAAJE"]
[Mon May 25 11:44:58.221006 2026] [autoindex:error] [pid 62426:tid 62446] [client 20.203.168.197:4946] AH01276: Cannot serve directory /home/stratapluswacom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 25 11:44:58.468080 2026] [proxy_fcgi:error] [pid 62426:tid 62447] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:44:58.705347 2026] [proxy_fcgi:error] [pid 62426:tid 62443] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:44:58.944779 2026] [proxy_fcgi:error] [pid 62426:tid 62431] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:44:59.182967 2026] [proxy_fcgi:error] [pid 62426:tid 62450] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:44:59.421422 2026] [proxy_fcgi:error] [pid 62426:tid 62436] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:44:59.666799 2026] [proxy_fcgi:error] [pid 62426:tid 62445] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:44:59.906386 2026] [proxy_fcgi:error] [pid 62426:tid 62454] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:45:00.144395 2026] [proxy_fcgi:error] [pid 62426:tid 62432] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:45:00.383983 2026] [proxy_fcgi:error] [pid 62426:tid 62444] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:45:00.861051 2026] [proxy_fcgi:error] [pid 62426:tid 62453] [client 20.203.168.197:4946] AH01071: Got error 'Primary script unknown'
[Mon May 25 11:45:01.095975 2026] [:error] [pid 62426:tid 62439] [client 20.203.168.197:4946] [client 20.203.168.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahPFvUj3D3Mo8ANpTRCcUwAAAAk"]
[Mon May 25 11:45:02.066856 2026] [:error] [pid 62515:tid 62525] [client 20.203.168.197:4401] [client 20.203.168.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahPFvhig0_XsOwmnrv-cBwAAAMg"]
[Mon May 25 11:45:03.051461 2026] [:error] [pid 62427:tid 62458] [client 20.203.168.197:4376] [client 20.203.168.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahPFv_MUa83fc4GDyBwmKwAAAUE"]
[Mon May 25 11:45:03.999436 2026] [:error] [pid 62722:tid 62746] [client 20.203.168.197:4250] [client 20.203.168.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/class-t.api.php"] [unique_id "ahPFv6M6ssnLWYf6CVCv1QAAAFY"]
[Mon May 25 23:40:03.255725 2026] [:error] [pid 3698:tid 3706] [client 129.122.56.101:60821] [client 129.122.56.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.122.56.101, incrementing ddos counter"] [hostname "stratapluswa.com.au"] [uri "/xmlrpc.php"] [unique_id "ahRtUwtZBEwA4fyFLKMO2gAAAQY"]
[Mon May 25 23:40:03.266283 2026] [proxy_fcgi:error] [pid 3698:tid 3706] [client 129.122.56.101:60821] AH01071: Got error 'Primary script unknown'
[Tue May 26 03:20:06.144486 2026] [:error] [pid 18017:tid 18041] [client 134.199.156.173:33144] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ahSg5tCxfg25g7uwYeIxJQAAAA4"]
[Tue May 26 03:20:06.328750 2026] [:error] [pid 18021:tid 18055] [client 134.199.156.173:55886] [client 134.199.156.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ahSg5tlB5OFYP0lzxvS0AwAAAEE"]
[Tue May 26 03:20:06.594546 2026] [:error] [pid 18017:tid 18051] [client 134.199.156.173:33158] [client 134.199.156.173] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||stratapluswa.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stratapluswa.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahSg5tCxfg25g7uwYeIxLQAAABg"]
[Tue May 26 03:20:06.653490 2026] [:error] [pid 18119:tid 18138] [client 134.199.156.173:33230] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahSg5q2OWf1JhYMmNHZJQAAAANA"]
[Tue May 26 03:20:06.668645 2026] [:error] [pid 18017:tid 18041] [client 134.199.156.173:33158] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahSg5tCxfg25g7uwYeIxNAAAAA4"]
[Tue May 26 03:20:06.683520 2026] [:error] [pid 18017:tid 18044] [client 134.199.156.173:33176] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahSg5tCxfg25g7uwYeIxNQAAABE"]
[Tue May 26 03:20:06.691404 2026] [:error] [pid 18017:tid 18036] [client 134.199.156.173:33166] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxNwAAAAk"]
[Tue May 26 03:20:06.690846 2026] [:error] [pid 18017:tid 18028] [client 134.199.156.173:33192] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxNgAAAAE"]
[Tue May 26 03:20:06.702990 2026] [:error] [pid 18021:tid 18069] [client 134.199.156.173:33208] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0BwAAAE8"]
[Tue May 26 03:20:06.706411 2026] [:error] [pid 18021:tid 18077] [client 134.199.156.173:33216] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0CAAAAFc"]
[Tue May 26 03:20:06.744872 2026] [:error] [pid 18021:tid 18070] [client 134.199.156.173:33254] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0CQAAAFA"]
[Tue May 26 03:20:06.745914 2026] [:error] [pid 18017:tid 18037] [client 134.199.156.173:33238] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxOgAAAAo"]
[Tue May 26 03:20:06.746906 2026] [:error] [pid 18021:tid 18075] [client 134.199.156.173:33268] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0CgAAAFU"]
[Tue May 26 03:20:06.752785 2026] [:error] [pid 18017:tid 18035] [client 134.199.156.173:33272] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxOwAAAAg"]
[Tue May 26 03:20:06.753596 2026] [:error] [pid 18017:tid 18033] [client 134.199.156.173:33282] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxPAAAAAY"]
[Tue May 26 03:20:06.767199 2026] [:error] [pid 18017:tid 18038] [client 134.199.156.173:33298] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxPQAAAAs"]
[Tue May 26 03:20:06.785350 2026] [:error] [pid 18021:tid 18058] [client 134.199.156.173:33322] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0DgAAAEQ"]
[Tue May 26 03:20:06.792959 2026] [:error] [pid 18017:tid 18040] [client 134.199.156.173:33332] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxQAAAAA0"]
[Tue May 26 03:20:06.802927 2026] [:error] [pid 18021:tid 18057] [client 134.199.156.173:33408] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0EgAAAEM"]
[Tue May 26 03:20:06.805546 2026] [:error] [pid 18021:tid 18076] [client 134.199.156.173:33422] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0EwAAAFY"]
[Tue May 26 03:20:06.807719 2026] [:error] [pid 18021:tid 18056] [client 134.199.156.173:33458] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0FAAAAEI"]
[Tue May 26 03:20:06.808599 2026] [:error] [pid 18021:tid 18064] [client 134.199.156.173:33406] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0FQAAAEo"]
[Tue May 26 03:20:06.809488 2026] [:error] [pid 18021:tid 18054] [client 134.199.156.173:33448] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0FgAAAEA"]
[Tue May 26 03:20:06.814427 2026] [:error] [pid 18017:tid 18051] [client 134.199.156.173:33472] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxQQAAABg"]
[Tue May 26 03:20:06.818718 2026] [:error] [pid 18021:tid 18073] [client 134.199.156.173:33484] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0GQAAAFM"]
[Tue May 26 03:20:06.819752 2026] [:error] [pid 18017:tid 18045] [client 134.199.156.173:33438] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxQgAAABI"]
[Tue May 26 03:20:06.841736 2026] [:error] [pid 18021:tid 18072] [client 134.199.156.173:33560] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0HQAAAFI"]
[Tue May 26 03:20:06.850259 2026] [:error] [pid 18017:tid 18046] [client 134.199.156.173:33578] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxRQAAABM"]
[Tue May 26 03:20:06.858491 2026] [:error] [pid 18021:tid 18075] [client 134.199.156.173:33614] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0IgAAAFU"]
[Tue May 26 03:20:06.861508 2026] [:error] [pid 18017:tid 18027] [client 134.199.156.173:33624] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxRgAAAAA"]
[Tue May 26 03:20:06.863893 2026] [:error] [pid 18021:tid 18065] [client 134.199.156.173:33644] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0IwAAAEs"]
[Tue May 26 03:20:06.864607 2026] [:error] [pid 18017:tid 18048] [client 134.199.156.173:33636] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxRwAAABU"]
[Tue May 26 03:20:06.865588 2026] [:error] [pid 18119:tid 18124] [client 134.199.156.173:33646] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahSg5q2OWf1JhYMmNHZJQQAAAMI"]
[Tue May 26 03:20:06.868968 2026] [:error] [pid 18021:tid 18068] [client 134.199.156.173:33660] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0JAAAAE4"]
[Tue May 26 03:20:06.872647 2026] [:error] [pid 18021:tid 18058] [client 134.199.156.173:33668] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0JgAAAEQ"]
[Tue May 26 03:20:06.890957 2026] [:error] [pid 18021:tid 18071] [client 134.199.156.173:33716] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0KAAAAFE"]
[Tue May 26 03:20:06.897387 2026] [:error] [pid 18119:tid 18144] [client 134.199.156.173:33756] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahSg5q2OWf1JhYMmNHZJQwAAANY"]
[Tue May 26 03:20:06.903162 2026] [:error] [pid 18119:tid 18142] [client 134.199.156.173:33782] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSg5q2OWf1JhYMmNHZJRgAAANQ"]
[Tue May 26 03:20:06.906881 2026] [:error] [pid 18119:tid 18136] [client 134.199.156.173:33798] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahSg5q2OWf1JhYMmNHZJRwAAAM4"]
[Tue May 26 03:20:06.907957 2026] [:error] [pid 18021:tid 18062] [client 134.199.156.173:33804] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0KQAAAEg"]
[Tue May 26 03:20:06.908622 2026] [:error] [pid 18021:tid 18057] [client 134.199.156.173:33806] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0KgAAAEM"]
[Tue May 26 03:20:06.933850 2026] [:error] [pid 18021:tid 18054] [client 134.199.156.173:33880] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0LQAAAEA"]
[Tue May 26 03:20:06.934289 2026] [:error] [pid 18021:tid 18064] [client 134.199.156.173:33866] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0LgAAAEo"]
[Tue May 26 03:20:06.936524 2026] [:error] [pid 18021:tid 18078] [client 134.199.156.173:33892] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0LwAAAFg"]
[Tue May 26 03:20:06.953389 2026] [:error] [pid 18021:tid 18073] [client 134.199.156.173:33912] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahSg5tlB5OFYP0lzxvS0MQAAAFM"]
[Tue May 26 03:20:06.976068 2026] [:error] [pid 18017:tid 18037] [client 134.199.156.173:33944] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxTgAAAAo"]
[Tue May 26 03:20:06.979080 2026] [:error] [pid 18017:tid 18035] [client 134.199.156.173:33956] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxTwAAAAg"]
[Tue May 26 03:20:06.983094 2026] [:error] [pid 18017:tid 18033] [client 134.199.156.173:33964] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxUAAAAAY"]
[Tue May 26 03:20:06.998546 2026] [:error] [pid 18017:tid 18034] [client 134.199.156.173:33990] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahSg5tCxfg25g7uwYeIxUgAAAAc"]
[Tue May 26 03:20:07.018233 2026] [:error] [pid 18017:tid 18039] [client 134.199.156.173:34048] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/server/php/"] [unique_id "ahSg59Cxfg25g7uwYeIxVwAAAAw"]
[Tue May 26 03:20:07.025256 2026] [:error] [pid 18021:tid 18072] [client 134.199.156.173:34060] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0NQAAAFI"]
[Tue May 26 03:20:07.026340 2026] [:error] [pid 18021:tid 18066] [client 134.199.156.173:34058] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0NAAAAEw"]
[Tue May 26 03:20:07.027923 2026] [:error] [pid 18021:tid 18074] [client 134.199.156.173:34064] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0NgAAAFQ"]
[Tue May 26 03:20:07.039971 2026] [:error] [pid 18017:tid 18043] [client 134.199.156.173:34094] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSg59Cxfg25g7uwYeIxWQAAABA"]
[Tue May 26 03:20:07.045577 2026] [:error] [pid 18021:tid 18070] [client 134.199.156.173:34120] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0OQAAAFA"]
[Tue May 26 03:20:07.048440 2026] [:error] [pid 18021:tid 18075] [client 134.199.156.173:34138] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0OgAAAFU"]
[Tue May 26 03:20:07.071042 2026] [:error] [pid 18017:tid 18041] [client 134.199.156.173:34192] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg59Cxfg25g7uwYeIxYQAAAA4"]
[Tue May 26 03:20:07.083593 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:34208] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_kgAAAJE"]
[Tue May 26 03:20:07.084904 2026] [:error] [pid 18017:tid 18036] [client 134.199.156.173:34214] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSg59Cxfg25g7uwYeIxYgAAAAk"]
[Tue May 26 03:20:07.089562 2026] [:error] [pid 18021:tid 18058] [client 134.199.156.173:34234] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0PQAAAEQ"]
[Tue May 26 03:20:07.092963 2026] [:error] [pid 18025:tid 18085] [client 134.199.156.173:34244] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_kwAAAIQ"]
[Tue May 26 03:20:07.114859 2026] [:error] [pid 18021:tid 18054] [client 134.199.156.173:34306] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0RAAAAEA"]
[Tue May 26 03:20:07.124982 2026] [:error] [pid 18025:tid 18096] [client 134.199.156.173:34348] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_lgAAAI8"]
[Tue May 26 03:20:07.126556 2026] [:error] [pid 18021:tid 18064] [client 134.199.156.173:34350] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0RQAAAEo"]
[Tue May 26 03:20:07.134888 2026] [:error] [pid 18025:tid 18105] [client 134.199.156.173:34366] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_lwAAAJg"]
[Tue May 26 03:20:07.169163 2026] [:error] [pid 18017:tid 18037] [client 134.199.156.173:34404] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSg59Cxfg25g7uwYeIxZgAAAAo"]
[Tue May 26 03:20:07.261843 2026] [:error] [pid 18021:tid 18070] [client 134.199.156.173:34506] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0TwAAAFA"]
[Tue May 26 03:20:07.270170 2026] [:error] [pid 18021:tid 18067] [client 134.199.156.173:34546] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0UgAAAE0"]
[Tue May 26 03:20:07.310971 2026] [:error] [pid 18021:tid 18078] [client 134.199.156.173:34628] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0VAAAAFg"]
[Tue May 26 03:20:07.311534 2026] [:error] [pid 18021:tid 18062] [client 134.199.156.173:34600] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0VQAAAEg"]
[Tue May 26 03:20:07.314287 2026] [:error] [pid 18021:tid 18054] [client 134.199.156.173:34616] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0WQAAAEA"]
[Tue May 26 03:20:07.315685 2026] [:error] [pid 18021:tid 18056] [client 134.199.156.173:34614] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0WwAAAEI"]
[Tue May 26 03:20:07.324468 2026] [:error] [pid 18021:tid 18073] [client 134.199.156.173:34698] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0XQAAAFM"]
[Tue May 26 03:20:07.333041 2026] [:error] [pid 18025:tid 18081] [client 134.199.156.173:34670] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_nAAAAIA"]
[Tue May 26 03:20:07.334383 2026] [:error] [pid 18025:tid 18092] [client 134.199.156.173:34682] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_nQAAAIs"]
[Tue May 26 03:20:07.337089 2026] [:error] [pid 18025:tid 18100] [client 134.199.156.173:34708] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_nwAAAJM"]
[Tue May 26 03:20:07.337780 2026] [:error] [pid 18025:tid 18091] [client 134.199.156.173:34710] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_oAAAAIo"]
[Tue May 26 03:20:07.338509 2026] [:error] [pid 18025:tid 18086] [client 134.199.156.173:34644] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_oQAAAIU"]
[Tue May 26 03:20:07.356259 2026] [:error] [pid 18021:tid 18055] [client 134.199.156.173:34718] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0XgAAAEE"]
[Tue May 26 03:20:07.356545 2026] [:error] [pid 18021:tid 18059] [client 134.199.156.173:34746] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0XwAAAEU"]
[Tue May 26 03:20:07.357854 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:34734] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_ogAAAJY"]
[Tue May 26 03:20:07.359475 2026] [:error] [pid 18025:tid 18102] [client 134.199.156.173:34772] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugin/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_owAAAJU"]
[Tue May 26 03:20:07.360698 2026] [:error] [pid 18025:tid 18097] [client 134.199.156.173:34786] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_pAAAAJA"]
[Tue May 26 03:20:07.370889 2026] [:error] [pid 18021:tid 18072] [client 134.199.156.173:34788] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0YQAAAFI"]
[Tue May 26 03:20:07.372383 2026] [:error] [pid 18017:tid 18040] [client 134.199.156.173:34804] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahSg59Cxfg25g7uwYeIxawAAAA0"]
[Tue May 26 03:20:07.379758 2026] [:error] [pid 18025:tid 18090] [client 134.199.156.173:34806] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_pgAAAIk"]
[Tue May 26 03:20:07.380567 2026] [:error] [pid 18025:tid 18083] [client 134.199.156.173:34820] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_pwAAAII"]
[Tue May 26 03:20:07.381778 2026] [:error] [pid 18025:tid 18093] [client 134.199.156.173:34824] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_qAAAAIw"]
[Tue May 26 03:20:07.383519 2026] [:error] [pid 18017:tid 18051] [client 134.199.156.173:34828] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahSg59Cxfg25g7uwYeIxbAAAABg"]
[Tue May 26 03:20:07.385808 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:34836] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_qQAAAJE"]
[Tue May 26 03:20:07.412891 2026] [:error] [pid 18021:tid 18074] [client 134.199.156.173:34864] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0YgAAAFQ"]
[Tue May 26 03:20:07.413532 2026] [:error] [pid 18025:tid 18085] [client 134.199.156.173:34844] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_qgAAAIQ"]
[Tue May 26 03:20:07.414170 2026] [:error] [pid 18021:tid 18066] [client 134.199.156.173:34840] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0YwAAAEw"]
[Tue May 26 03:20:07.414882 2026] [:error] [pid 18021:tid 18069] [client 134.199.156.173:34860] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/server/php/"] [unique_id "ahSg59lB5OFYP0lzxvS0ZAAAAE8"]
[Tue May 26 03:20:07.416899 2026] [:error] [pid 18025:tid 18087] [client 134.199.156.173:34866] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_qwAAAIY"]
[Tue May 26 03:20:07.418027 2026] [:error] [pid 18021:tid 18077] [client 134.199.156.173:34876] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0ZQAAAFc"]
[Tue May 26 03:20:07.424332 2026] [:error] [pid 18025:tid 18096] [client 134.199.156.173:34890] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_rAAAAI8"]
[Tue May 26 03:20:07.428192 2026] [:error] [pid 18021:tid 18070] [client 134.199.156.173:34904] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0ZgAAAFA"]
[Tue May 26 03:20:07.432220 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:34910] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_rQAAAJI"]
[Tue May 26 03:20:07.433971 2026] [:error] [pid 18025:tid 18087] [client 134.199.156.173:34916] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_rgAAAIY"]
[Tue May 26 03:20:07.455855 2026] [:error] [pid 18025:tid 18084] [client 134.199.156.173:34932] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSg56sNhr3UKn0_VzL_sAAAAIM"]
[Tue May 26 03:20:07.462420 2026] [:error] [pid 18025:tid 18092] [client 134.199.156.173:34968] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_sgAAAIs"]
[Tue May 26 03:20:07.463652 2026] [:error] [pid 18021:tid 18075] [client 134.199.156.173:34954] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0ZwAAAFU"]
[Tue May 26 03:20:07.503595 2026] [:error] [pid 18119:tid 18123] [client 134.199.156.173:35028] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJTAAAAME"]
[Tue May 26 03:20:07.506812 2026] [:error] [pid 18021:tid 18067] [client 134.199.156.173:35046] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0aQAAAE0"]
[Tue May 26 03:20:07.517077 2026] [:error] [pid 18021:tid 18062] [client 134.199.156.173:35062] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0bAAAAEg"]
[Tue May 26 03:20:07.524229 2026] [:error] [pid 18021:tid 18057] [client 134.199.156.173:35072] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0bQAAAEM"]
[Tue May 26 03:20:07.542131 2026] [:error] [pid 18119:tid 18143] [client 134.199.156.173:35128] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJUAAAANU"]
[Tue May 26 03:20:07.551018 2026] [:error] [pid 18021:tid 18076] [client 134.199.156.173:35158] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0cwAAAFY"]
[Tue May 26 03:20:07.551548 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:35172] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_twAAAJY"]
[Tue May 26 03:20:07.555915 2026] [:error] [pid 18025:tid 18102] [client 134.199.156.173:35144] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_uAAAAJU"]
[Tue May 26 03:20:07.564627 2026] [:error] [pid 18021:tid 18055] [client 134.199.156.173:35190] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0dwAAAEE"]
[Tue May 26 03:20:07.572543 2026] [:error] [pid 18025:tid 18097] [client 134.199.156.173:35240] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_uQAAAJA"]
[Tue May 26 03:20:07.580316 2026] [:error] [pid 18021:tid 18069] [client 134.199.156.173:35276] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0egAAAE8"]
[Tue May 26 03:20:07.582606 2026] [:error] [pid 18021:tid 18077] [client 134.199.156.173:35250] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0ewAAAFc"]
[Tue May 26 03:20:07.587278 2026] [:error] [pid 18025:tid 18094] [client 134.199.156.173:35262] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_ugAAAI0"]
[Tue May 26 03:20:07.589976 2026] [:error] [pid 18021:tid 18075] [client 134.199.156.173:35312] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0fQAAAFU"]
[Tue May 26 03:20:07.598691 2026] [:error] [pid 18021:tid 18068] [client 134.199.156.173:35332] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0fgAAAE4"]
[Tue May 26 03:20:07.609965 2026] [:error] [pid 18025:tid 18105] [client 134.199.156.173:35374] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_wAAAAJg"]
[Tue May 26 03:20:07.610868 2026] [:error] [pid 18021:tid 18067] [client 134.199.156.173:35390] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0fwAAAE0"]
[Tue May 26 03:20:07.611980 2026] [:error] [pid 18021:tid 18078] [client 134.199.156.173:35394] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0gAAAAFg"]
[Tue May 26 03:20:07.612796 2026] [:error] [pid 18021:tid 18058] [client 134.199.156.173:35402] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0gQAAAEQ"]
[Tue May 26 03:20:07.619905 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:35436] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_wgAAAJI"]
[Tue May 26 03:20:07.624277 2026] [:error] [pid 18021:tid 18071] [client 134.199.156.173:35448] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0hAAAAFE"]
[Tue May 26 03:20:07.632066 2026] [:error] [pid 18025:tid 18096] [client 134.199.156.173:35452] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_xQAAAI8"]
[Tue May 26 03:20:07.632421 2026] [:error] [pid 18025:tid 18082] [client 134.199.156.173:35462] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_xgAAAIE"]
[Tue May 26 03:20:07.636537 2026] [:error] [pid 18021:tid 18056] [client 134.199.156.173:35476] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0hQAAAEI"]
[Tue May 26 03:20:07.638048 2026] [:error] [pid 18025:tid 18084] [client 134.199.156.173:35488] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_xwAAAIM"]
[Tue May 26 03:20:07.645104 2026] [:error] [pid 18119:tid 18137] [client 134.199.156.173:35500] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJUQAAAM8"]
[Tue May 26 03:20:07.657332 2026] [:error] [pid 18119:tid 18140] [client 134.199.156.173:35516] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJUwAAANI"]
[Tue May 26 03:20:07.658054 2026] [:error] [pid 18119:tid 18135] [client 134.199.156.173:35528] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJVAAAAM0"]
[Tue May 26 03:20:07.659695 2026] [:error] [pid 18119:tid 18138] [client 134.199.156.173:35536] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJVQAAANA"]
[Tue May 26 03:20:07.663957 2026] [:error] [pid 18119:tid 18144] [client 134.199.156.173:35550] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJVwAAANY"]
[Tue May 26 03:20:07.670411 2026] [:error] [pid 18119:tid 18128] [client 134.199.156.173:35566] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJWAAAAMY"]
[Tue May 26 03:20:07.676588 2026] [:error] [pid 18021:tid 18061] [client 134.199.156.173:35576] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0iAAAAEc"]
[Tue May 26 03:20:07.677399 2026] [:error] [pid 18021:tid 18064] [client 134.199.156.173:35592] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0iQAAAEo"]
[Tue May 26 03:20:07.687762 2026] [:error] [pid 18021:tid 18076] [client 134.199.156.173:35602] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0igAAAFY"]
[Tue May 26 03:20:07.703551 2026] [:error] [pid 18119:tid 18139] [client 134.199.156.173:35618] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJWQAAANE"]
[Tue May 26 03:20:07.706282 2026] [:error] [pid 18021:tid 18072] [client 134.199.156.173:35638] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0iwAAAFI"]
[Tue May 26 03:20:07.709488 2026] [:error] [pid 18021:tid 18074] [client 134.199.156.173:35650] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0jQAAAFQ"]
[Tue May 26 03:20:07.711958 2026] [:error] [pid 18021:tid 18055] [client 134.199.156.173:35654] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0jgAAAEE"]
[Tue May 26 03:20:07.735570 2026] [:error] [pid 18021:tid 18069] [client 134.199.156.173:35686] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0kQAAAE8"]
[Tue May 26 03:20:07.742270 2026] [:error] [pid 18021:tid 18075] [client 134.199.156.173:35742] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0lAAAAFU"]
[Tue May 26 03:20:07.756337 2026] [:error] [pid 18021:tid 18067] [client 134.199.156.173:35756] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0lgAAAE0"]
[Tue May 26 03:20:07.757854 2026] [:error] [pid 18021:tid 18078] [client 134.199.156.173:35766] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0lwAAAFg"]
[Tue May 26 03:20:07.782209 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:35836] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_ygAAAJY"]
[Tue May 26 03:20:07.787165 2026] [:error] [pid 18025:tid 18097] [client 134.199.156.173:35862] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_zAAAAJA"]
[Tue May 26 03:20:07.789843 2026] [:error] [pid 18021:tid 18064] [client 134.199.156.173:35870] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0nwAAAEo"]
[Tue May 26 03:20:07.802770 2026] [:error] [pid 18025:tid 18094] [client 134.199.156.173:35898] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_zQAAAI0"]
[Tue May 26 03:20:07.813642 2026] [:error] [pid 18021:tid 18074] [client 134.199.156.173:35912] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0ogAAAFQ"]
[Tue May 26 03:20:07.825766 2026] [:error] [pid 18119:tid 18141] [client 134.199.156.173:35972] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJXwAAANM"]
[Tue May 26 03:20:07.831200 2026] [:error] [pid 18119:tid 18126] [client 134.199.156.173:35988] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJYAAAAMQ"]
[Tue May 26 03:20:07.835036 2026] [:error] [pid 18025:tid 18083] [client 134.199.156.173:36026] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_zwAAAII"]
[Tue May 26 03:20:07.836994 2026] [:error] [pid 18025:tid 18093] [client 134.199.156.173:36042] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_0AAAAIw"]
[Tue May 26 03:20:07.838050 2026] [:error] [pid 18021:tid 18068] [client 134.199.156.173:36046] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0pwAAAE4"]
[Tue May 26 03:20:07.860482 2026] [:error] [pid 18119:tid 18123] [client 134.199.156.173:36086] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJZAAAAME"]
[Tue May 26 03:20:07.872388 2026] [:error] [pid 18119:tid 18122] [client 134.199.156.173:36116] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahSg562OWf1JhYMmNHZJZwAAAMA"]
[Tue May 26 03:20:07.879955 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:36150] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_1AAAAJI"]
[Tue May 26 03:20:07.879982 2026] [:error] [pid 18025:tid 18087] [client 134.199.156.173:36134] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_0wAAAIY"]
[Tue May 26 03:20:07.902775 2026] [:error] [pid 18025:tid 18096] [client 134.199.156.173:36158] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_1gAAAI8"]
[Tue May 26 03:20:07.916675 2026] [:error] [pid 18025:tid 18082] [client 134.199.156.173:36162] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahSg56sNhr3UKn0_VzL_1wAAAIE"]
[Tue May 26 03:20:07.921062 2026] [:error] [pid 18021:tid 18070] [client 134.199.156.173:36174] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahSg59lB5OFYP0lzxvS0qQAAAFA"]
[Tue May 26 03:20:08.022478 2026] [:error] [pid 18021:tid 18069] [client 134.199.156.173:36288] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0qwAAAE8"]
[Tue May 26 03:20:08.029046 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:36328] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_3wAAAJY"]
[Tue May 26 03:20:08.035375 2026] [:error] [pid 18025:tid 18097] [client 134.199.156.173:36366] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_4QAAAJA"]
[Tue May 26 03:20:08.052730 2026] [:error] [pid 18025:tid 18090] [client 134.199.156.173:36378] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_4wAAAIk"]
[Tue May 26 03:20:08.057771 2026] [:error] [pid 18025:tid 18083] [client 134.199.156.173:36406] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_5AAAAII"]
[Tue May 26 03:20:08.058830 2026] [:error] [pid 18021:tid 18057] [client 134.199.156.173:36422] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0sAAAAEM"]
[Tue May 26 03:20:08.065550 2026] [:error] [pid 18017:tid 18039] [client 134.199.156.173:36442] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxbgAAAAw"]
[Tue May 26 03:20:08.067695 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:36446] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_5gAAAJE"]
[Tue May 26 03:20:08.068551 2026] [:error] [pid 18025:tid 18105] [client 134.199.156.173:36450] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_5wAAAJg"]
[Tue May 26 03:20:08.070930 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:36464] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_6AAAAJI"]
[Tue May 26 03:20:08.071352 2026] [:error] [pid 18025:tid 18087] [client 134.199.156.173:36472] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_6QAAAIY"]
[Tue May 26 03:20:08.072287 2026] [:error] [pid 18025:tid 18096] [client 134.199.156.173:36474] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_6gAAAI8"]
[Tue May 26 03:20:08.077808 2026] [:error] [pid 18025:tid 18101] [client 134.199.156.173:36498] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_7AAAAJQ"]
[Tue May 26 03:20:08.089156 2026] [:error] [pid 18025:tid 18084] [client 134.199.156.173:36524] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_7wAAAIM"]
[Tue May 26 03:20:08.090744 2026] [:error] [pid 18025:tid 18092] [client 134.199.156.173:36534] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_8AAAAIs"]
[Tue May 26 03:20:08.095922 2026] [:error] [pid 18021:tid 18071] [client 134.199.156.173:36546] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0sQAAAFE"]
[Tue May 26 03:20:08.103752 2026] [:error] [pid 18025:tid 18091] [client 134.199.156.173:36558] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_8QAAAIo"]
[Tue May 26 03:20:08.104827 2026] [:error] [pid 18025:tid 18100] [client 134.199.156.173:36566] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_8gAAAJM"]
[Tue May 26 03:20:08.109814 2026] [:error] [pid 18021:tid 18058] [client 134.199.156.173:36584] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0swAAAEQ"]
[Tue May 26 03:20:08.111048 2026] [:error] [pid 18025:tid 18081] [client 134.199.156.173:36588] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_8wAAAIA"]
[Tue May 26 03:20:08.112743 2026] [:error] [pid 18017:tid 18030] [client 134.199.156.173:36598] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxbwAAAAM"]
[Tue May 26 03:20:08.113227 2026] [:error] [pid 18021:tid 18061] [client 134.199.156.173:36592] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0tAAAAEc"]
[Tue May 26 03:20:08.114855 2026] [:error] [pid 18017:tid 18043] [client 134.199.156.173:36594] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxcAAAABA"]
[Tue May 26 03:20:08.115211 2026] [:error] [pid 18017:tid 18029] [client 134.199.156.173:36608] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxcQAAAAI"]
[Tue May 26 03:20:08.133199 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:36630] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_9QAAAJY"]
[Tue May 26 03:20:08.136939 2026] [:error] [pid 18017:tid 18046] [client 134.199.156.173:36618] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxcgAAABM"]
[Tue May 26 03:20:08.151128 2026] [:error] [pid 18021:tid 18072] [client 134.199.156.173:36646] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0tQAAAFI"]
[Tue May 26 03:20:08.156700 2026] [:error] [pid 18021:tid 18064] [client 134.199.156.173:36654] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0tgAAAEo"]
[Tue May 26 03:20:08.159939 2026] [:error] [pid 18025:tid 18102] [client 134.199.156.173:36656] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_9gAAAJU"]
[Tue May 26 03:20:08.162473 2026] [:error] [pid 18025:tid 18097] [client 134.199.156.173:36670] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_9wAAAJA"]
[Tue May 26 03:20:08.166268 2026] [:error] [pid 18021:tid 18066] [client 134.199.156.173:36658] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0twAAAEw"]
[Tue May 26 03:20:08.169177 2026] [:error] [pid 18021:tid 18074] [client 134.199.156.173:36684] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0uAAAAFQ"]
[Tue May 26 03:20:08.169988 2026] [:error] [pid 18021:tid 18065] [client 134.199.156.173:36660] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0uQAAAEs"]
[Tue May 26 03:20:08.170645 2026] [:error] [pid 18021:tid 18055] [client 134.199.156.173:36698] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0ugAAAEE"]
[Tue May 26 03:20:08.175813 2026] [:error] [pid 18021:tid 18063] [client 134.199.156.173:36706] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0uwAAAEk"]
[Tue May 26 03:20:08.194185 2026] [:error] [pid 18021:tid 18068] [client 134.199.156.173:36712] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0vAAAAE4"]
[Tue May 26 03:20:08.262631 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:36786] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL_-gAAAJE"]
[Tue May 26 03:20:08.273481 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:36812] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzL__AAAAJI"]
[Tue May 26 03:20:08.280101 2026] [:error] [pid 18021:tid 18057] [client 134.199.156.173:36840] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0xQAAAEM"]
[Tue May 26 03:20:08.281868 2026] [:error] [pid 18025:tid 18082] [client 134.199.156.173:36850] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAAAAAAIE"]
[Tue May 26 03:20:08.288054 2026] [:error] [pid 18021:tid 18061] [client 134.199.156.173:36898] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0yQAAAEc"]
[Tue May 26 03:20:08.293792 2026] [:error] [pid 18025:tid 18084] [client 134.199.156.173:36900] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAAwAAAIM"]
[Tue May 26 03:20:08.342805 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:36952] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIABwAAAJY"]
[Tue May 26 03:20:08.344184 2026] [:error] [pid 18025:tid 18091] [client 134.199.156.173:36932] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIACAAAAIo"]
[Tue May 26 03:20:08.353328 2026] [:error] [pid 18025:tid 18094] [client 134.199.156.173:37008] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIACgAAAI0"]
[Tue May 26 03:20:08.356373 2026] [:error] [pid 18025:tid 18083] [client 134.199.156.173:37016] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIADAAAAII"]
[Tue May 26 03:20:08.363925 2026] [:error] [pid 18021:tid 18064] [client 134.199.156.173:36982] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0ywAAAEo"]
[Tue May 26 03:20:08.370791 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:37038] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIADgAAAJE"]
[Tue May 26 03:20:08.372245 2026] [:error] [pid 18021:tid 18066] [client 134.199.156.173:37042] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0zAAAAEw"]
[Tue May 26 03:20:08.372901 2026] [:error] [pid 18025:tid 18105] [client 134.199.156.173:37056] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIADwAAAJg"]
[Tue May 26 03:20:08.373949 2026] [:error] [pid 18025:tid 18086] [client 134.199.156.173:37068] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAEAAAAIU"]
[Tue May 26 03:20:08.378898 2026] [:error] [pid 18025:tid 18087] [client 134.199.156.173:37082] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAEQAAAIY"]
[Tue May 26 03:20:08.384406 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:37096] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAEwAAAJI"]
[Tue May 26 03:20:08.390877 2026] [:error] [pid 18025:tid 18085] [client 134.199.156.173:37136] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAFAAAAIQ"]
[Tue May 26 03:20:08.434168 2026] [:error] [pid 18021:tid 18055] [client 134.199.156.173:37164] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS0zwAAAEE"]
[Tue May 26 03:20:08.437460 2026] [:error] [pid 18021:tid 18073] [client 134.199.156.173:37192] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS00AAAAFM"]
[Tue May 26 03:20:08.443412 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:37202] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAGgAAAJY"]
[Tue May 26 03:20:08.444796 2026] [:error] [pid 18025:tid 18102] [client 134.199.156.173:37172] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAGwAAAJU"]
[Tue May 26 03:20:08.449855 2026] [:error] [pid 18025:tid 18091] [client 134.199.156.173:37214] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAHAAAAIo"]
[Tue May 26 03:20:08.454383 2026] [:error] [pid 18025:tid 18092] [client 134.199.156.173:37242] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAHQAAAIs"]
[Tue May 26 03:20:08.458714 2026] [:error] [pid 18025:tid 18094] [client 134.199.156.173:37260] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAHgAAAI0"]
[Tue May 26 03:20:08.462477 2026] [:error] [pid 18025:tid 18090] [client 134.199.156.173:37222] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAHwAAAIk"]
[Tue May 26 03:20:08.463744 2026] [:error] [pid 18025:tid 18083] [client 134.199.156.173:37254] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAIAAAAII"]
[Tue May 26 03:20:08.464712 2026] [:error] [pid 18025:tid 18093] [client 134.199.156.173:37250] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAIQAAAIw"]
[Tue May 26 03:20:08.467635 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:37272] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAIgAAAJE"]
[Tue May 26 03:20:08.469586 2026] [:error] [pid 18025:tid 18105] [client 134.199.156.173:37276] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAIwAAAJg"]
[Tue May 26 03:20:08.490115 2026] [:error] [pid 18025:tid 18086] [client 134.199.156.173:37288] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAJAAAAIU"]
[Tue May 26 03:20:08.498302 2026] [:error] [pid 18021:tid 18067] [client 134.199.156.173:37298] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS01AAAAE0"]
[Tue May 26 03:20:08.507093 2026] [:error] [pid 18021:tid 18077] [client 134.199.156.173:37312] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS01QAAAFc"]
[Tue May 26 03:20:08.509381 2026] [:error] [pid 18021:tid 18054] [client 134.199.156.173:37322] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS01gAAAEA"]
[Tue May 26 03:20:08.511110 2026] [:error] [pid 18021:tid 18062] [client 134.199.156.173:37334] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS01wAAAEg"]
[Tue May 26 03:20:08.511635 2026] [:error] [pid 18021:tid 18057] [client 134.199.156.173:37342] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahSg6NlB5OFYP0lzxvS02AAAAEM"]
[Tue May 26 03:20:08.534085 2026] [:error] [pid 18025:tid 18085] [client 134.199.156.173:37368] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAJwAAAIQ"]
[Tue May 26 03:20:08.579955 2026] [:error] [pid 18025:tid 18091] [client 134.199.156.173:37442] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAMQAAAIo"]
[Tue May 26 03:20:08.584609 2026] [:error] [pid 18025:tid 18083] [client 134.199.156.173:37474] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIANAAAAII"]
[Tue May 26 03:20:08.590312 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:37494] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIANgAAAJE"]
[Tue May 26 03:20:08.604398 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:37530] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAOQAAAJI"]
[Tue May 26 03:20:08.608634 2026] [:error] [pid 18025:tid 18096] [client 134.199.156.173:37558] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAOwAAAI8"]
[Tue May 26 03:20:08.624253 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:37600] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAQAAAAJY"]
[Tue May 26 03:20:08.632872 2026] [:error] [pid 18025:tid 18091] [client 134.199.156.173:37628] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAQgAAAIo"]
[Tue May 26 03:20:08.638799 2026] [:error] [pid 18025:tid 18090] [client 134.199.156.173:37644] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIARQAAAIk"]
[Tue May 26 03:20:08.651117 2026] [:error] [pid 18025:tid 18093] [client 134.199.156.173:37680] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIARwAAAIw"]
[Tue May 26 03:20:08.655399 2026] [:error] [pid 18025:tid 18105] [client 134.199.156.173:37704] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIASwAAAJg"]
[Tue May 26 03:20:08.656689 2026] [:error] [pid 18025:tid 18086] [client 134.199.156.173:37706] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIATAAAAIU"]
[Tue May 26 03:20:08.658191 2026] [:error] [pid 18025:tid 18099] [client 134.199.156.173:37716] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIATQAAAJI"]
[Tue May 26 03:20:08.675160 2026] [:error] [pid 18025:tid 18100] [client 134.199.156.173:37736] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAUAAAAJM"]
[Tue May 26 03:20:08.682412 2026] [:error] [pid 18025:tid 18103] [client 134.199.156.173:37758] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAUgAAAJY"]
[Tue May 26 03:20:08.693231 2026] [:error] [pid 18025:tid 18092] [client 134.199.156.173:37764] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAUwAAAIs"]
[Tue May 26 03:20:08.697219 2026] [:error] [pid 18025:tid 18094] [client 134.199.156.173:37790] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAVgAAAI0"]
[Tue May 26 03:20:08.697918 2026] [:error] [pid 18025:tid 18090] [client 134.199.156.173:37804] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAVwAAAIk"]
[Tue May 26 03:20:08.699487 2026] [:error] [pid 18025:tid 18083] [client 134.199.156.173:37808] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAWAAAAII"]
[Tue May 26 03:20:08.747968 2026] [:error] [pid 18025:tid 18098] [client 134.199.156.173:37838] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAXAAAAJE"]
[Tue May 26 03:20:08.749370 2026] [:error] [pid 18025:tid 18097] [client 134.199.156.173:37850] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAXQAAAJA"]
[Tue May 26 03:20:08.845315 2026] [:error] [pid 18025:tid 18094] [client 134.199.156.173:37992] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAaQAAAI0"]
[Tue May 26 03:20:08.853729 2026] [:error] [pid 18025:tid 18090] [client 134.199.156.173:38006] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAagAAAIk"]
[Tue May 26 03:20:08.889259 2026] [:error] [pid 18017:tid 18028] [client 134.199.156.173:38030] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxeQAAAAE"]
[Tue May 26 03:20:08.898311 2026] [:error] [pid 18119:tid 18142] [client 134.199.156.173:38034] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6K2OWf1JhYMmNHZJbQAAANQ"]
[Tue May 26 03:20:08.903991 2026] [:error] [pid 18119:tid 18136] [client 134.199.156.173:38050] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6K2OWf1JhYMmNHZJbgAAAM4"]
[Tue May 26 03:20:08.926720 2026] [:error] [pid 18017:tid 18031] [client 134.199.156.173:38070] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxegAAAAQ"]
[Tue May 26 03:20:08.932379 2026] [:error] [pid 18017:tid 18037] [client 134.199.156.173:38082] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxewAAAAo"]
[Tue May 26 03:20:08.937632 2026] [:error] [pid 18025:tid 18097] [client 134.199.156.173:38096] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6KsNhr3UKn0_VzIAbwAAAJA"]
[Tue May 26 03:20:08.944407 2026] [:error] [pid 18017:tid 18049] [client 134.199.156.173:38112] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxfAAAABY"]
[Tue May 26 03:20:08.969508 2026] [:error] [pid 18017:tid 18035] [client 134.199.156.173:38126] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxfQAAAAg"]
[Tue May 26 03:20:08.987006 2026] [:error] [pid 18017:tid 18033] [client 134.199.156.173:38130] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6NCxfg25g7uwYeIxfgAAAAY"]
[Tue May 26 03:20:09.012627 2026] [:error] [pid 18017:tid 18038] [client 134.199.156.173:38136] [client 134.199.156.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSg6dCxfg25g7uwYeIxfwAAAAs"]
[Tue May 26 13:17:43.647385 2026] [:error] [pid 55988:tid 55992] [client 170.64.238.42:42914] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ahUs9_3kVIz2sql52scB8wAAAQE"]
[Tue May 26 13:17:43.819546 2026] [:error] [pid 39336:tid 39342] [client 170.64.238.42:44560] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stratapluswa.com.au"] [uri "/.git/config"] [unique_id "ahUs99wmp9MmyaRNgiAbQQAAAUM"]
[Tue May 26 13:17:44.142134 2026] [:error] [pid 20025:tid 20068] [client 170.64.238.42:42946] [client 170.64.238.42] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.stratapluswa.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stratapluswa.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahUs-H7k8Vts-JPOkgVrsQAAAEM"]
[Tue May 26 13:17:44.191697 2026] [:error] [pid 39336:tid 39358] [client 170.64.238.42:42916] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbTAAAAVM"]
[Tue May 26 13:17:44.201754 2026] [:error] [pid 20025:tid 20076] [client 170.64.238.42:42926] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrsgAAAEs"]
[Tue May 26 13:17:44.215564 2026] [:error] [pid 20025:tid 20073] [client 170.64.238.42:42946] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrswAAAEg"]
[Tue May 26 13:17:44.216876 2026] [:error] [pid 39336:tid 39363] [client 170.64.238.42:42936] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbTQAAAVg"]
[Tue May 26 13:17:44.285330 2026] [:error] [pid 39336:tid 39351] [client 170.64.238.42:42980] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbUAAAAUw"]
[Tue May 26 13:17:44.285313 2026] [:error] [pid 39336:tid 39360] [client 170.64.238.42:42950] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbTwAAAVU"]
[Tue May 26 13:17:44.286474 2026] [:error] [pid 39336:tid 39350] [client 170.64.238.42:42966] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbUQAAAUs"]
[Tue May 26 13:17:44.287196 2026] [:error] [pid 39336:tid 39356] [client 170.64.238.42:43000] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbUgAAAVE"]
[Tue May 26 13:17:44.287854 2026] [:error] [pid 39336:tid 39362] [client 170.64.238.42:42988] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbUwAAAVc"]
[Tue May 26 13:17:44.289502 2026] [:error] [pid 39336:tid 39339] [client 170.64.238.42:43002] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbVAAAAUA"]
[Tue May 26 13:17:44.290697 2026] [:error] [pid 55988:tid 55997] [client 170.64.238.42:43032] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahUs-P3kVIz2sql52scB9AAAAQY"]
[Tue May 26 13:17:44.290985 2026] [:error] [pid 55988:tid 56003] [client 170.64.238.42:43018] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahUs-P3kVIz2sql52scB9QAAAQw"]
[Tue May 26 13:17:44.292119 2026] [:error] [pid 20024:tid 20056] [client 170.64.238.42:43048] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/upload/server/php/"] [unique_id "ahUs-Fdk7QtxEB93Npdc0QAAABI"]
[Tue May 26 13:17:44.293708 2026] [:error] [pid 55988:tid 56007] [client 170.64.238.42:43060] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahUs-P3kVIz2sql52scB9gAAARA"]
[Tue May 26 13:17:44.309216 2026] [:error] [pid 20125:tid 20139] [client 170.64.238.42:43070] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUs-Nk9jeWERFDLJc768AAAAMw"]
[Tue May 26 13:17:44.327952 2026] [:error] [pid 39336:tid 39342] [client 170.64.238.42:43084] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbVQAAAUM"]
[Tue May 26 13:17:44.329510 2026] [:error] [pid 39336:tid 39345] [client 170.64.238.42:43090] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbVgAAAUY"]
[Tue May 26 13:17:44.329530 2026] [:error] [pid 39336:tid 39346] [client 170.64.238.42:43096] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbVwAAAUc"]
[Tue May 26 13:17:44.359612 2026] [:error] [pid 39336:tid 39357] [client 170.64.238.42:43146] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbWAAAAVI"]
[Tue May 26 13:17:44.360413 2026] [:error] [pid 39336:tid 39354] [client 170.64.238.42:43112] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbWQAAAU8"]
[Tue May 26 13:17:44.361268 2026] [:error] [pid 39336:tid 39349] [client 170.64.238.42:43138] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbWgAAAUo"]
[Tue May 26 13:17:44.361337 2026] [:error] [pid 39336:tid 39353] [client 170.64.238.42:43122] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbWwAAAU4"]
[Tue May 26 13:17:44.364532 2026] [:error] [pid 20125:tid 20133] [client 170.64.238.42:43130] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahUs-Nk9jeWERFDLJc768QAAAMY"]
[Tue May 26 13:17:44.365770 2026] [:error] [pid 39336:tid 39341] [client 170.64.238.42:43102] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbXAAAAUI"]
[Tue May 26 13:17:44.382130 2026] [:error] [pid 39336:tid 39347] [client 170.64.238.42:43160] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbXQAAAUg"]
[Tue May 26 13:17:44.391434 2026] [:error] [pid 20025:tid 20067] [client 170.64.238.42:43166] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrtQAAAEI"]
[Tue May 26 13:17:44.394554 2026] [:error] [pid 39336:tid 39348] [client 170.64.238.42:43168] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbXgAAAUk"]
[Tue May 26 13:17:44.394727 2026] [:error] [pid 20025:tid 20087] [client 170.64.238.42:43176] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrtgAAAFY"]
[Tue May 26 13:17:44.400994 2026] [:error] [pid 20025:tid 20066] [client 170.64.238.42:43186] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrtwAAAEE"]
[Tue May 26 13:17:44.402502 2026] [:error] [pid 20025:tid 20089] [client 170.64.238.42:43192] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVruAAAAFg"]
[Tue May 26 13:17:44.403539 2026] [:error] [pid 20025:tid 20075] [client 170.64.238.42:43202] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVruQAAAEo"]
[Tue May 26 13:17:44.405919 2026] [:error] [pid 20025:tid 20074] [client 170.64.238.42:43212] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrugAAAEk"]
[Tue May 26 13:17:44.411101 2026] [:error] [pid 20025:tid 20085] [client 170.64.238.42:43216] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVruwAAAFQ"]
[Tue May 26 13:17:44.424561 2026] [:error] [pid 20025:tid 20072] [client 170.64.238.42:43218] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrvAAAAEc"]
[Tue May 26 13:17:44.449072 2026] [:error] [pid 20025:tid 20080] [client 170.64.238.42:43226] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrvQAAAE8"]
[Tue May 26 13:17:44.494279 2026] [:error] [pid 20024:tid 20058] [client 170.64.238.42:43238] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/server/php/"] [unique_id "ahUs-Fdk7QtxEB93Npdc0gAAABQ"]
[Tue May 26 13:17:44.530658 2026] [:error] [pid 20025:tid 20069] [client 170.64.238.42:43246] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrvwAAAEQ"]
[Tue May 26 13:17:44.537419 2026] [:error] [pid 20025:tid 20065] [client 170.64.238.42:43252] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrwAAAAEA"]
[Tue May 26 13:17:44.546432 2026] [:error] [pid 20026:tid 20094] [client 170.64.238.42:43258] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahUs-DXIXIr-5BZ8nR5KbQAAAII"]
[Tue May 26 13:17:44.551612 2026] [:error] [pid 20026:tid 20105] [client 170.64.238.42:43266] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-DXIXIr-5BZ8nR5KbgAAAI0"]
[Tue May 26 13:17:44.552826 2026] [:error] [pid 20025:tid 20084] [client 170.64.238.42:43264] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrwQAAAFM"]
[Tue May 26 13:17:44.559062 2026] [:error] [pid 20025:tid 20081] [client 170.64.238.42:43276] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrwgAAAFA"]
[Tue May 26 13:17:44.573864 2026] [:error] [pid 20025:tid 20088] [client 170.64.238.42:43282] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrwwAAAFc"]
[Tue May 26 13:17:44.584509 2026] [:error] [pid 20025:tid 20078] [client 170.64.238.42:43298] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrxAAAAE0"]
[Tue May 26 13:17:44.589395 2026] [:error] [pid 20025:tid 20068] [client 170.64.238.42:43306] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrxQAAAEM"]
[Tue May 26 13:17:44.589974 2026] [:error] [pid 20025:tid 20076] [client 170.64.238.42:43322] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrxgAAAEs"]
[Tue May 26 13:17:44.592223 2026] [:error] [pid 20025:tid 20073] [client 170.64.238.42:43336] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVrxwAAAEg"]
[Tue May 26 13:17:44.595306 2026] [:error] [pid 39336:tid 39343] [client 170.64.238.42:43350] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbYQAAAUQ"]
[Tue May 26 13:17:44.601576 2026] [:error] [pid 20025:tid 20078] [client 170.64.238.42:43352] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-H7k8Vts-JPOkgVryAAAAE0"]
[Tue May 26 13:17:44.617646 2026] [:error] [pid 39336:tid 39352] [client 170.64.238.42:43366] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbYgAAAU0"]
[Tue May 26 13:17:44.658389 2026] [:error] [pid 39336:tid 39350] [client 170.64.238.42:43418] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbYwAAAUs"]
[Tue May 26 13:17:44.658737 2026] [:error] [pid 39336:tid 39358] [client 170.64.238.42:43384] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbZAAAAVM"]
[Tue May 26 13:17:44.659691 2026] [:error] [pid 39336:tid 39351] [client 170.64.238.42:43410] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbZQAAAUw"]
[Tue May 26 13:17:44.660091 2026] [:error] [pid 39336:tid 39340] [client 170.64.238.42:43372] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbZgAAAUE"]
[Tue May 26 13:17:44.660889 2026] [:error] [pid 39336:tid 39363] [client 170.64.238.42:43394] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbZwAAAVg"]
[Tue May 26 13:17:44.675251 2026] [:error] [pid 39336:tid 39360] [client 170.64.238.42:43432] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbaAAAAVU"]
[Tue May 26 13:17:44.706941 2026] [:error] [pid 39336:tid 39342] [client 170.64.238.42:43456] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbagAAAUM"]
[Tue May 26 13:17:44.706972 2026] [:error] [pid 39336:tid 39356] [client 170.64.238.42:43440] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahUs-Nwmp9MmyaRNgiAbaQAAAVE"]
[Tue May 26 13:17:45.924994 2026] [:error] [pid 39336:tid 39341] [client 170.64.238.42:42922] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahUs-dwmp9MmyaRNgiAbbQAAAUI"]
[Tue May 26 13:17:45.985380 2026] [:error] [pid 39336:tid 39347] [client 170.64.238.42:43468] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahUs-dwmp9MmyaRNgiAbbwAAAUg"]
[Tue May 26 13:17:46.084287 2026] [:error] [pid 39336:tid 39352] [client 170.64.238.42:43476] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbcAAAAU0"]
[Tue May 26 13:17:46.085503 2026] [:error] [pid 20026:tid 20107] [client 170.64.238.42:43490] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KbwAAAI8"]
[Tue May 26 13:17:46.107086 2026] [:error] [pid 39336:tid 39350] [client 170.64.238.42:43496] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUs-twmp9MmyaRNgiAbcQAAAUs"]
[Tue May 26 13:17:46.114281 2026] [:error] [pid 39336:tid 39351] [client 170.64.238.42:43502] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbcgAAAUw"]
[Tue May 26 13:17:46.127502 2026] [:error] [pid 20125:tid 20130] [client 170.64.238.42:43510] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahUs-tk9jeWERFDLJc768gAAAMM"]
[Tue May 26 13:17:46.159524 2026] [:error] [pid 20025:tid 20084] [client 170.64.238.42:43542] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVrzAAAAFM"]
[Tue May 26 13:17:46.160701 2026] [:error] [pid 20125:tid 20148] [client 170.64.238.42:43528] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/server/php/"] [unique_id "ahUs-tk9jeWERFDLJc768wAAANU"]
[Tue May 26 13:17:46.162045 2026] [:error] [pid 39336:tid 39340] [client 170.64.238.42:43516] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbcwAAAUE"]
[Tue May 26 13:17:46.162682 2026] [:error] [pid 20125:tid 20141] [client 170.64.238.42:43520] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahUs-tk9jeWERFDLJc769AAAAM4"]
[Tue May 26 13:17:46.162859 2026] [:error] [pid 20025:tid 20065] [client 170.64.238.42:43530] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugin/server/php/"] [unique_id "ahUs-n7k8Vts-JPOkgVrzQAAAEA"]
[Tue May 26 13:17:46.171714 2026] [:error] [pid 20025:tid 20068] [client 170.64.238.42:43572] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/server/php/"] [unique_id "ahUs-n7k8Vts-JPOkgVrzwAAAEM"]
[Tue May 26 13:17:46.171744 2026] [:error] [pid 20025:tid 20067] [client 170.64.238.42:43584] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/server/php/"] [unique_id "ahUs-n7k8Vts-JPOkgVrzgAAAEI"]
[Tue May 26 13:17:46.172817 2026] [:error] [pid 20025:tid 20076] [client 170.64.238.42:43570] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUs-n7k8Vts-JPOkgVr0AAAAEs"]
[Tue May 26 13:17:46.177932 2026] [:error] [pid 20125:tid 20138] [client 170.64.238.42:43556] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc769QAAAMs"]
[Tue May 26 13:17:46.189270 2026] [:error] [pid 20026:tid 20115] [client 170.64.238.42:43594] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KcAAAAJc"]
[Tue May 26 13:17:46.191515 2026] [:error] [pid 20125:tid 20132] [client 170.64.238.42:43606] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/server/php/"] [unique_id "ahUs-tk9jeWERFDLJc769gAAAMU"]
[Tue May 26 13:17:46.196019 2026] [:error] [pid 20026:tid 20108] [client 170.64.238.42:43618] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KcQAAAJA"]
[Tue May 26 13:17:46.205292 2026] [:error] [pid 20125:tid 20136] [client 170.64.238.42:43632] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/server/php/"] [unique_id "ahUs-tk9jeWERFDLJc769wAAAMk"]
[Tue May 26 13:17:46.207833 2026] [:error] [pid 20125:tid 20134] [client 170.64.238.42:43634] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc76-AAAAMc"]
[Tue May 26 13:17:46.209072 2026] [:error] [pid 20026:tid 20101] [client 170.64.238.42:43638] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KcgAAAIk"]
[Tue May 26 13:17:46.209634 2026] [:error] [pid 20125:tid 20144] [client 170.64.238.42:43650] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugin/server/php/"] [unique_id "ahUs-tk9jeWERFDLJc76-QAAANE"]
[Tue May 26 13:17:46.211645 2026] [:error] [pid 20125:tid 20147] [client 170.64.238.42:43626] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc76-gAAANQ"]
[Tue May 26 13:17:46.215858 2026] [:error] [pid 20024:tid 20044] [client 170.64.238.42:43670] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/server/php/"] [unique_id "ahUs-ldk7QtxEB93Npdc0wAAAAY"]
[Tue May 26 13:17:46.216523 2026] [:error] [pid 20026:tid 20098] [client 170.64.238.42:43654] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KcwAAAIY"]
[Tue May 26 13:17:46.217605 2026] [:error] [pid 20026:tid 20116] [client 170.64.238.42:43686] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KdAAAAJg"]
[Tue May 26 13:17:46.222523 2026] [:error] [pid 20125:tid 20129] [client 170.64.238.42:43688] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc76-wAAAMI"]
[Tue May 26 13:17:46.258345 2026] [:error] [pid 20026:tid 20106] [client 170.64.238.42:43708] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KdQAAAI4"]
[Tue May 26 13:17:46.259037 2026] [:error] [pid 39336:tid 39363] [client 170.64.238.42:43698] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahUs-twmp9MmyaRNgiAbdQAAAVg"]
[Tue May 26 13:17:46.272954 2026] [:error] [pid 20024:tid 20039] [client 170.64.238.42:43722] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/server/php/"] [unique_id "ahUs-ldk7QtxEB93Npdc1AAAAAE"]
[Tue May 26 13:17:46.277866 2026] [:error] [pid 39336:tid 39342] [client 170.64.238.42:43716] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbdgAAAUM"]
[Tue May 26 13:17:46.287043 2026] [:error] [pid 39336:tid 39356] [client 170.64.238.42:43724] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbdwAAAVE"]
[Tue May 26 13:17:46.289387 2026] [:error] [pid 20025:tid 20087] [client 170.64.238.42:43730] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/server/php/"] [unique_id "ahUs-n7k8Vts-JPOkgVr0QAAAFY"]
[Tue May 26 13:17:46.290148 2026] [:error] [pid 20026:tid 20104] [client 170.64.238.42:43746] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KdgAAAIw"]
[Tue May 26 13:17:46.291095 2026] [:error] [pid 20025:tid 20083] [client 170.64.238.42:43762] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugin/server/php/"] [unique_id "ahUs-n7k8Vts-JPOkgVr0gAAAFI"]
[Tue May 26 13:17:46.293090 2026] [:error] [pid 20125:tid 20151] [client 170.64.238.42:43768] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc76_AAAANg"]
[Tue May 26 13:17:46.302676 2026] [:error] [pid 20026:tid 20111] [client 170.64.238.42:43782] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/server/php/"] [unique_id "ahUs-jXIXIr-5BZ8nR5KdwAAAJM"]
[Tue May 26 13:17:46.340819 2026] [:error] [pid 20026:tid 20096] [client 170.64.238.42:43784] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KeAAAAIQ"]
[Tue May 26 13:17:46.366769 2026] [:error] [pid 20026:tid 20099] [client 170.64.238.42:43800] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KeQAAAIc"]
[Tue May 26 13:17:46.382019 2026] [:error] [pid 39336:tid 39361] [client 170.64.238.42:43802] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbeAAAAVY"]
[Tue May 26 13:17:46.397208 2026] [:error] [pid 20025:tid 20089] [client 170.64.238.42:43804] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr0wAAAFg"]
[Tue May 26 13:17:46.398608 2026] [:error] [pid 20125:tid 20140] [client 170.64.238.42:43826] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc76_QAAAM0"]
[Tue May 26 13:17:46.400684 2026] [:error] [pid 20125:tid 20143] [client 170.64.238.42:43838] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc76_gAAANA"]
[Tue May 26 13:17:46.400706 2026] [:error] [pid 20125:tid 20150] [client 170.64.238.42:43820] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc76_wAAANc"]
[Tue May 26 13:17:46.407531 2026] [:error] [pid 20125:tid 20145] [client 170.64.238.42:43854] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77AAAAANI"]
[Tue May 26 13:17:46.457916 2026] [:error] [pid 20125:tid 20142] [client 170.64.238.42:43868] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77AQAAAM8"]
[Tue May 26 13:17:46.458626 2026] [:error] [pid 20025:tid 20075] [client 170.64.238.42:43866] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr1AAAAEo"]
[Tue May 26 13:17:46.470906 2026] [:error] [pid 20026:tid 20110] [client 170.64.238.42:43878] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KegAAAJI"]
[Tue May 26 13:17:46.471943 2026] [:error] [pid 55988:tid 55999] [client 170.64.238.42:43876] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB9wAAAQg"]
[Tue May 26 13:17:46.477153 2026] [:error] [pid 39336:tid 39345] [client 170.64.238.42:43872] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbegAAAUY"]
[Tue May 26 13:17:46.484247 2026] [:error] [pid 20125:tid 20137] [client 170.64.238.42:43892] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77AgAAAMo"]
[Tue May 26 13:17:46.487260 2026] [:error] [pid 20024:tid 20052] [client 170.64.238.42:43898] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahUs-ldk7QtxEB93Npdc1QAAAA4"]
[Tue May 26 13:17:46.489996 2026] [:error] [pid 55988:tid 56015] [client 170.64.238.42:43912] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB-AAAARg"]
[Tue May 26 13:17:46.490426 2026] [:error] [pid 20026:tid 20092] [client 170.64.238.42:43914] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KewAAAIA"]
[Tue May 26 13:17:46.491302 2026] [:error] [pid 55988:tid 56009] [client 170.64.238.42:43918] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB-QAAARI"]
[Tue May 26 13:17:46.491825 2026] [:error] [pid 20025:tid 20082] [client 170.64.238.42:43884] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr1gAAAFE"]
[Tue May 26 13:17:46.493433 2026] [:error] [pid 20024:tid 20047] [client 170.64.238.42:43924] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahUs-ldk7QtxEB93Npdc1gAAAAk"]
[Tue May 26 13:17:46.501884 2026] [:error] [pid 39336:tid 39357] [client 170.64.238.42:43938] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbewAAAVI"]
[Tue May 26 13:17:46.512567 2026] [:error] [pid 20125:tid 20131] [client 170.64.238.42:43950] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77AwAAAMQ"]
[Tue May 26 13:17:46.513306 2026] [:error] [pid 55988:tid 56008] [client 170.64.238.42:43958] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB-gAAARE"]
[Tue May 26 13:17:46.522036 2026] [:error] [pid 20025:tid 20074] [client 170.64.238.42:43974] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr1wAAAEk"]
[Tue May 26 13:17:46.561721 2026] [:error] [pid 20024:tid 20057] [client 170.64.238.42:43988] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahUs-ldk7QtxEB93Npdc1wAAABM"]
[Tue May 26 13:17:46.562517 2026] [:error] [pid 20125:tid 20128] [client 170.64.238.42:44034] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77BAAAAME"]
[Tue May 26 13:17:46.564327 2026] [:error] [pid 20024:tid 20050] [client 170.64.238.42:44024] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUs-ldk7QtxEB93Npdc2AAAAAw"]
[Tue May 26 13:17:46.564958 2026] [:error] [pid 39336:tid 39344] [client 170.64.238.42:44018] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbfAAAAUU"]
[Tue May 26 13:17:46.565693 2026] [:error] [pid 20026:tid 20093] [client 170.64.238.42:44012] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KfAAAAIE"]
[Tue May 26 13:17:46.566423 2026] [:error] [pid 55988:tid 56000] [client 170.64.238.42:44002] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB-wAAAQk"]
[Tue May 26 13:17:46.582012 2026] [:error] [pid 20025:tid 20086] [client 170.64.238.42:44048] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr2AAAAFU"]
[Tue May 26 13:17:46.592025 2026] [:error] [pid 39336:tid 39359] [client 170.64.238.42:44058] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbfQAAAVQ"]
[Tue May 26 13:17:46.604210 2026] [:error] [pid 55988:tid 55991] [client 170.64.238.42:44060] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB_AAAAQA"]
[Tue May 26 13:17:46.605082 2026] [:error] [pid 20025:tid 20085] [client 170.64.238.42:44074] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr2QAAAFQ"]
[Tue May 26 13:17:46.607282 2026] [:error] [pid 20026:tid 20095] [client 170.64.238.42:44090] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KfQAAAIM"]
[Tue May 26 13:17:46.608686 2026] [:error] [pid 55988:tid 56012] [client 170.64.238.42:44106] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB_QAAARU"]
[Tue May 26 13:17:46.610481 2026] [:error] [pid 20024:tid 20060] [client 170.64.238.42:44110] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahUs-ldk7QtxEB93Npdc2QAAABY"]
[Tue May 26 13:17:46.683217 2026] [:error] [pid 20025:tid 20072] [client 170.64.238.42:44118] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr2gAAAEc"]
[Tue May 26 13:17:46.684203 2026] [:error] [pid 20125:tid 20127] [client 170.64.238.42:44132] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77BQAAAMA"]
[Tue May 26 13:17:46.684800 2026] [:error] [pid 20026:tid 20103] [client 170.64.238.42:44114] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KfgAAAIs"]
[Tue May 26 13:17:46.685950 2026] [:error] [pid 20024:tid 20051] [client 170.64.238.42:44138] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahUs-ldk7QtxEB93Npdc2gAAAA0"]
[Tue May 26 13:17:46.686744 2026] [:error] [pid 20026:tid 20102] [client 170.64.238.42:44148] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KfwAAAIo"]
[Tue May 26 13:17:46.687748 2026] [:error] [pid 20025:tid 20079] [client 170.64.238.42:44154] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr2wAAAE4"]
[Tue May 26 13:17:46.727937 2026] [:error] [pid 20125:tid 20149] [client 170.64.238.42:44194] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77BgAAANY"]
[Tue May 26 13:17:46.727937 2026] [:error] [pid 55988:tid 55998] [client 170.64.238.42:44170] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB_gAAAQc"]
[Tue May 26 13:17:46.729159 2026] [:error] [pid 20025:tid 20071] [client 170.64.238.42:44184] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr3AAAAEY"]
[Tue May 26 13:17:46.729906 2026] [:error] [pid 20125:tid 20135] [client 170.64.238.42:44202] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77BwAAAMg"]
[Tue May 26 13:17:46.730855 2026] [:error] [pid 39336:tid 39346] [client 170.64.238.42:44218] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahUs-twmp9MmyaRNgiAbfwAAAUc"]
[Tue May 26 13:17:46.731906 2026] [:error] [pid 55988:tid 55995] [client 170.64.238.42:44220] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scB_wAAAQQ"]
[Tue May 26 13:17:46.775577 2026] [:error] [pid 20125:tid 20146] [client 170.64.238.42:44222] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUs-tk9jeWERFDLJc77CAAAANM"]
[Tue May 26 13:17:46.783303 2026] [:error] [pid 20025:tid 20070] [client 170.64.238.42:44224] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr3QAAAEU"]
[Tue May 26 13:17:46.784052 2026] [:error] [pid 20026:tid 20112] [client 170.64.238.42:44234] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KgAAAAJQ"]
[Tue May 26 13:17:46.786484 2026] [:error] [pid 55988:tid 56002] [client 170.64.238.42:44256] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scCAQAAAQs"]
[Tue May 26 13:17:46.790440 2026] [:error] [pid 55988:tid 55993] [client 170.64.238.42:44270] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scCAgAAAQI"]
[Tue May 26 13:17:46.792132 2026] [:error] [pid 55988:tid 56011] [client 170.64.238.42:44258] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scCAwAAARQ"]
[Tue May 26 13:17:46.792231 2026] [:error] [pid 20025:tid 20080] [client 170.64.238.42:44246] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr3gAAAE8"]
[Tue May 26 13:17:46.857854 2026] [:error] [pid 20025:tid 20081] [client 170.64.238.42:44292] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr3wAAAFA"]
[Tue May 26 13:17:46.858199 2026] [:error] [pid 20025:tid 20069] [client 170.64.238.42:44286] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUs-n7k8Vts-JPOkgVr4AAAAEQ"]
[Tue May 26 13:17:46.899978 2026] [:error] [pid 20026:tid 20097] [client 170.64.238.42:44308] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahUs-jXIXIr-5BZ8nR5KgQAAAIU"]
[Tue May 26 13:17:46.901905 2026] [:error] [pid 55988:tid 55992] [client 170.64.238.42:44310] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahUs-v3kVIz2sql52scCBAAAAQE"]
[Tue May 26 13:17:47.020139 2026] [:error] [pid 20025:tid 20067] [client 170.64.238.42:44314] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahUs-37k8Vts-JPOkgVr4gAAAEI"]
[Tue May 26 13:17:47.031914 2026] [:error] [pid 20025:tid 20076] [client 170.64.238.42:44318] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr4wAAAEs"]
[Tue May 26 13:17:47.057358 2026] [:error] [pid 20026:tid 20113] [client 170.64.238.42:44364] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KggAAAJU"]
[Tue May 26 13:17:47.058075 2026] [:error] [pid 20025:tid 20078] [client 170.64.238.42:44352] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr5AAAAE0"]
[Tue May 26 13:17:47.059440 2026] [:error] [pid 20125:tid 20139] [client 170.64.238.42:44322] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahUs-9k9jeWERFDLJc77CQAAAMw"]
[Tue May 26 13:17:47.060545 2026] [:error] [pid 20125:tid 20133] [client 170.64.238.42:44336] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-9k9jeWERFDLJc77CgAAAMY"]
[Tue May 26 13:17:47.061032 2026] [:error] [pid 20025:tid 20073] [client 170.64.238.42:44338] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr5QAAAEg"]
[Tue May 26 13:17:47.070582 2026] [:error] [pid 20025:tid 20087] [client 170.64.238.42:44384] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr5gAAAFY"]
[Tue May 26 13:17:47.073565 2026] [:error] [pid 20025:tid 20083] [client 170.64.238.42:44368] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahUs-37k8Vts-JPOkgVr5wAAAFI"]
[Tue May 26 13:17:47.086349 2026] [:error] [pid 55988:tid 56006] [client 170.64.238.42:44396] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCBQAAAQ8"]
[Tue May 26 13:17:47.090182 2026] [:error] [pid 55988:tid 56010] [client 170.64.238.42:44404] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCBgAAARM"]
[Tue May 26 13:17:47.094074 2026] [:error] [pid 20025:tid 20089] [client 170.64.238.42:44428] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahUs-37k8Vts-JPOkgVr6AAAAFg"]
[Tue May 26 13:17:47.094644 2026] [:error] [pid 55988:tid 56004] [client 170.64.238.42:44424] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCBwAAAQ0"]
[Tue May 26 13:17:47.095770 2026] [:error] [pid 20025:tid 20075] [client 170.64.238.42:44414] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr6QAAAEo"]
[Tue May 26 13:17:47.099467 2026] [:error] [pid 20025:tid 20082] [client 170.64.238.42:44436] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr6gAAAFE"]
[Tue May 26 13:17:47.102481 2026] [:error] [pid 55988:tid 56001] [client 170.64.238.42:44448] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCCAAAAQo"]
[Tue May 26 13:17:47.103526 2026] [:error] [pid 55988:tid 55997] [client 170.64.238.42:44452] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCCQAAAQY"]
[Tue May 26 13:17:47.104804 2026] [:error] [pid 55988:tid 56003] [client 170.64.238.42:44450] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCCgAAAQw"]
[Tue May 26 13:17:47.106059 2026] [:error] [pid 55988:tid 56007] [client 170.64.238.42:44464] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCCwAAARA"]
[Tue May 26 13:17:47.115473 2026] [:error] [pid 20025:tid 20074] [client 170.64.238.42:44474] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahUs-37k8Vts-JPOkgVr6wAAAEk"]
[Tue May 26 13:17:47.118866 2026] [:error] [pid 39336:tid 39343] [client 170.64.238.42:44472] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahUs-9wmp9MmyaRNgiAbgAAAAUQ"]
[Tue May 26 13:17:47.161395 2026] [:error] [pid 20025:tid 20086] [client 170.64.238.42:44482] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr7AAAAFU"]
[Tue May 26 13:17:47.161937 2026] [:error] [pid 55988:tid 55999] [client 170.64.238.42:44512] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCDAAAAQg"]
[Tue May 26 13:17:47.162456 2026] [:error] [pid 55988:tid 55994] [client 170.64.238.42:44494] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahUs-_3kVIz2sql52scCDQAAAQM"]
[Tue May 26 13:17:47.162957 2026] [:error] [pid 55988:tid 56014] [client 170.64.238.42:44506] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCDgAAARc"]
[Tue May 26 13:17:47.163583 2026] [:error] [pid 55988:tid 56013] [client 170.64.238.42:44490] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCDwAAARY"]
[Tue May 26 13:17:47.177643 2026] [:error] [pid 55988:tid 56015] [client 170.64.238.42:44518] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCEAAAARg"]
[Tue May 26 13:17:47.181659 2026] [:error] [pid 55988:tid 56009] [client 170.64.238.42:44558] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCEQAAARI"]
[Tue May 26 13:17:47.182444 2026] [:error] [pid 55988:tid 56008] [client 170.64.238.42:44544] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCEgAAARE"]
[Tue May 26 13:17:47.184683 2026] [:error] [pid 55988:tid 56000] [client 170.64.238.42:44536] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCEwAAAQk"]
[Tue May 26 13:17:47.185787 2026] [:error] [pid 55988:tid 55996] [client 170.64.238.42:44528] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCFAAAAQU"]
[Tue May 26 13:17:47.199270 2026] [:error] [pid 20025:tid 20085] [client 170.64.238.42:44570] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr7QAAAFQ"]
[Tue May 26 13:17:47.204985 2026] [:error] [pid 55988:tid 55991] [client 170.64.238.42:44584] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCFQAAAQA"]
[Tue May 26 13:17:47.207716 2026] [:error] [pid 20025:tid 20077] [client 170.64.238.42:44606] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr7gAAAEw"]
[Tue May 26 13:17:47.207778 2026] [:error] [pid 55988:tid 56012] [client 170.64.238.42:44598] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahUs-_3kVIz2sql52scCFgAAARU"]
[Tue May 26 13:17:47.216535 2026] [:error] [pid 20025:tid 20072] [client 170.64.238.42:44590] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr7wAAAEc"]
[Tue May 26 13:17:47.285874 2026] [:error] [pid 55988:tid 55998] [client 170.64.238.42:44618] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCFwAAAQc"]
[Tue May 26 13:17:47.286281 2026] [:error] [pid 20025:tid 20079] [client 170.64.238.42:44628] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr8AAAAE4"]
[Tue May 26 13:17:47.290016 2026] [:error] [pid 55988:tid 55995] [client 170.64.238.42:44644] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCGAAAAQQ"]
[Tue May 26 13:17:47.302120 2026] [:error] [pid 20025:tid 20071] [client 170.64.238.42:44660] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr8QAAAEY"]
[Tue May 26 13:17:47.318936 2026] [:error] [pid 20025:tid 20070] [client 170.64.238.42:44680] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr8gAAAEU"]
[Tue May 26 13:17:47.320123 2026] [:error] [pid 55988:tid 56002] [client 170.64.238.42:44668] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCGQAAAQs"]
[Tue May 26 13:17:47.320820 2026] [:error] [pid 39336:tid 39352] [client 170.64.238.42:44686] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahUs-9wmp9MmyaRNgiAbgQAAAU0"]
[Tue May 26 13:17:47.325321 2026] [:error] [pid 55988:tid 55993] [client 170.64.238.42:44688] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCGgAAAQI"]
[Tue May 26 13:17:47.328593 2026] [:error] [pid 55988:tid 56011] [client 170.64.238.42:44698] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCGwAAARQ"]
[Tue May 26 13:17:47.329282 2026] [:error] [pid 20025:tid 20081] [client 170.64.238.42:44702] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr8wAAAFA"]
[Tue May 26 13:17:47.333803 2026] [:error] [pid 55988:tid 55992] [client 170.64.238.42:44712] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCHAAAAQE"]
[Tue May 26 13:17:47.346095 2026] [:error] [pid 20025:tid 20069] [client 170.64.238.42:44724] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr9AAAAEQ"]
[Tue May 26 13:17:47.361188 2026] [:error] [pid 20025:tid 20084] [client 170.64.238.42:44728] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr9QAAAFM"]
[Tue May 26 13:17:47.362656 2026] [:error] [pid 20025:tid 20068] [client 170.64.238.42:44754] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr9gAAAEM"]
[Tue May 26 13:17:47.363738 2026] [:error] [pid 20025:tid 20067] [client 170.64.238.42:44740] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr9wAAAEI"]
[Tue May 26 13:17:47.368665 2026] [:error] [pid 20025:tid 20076] [client 170.64.238.42:44760] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr-AAAAEs"]
[Tue May 26 13:17:47.379319 2026] [:error] [pid 20025:tid 20078] [client 170.64.238.42:44770] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr-QAAAE0"]
[Tue May 26 13:17:47.385534 2026] [:error] [pid 20025:tid 20073] [client 170.64.238.42:44782] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr-gAAAEg"]
[Tue May 26 13:17:47.386016 2026] [:error] [pid 20025:tid 20066] [client 170.64.238.42:44794] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr-wAAAEE"]
[Tue May 26 13:17:47.389272 2026] [:error] [pid 20025:tid 20083] [client 170.64.238.42:44810] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr_AAAAFI"]
[Tue May 26 13:17:47.390095 2026] [:error] [pid 20025:tid 20087] [client 170.64.238.42:44806] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr_QAAAFY"]
[Tue May 26 13:17:47.395852 2026] [:error] [pid 20025:tid 20089] [client 170.64.238.42:44822] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr_gAAAFg"]
[Tue May 26 13:17:47.398515 2026] [:error] [pid 20025:tid 20075] [client 170.64.238.42:44834] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVr_wAAAEo"]
[Tue May 26 13:17:47.411744 2026] [:error] [pid 20025:tid 20074] [client 170.64.238.42:44848] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsAAAAAEk"]
[Tue May 26 13:17:47.427013 2026] [:error] [pid 20025:tid 20086] [client 170.64.238.42:44864] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsAQAAAFU"]
[Tue May 26 13:17:47.427828 2026] [:error] [pid 20025:tid 20085] [client 170.64.238.42:44888] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsAgAAAFQ"]
[Tue May 26 13:17:47.428754 2026] [:error] [pid 20025:tid 20077] [client 170.64.238.42:44874] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsAwAAAEw"]
[Tue May 26 13:17:47.429699 2026] [:error] [pid 20025:tid 20072] [client 170.64.238.42:44902] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsBAAAAEc"]
[Tue May 26 13:17:47.431024 2026] [:error] [pid 20025:tid 20079] [client 170.64.238.42:44916] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsBQAAAE4"]
[Tue May 26 13:17:47.432138 2026] [:error] [pid 55988:tid 56010] [client 170.64.238.42:44920] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCHQAAARM"]
[Tue May 26 13:17:47.433382 2026] [:error] [pid 55988:tid 56004] [client 170.64.238.42:44928] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCHgAAAQ0"]
[Tue May 26 13:17:47.435572 2026] [:error] [pid 20025:tid 20071] [client 170.64.238.42:44942] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsBgAAAEY"]
[Tue May 26 13:17:47.499370 2026] [:error] [pid 20025:tid 20070] [client 170.64.238.42:44956] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsCAAAAEU"]
[Tue May 26 13:17:47.500482 2026] [:error] [pid 55988:tid 56001] [client 170.64.238.42:44960] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCHwAAAQo"]
[Tue May 26 13:17:47.501170 2026] [:error] [pid 55988:tid 55997] [client 170.64.238.42:44972] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCIAAAAQY"]
[Tue May 26 13:17:47.502634 2026] [:error] [pid 20024:tid 20042] [client 170.64.238.42:44986] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahUs-1dk7QtxEB93Npdc2wAAAAQ"]
[Tue May 26 13:17:47.541429 2026] [:error] [pid 20025:tid 20084] [client 170.64.238.42:44990] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-37k8Vts-JPOkgVsCQAAAFM"]
[Tue May 26 13:17:47.542762 2026] [:error] [pid 20024:tid 20041] [client 170.64.238.42:45000] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahUs-1dk7QtxEB93Npdc3AAAAAM"]
[Tue May 26 13:17:47.557412 2026] [:error] [pid 39336:tid 39339] [client 170.64.238.42:45008] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-9wmp9MmyaRNgiAbggAAAUA"]
[Tue May 26 13:17:47.557412 2026] [:error] [pid 55988:tid 56003] [client 170.64.238.42:45004] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCIQAAAQw"]
[Tue May 26 13:17:47.583096 2026] [:error] [pid 55988:tid 56007] [client 170.64.238.42:45010] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCIgAAARA"]
[Tue May 26 13:17:47.587846 2026] [:error] [pid 39336:tid 39354] [client 170.64.238.42:45022] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-9wmp9MmyaRNgiAbgwAAAU8"]
[Tue May 26 13:17:47.589888 2026] [:error] [pid 39336:tid 39350] [client 170.64.238.42:45024] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahUs-9wmp9MmyaRNgiAbhAAAAUs"]
[Tue May 26 13:17:47.598537 2026] [:error] [pid 39336:tid 39340] [client 170.64.238.42:45026] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahUs-9wmp9MmyaRNgiAbhQAAAUE"]
[Tue May 26 13:17:47.599623 2026] [:error] [pid 55988:tid 55999] [client 170.64.238.42:45030] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCIwAAAQg"]
[Tue May 26 13:17:47.604757 2026] [:error] [pid 55988:tid 55994] [client 170.64.238.42:45040] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCJAAAAQM"]
[Tue May 26 13:17:47.614902 2026] [:error] [pid 55988:tid 56014] [client 170.64.238.42:45056] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCJQAAARc"]
[Tue May 26 13:17:47.625604 2026] [:error] [pid 55988:tid 56013] [client 170.64.238.42:45058] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCJgAAARY"]
[Tue May 26 13:17:47.630964 2026] [:error] [pid 20026:tid 20109] [client 170.64.238.42:45060] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KgwAAAJE"]
[Tue May 26 13:17:47.633208 2026] [:error] [pid 20026:tid 20100] [client 170.64.238.42:45062] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KhAAAAIg"]
[Tue May 26 13:17:47.657919 2026] [:error] [pid 20026:tid 20094] [client 170.64.238.42:45066] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KhQAAAII"]
[Tue May 26 13:17:47.658280 2026] [:error] [pid 39336:tid 39363] [client 170.64.238.42:45092] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-9wmp9MmyaRNgiAbhgAAAVg"]
[Tue May 26 13:17:47.659351 2026] [:error] [pid 20026:tid 20105] [client 170.64.238.42:45082] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KhgAAAI0"]
[Tue May 26 13:17:47.675237 2026] [:error] [pid 55988:tid 56015] [client 170.64.238.42:45106] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCJwAAARg"]
[Tue May 26 13:17:47.685273 2026] [:error] [pid 55988:tid 56009] [client 170.64.238.42:45110] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCKAAAARI"]
[Tue May 26 13:17:47.700947 2026] [:error] [pid 20024:tid 20046] [client 170.64.238.42:45126] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-1dk7QtxEB93Npdc3QAAAAg"]
[Tue May 26 13:17:47.717230 2026] [:error] [pid 20024:tid 20054] [client 170.64.238.42:45142] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-1dk7QtxEB93Npdc3gAAABA"]
[Tue May 26 13:17:47.846919 2026] [:error] [pid 20125:tid 20130] [client 170.64.238.42:45148] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-9k9jeWERFDLJc77CwAAAMM"]
[Tue May 26 13:17:47.868489 2026] [:error] [pid 20024:tid 20062] [client 170.64.238.42:45160] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-1dk7QtxEB93Npdc3wAAABg"]
[Tue May 26 13:17:47.889529 2026] [:error] [pid 20026:tid 20107] [client 170.64.238.42:45166] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KhwAAAI8"]
[Tue May 26 13:17:47.910445 2026] [:error] [pid 55988:tid 56000] [client 170.64.238.42:45182] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCKQAAAQk"]
[Tue May 26 13:17:47.925767 2026] [:error] [pid 20026:tid 20115] [client 170.64.238.42:45188] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KiAAAAJc"]
[Tue May 26 13:17:47.933360 2026] [:error] [pid 55988:tid 55991] [client 170.64.238.42:45198] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCKgAAAQA"]
[Tue May 26 13:17:47.933898 2026] [:error] [pid 55988:tid 55996] [client 170.64.238.42:45192] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-_3kVIz2sql52scCKwAAAQU"]
[Tue May 26 13:17:47.955723 2026] [:error] [pid 20026:tid 20108] [client 170.64.238.42:45202] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-zXIXIr-5BZ8nR5KiQAAAJA"]
[Tue May 26 13:17:47.971386 2026] [:error] [pid 20125:tid 20148] [client 170.64.238.42:45208] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-9k9jeWERFDLJc77DAAAANU"]
[Tue May 26 13:17:47.975963 2026] [:error] [pid 20125:tid 20141] [client 170.64.238.42:45210] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs-9k9jeWERFDLJc77DQAAAM4"]
[Tue May 26 13:17:48.015724 2026] [:error] [pid 20125:tid 20138] [client 170.64.238.42:45220] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs_Nk9jeWERFDLJc77DgAAAMs"]
[Tue May 26 13:17:48.017612 2026] [:error] [pid 20125:tid 20132] [client 170.64.238.42:45234] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.stratapluswa.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahUs_Nk9jeWERFDLJc77DwAAAMU"]
[Tue May 26 17:05:08.040916 2026] [:error] [pid 20025:tid 20071] [client 34.11.17.55:49932] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/"] [unique_id "ahViRH7k8Vts-JPOkgXPlwAAAEY"]
[Tue May 26 17:05:08.471046 2026] [:error] [pid 20024:tid 20059] [client 34.11.17.55:50039] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRFdk7QtxEB93NpeBrgAAABU"]
[Tue May 26 17:05:08.916363 2026] [:error] [pid 20026:tid 20099] [client 34.11.17.55:61122] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "stratapluswa.com.au"] [uri "/feed/"] [unique_id "ahViRDXIXIr-5BZ8nR52uAAAAIc"]